{
  "resultsPerPage" : 23358,
  "startIndex" : 0,
  "totalResults" : 23358,
  "format" : "NVD_CVE",
  "version" : "2.0",
  "timestamp" : "2026-05-02T03:01:13.5467408",
  "vulnerabilities" : [ {
    "cve" : {
      "id" : "CVE-2021-3002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-01T19:15:11.077",
      "lastModified" : "2024-11-21T06:20:43.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/login.php?sec=forgot email parameter."
      }, {
        "lang" : "es",
        "value" : "Seo Panel versión 4.8.0, permite un ataque de tipo XSS reflejado por medio del parámetro email de seo/seopanel/login.php?sec=forgot."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.cinquino.eu/SeoPanelReflect.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/202",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://www.cinquino.eu/SeoPanelReflect.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-03T04:15:12.263",
      "lastModified" : "2024-11-21T06:20:43.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The _deposit function in the smart contract implementation for Stable Yield Credit (yCREDIT), an Ethereum token, has certain incorrect calculations. An attacker can obtain more yCREDIT tokens than they should."
      }, {
        "lang" : "es",
        "value" : "La función _deposit en la implementación del contrato inteligente para Stable Yield Credit (yCREDIT), un token de Ethereum, presenta determinados cálculos incorrectos.&#xa0;Un atacante puede obtener más tokens yCREDIT de los que debería."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stableyieldcredit_project:stableyieldcredit:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96995-BA15-47CD-BD6A-4CD8B0B4773C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blocksecteam.medium.com/deposit-less-get-more-ycredit-attack-details-f589f71674c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://etherscan.io/address/0xe0839f9b9688a77924208ad509e29952dc660261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3005",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-03T04:15:12.310",
      "lastModified" : "2024-11-21T06:20:43.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MK-AUTH through 19.01 K4.9 allows remote attackers to obtain sensitive information (e.g., a CPF number) via a modified titulo (aka invoice number) value to the central/recibo.php URI."
      }, {
        "lang" : "es",
        "value" : "MK-AUTH versiones hasta 19.01 K4.9, permite a atacantes remotos obtener información confidencial (por ejemplo, un número CPF) por medio de un valor de título modificado (también se conoce como número de factura) en el URI central/recibo.php."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mk-auth:mk-auth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "19.01",
            "matchCriteriaId" : "05FF6E7C-F339-4258-88E9-FEA5DD76426C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mk-auth.com.br/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/alacerda/3b925cb333eb839ae808d6f01642aeb3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mk-auth.com.br/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/alacerda/3b925cb333eb839ae808d6f01642aeb3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-03T06:15:12.067",
      "lastModified" : "2024-11-21T06:20:44.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The breed function in the smart contract implementation for Farm in Seal Finance (Seal), an Ethereum token, lacks access control and thus allows price manipulation, as exploited in the wild in December 2020 and January 2021."
      }, {
        "lang" : "es",
        "value" : "La función breed en la implementación del contrato inteligente para Farm en Seal Finance (Seal), un token de Ethereum, carece de control de acceso y, por lo tanto, permite la manipulación de precios, como se explotó \"in the wild\" en Diciembre de 2020 y Enero de 2021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seal_finance_project:seal_finance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDDD2BB-EC54-4055-A493-54D600FD90B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blocksecteam.medium.com/security-incident-on-seal-finance-fa79c27a1c3b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://etherscan.io/address/0x33c2da7fd5b125e629b3950f3c38d7f721d7b30d",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blocksecteam.medium.com/security-incident-on-seal-finance-fa79c27a1c3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://etherscan.io/address/0x33c2da7fd5b125e629b3950f3c38d7f721d7b30d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-04T03:15:13.387",
      "lastModified" : "2024-11-21T05:48:29.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MK-AUTH through 19.01 K4.9 allows XSS via the admin/logs_ajax.php tipo parameter. An attacker can leverage this to read the centralmka2 (session token) cookie, which is not set to HTTPOnly."
      }, {
        "lang" : "es",
        "value" : "MK-AUTH versión hasta 19.01 K4.9, permite un ataque de tipo XSS por medio del parámetro tipo del archivo admin/logs_ajax.php.&#xa0;Un atacante puede aprovechar esto para leer la cookie centralmka2 (token de sesión), que no es configurada en HTTPOnly."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mk-auth:mk-auth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "19.01",
            "matchCriteriaId" : "05FF6E7C-F339-4258-88E9-FEA5DD76426C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mk-auth.com.br/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/alacerda/380b8923e36a29a02ba1457c1eb3ec2f",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://mk-auth.com.br/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/alacerda/380b8923e36a29a02ba1457c1eb3ec2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-04T03:15:13.480",
      "lastModified" : "2024-11-21T05:48:29.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MK-AUTH through 19.01 K4.9 allows CSRF for password changes via the central/executar_central.php?acao=altsenha_princ URI."
      }, {
        "lang" : "es",
        "value" : "MK-AUTH versión hasta 19.01 K4.9, permite un ataque de tipo CSRF para cambios de contraseña por medio del URI central/executar_central.php?acao=altsenha_princ."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mk-auth:mk-auth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "19.01",
            "matchCriteriaId" : "05FF6E7C-F339-4258-88E9-FEA5DD76426C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mk-auth.com.br/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/alacerda/98853283be6009e75b7d94968d50b88e",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://mk-auth.com.br/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/alacerda/98853283be6009e75b7d94968d50b88e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-04T03:15:13.527",
      "lastModified" : "2024-11-21T06:20:44.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\\Http\\Response\\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http vendor considers this a \"vulnerability in the PHP language itself\" but has added certain type checking as a way to prevent exploitation in (unrecommended) use cases where attacker-supplied data can be deserialized"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Laminas Project laminas-http versión anterior a 2.14.2, y Zend Framework versión 3.0.0, tiene una vulnerabilidad de deserialización que puede llevar a la ejecución remota de código si el contenido es controlable, relacionado con el método __destructura de la clase Zend\\Http\\Response\\Stream en Stream.php. NOTA: Zend Framework ya no está soportado por el mantenedor. NOTA: el proveedor de laminas-http considera esto como una \"vulnerabilidad en el propio lenguaje PHP\" pero ha añadido cierto tipo de chequeo como una forma de prevenir la explotación en casos de uso (no recomendado) donde los datos suministrados por el atacante pueden ser deserializados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getlaminas:laminas-http:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.14.2",
            "matchCriteriaId" : "D2E99556-4806-4485-B0BF-8C0069221705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zend_framework:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62B6FB7-619D-4CA0-BC7A-081DC506D311"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ling-Yizhou/zendframework3-/blob/main/zend%20framework3%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20rce.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laminas/laminas-http/commits/2.15.x/src/Response/Stream.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laminas/laminas-http/pull/48",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laminas/laminas-http/releases/tag/2.14.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ling-Yizhou/zendframework3-/blob/main/zend%20framework3%20%E5%8F%8D%E5%BA%8F%E5%88%97%E5%8C%96%20rce.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laminas/laminas-http/commits/2.15.x/src/Response/Stream.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laminas/laminas-http/pull/48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laminas/laminas-http/releases/tag/2.14.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://research.checkpoint.com/2021/freakout-leveraging-newest-vulnerabilities-for-creating-a-botnet/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-04T19:15:15.390",
      "lastModified" : "2024-11-21T06:20:45.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter."
      }, {
        "lang" : "es",
        "value" : "En MikroTik RouterOS hasta el 01-04-2021, la página de inicio de sesión del hotspot es vulnerable a un ataque de tipo XSS reflejado por medio del parámetro objetivo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-01-04",
            "matchCriteriaId" : "326630BA-3CC3-47EB-A78F-FB5EC4E579A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2021-01-04-mikrotik-xss-reflected.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m4dm0e.github.io/2021/01/04/mikrotik-xss-reflected.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2021-01-04-mikrotik-xss-reflected.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m4dm0e.github.io/2021/01/04/mikrotik-xss-reflected.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3018",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T05:15:10.813",
      "lastModified" : "2024-11-21T06:20:45.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the /cms/print.php page."
      }, {
        "lang" : "es",
        "value" : "ipeak Infosystems ibexwebCMS (también se conoce como IPeakCMS) versión 3.5, es vulnerable a una inyección SQL basada en booleanos no autenticada por medio del parámetro id en la página /cms/print.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ipeak:ipeakcms:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DF796B-5006-4751-97EE-ED3F2D6477BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ipeak.ch",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.amario.ch/cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160815/IPeakCMS-3.5-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2020-12-07-ipeak-cms-sqli.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ipeak.ch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://m4dm0e.github.io/2020/12/07/ipeak-cms-sqli.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.amario.ch/cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T05:15:10.907",
      "lastModified" : "2024-11-21T06:20:45.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ffay lanproxy 0.1 allows Directory Traversal to read /../conf/config.properties to obtain credentials for a connection to the intranet."
      }, {
        "lang" : "es",
        "value" : "ffay lanproxy versión 0.1, permite un Salto de Directorio para leer /../conf/config.properties para obtener las credenciales para una conexión a la intranet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lanproxy_project:lanproxy:0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCBA214-90E3-4C0B-85F4-C6A96FC75AC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ffay/lanproxy/commits/master",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/maybe-why-not/lanproxy/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ffay/lanproxy/commits/master",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/maybe-why-not/lanproxy/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3021",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T16:15:15.937",
      "lastModified" : "2024-11-21T06:20:46.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ISPConfig before 3.2.2 allows SQL injection."
      }, {
        "lang" : "es",
        "value" : "ISPConfig versiones anteriores a 3.2.2, permite una inyección de SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ispconfig:ispconfig:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "AF0CC8A8-F76A-421F-B964-1A70D60B826D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://twitter.com/ispconfig/status/1346142615511724032",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ispconfig.org/blog/ispconfig-3-2-2-released-important-security-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/ispconfig/status/1346142615511724032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ispconfig.org/blog/ispconfig-3-2-2-released-important-security-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21234",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-05T18:15:16.443",
      "lastModified" : "2024-11-21T05:47:49.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package \"eu.hinsch:spring-boot-actuator-logview\". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vulnerability. The nature of this library is to expose a log file directory via admin (spring boot actuator) HTTP endpoints. Both the filename to view and a base folder (relative to the logging folder root) can be specified via request parameters. While the filename parameter was checked to prevent directory traversal exploits (so that `filename=../somefile` would not work), the base folder parameter was not sufficiently checked, so that `filename=somefile&base=../` could access a file outside the logging base directory). The vulnerability has been patched in release 0.2.13. Any users of 0.2.12 should be able to update without any issues as there are no other changes in that release. There is no workaround to fix the vulnerability other than updating or removing the dependency. However, removing read access of the user the application is run with to any directory not required for running the application can limit the impact. Additionally, access to the logview endpoint can be limited by deploying the application behind a reverse proxy."
      }, {
        "lang" : "es",
        "value" : "spring-boot-actuator-logview en una biblioteca que agrega un visualizador de archivo de registro simple como endpoint del actuador de arranque de resorte.&#xa0;Es el paquete maven \"eu.hinsch: spring-boot-actuator-logview\".&#xa0;En spring-boot-actuator-logview antes de la versión 0.2.13 se presenta una vulnerabilidad de salto de directorio.&#xa0;La naturaleza de esta biblioteca es exponer un directorio de archivos de registro por medio de los endpoints HTTP de administración (actuador de arranque de resorte).&#xa0;Tanto el nombre del archivo a visualizar como una carpeta base (relativa a la carpeta root de registro) se pueden especificar mediante parámetros de petición.&#xa0;Si bien el parámetro filename se verificó para impedir la explotación del salto de directorio (de modo que \"filename=../somefile\" no funcionaría), el parámetro base folder no se verificó lo suficiente, por lo que \"filename=somefile&amp;base=..\" podría acceder a un archivo fuera del directorio base del registro).&#xa0;La vulnerabilidad se corrigió en la versión 0.2.13.&#xa0;Cualquier usuario de la versión 0.2.12 debería poder actualizar sin ningún problema, ya que no existen otros cambios en esa versión.&#xa0;No existe una solución alternativa para corregir la vulnerabilidad que no sea actualizar o eliminar la dependencia.&#xa0;Sin embargo, eliminar el acceso de lectura del usuario con el que se ejecuta la aplicación en cualquier directorio que no sea necesario para ejecutar la aplicación puede limitar el impacto.&#xa0;Además, el acceso al endpoint de Logview se puede limitar mediante la implementación de la aplicación detrás de un proxy inverso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spring-boot-actuator-logview_project:spring-boot-actuator-logview:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.2.12",
            "matchCriteriaId" : "F31F6783-0E0D-4F91-ACD2-E67BE0A13201"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lukashinsch/spring-boot-actuator-logview/commit/1c76e1ec3588c9f39e1a94bf27b5ff56eb8b17d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lukashinsch/spring-boot-actuator-logview/commit/760acbb939a8d1f7d1a7dfcd51ca848eea04e772",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lukashinsch/spring-boot-actuator-logview/security/advisories/GHSA-p4q6-qxjx-8jgp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://search.maven.org/artifact/eu.hinsch/spring-boot-actuator-logview",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lukashinsch/spring-boot-actuator-logview/commit/1c76e1ec3588c9f39e1a94bf27b5ff56eb8b17d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lukashinsch/spring-boot-actuator-logview/commit/760acbb939a8d1f7d1a7dfcd51ca848eea04e772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lukashinsch/spring-boot-actuator-logview/security/advisories/GHSA-p4q6-qxjx-8jgp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://search.maven.org/artifact/eu.hinsch/spring-boot-actuator-logview",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T18:15:18.740",
      "lastModified" : "2024-11-21T05:50:13.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) (Broadcom Bluetooth chipsets) software. The Bluetooth UART driver has a buffer overflow. The Samsung ID is SVE-2020-18731 (January 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles de Samsung con versiones de software O(8.x), P(9.0) y Q(10.0) (chipsets Broadcom Bluetooth).&#xa0;El controlador UART de Bluetooth presenta un desbordamiento del búfer.&#xa0;El ID de Samsung es SVE-2020-18731 (Enero 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T18:15:18.803",
      "lastModified" : "2023-11-07T03:30:13.227",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-25346. Reason: This candidate is a duplicate of CVE-2021-25346. Notes: All CVE users should reference CVE-2021-25346 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T18:15:18.850",
      "lastModified" : "2024-11-21T05:50:13.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the fingerprint scanner on Samsung Note20 mobile devices with Q(10.0) software. When a screen protector is used, the required image compensation is not present. Consequently, inversion can occur during fingerprint enrollment, and a high False Recognition Rate (FRR) can occur. The Samsung ID is SVE-2020-19216 (January 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el escáner de huellas dactilares de los dispositivos móviles de Samsung Note20 con versiones de software Q(10.0).&#xa0;Cuando un protector de pantalla es usado, la compensación de imagen requerida no está presente.&#xa0;En consecuencia, la inversión puede ocurrir durante el registro de huellas dactilares y una alta False Recognition Rate (FRR) puede presentarse.&#xa0;El ID de Samsung es SVE-2020-19216 (Enero 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:galaxy_note_20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBAF88B-6857-4C09-BAFC-632432E07568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22495",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T18:15:18.897",
      "lastModified" : "2024-11-21T05:50:13.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) (Exynos chipsets) software. The Mali GPU driver allows out-of-bounds access and a device reset. The Samsung ID is SVE-2020-19174 (January 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles de Samsung con versiones de software O(8.x), P(9.0), Q(10.0) y R(11.0) (chipsets Exynos).&#xa0;El controlador GPU de Mali permite un acceso fuera de límites y el reinicio del dispositivo.&#xa0;El ID de Samsung es SVE-2020-19174 (Enero 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04D5D21-1755-4766-8302-A0BE61EE9F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T18:15:19.020",
      "lastModified" : "2024-11-21T06:20:46.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG mobile devices with Android OS 10 software. There was no write protection for the MTK protect2 partition. The LG ID is LVE-SMP-200028 (January 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versión 10.&#xa0;No presenta una protección contra escritura para la partición MTK protect2.&#xa0;El ID de LG es LVE-SMP-200028 (Enero 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-05T23:15:15.703",
      "lastModified" : "2024-11-21T06:20:46.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment."
      }, {
        "lang" : "es",
        "value" : "Invision Community IPS Community Suite versiones anteriores a  4.5.4.2, permite un ataque de tipo XSS durante la cita de una publicación o comentario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisioncommunity:ips_community_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.4.2",
            "matchCriteriaId" : "73294383-F871-44FC-B7B2-D604EC712CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://invisioncommunity.com/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://invisioncommunity.com/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21235",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-06T02:15:12.967",
      "lastModified" : "2024-11-21T05:47:50.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kamadak-exif is an exif parsing library written in pure Rust. In kamadak-exif version 0.5.2, there is an infinite loop in parsing crafted PNG files. Specifically, reader::read_from_container can cause an infinite loop when a crafted PNG file is given. This is fixed in version 0.5.3. No workaround is available. Applications that do not pass files with the PNG signature to Reader::read_from_container are not affected."
      }, {
        "lang" : "es",
        "value" : "kamadak-exif es una biblioteca de análisis exif escrita en Rust puro.&#xa0;En kamadak-exif versión 0.5.2, Se presenta un bucle infinito en el análisis de archivos PNG diseñados.&#xa0;Específicamente, la función reader::read_from_container puede causar un bucle infinito cuando se le proporciona un archivo PNG diseñado.&#xa0;Esto es corregido en la versión 0.5.3. Ninguna solución alternativa está disponible.&#xa0;Las aplicaciones que no aprueban archivos con la firma PNG a la función Reader::read_from_container no están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kamadak-exif_project:kamadak-exif:0.5.2:*:*:*:*:rust:*:*",
            "matchCriteriaId" : "58DB84D2-C8B6-43E8-96C1-AE01E3B3ACF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crates.io/crates/kamadak-exif",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kamadak/exif-rs/commit/f21df24616ea611c5d5d0e0e2f8042eb74d5ff48",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kamadak/exif-rs/security/advisories/GHSA-px9g-8hgv-jvg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://crates.io/crates/kamadak-exif",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kamadak/exif-rs/commit/f21df24616ea611c5d5d0e0e2f8042eb74d5ff48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kamadak/exif-rs/security/advisories/GHSA-px9g-8hgv-jvg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21236",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-06T17:15:23.733",
      "lastModified" : "2024-11-21T05:47:50.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CairoSVG is a Python (pypi) package. CairoSVG is an SVG converter based on Cairo. In CairoSVG before version 2.5.1, there is a regular expression denial of service (REDoS) vulnerability. When processing SVG files, the python package CairoSVG uses two regular expressions which are vulnerable to Regular Expression Denial of Service (REDoS). If an attacker provides a malicious SVG, it can make cairosvg get stuck processing the file for a very long time. This is fixed in version 2.5.1. See Referenced GitHub advisory for more information."
      }, {
        "lang" : "es",
        "value" : "CairoSVG es un paquete de Python (pypi).&#xa0;CairoSVG es un conversor de SVG basado en Cairo.&#xa0;En CairoSVG versiones anteriores a 2.5.1, se presenta de denegación de servicio de expresión regular (REDoS).&#xa0;Cuando se procesan archivos SVG, el paquete de python CairoSVG utiliza dos expresiones regulares que son vulnerables a una Denegación de Servicio de Expresiones Regulares (REDoS).&#xa0;Si un atacante proporciona un SVG malicioso, puede hacer que cairosvg se atasque al procesar el archivo durante mucho tiempo.&#xa0;Esto es corregido en la versión 2.5.1.&#xa0;Consulte el aviso Referenced GitHub para obtener más información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:courtbouillon:cairosvg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.1",
            "matchCriteriaId" : "6D10055D-3299-4F39-B4E2-A52D95ABB225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/releases/tag/2.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/CairoSVG/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/commit/cfc9175e590531d90384aa88845052de53d94bf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/releases/tag/2.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kozea/CairoSVG/security/advisories/GHSA-hq37-853p-g5cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/CairoSVG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-07T14:15:12.720",
      "lastModified" : "2024-11-21T06:20:47.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipulation. The parameter \"file\" on the webpage /showfile.php can be exploited to gain root access. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** EVOLUCARE ECSIMAGING (también se conoce como ECS Imaging) versiones hasta 6.21.5, presenta una vulnerabilidad de inyección de comandos del Sistema Operativo por medio de metacaracteres de shell y la manipulación de IFS.&#xa0;El parámetro \"file\" en el archivo webpage/showfile.php puede explotarse para conseguir acceso de root.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:evolucare:ecs_imaging:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.21.5",
            "matchCriteriaId" : "F29DE3EA-BF5B-4F6B-9C0F-8C192E703457"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://shoxxdj.fr/ecsimaging-os-injection-cve-2021-3029/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.evolucare.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://shoxxdj.fr/ecsimaging-os-injection-cve-2021-3029/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.evolucare.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-07T16:15:12.120",
      "lastModified" : "2024-11-21T06:20:44.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An electromagnetic-wave side-channel issue was discovered on NXP SmartMX / P5x security microcontrollers and A7x secure authentication microcontrollers, with CryptoLib through v2.9. It allows attackers to extract the ECDSA private key after extensive physical access (and consequently produce a clone). This was demonstrated on the Google Titan Security Key, based on an NXP A7005a chip. Other FIDO U2F security keys are also impacted (Yubico YubiKey Neo and Feitian K9, K13, K21, and K40) as well as several NXP JavaCard smartcards (J3A081, J2A081, J3A041, J3D145_M59, J2D145_M59, J3D120_M60, J3D082_M60, J2D120_M60, J2D082_M60, J3D081_M59, J2D081_M59, J3D081_M61, J2D081_M61, J3D081_M59_DF, J3D081_M61_DF, J3E081_M64, J3E081_M66, J2E081_M64, J3E041_M66, J3E016_M66, J3E016_M64, J3E041_M64, J3E145_M64, J3E120_M65, J3E082_M65, J2E145_M64, J2E120_M65, J2E082_M65, J3E081_M64_DF, J3E081_M66_DF, J3E041_M66_DF, J3E016_M66_DF, J3E041_M64_DF, and J3E016_M64_DF)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de canal lateral de ondas electromagnéticas en los microcontroladores de seguridad NXP SmartMX / P5x y en los microcontroladores de autenticación segura A7x, con CryptoLib versiones hasta v2.9.&#xa0;Permite a los atacantes extraer la clave privada ECDSA después de un acceso físico extenso (y en consecuencia producir un clon).&#xa0;Esto se demostró en la Google Titan Security Key, basada en un chip NXP A7005a.&#xa0;También están afectadas otras claves de seguridad FIDO U2F (Yubico YubiKey Neo y Feitian K9, K13, K21 y K40), así como varias tarjetas inteligentes NXP JavaCard (J3A081, J2A081, J3A041, J3D145_M59, J2D145_M59, J3D120D_M60, J3D120_M60, , J2D081_M59, J3D081_M61, J2D081_M61, J3D081_M59_DF, J3D081_M61_DF, J3E081_M64, J3E081_M66, J2E081_M64, J3E041_M66, J3E016_M66, J3E016_M64, J3E041_M64, J3E145_M64, J3E120_M65, J3E082_M65, J2E145_M64, J2E120_M65, J2E082_M65, J3E081_M64_DF, J3E081_M66_DF, J3E041_M66_DF, J3E016_M66_DF, J3E041_M64_DF, y J3E016_M64_DF)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ftsafe:k13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C371A9EB-9913-47B6-B700-52AA684BEB83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ftsafe:k21:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74A66D7-2BBA-4948-92C2-9C95708A52F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ftsafe:k40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8157B9-62EA-4D8C-BAA5-3E06D6D2BC6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:ftsafe:k9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6002CC8B-FA41-41D5-9155-2E968833B245"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:google:titan_security_key:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3898349-B3AA-4A52-B596-6134A8C761BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:3a081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3562892-1B90-4C6F-ADF6-9B9315A97D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:a7005a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72F8FB7-55F6-4BF2-B178-E75135907FD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2a081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF331FEC-7AD1-4A29-AD96-0B1FDDDDF70C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2d081_m59:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BB5400-8634-4CCE-BC17-ADEEC3A24097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2d081_m61:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA83214-E840-4522-875F-96ED46B5D068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2d082_m60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F32A1832-015C-421D-B570-D37BA3DC4AE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2d120_m60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7300C2AB-30EE-424B-9E0F-AE2F67D215BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2d145_m59:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BEA4901-319E-4A3C-9393-B32C23C5FCF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2e081_m64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B597069C-1B95-4C29-B1E6-9C46297D1621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2e082_m65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7E0363-585F-4310-8E93-F8DE8044AA5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2e120_m65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51B0362D-BAF3-4BA0-BCE2-0852012C1423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j2e145_m64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F010FF-A3C7-44B6-A99B-6EAF42CAEF22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3a041:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D93C794-F9E5-4D7B-BF05-EE51BFF2F794"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d081_m59:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF9D4FF-9ADA-4B42-9591-6D5227861EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d081_m59_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "682345E4-9A4D-486D-9924-A2D7433F57AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d081_m61:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9223E194-B6D7-42A8-8362-4D3246EDFB56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d081_m61_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5789608-2A02-4332-818C-429234174C0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d082_m60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091BA771-F84E-46BF-9E75-A249E1BF5CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d120_m60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB660B5B-A473-4C9D-BC88-87BE8CB2E955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3d145_m59:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA287167-585B-4847-8590-168D8E41205D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e016_m64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4115F576-AF8F-4BF1-A2C4-FDA7CE918B82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e016_m64_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C98E519-621A-4D49-B32B-7D72A22E0447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e016_m66:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CE8EF22-82E3-4F36-94A2-DA7C84462667"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e016_m66_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3B9214-0A5D-4CDF-A7A9-16EF0F2431EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e041_m64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD017E8-0225-4D37-8A41-5EE088ADEE54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e041_m64_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007D7B9E-D431-482B-A576-68DAAA07C037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e041_m66:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB41A3E7-EF91-4182-AC47-70C9B23FF7F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e041_m66_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22163B7D-4A6F-4DF3-8F93-8D6FD5809DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e081_m64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A590808-A5DB-4EBC-8523-0A4AEC200D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e081_m64_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6E1109-7E28-4FB3-BED1-C879223496D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e081_m66:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F19FEED6-094A-480C-AE55-4D07A22C0B21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e081_m66_df:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBEA8BFE-CFFC-4F8A-9DA0-EBDCEE3FC190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e082_m65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C719CEF5-FAB5-49E2-95DB-8F5B8512911C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e120_m65:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "840BE528-2E2F-4B56-ABF4-945593059AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:j3e145_m64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "293D83EA-BECC-41FD-B196-5F78634F0C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:p5010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58633538-559B-4754-8CC7-8773B4471599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:p5020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A91708-A1D7-4BB1-899E-67119D76AAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:p5021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1C0F199-D373-4DDF-8C11-35F4C55F27F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:nxp:p5040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8432727D-A0E2-49C1-9F90-91A6F5A940CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:yubico:yubikey_neo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "850230EE-E2A8-4BE7-A1D3-2C36D1A89C7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ninjalab.io/a-side-journey-to-titan/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ninjalab.io/wp-content/uploads/2021/01/a_side_journey_to_titan.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://ninjalab.io/a-side-journey-to-titan/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://ninjalab.io/wp-content/uploads/2021/01/a_side_journey_to_titan.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-07T21:15:14.040",
      "lastModified" : "2024-11-21T05:51:26.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ in conjunction with a loginLess or login.htm URI (for authentication bypass) to the web server, as demonstrated by the /loginLess/../../etc/passwd URI."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MERCUSYS Mercury X18G versión 1.0.5, permiten un Salto de Directorio por medio de ../ en conjunto con un URI loginLess o login.htm (para el desvío de la autenticación) en el servidor web, como es demostrado por el URI /loginLess/../../etc/passwd"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mercusys:mercury_x18g_firmware:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50CE46-BF92-4A2C-A49B-E1C65880DCFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercusys:mercury_x18g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4AD714-C03E-48FE-B258-ED255886DF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BATTZION/MY_REQUEST/blob/master/Mercury%20Router%20Web%20Server%20Directory%20Traversal.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/BATTZION/MY_REQUEST/blob/master/Mercury%20Router%20Web%20Server%20Directory%20Traversal.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-07T21:15:14.370",
      "lastModified" : "2024-11-21T05:51:26.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MERCUSYS Mercury X18G 1.0.5 devices allow Directory Traversal via ../ to the UPnP server, as demonstrated by the /../../conf/template/uhttpd.json URI."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MERCUSYS Mercury X18G versión 1.0.5, permiten un Salto de Directorio por medio de ../ en el servidor UPnP, como es demostrado por el archivo URI /../../conf/template/uhttpd.json"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mercusys:mercury_x18g_firmware:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50CE46-BF92-4A2C-A49B-E1C65880DCFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercusys:mercury_x18g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4AD714-C03E-48FE-B258-ED255886DF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BATTZION/MY_REQUEST/blob/master/Mercury%20Router%20Upnp%20Server%20Directory%20Traversal.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/BATTZION/MY_REQUEST/blob/master/Mercury%20Router%20Upnp%20Server%20Directory%20Traversal.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1051",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T01:15:14.307",
      "lastModified" : "2024-11-21T05:43:27.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a local user can get elevated privileges to modify display configuration data, which may result in denial of service of the display."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows contiene una vulnerabilidad en el manejador de la capa de modo del kernel (nvlddmkm.sys) para DxgkDdiEscape en la que un usuario local puede obtener privilegios elevados para modificar los datos de configuración de la pantalla, lo que puede provocar la denegación de servicio de la misma."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.63",
            "matchCriteriaId" : "232441BD-1864-44BB-9E98-8E23B53B4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.11",
            "matchCriteriaId" : "F3F9EE41-66A0-4A36-9B22-4F2FCC2647C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.77",
            "matchCriteriaId" : "51520B29-811E-49A8-AEA0-55EBD4C557F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "461.09",
            "matchCriteriaId" : "05BEB8FB-E490-4E05-A6D6-0BAE65F67284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1052",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T01:15:14.400",
      "lastModified" : "2024-11-21T05:43:28.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which user-mode clients can access legacy privileged APIs, which may lead to denial of service, escalation of privileges, and information disclosure."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la función DxgkDdiEscape o IOCTL en el que los clientes en modo de usuario pueden acceder a la API con privilegios heredados, lo que puede conllevar a una denegación de servicio, escalada de privilegios y divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.63",
            "matchCriteriaId" : "232441BD-1864-44BB-9E98-8E23B53B4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.11",
            "matchCriteriaId" : "F3F9EE41-66A0-4A36-9B22-4F2FCC2647C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.77",
            "matchCriteriaId" : "51520B29-811E-49A8-AEA0-55EBD4C557F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "461.09",
            "matchCriteriaId" : "05BEB8FB-E490-4E05-A6D6-0BAE65F67284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "390.141",
            "matchCriteriaId" : "D3F8BB68-C2C5-4F08-83C8-4FA15820F340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.102.04",
            "matchCriteriaId" : "9549CBBA-2F6F-4A64-8E5B-7717332F74DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "460.32.03",
            "matchCriteriaId" : "81372853-B278-4AEE-A014-8238B4D4E338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1053",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T01:15:14.463",
      "lastModified" : "2024-11-21T05:43:28.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape or IOCTL in which improper validation of a user pointer may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la función DxgkDdiEscape o IOCTL en la que la comprobación inapropiada de un puntero de usuario puede conllevar a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.63",
            "matchCriteriaId" : "232441BD-1864-44BB-9E98-8E23B53B4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.11",
            "matchCriteriaId" : "F3F9EE41-66A0-4A36-9B22-4F2FCC2647C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.77",
            "matchCriteriaId" : "51520B29-811E-49A8-AEA0-55EBD4C557F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "461.09",
            "matchCriteriaId" : "05BEB8FB-E490-4E05-A6D6-0BAE65F67284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "390.141",
            "matchCriteriaId" : "D3F8BB68-C2C5-4F08-83C8-4FA15820F340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.102.04",
            "matchCriteriaId" : "9549CBBA-2F6F-4A64-8E5B-7717332F74DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "460.32.03",
            "matchCriteriaId" : "81372853-B278-4AEE-A014-8238B4D4E338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1054",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T01:15:14.510",
      "lastModified" : "2024-11-21T05:43:28.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which the software does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action, which may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la función DxgkDdiEscape en la que el software no lleva a cabo o realiza incorrectamente una comprobación de autorización cuando un actor intenta acceder a un recurso o llevar a cabo una acción, que puede conllevar a una denegación del servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.63",
            "matchCriteriaId" : "232441BD-1864-44BB-9E98-8E23B53B4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.11",
            "matchCriteriaId" : "F3F9EE41-66A0-4A36-9B22-4F2FCC2647C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.77",
            "matchCriteriaId" : "51520B29-811E-49A8-AEA0-55EBD4C557F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "461.09",
            "matchCriteriaId" : "05BEB8FB-E490-4E05-A6D6-0BAE65F67284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1055",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T01:15:14.573",
      "lastModified" : "2024-11-21T05:43:28.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which improper access control may lead to denial of service and information disclosure."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows, todas las versiones, contiene una vulnerabilidad en el manejador de la capa del modo kernel (nvlddmkm.sys) para la función DxgkDdiEscape en la que un control de acceso inapropiado puede conllevar a una denegación de servicio y a una divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.63",
            "matchCriteriaId" : "232441BD-1864-44BB-9E98-8E23B53B4D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.11",
            "matchCriteriaId" : "F3F9EE41-66A0-4A36-9B22-4F2FCC2647C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.77",
            "matchCriteriaId" : "51520B29-811E-49A8-AEA0-55EBD4C557F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "461.09",
            "matchCriteriaId" : "05BEB8FB-E490-4E05-A6D6-0BAE65F67284"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1056",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T01:15:14.620",
      "lastModified" : "2024-11-21T05:43:28.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer (nvidia.ko) in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Linux, todas las versiones, contiene una vulnerabilidad en la capa del modo kernel (nvidia.ko) en la que no respeta completamente los permisos del sistema de archivos del sistema operativo para proporcionar aislamiento a nivel de dispositivo de GPU, lo que puede conllevar a una denegación de servicio o divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "390.141",
            "matchCriteriaId" : "D3F8BB68-C2C5-4F08-83C8-4FA15820F340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.102.04",
            "matchCriteriaId" : "9549CBBA-2F6F-4A64-8E5B-7717332F74DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_driver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "460.32.03",
            "matchCriteriaId" : "81372853-B278-4AEE-A014-8238B4D4E338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-08T07:15:11.920",
      "lastModified" : "2024-11-21T06:20:46.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invision Community IPS Community Suite before 4.5.4.2 allows SQL Injection via the Downloads REST API (the sortDir parameter in a sortBy=popular action to the GETindex() method in applications/downloads/api/files.php)."
      }, {
        "lang" : "es",
        "value" : "Invision Community IPS Community Suite versiones anteriores a 4.5.4.2, permite una inyección SQL por medio de la API REST Downloads (el parámetro sortDir en una acción sortBy=popular para el método GETindex() en el archivo applications/downloads/api/files.php)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisioncommunity:ips_community_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.4.2",
            "matchCriteriaId" : "73294383-F871-44FC-B7B2-D604EC712CE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160830/IPS-Community-Suite-4.5.4-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://invisioncommunity.com/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160830/IPS-Community-Suite-4.5.4-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://invisioncommunity.com/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1057",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.000",
      "lastModified" : "2024-11-21T05:43:28.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Virtual GPU Manager NVIDIA vGPU manager contains a vulnerability in the vGPU plugin in which it allows guests to allocate some resources for which the guest is not authorized, which may lead to integrity and confidentiality loss, denial of service, or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Virtual GPU Manager NVIDIA vGPU Manager contiene una vulnerabilidad en el plugin vGPU en la que permite a los invitados asignar algunos recursos para los cuales el invitado no está autorizado, el cual puede conllevar a una pérdida de la integridad y la confidencialidad, una denegación de servicio o una divulgación de información.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1058",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.063",
      "lastModified" : "2024-11-21T05:43:28.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input data size is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El software NVIDIA vGPU contiene una vulnerabilidad en el controlador del modo kernel invitado y en el plugin vGPU, en el que el tamaño de los datos de entrada no es comprobado, lo que puede conllevar a una alteración de los datos o a una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1059",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.157",
      "lastModified" : "2024-11-21T05:43:28.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input index is not validated, which may lead to integer overflow, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que un índice de entrada no es comprobado, lo que puede conllevar a un desbordamiento de enteros, lo que a su vez puede causar una manipulación de los datos, divulgación de información o una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1060",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.203",
      "lastModified" : "2024-11-21T05:43:30.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and vGPU plugin, in which an input index is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El software NVIDIA vGPU contiene una vulnerabilidad en el controlador del modo kernel invitado y en el plugin vGPU, en el que un índice de entrada no es comprobado, lo que puede conllevar a una alteración de los datos o a una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1061",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.280",
      "lastModified" : "2024-11-21T05:43:31.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which a race condition may cause the vGPU plugin to continue using a previously validated resource that has since changed, which may lead to denial of service or information disclosure. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que una condición de carrera puede causar que el plugin vGPU continúe usando un recurso previamente comprobado que ha cambiado desde entonces, lo que puede conllevar a una denegación de servicio o una divulgación de información.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1062",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.343",
      "lastModified" : "2024-11-21T05:43:31.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input data length is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que la longitud de datos de entrada no es comprobada, lo que puede conllevar a una manipulación de los datos o a una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1063",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.407",
      "lastModified" : "2024-11-21T05:43:31.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which an input offset is not validated, which may lead to a buffer overread, which in turn may cause tampering of data, information disclosure, or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que un desplazamiento de la entrada no es comprobado, lo que puede conllevar a una lectura excesiva del búfer, que a su vez puede causar una alteración de los datos, divulgación de información o una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1064",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.453",
      "lastModified" : "2024-11-21T05:43:31.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which it obtains a value from an untrusted source, converts this value to a pointer, and dereferences the resulting pointer, which may lead to information disclosure or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que obtiene un valor desde una fuente no confiable, convierte este valor en un puntero y desreferencia el puntero resultante, lo que puede conllevar a una divulgación de información o a una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1065",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.563",
      "lastModified" : "2024-11-21T05:43:31.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to tampering of data or denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que los datos de entrada no se comprueban, lo que puede conllevar a una alteración de los datos o a una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1066",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-08T15:15:12.750",
      "lastModified" : "2024-11-21T05:43:31.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU manager contains a vulnerability in the vGPU plugin, in which input data is not validated, which may lead to unexpected consumption of resources, which in turn may lead to denial of service. This affects vGPU version 8.x (prior to 8.6) and version 11.0 (prior to 11.3)."
      }, {
        "lang" : "es",
        "value" : "El administrador de NVIDIA vGPU contiene una vulnerabilidad en el plugin vGPU, en la que los datos de entrada no se comprueban, lo que puede conllevar a un consumo inesperado de recursos, lo que a su vez puede conllevar a una denegación de servicio.&#xa0;Esto afecta a vGPU versiones 8.x (anteriores a 8.6) y versiones 11.0 (anteriores a 11.3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "0DA97A67-954D-4736-8E12-4297A2800942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.3",
            "matchCriteriaId" : "6394FDD5-DFFC-4F30-AD8B-BECF8889E829"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-08T15:15:12.953",
      "lastModified" : "2024-11-21T06:20:54.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Express Entries Dashboard in Concrete5 8.5.4 allows stored XSS via the name field of a new data object at an index.php/dashboard/express/entries/view/ URI."
      }, {
        "lang" : "es",
        "value" : "El Express Entries Dashboard en Concrete versión 5 8.5.4, permite almacenar una vulnerabilidad de tipo XSS por medio del campo name de un nuevo objeto de datos en un URI index.php/dashboard/express/entries/view/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.5",
            "matchCriteriaId" : "C1F0AC3F-2B3D-474D-89AE-E36D5307AD12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161600/Concrete5-8.5.4-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161997/Concrete5-8.5.4-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://documentation.concrete5.org/developers/introduction/version-history",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.concrete5.org/developers/introduction/version-history/855-release-notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Quadron-Research-Lab/CVE/blob/main/CVE-2021-3111.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161600/Concrete5-8.5.4-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161997/Concrete5-8.5.4-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://documentation.concrete5.org/developers/introduction/version-history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.concrete5.org/developers/introduction/version-history/855-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Quadron-Research-Lab/CVE/blob/main/CVE-2021-3111.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21106",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:14.880",
      "lastModified" : "2024-11-21T05:47:34.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en autofill en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1148749",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1148749",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21107",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:14.927",
      "lastModified" : "2024-11-21T05:47:34.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in drag and drop in Google Chrome on Linux prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en drag and drop en Google Chrome en Linux versiones anteriores a 87.0.4280.141, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1153595",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1153595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21108",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:14.990",
      "lastModified" : "2024-11-21T05:47:35.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in media in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en media en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155426",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155426",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21109",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.037",
      "lastModified" : "2024-11-21T05:47:35.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in payments in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en payments en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152334",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21110",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.100",
      "lastModified" : "2024-11-21T05:47:35.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en safe browsing en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152451",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21111",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.163",
      "lastModified" : "2024-11-21T05:47:35.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Una aplicación insuficiente de políticas en WebUI en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante que convenció a un usuario de instalar una extensión maliciosa para llevar a cabo potencialmente un escape del sandbox por medio de una extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1149125",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1149125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21112",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.210",
      "lastModified" : "2024-11-21T05:47:35.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1151298",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1151298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21113",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.273",
      "lastModified" : "2024-11-21T05:47:35.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Skia in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en Skia en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155178",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21114",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.333",
      "lastModified" : "2024-11-21T05:47:35.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en audio en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1150065",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1150065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21115",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.397",
      "lastModified" : "2024-11-21T05:47:35.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en safe browsing en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157814",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21116",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-01-08T19:15:15.443",
      "lastModified" : "2024-11-21T05:47:35.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in audio in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en audio en Google Chrome versiones anteriores a 87.0.4280.141, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0.4280.141",
            "matchCriteriaId" : "F9EBD8B2-5949-4856-92A1-10D2823BD631"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1151069",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1151069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VVUWIJKZTZTG6G475OR6PP4WPQBVM6PS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z6P6AVVFP7B2M4H7TJQBASRZIBLOTUFN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-11T05:15:10.987",
      "lastModified" : "2024-11-21T06:20:55.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "before_upstream_connection in AuthPlugin in http/proxy/auth.py in proxy.py before 2.3.1 accepts incorrect Proxy-Authorization header data because of a boolean confusion (and versus or)."
      }, {
        "lang" : "es",
        "value" : "La función before_upstream_connection en AuthPlugin en el archivo http/proxy/auth.py en proxy.py versiones anteriores a 2.3.1, acepta datos de encabezado Proxy-Authorization incorrectos debido a una confusión booleana (y versus o)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proxy.py_project:proxy.py:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "8B9F903B-99CF-482B-A91A-9117B1A7E890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cardaci.xyz/advisories/2021/01/10/proxy.py-2.3.0-broken-basic-authentication/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/abhinavsingh/proxy.py/pull/482/commits/9b00093288237f5073c403f2c4f62acfdfa8ed46",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://pypi.org/project/proxy.py/2.3.1/#history",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://cardaci.xyz/advisories/2021/01/10/proxy.py-2.3.0-broken-basic-authentication/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/abhinavsingh/proxy.py/pull/482/commits/9b00093288237f5073c403f2c4f62acfdfa8ed46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://pypi.org/project/proxy.py/2.3.1/#history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3118",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-11T06:15:13.320",
      "lastModified" : "2024-11-21T06:20:55.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has multiple SQL Injection issues in the login form and the password-forgotten form (such as /req_password_user.php?email=). This allows an attacker to steal data in the database and obtain access to the application. (The database component runs as root.) NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** EVOLUCARE ECSIMAGING (también se conoce como ECS Imaging) versiones hasta 6.21.5, presenta múltiples problemas de inyección SQL en el formulario de inicio de sesión y el formulario de contraseña olvidada (tal y como /req_password_user.php?email=).&#xa0;Esto permite a un atacante robar datos en la base de datos y conseguir acceso a la aplicación.&#xa0;(El componente de la base de datos se ejecuta como root). NOTA: Esta vulnerabilidad solo afecta a los productos que no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:medicalexpo:ecs_imaging:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.21.5",
            "matchCriteriaId" : "6A66AACD-2C42-4828-A1D9-FB43872A3CE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49392",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3121",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-11T06:15:13.460",
      "lastModified" : "2024-11-21T06:20:55.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GoGo Protobuf before 1.3.2. plugin/unmarshal/unmarshal.go lacks certain index validation, aka the \"skippy peanut butter\" issue."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en GoGo Protobuf versiones anteriores a 1.3.2.&#xa0;El archivo plugin/unmarshal/unmarshal.go carece de determinada comprobación de índice, también se conoce como el problema \"skippy peanut butter\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-129"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:protobuf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "7F29C1D9-5DC9-4075-BE27-D72F9F69F95B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.8.15",
            "matchCriteriaId" : "3CFEFC70-871E-4DC3-B23E-E7AFBE7106C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.8.15",
            "matchCriteriaId" : "D8536B85-06DD-4498-BFB5-C729CF5346C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "EA1C73D1-3A32-488A-B5EC-7BDFA7DBD417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.9",
            "matchCriteriaId" : "4EA73576-AADE-4142-8617-937F9E5A32F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.10.0",
            "versionEndExcluding" : "1.10.2",
            "matchCriteriaId" : "19BE17DA-3808-42DD-817A-B43CE7619281"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.10.0",
            "versionEndExcluding" : "1.10.2",
            "matchCriteriaId" : "AE470E84-7E0A-4EFC-91CF-A297C1C3D4FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-23-consul-exposed-to-denial-of-service-in-gogo-protobuf-dependency/29025",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r88d69555cb74a129a7bf84838073b61259b4a3830190e05a3b87994e%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc1e9ff22c5641d73701ba56362fb867d40ed287cca000b131dcf4a44%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-23-consul-exposed-to-denial-of-service-in-gogo-protobuf-dependency/29025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gogo/protobuf/compare/v1.3.1...v1.3.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r68032132c0399c29d6cdc7bd44918535da54060a10a12b1591328bff%40%3Cnotifications.skywalking.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r88d69555cb74a129a7bf84838073b61259b4a3830190e05a3b87994e%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc1e9ff22c5641d73701ba56362fb867d40ed287cca000b131dcf4a44%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23253",
      "sourceIdentifier" : "security@opera.com",
      "published" : "2021-01-11T16:15:15.663",
      "lastModified" : "2024-11-21T05:51:26.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opera Mini for Android below 53.1 displays URL left-aligned in the address field. This allows a malicious attacker to craft a URL with a long domain name, e.g. www.safe.opera.com.attacker.com. With the URL being left-aligned, the user will only see the front part (e.g. www.safe.opera.com…) The exact amount depends on the phone screen size but the attacker can craft a number of different domains and target different phones. Starting with version 53.1 Opera Mini displays long URLs with the top-level domain label aligned to the right of the address field which mitigates the issue."
      }, {
        "lang" : "es",
        "value" : "Opera Mini para Android versiones por debajo de 53.1, muestra la URL alineada a la izquierda en el campo de dirección.&#xa0;Esto permite a un atacante malicioso crear una URL con un nombre de dominio largo, por ejemplo, www.safe.opera.com.attacker.com.&#xa0;Con la URL alineada a la izquierda, el usuario solo verá la parte frontal (por ejemplo, www.safe.opera.com ...) La cantidad exacta depende del tamaño de la pantalla del teléfono, pero el atacante puede crear varios dominios diferentes y apuntar a diferentes teléfonos .&#xa0;A partir de la versión 53.1, Opera Mini muestra URL largas con la etiqueta de dominio de nivel superior alineada a la derecha del campo de dirección, lo que mitiga el problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opera:opera_mini:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "53.1",
            "matchCriteriaId" : "EA9B517F-93FF-4082-8F4E-622860AC3668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.opera.com/address-bar-spoofing-in-opera-mini-opera-security-advisories/",
        "source" : "security@opera.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.opera.com/address-bar-spoofing-in-opera-mini-opera-security-advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0342",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T21:15:13.313",
      "lastModified" : "2024-11-21T05:42:32.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In tun_get_user of tun.c, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges required. User interaction is not required for exploitation. Product: Android; Versions: Android kernel; Android ID: A-146554327."
      }, {
        "lang" : "es",
        "value" : "En la función tun_get_user del archivo tun.c, se presenta una posible corrupción de la memoria debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local con privilegios de ejecución System requeridos.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: kernel de Android;&#xa0;ID de Android: A-146554327"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21241",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-11T21:15:13.377",
      "lastModified" : "2024-11-21T05:47:50.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Python \"Flask-Security-Too\" package is used for adding security features to your Flask application. It is an is a independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. In Flask-Security-Too from version 3.3.0 and before version 3.4.5, the /login and /change endpoints can return the authenticated user's authentication token in response to a GET request. Since GET requests aren't protected with a CSRF token, this could lead to a malicious 3rd party site acquiring the authentication token. Version 3.4.5 and version 4.0.0 are patched. As a workaround, if you aren't using authentication tokens - you can set the SECURITY_TOKEN_MAX_AGE to \"0\" (seconds) which should make the token unusable."
      }, {
        "lang" : "es",
        "value" : "El paquete Python \"Flask-Security-Too\" es usado para agregar funcionalidades de seguridad a su aplicación Flask.&#xa0;Es una versión mantenida independientemente de Flask-Security basada en la versión 3.0.0 de Flask-Security.&#xa0;En Flask-Security-Too desde la versión 3.3.0 y versiones anteriores a 3.4.5, los endpoints /login y /change pueden devolver el token de autenticación del usuario autenticado en respuesta a una petición GET.&#xa0;Dado que las peticiones GET no están protegidas con un token CSRF, esto podría conllevar a que un sitio de terceros malicioso adquiera el token de autenticación.&#xa0;La versión 3.4.5 y la versión 4.0.0 están parcheadas.&#xa0;Como solución temporal, si no está utilizando tokens de autenticación, puede establecer el SECURITY_TOKEN_MAX_AGE en \"0\" (segundos), lo que debería inutilizar el token"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flask-security-too_project:flask-security-too:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.4.5",
            "matchCriteriaId" : "6955F0BE-FEE7-4B0E-B488-FA537F6B068C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Flask-Middleware/flask-security/commit/61d313150b5f620d0b800896c4f2199005e84b1f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/commit/6d50ee9169acf813257c37b75babe9c28e83542a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/pull/422",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/releases/tag/3.4.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/security/advisories/GHSA-hh7m-rx4f-4vpv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Flask-Security-Too",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/commit/61d313150b5f620d0b800896c4f2199005e84b1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/commit/6d50ee9169acf813257c37b75babe9c28e83542a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/pull/422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/releases/tag/3.4.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Flask-Middleware/flask-security/security/advisories/GHSA-hh7m-rx4f-4vpv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Flask-Security-Too",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0301",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:12.893",
      "lastModified" : "2024-11-21T05:42:27.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ged, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android SoC; Android ID: A-172514667."
      }, {
        "lang" : "es",
        "value" : "En ged, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android SoC;&#xa0;ID de Android: A-172514667"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0303",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:12.987",
      "lastModified" : "2024-11-21T05:42:27.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In dispatchGraphTerminationMessage() of packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170407229."
      }, {
        "lang" : "es",
        "value" : "En la función dispatchGraphTerminationMessage() del archivo packages/services/Car/computepipe/runner/graph/StreamSetObserver.cpp, se presenta un posible uso de la memoria previamente liberada debido a una condición de carrera.&#xa0;Esto podría conllevar a una escalada de privilegios local con privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID de Android: A-170407229"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0304",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.033",
      "lastModified" : "2024-11-21T05:42:27.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of GlobalScreenshot.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure of the user's contacts with User execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-8.0, Android-8.1, Android-9; Android ID: A-162738636."
      }, {
        "lang" : "es",
        "value" : "En varias funciones del archivo GlobalScreenshot.java, se presenta una posible omisión de permisos debido a un PendingIntent no seguro.&#xa0;Esto podría conllevar a una divulgación de información local de los contactos del usuario con privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-8.0, Android-8.1, Android-9;&#xa0;ID de Android: A-162738636"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0306",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.080",
      "lastModified" : "2024-11-21T05:42:27.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain the android.permission.ACTIVITY_RECOGNITION permission without user confirmation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-154505240."
      }, {
        "lang" : "es",
        "value" : "En la función addAllPermissions del archivo PermissionManagerService.java, se presenta una posible omisión de permisos al actualizar las principales versiones de Android, lo que permite que una aplicación obtenga el permiso android.permission.ACTIVITY_RECOGNITION sin la confirmación del usuario.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-154505240"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0307",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.127",
      "lastModified" : "2024-11-21T05:42:28.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In updatePermissionSourcePackage of PermissionManagerService.java, there is a possible automatic runtime permission grant due to a confused deputy. This could lead to local escalation of privilege allowing a malicious app to silently gain access to a dangerous permission with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Android ID: A-155648771."
      }, {
        "lang" : "es",
        "value" : "En la función updatePermissionSourcePackage del archivo PermissionManagerService.java, se presenta una posible concesión automática de permisos en el tiempo de ejecución debido a un confused deputy.&#xa0;Esto podría conllevar a una escalada de privilegios local permitiendo a una aplicación maliciosa conseguir acceso silenciosamente a un permiso peligroso sin ser necesario privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID de Android: A-155648771"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0308",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.173",
      "lastModified" : "2024-11-21T05:42:28.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158063095."
      }, {
        "lang" : "es",
        "value" : "En la función ReadLogicalParts del archivo basicmbr.cc, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-8.1, Android-9, Android-10, Android-11, Android-8.0;&#xa0;ID de Android: A-158063095"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-03",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0309",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.220",
      "lastModified" : "2024-11-21T05:42:28.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of grantCredentialsPermissionActivity, there is a confused deputy. This could lead to local information disclosure and account access with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-158480899."
      }, {
        "lang" : "es",
        "value" : "En la función onCreate del archivo grantCredentialsPermissionActivity, se presenta un confused deputy.&#xa0;Esto podría conllevar a una divulgación de información local y al acceso a la cuenta sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-8.1, Android-9, Android-10, Android-11, Android-8.0;&#xa0;ID de Android: A-158480899"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0310",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.267",
      "lastModified" : "2024-11-21T05:42:28.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LazyServiceRegistrar of LazyServiceRegistrar.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-170212632."
      }, {
        "lang" : "es",
        "value" : "En la función LazyServiceRegistrar del archivo LazyServiceRegistrar.cpp, se presenta una posible corrupción de la memoria debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID de Android: A-170212632"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0311",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.313",
      "lastModified" : "2024-11-21T05:42:28.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ElementaryStreamQueue::dequeueAccessUnitH264() of ESQueue.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170240631."
      }, {
        "lang" : "es",
        "value" : "En la función ElementaryStreamQueue::dequeueAccessUnitH264() del archivo ESQueue.cpp, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-9, Android-10, Android-11, Android-8.0, Android-8.1;&#xa0;ID de Android: A-170240631"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0312",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.360",
      "lastModified" : "2024-11-21T05:42:28.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WAVSource::read of WAVExtractor.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-170583712."
      }, {
        "lang" : "es",
        "value" : "En la función WAVSource::read del archivo WAVExtractor.cpp, se presenta una posible escritura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-8.1, Android-9, Android-10, Android-11, Android-8.0;&#xa0;ID de Android: A-170583712"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0313",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.407",
      "lastModified" : "2024-11-21T05:42:29.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11, Android-8.0, Android-8.1; Android ID: A-170968514."
      }, {
        "lang" : "es",
        "value" : "En la función isWordBreakAfter del archivo LayoutUtils.cpp, existe una posible manera de ralentizar o bloquear un TextView debido a una comprobación inapropiada de la entrada.&#xa0;Esto podría conllevar a una denegación de servicio remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-9, Android-10, Android-11, Android-8.0, Android-8.1;&#xa0;ID de Android: A-170968514"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0315",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.457",
      "lastModified" : "2024-11-21T05:42:29.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app access to an account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11, Android-8.0; Android ID: A-169763814."
      }, {
        "lang" : "es",
        "value" : "En la función onCreate del archivo GrantCredentialsPermissionActivity.java, existe una posible manera de convencer al usuario de que otorgue acceso de aplicación a una cuenta debido a un ataque de tapjacking/overlay.&#xa0;Esto podría conllevar a una escalada de privilegios local con privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-8.1, Android-9, Android-10, Android-11, Android-8.0;&#xa0;ID de Android: A-169763814"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0316",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.503",
      "lastModified" : "2024-11-21T05:42:29.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11, Android-8.0, Android-8.1, Android-9, Android-10; Android ID: A-168802990."
      }, {
        "lang" : "es",
        "value" : "En la función avrc_pars_vendor_cmd del archivo avrc_pars_tg.cc, se presenta una posible escritura fuera de límites debido a que falta una comprobación de límites.&#xa0;Esto podría conllevar a una ejecución de código remota a través de Bluetooth sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11, Android-8.0, Android-8.1, Android-9, Android-10;&#xa0;ID de Android: A-168802990"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0317",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.550",
      "lastModified" : "2024-11-21T05:42:30.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createOrUpdate of Permission.java and related code, there is possible permission escalation due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11, Android-8.0, Android-8.1, Android-9; Android ID: A-168319670."
      }, {
        "lang" : "es",
        "value" : "En la función createOrUpdate del archivo Permission.java y el código relacionado, se presenta una posible escalada de permisos debido a un error lógico.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11, Android-8.0, Android-8.1, Android-9;&#xa0;ID de Android: A-168319670"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0318",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.597",
      "lastModified" : "2024-11-21T05:42:30.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-8.1, Android-10, Android-11; Android ID: A-168211968."
      }, {
        "lang" : "es",
        "value" : "En la función appendEventsToCacheLocked del archivo SensorEventConnection.cpp, se presenta una posible escritura fuera de límites debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-9, Android-8.1, Android-10, Android-11;&#xa0;ID de Android: A-168211968"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0319",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.643",
      "lastModified" : "2024-11-21T05:42:30.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth device's MAC address without appropriate permissions due to a permissions bypass. This could lead to local escalation of privilege that grants access to nearby MAC addresses, with User execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.0, Android-8.1, Android-9, Android-10, Android-11; Android ID: A-167244818."
      }, {
        "lang" : "es",
        "value" : "En la función checkCallerIsSystemOr del archivo CompanionDeviceManagerService.java, existe una posible manera de obtener la dirección MAC de un dispositivo Bluetooth cercano sin los permisos apropiados debido a una omisión de permisos.&#xa0;Esto podría conllevar a una escalada de privilegios local que otorgue acceso a direcciones MAC cercanas, con privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-8.0, Android-8.1, Android-9, Android-10, Android-11;&#xa0;ID de Android: A-167244818"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0320",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.690",
      "lastModified" : "2024-11-21T05:42:30.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In is_device_locked and set_device_locked of keystore_keymaster_enforcement.h, there is a possible bypass of lockscreen requirements for keyguard bound keys due to a race condition. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Android ID: A-169933423."
      }, {
        "lang" : "es",
        "value" : "En las funciones is_device_locked y set_device_locked del archivo keystore_keymaster_enforcement.h, se presenta una posible omisión de los requisitos de la pantalla de bloqueo para las claves vinculadas al keyguard debido a una condición de carrera.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID de Android: A-169933423"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0321",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.737",
      "lastModified" : "2024-11-21T05:42:30.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In enforceDumpPermissionForPackage of ActivityManagerService.java, there is a possible way to determine if a package is installed due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Android ID: A-166667403."
      }, {
        "lang" : "es",
        "value" : "En la función enforceDumpPermissionForPackage del archivo ActivityManagerService.java, existe una posible manera de determinar si un paquete se instaló debido a una divulgación de información del canal lateral.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID de Android: A-166667403"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0322",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-01-11T22:15:13.783",
      "lastModified" : "2024-11-21T05:42:30.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of SlicePermissionActivity.java, there is a possible misleading string displayed due to improper input validation. This could lead to local information disclosure with User execution privileges needed. User interaction is needed for exploitation.Product: Android; Versions: Android-10, Android-11, Android-9; Android ID: A-159145361."
      }, {
        "lang" : "es",
        "value" : "En la función onCreate del archivo SlicePermissionActivity.java, se presenta una posible cadena engañosa que se muestra debido a una comprobación inapropiada de la entrada.&#xa0;Esto podría conllevar a una divulgación de información local con privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android;&#xa0;Versiones: Android-10, Android-11, Android-9;&#xa0;ID de Android: A-159145361"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-01-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T09:15:14.043",
      "lastModified" : "2024-11-21T05:51:25.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path."
      }, {
        "lang" : "es",
        "value" : "La personalidad sudoedit de Sudo versiones anteriores a 1.9.5, puede permitir a un usuario local poco privilegiado llevar a cabo pruebas arbitrarias de existencia de directorio al ganar una condición de carrera en el archivo sudo_edit.c al reemplazar un directorio controlado por el usuario por un enlace simbólico a una ruta arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.32",
            "matchCriteriaId" : "C48C4D93-6757-4B38-9AF0-2DF2C38D94B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.5",
            "matchCriteriaId" : "38FC37F7-DE89-4078-BB55-EBFBF3A2D780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23239",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210129-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/stable.html#1.9.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210129-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/stable.html#1.9.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T09:15:14.107",
      "lastModified" : "2024-11-21T05:51:25.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable."
      }, {
        "lang" : "es",
        "value" : "En la función selinux_edit_copy_tfiles en sudoedit en Sudo versiones anteriores a  la 1.9.5, permite a un usuario local poco privilegiado obtener una propiedad del archivo y escalar unos privilegios reemplazando un archivo temporal con un enlace simbólico para un archivo objetivo arbitrario.&#xa0;Esto afecta el soporte de SELinux RBAC en modo permisivo.&#xa0;Las máquinas sin SELinux no son vulnerables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.32",
            "matchCriteriaId" : "C48C4D93-6757-4B38-9AF0-2DF2C38D94B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.5",
            "matchCriteriaId" : "38FC37F7-DE89-4078-BB55-EBFBF3A2D780"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210129-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/stable.html#1.9.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=CVE-2021-23240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EE42Y35SMJOLONAIBNYNFC7J44UUZ2Y6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GMY4VSSBIND7VAYSN6T7XIWJRWG4GBB3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210129-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/stable.html#1.9.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21445",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.360",
      "lastModified" : "2024-11-21T05:48:23.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Commerce Cloud, versions - 1808, 1811, 1905, 2005, 2011, allows an authenticated attacker to include invalidated data in the HTTP response Content Type header, due to improper input validation, and sent to a Web user. A successful exploitation of this vulnerability may lead to advanced attacks, including cross-site scripting and page hijacking."
      }, {
        "lang" : "es",
        "value" : "SAP Commerce Cloud, versiones - 1808, 1811, 1905, 2005, 2011, permite a un atacante autenticado incluir datos invalidados en el encabezado Content Type de la respuesta HTTP, debido a una comprobación de entrada inapropiada, y se envía a un usuario Web.&#xa0;Una explotación con éxito de esta vulnerabilidad puede conllevar a ataques avanzados, incluyendo cross-site scripting y secuestro de páginas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:1808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5649AB0A-1D84-4716-A178-F196A1DA9C1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:1811:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DE60D1-95FF-4220-AE63-2C351781FDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:1905:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19E11B22-F514-48D6-B78F-8A64CE1BA364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA3BA250-AB0A-4A27-A81C-C3EECD71B521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce_cloud:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BF14BC-9250-4534-AD6D-2C25B64AA78F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2984034",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2984034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21446",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.470",
      "lastModified" : "2024-11-21T05:48:23.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS ABAP, versions 740, 750, 751, 752, 753, 754, 755, allows an unauthenticated attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service, this has a high impact on the availability of the service."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver AS ABAP, versiones 740, 750, 751, 752, 753, 754, 755, permite a un atacante no autenticado impedir que usuarios legítimos accedan a un servicio, ya sea bloqueando o inundando el servicio, esto presenta un alto impacto en la disponibilidad de el servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0539618A-1C4D-463F-B2BB-DD1C239C23EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62828DCD-F80E-4C7C-A988-EFEA06A5223E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F38585-73AE-4DBB-A978-F0272DF8FB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D416C064-BB8A-4230-A761-84A93E017F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8D3EA0-28E6-4333-8C67-B9D3775EB9BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3000306",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3000306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21447",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.547",
      "lastModified" : "2024-11-21T05:48:23.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP BusinessObjects Business Intelligence platform, versions 410, 420, allows an authenticated attacker to inject malicious JavaScript payload into the custom value input field of an Input Control, which can be executed by User who views the relevant application content, which leads to Stored Cross-Site Scripting."
      }, {
        "lang" : "es",
        "value" : "La plataforma SAP BusinessObjects Business Intelligence, versiones 410, 420, permite a un atacante autenticado inyectar una carga útil de JavaScript maliciosa en el campo de entrada de valor personalizado de un Control de Entrada, que puede ser ejecutado por el Usuario quien visualiza el contenido de la aplicación relevante, lo que conlleva a una vulnerabilidad de tipo Cross-Site Scripting Almacenada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:410:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F721F23A-11D6-46E3-9D43-C9DB2DB28CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA0DF9-D893-4AF9-923E-E47EA5C02C52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2965154",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2965154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21448",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.610",
      "lastModified" : "2024-11-21T05:48:23.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP GUI for Windows, version - 7.60, allows an attacker to spoof logon credentials for Application Server ABAP backend systems in the client PCs memory. Under certain conditions the attacker can access information which would otherwise be restricted. The exploit can only be executed locally on the client PC and not via Network and the attacker needs at least user authorization of the Operating System user of the victim."
      }, {
        "lang" : "es",
        "value" : "SAP GUI para Windows, versión - 7.60, permite a un atacante falsificar las credenciales de inicio de sesión para los sistemas backend de Application Server ABAP en la memoria de las PC de cliente.&#xa0;En determinadas condiciones, el atacante puede acceder a información que de otro modo estaría restringida.&#xa0;La explotación solo puede ser ejecutada localmente en la PC del cliente y no por medio de la Red y el atacante necesita al menos la autorización del usuario del Sistema Operativo de la víctima"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:graphical_user_interface:7.60:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "1E9E7616-5D11-4B3C-9419-558DA7BFD764"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2992269",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2992269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21449",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.703",
      "lastModified" : "2024-11-21T05:48:23.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo IFF manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21450",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.813",
      "lastModified" : "2024-11-21T05:48:23.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PSD file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo PSD manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21451",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.907",
      "lastModified" : "2024-11-21T05:48:24.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SGI file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo SGI manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21452",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:14.987",
      "lastModified" : "2024-11-21T05:48:24.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo GIF manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21453",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.047",
      "lastModified" : "2024-11-21T05:48:24.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo RLE manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21454",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.110",
      "lastModified" : "2024-11-21T05:48:24.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated RLE file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo RLE manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21455",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.190",
      "lastModified" : "2024-11-21T05:48:24.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo DIB manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21456",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.250",
      "lastModified" : "2024-11-21T05:48:24.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo DIB manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21457",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.313",
      "lastModified" : "2024-11-21T05:48:24.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo IFF manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21458",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.390",
      "lastModified" : "2024-11-21T05:48:24.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo IFF manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21459",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.437",
      "lastModified" : "2024-11-21T05:48:24.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated IFF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo IFF manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21460",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.517",
      "lastModified" : "2024-11-21T05:48:25.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated DIB file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo DIB manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21461",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.593",
      "lastModified" : "2024-11-21T05:48:25.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated BMP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo BMP manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21462",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.657",
      "lastModified" : "2024-11-21T05:48:25.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo PCX manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21463",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.720",
      "lastModified" : "2024-11-21T05:48:25.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo PCX manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21464",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.813",
      "lastModified" : "2024-11-21T05:48:25.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated PCX file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation."
      }, {
        "lang" : "es",
        "value" : "SAP 3D Visual Enterprise Viewer, versión - 9, permite a un usuario abrir un archivo PCX manipulado recibido de fuentes no confiables, lo cual resulta en un bloqueo de la aplicación y que no esté disponible temporalmente hasta que el usuario reinicie la aplicación, esto es causado debido a una Comprobación de Entrada Inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3002617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21465",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.860",
      "lastModified" : "2024-11-21T05:48:25.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BW Database Interface allows an attacker with low privileges to execute any crafted database queries, exposing the backend database. An attacker can include their own SQL commands which the database will execute without properly sanitizing the untrusted data leading to SQL injection vulnerability which can fully compromise the affected SAP system."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Base de Datos de BW permite a un atacante con pocos privilegios ejecutar cualquier consulta de la base de datos diseñada, exponiendo la base de datos del backend.&#xa0;Un atacante puede incluir sus propios comandos SQL que la base de datos ejecutará sin sanear apropiadamente los datos no confiables, conllevando a una vulnerabilidad de inyección SQL que puede comprometer por completo el sistema SAP afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FAC6A3-1ADF-48F2-971B-5ADF9F101583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:711:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE777B-AA53-4A6B-AD6E-5DCEEAC217AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F2CE3-BA4B-4A9C-A284-87F0AB797B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00732AD2-BEED-4C1F-AC39-46E6F33CBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7DABAD-36FA-49D7-8C3C-3AA49604BE37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526C11C6-B67D-49F1-94E6-A324AA581EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4E38AC-5888-4ABD-AAB1-BC5312701195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7A93A1-3D65-4C79-92B1-E433EE443478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E03381-893C-4646-9150-303AB4F6144B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1400B8E5-8400-420A-8581-9F3B07EF6BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABE173B-C66E-4A69-9735-E325C0DAC062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929A4FB3-BEEF-4A69-B77C-FD1A0B3C7DFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html",
        "source" : "cna@sap.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/42",
        "source" : "cna@sap.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2986980",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2986980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21466",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:15.953",
      "lastModified" : "2024-11-21T05:48:25.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Business Warehouse, versions 700, 701, 702, 711, 730, 731, 740, 750, 782 and SAP BW/4HANA, versions 100, 200, allow a low privileged attacker to inject code using a remote enabled function module over the network. Via the function module an attacker can create a malicious ABAP report which could be used to get access to sensitive data, to inject malicious UPDATE statements that could have also impact on the operating system, to disrupt the functionality of the SAP system which can thereby lead to a Denial of Service."
      }, {
        "lang" : "es",
        "value" : "SAP Business Warehouse, versiones 700, 701, 702, 711, 730, 731, 740, 750, 782 y SAP BW/4HANA, versiones 100, 200, permiten a un atacante poco privilegiado inyectar código usando un módulo de función habilitado de forma remota a través de la red.&#xa0;Por medio del módulo de función, un atacante puede crear un reporte ABAP malicioso que podría ser usado para obtener acceso a datos confidenciales, para inyectar sentencias UPDATE maliciosas que también podrían tener un impacto en el sistema operativo, para interrumpir la funcionalidad del sistema SAP que, por lo tanto, puede conducir a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:700:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D495F997-45A9-4C80-841E-781E1EAC3074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:701:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FCA6F5A-25B8-46E1-B407-38F61222C057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:702:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FE999EE-9B6B-4D2C-9347-5558B878AE7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:711:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE777B-AA53-4A6B-AD6E-5DCEEAC217AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F2CE3-BA4B-4A9C-A284-87F0AB797B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00732AD2-BEED-4C1F-AC39-46E6F33CBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7DABAD-36FA-49D7-8C3C-3AA49604BE37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526C11C6-B67D-49F1-94E6-A324AA581EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929A4FB3-BEEF-4A69-B77C-FD1A0B3C7DFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:bw\\/4hana:100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD13072-E149-45FB-BD46-E3D48D81216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:bw\\/4hana:200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704134B4-A642-488F-94B3-48A744C46A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html",
        "source" : "cna@sap.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/42",
        "source" : "cna@sap.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2999854",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2999854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21467",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:16.033",
      "lastModified" : "2024-11-21T05:48:25.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Banking Services (Generic Market Data) does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. An unauthorized User is allowed to display restricted Business Partner Generic Market Data (GMD), due to improper authorization check."
      }, {
        "lang" : "es",
        "value" : "SAP Banking Services (Generic Market Data) no llevan a cabo las comprobaciones de autorización necesarias para un usuario autenticado, resultando en una escalada de privilegios. Un Usuario no autorizado puede mostrar el Business Partner Generic Market Data (GMD) restringido debido a una comprobación de autorización inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:banking_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFCABA9-8A82-49D2-A8AB-80B5DF126F68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3008422",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3008422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21468",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:16.093",
      "lastModified" : "2024-11-21T05:48:26.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The BW Database Interface does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges that allows the user to practically read out any database table."
      }, {
        "lang" : "es",
        "value" : "La interfaz de Base de Datos de BW no lleva a cabo las comprobaciones de autorización necesarias para un usuario autenticado, resultando en una escalada de privilegios que permite al usuario leer prácticamente cualquier tabla de la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FAC6A3-1ADF-48F2-971B-5ADF9F101583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:711:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11DE777B-AA53-4A6B-AD6E-5DCEEAC217AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:730:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF8F2CE3-BA4B-4A9C-A284-87F0AB797B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00732AD2-BEED-4C1F-AC39-46E6F33CBB5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7DABAD-36FA-49D7-8C3C-3AA49604BE37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "526C11C6-B67D-49F1-94E6-A324AA581EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:751:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4E38AC-5888-4ABD-AAB1-BC5312701195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:752:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D7A93A1-3D65-4C79-92B1-E433EE443478"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:753:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E03381-893C-4646-9150-303AB4F6144B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:754:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1400B8E5-8400-420A-8581-9F3B07EF6BF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:755:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ABE173B-C66E-4A69-9735-E325C0DAC062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:business_warehouse:782:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929A4FB3-BEEF-4A69-B77C-FD1A0B3C7DFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html",
        "source" : "cna@sap.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/42",
        "source" : "cna@sap.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2986980",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167229/SAP-Application-Server-ABAP-ABAP-Platform-Code-Injection-SQL-Injection-Missing-Authorization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2986980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21469",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:16.187",
      "lastModified" : "2024-11-21T05:48:26.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When security guidelines for SAP NetWeaver Master Data Management running on windows have not been thoroughly reviewed, it might be possible for an external operator to try and set custom paths in the MDS server configuration. When no adequate protection has been enforced on any level (e.g., MDS Server password not set, network and OS configuration not properly secured, etc.), a malicious user might define UNC paths which could then be exploited to put the system at risk using a so-called SMB relay attack and obtain highly sensitive data, which leads to Information Disclosure."
      }, {
        "lang" : "es",
        "value" : "Cuando las pautas de seguridad para SAP NetWeaver Master Data Management que se ejecutan en Windows no han sido revisadas a fondo, puede ser posible que un operador externo intente establecer rutas personalizadas en la configuración del servidor MDS. Cuando no ha sido aplicada una protección adecuada en ningún nivel (p. Ej., La contraseña del servidor MDS no se ha establecido, la configuración de la red y del sistema operativo no está apropiadamente protegida, etc.), un usuario malicioso puede definir rutas UNC que luego podrían ser explotadas para poner el sistema en riesgo usando un llamado ataque de retransmisión SMB y obtener datos altamente confidenciales, lo que conlleva a una divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B5149D3-9D8D-4DD9-B2F1-C92DE398107F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management:7.10.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071CC928-964B-4CCB-AA4B-C61B4EB9AF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management:710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18569141-CFE0-4829-A44E-343ADBD2E17E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2993032",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2993032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21470",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:16.250",
      "lastModified" : "2024-11-21T05:48:26.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP EPM Add-in for Microsoft Office, version - 1010 and SAP EPM Add-in for SAP Analysis Office, version - 2.8, allows an authenticated attacker with user privileges to parse malicious XML files which could result in XXE-based attacks in applications that accept attacker-controlled XML configuration files. This occurs as logging service does not disable XML external entities when parsing configuration files and a successful exploit would result in limited impact on integrity and availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP EPM Add-in para Microsoft Office, versión - 1010 y SAP EPM Add-in para SAP Analysis Office, versión - 2.8, permiten a un atacante autenticado con privilegios de usuario analizar archivos XML maliciosos que podrían resultar en ataques basados en XXE en aplicaciones que aceptan archivos de configuración XML controlados por atacantes.&#xa0;Esto ocurre porque el servicio de registro no deshabilita las entidades externas XML al analizar los archivos de configuración y una explotación con éxito podría resultar en un impacto limitado en la integridad y disponibilidad de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.6,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_performance_management:2.8:*:*:*:*:sap_analysis_office:*:*",
            "matchCriteriaId" : "7E15537F-58BC-44AB-B6F0-512BB50DACB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_performance_management:1010:*:*:*:*:microsoft_office:*:*",
            "matchCriteriaId" : "4016290E-B9D6-414B-A17F-D330A1FDF3E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3000291",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3000291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=564760476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21471",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-01-12T15:15:16.343",
      "lastModified" : "2024-11-21T05:48:26.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CLA-Assistant, versions before 2.8.5, due to improper access control an authenticated user could access API endpoints which are not intended to be used by the user. This could impact the integrity of the application."
      }, {
        "lang" : "es",
        "value" : "En CLA-Assistant, versiones anteriores a 2.8.5, debido a un control de acceso inapropiado, un usuario autenticado podría acceder a endpoints de la API que no están destinados a ser usados por el usuario.&#xa0;Esto podría afectar la integridad de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:cla-assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.5",
            "matchCriteriaId" : "17040C52-9C17-4D02-B409-4567A368DBFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cla-assistant/cla-assistant/security/advisories/GHSA-4h6f-c68c-pxhr",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cla-assistant/cla-assistant/security/advisories/GHSA-4h6f-c68c-pxhr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T15:15:16.453",
      "lastModified" : "2025-11-10T14:39:03.723",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Laravel before 8.4.2."
      }, {
        "lang" : "es",
        "value" : "Ignition versiones anteriores a 2.5.2, como es usado en Laravel y otros productos, permite a atacantes remotos no autenticados ejecutar código arbitrario debido a un uso no seguro de las funciones file_get_contents() y file_put_contents().&#xa0;Esto es explotable en sitios que usan el modo de depuración con Laravel versiones anteriores a 8.4.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-09-18",
      "cisaActionDue" : "2023-10-09",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Laravel Ignition File Upload Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facade:ignition:*:*:*:*:*:laravel:*:*",
            "versionEndExcluding" : "2.5.2",
            "matchCriteriaId" : "959716CB-AD1B-4467-A9D2-E932BBE3817C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.4.2",
            "matchCriteriaId" : "377E9FC6-8AE0-421B-A170-8BA894E34850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/facade/ignition/pull/334",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ambionics.io/blog/laravel-debug-rce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162094/Ignition-2.5.1-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/165999/Ignition-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/facade/ignition/pull/334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ambionics.io/blog/laravel-debug-rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3129",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T19:15:13.070",
      "lastModified" : "2024-11-21T06:20:57.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Elementor Contact Form DB plugin before 1.6 for WordPress allows CSRF via backend admin pages."
      }, {
        "lang" : "es",
        "value" : "El plugin Elementor Contact Form DB versiones anteriores a 1.6 para WordPress, permite un ataque de tipo CSRF por medio de las páginas de administración del backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sean-barton:elementor_contact_form_db:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6",
            "matchCriteriaId" : "80E4A166-CD31-4CB4-88F6-29A3E9EDBC67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4293",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2454670/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/sb-elementor-contact-form-db/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2454670/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/sb-elementor-contact-form-db/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1636",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.167",
      "lastModified" : "2024-11-21T05:44:46.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SQL Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Microsoft SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2012:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BD8F6C-FD88-483F-95E8-16F7A6BCFCC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2014:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "03C65D96-44D0-4411-8B84-961973F1E4D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2016:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "CDCE78A8-26F9-4F9E-BDDD-E59DEA4A3791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2017:-:*:*:*:*:x64:*",
            "matchCriteriaId" : "C0593463-9AE4-4D83-8037-FFD24AD3CFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sql_server:2019:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "9144F644-A3D4-440C-8978-257E71204617"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1636",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1636",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1637",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.213",
      "lastModified" : "2024-11-21T05:44:47.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Query Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de consultas DNS de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1637",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1638",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.277",
      "lastModified" : "2024-11-21T05:44:47.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft is aware of the &quot;Impersonation in the Passkey Entry Protocol&quot; vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.\nTo address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Funcionalidad Windows Bluetooth Security. Este ID de CVE es diferente de CVE-2021-1683, CVE-2021-1684"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1638",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1641",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.337",
      "lastModified" : "2024-11-21T05:44:47.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Suplantación de Identidad de Microsoft SharePoint. Este ID de CVE es diferente de CVE-2021-1717"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1641",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1642",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.400",
      "lastModified" : "2024-11-21T05:44:47.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows AppX Deployment Extensions Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows AppX Deployment Extensions. Este ID de CVE es diferente de CVE-2021-1685"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1642",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1642",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1643",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.477",
      "lastModified" : "2024-11-21T05:44:47.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-1644"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.33242.0",
            "matchCriteriaId" : "C3F3BD2E-D5D5-418A-BA67-CC2D75E19D94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1643",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1644",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.540",
      "lastModified" : "2024-11-21T05:44:47.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-1643"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:hevc_video_extensions:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.33242.0",
            "matchCriteriaId" : "C3F3BD2E-D5D5-418A-BA67-CC2D75E19D94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1644",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1645",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.603",
      "lastModified" : "2024-11-21T05:44:48.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Docker Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Windows Docker"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1645",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/161816/Microsoft-Windows-Containers-DP-API-Cryptography-Flaw.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1646",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.667",
      "lastModified" : "2024-11-21T05:44:48.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WLAN Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del servicio WLAN de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1646",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1647",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.727",
      "lastModified" : "2025-10-30T19:56:27.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Defender"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Defender Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00345596-E9E0-4096-8DC6-0212F4747A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E332666-2E03-468E-BC30-299816D6E8ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B570A8-ED1A-46B6-B8AB-064445F8FC4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DBE5B2-AE10-4251-BCDA-DC5EDEE6EE67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE7E7B1-64AC-4986-A50B-0918A42C05BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62224791-644C-4D1F-AD77-56B16CF27630"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F9B6B1-4FEE-4D4B-B35F-B07822CCD669"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194DE421-9536-4001-9A27-6C88805421EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*",
            "matchCriteriaId" : "410C8132-8953-4A2E-AF04-BBB4044BA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D1AAB8-A55D-404A-A431-7F4A0201F488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1647",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1647",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1648",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.790",
      "lastModified" : "2024-11-21T05:44:48.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft splwow64 Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Microsoft splwow64"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1648",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-504/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1649",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.837",
      "lastModified" : "2024-11-21T05:44:48.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Active Template Library Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Active Template Library"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1649",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1650",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.900",
      "lastModified" : "2024-11-21T05:44:48.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Runtime C++ Template Library Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Template Library de Windows Runtime C++"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1650",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1651",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:30.963",
      "lastModified" : "2024-11-21T05:44:48.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del recopilador estándar de Diagnostics Hub. Este ID de CVE es diferente de CVE-2021-1680"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "62FE95C2-066B-491D-82BF-3EF173822B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndExcluding" : "15.9",
            "matchCriteriaId" : "8FAA2CA6-EE09-4822-8A44-DF69A4164CED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndExcluding" : "16.4",
            "matchCriteriaId" : "6DBA7D99-6B58-4C62-B683-C9F91C82FEEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.5",
            "versionEndExcluding" : "16.7",
            "matchCriteriaId" : "7EF76B45-3EA0-4BD6-8799-888F0654D2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE9B863-01E5-486C-8B9D-6DC0F78222A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1651",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1652",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.027",
      "lastModified" : "2024-11-21T05:44:49.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1688, CVE-2021-1693"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1652",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1653",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.087",
      "lastModified" : "2024-11-21T05:44:49.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1652, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1688, CVE-2021-1693"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1653",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1654",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.150",
      "lastModified" : "2024-11-21T05:44:49.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1652, CVE-2021-1653, CVE-2021-1655, CVE-2021-1659, CVE-2021-1688, CVE-2021-1693"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1654",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1655",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.213",
      "lastModified" : "2024-11-21T05:44:49.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1659, CVE-2021-1688, CVE-2021-1693"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1655",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1656",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.277",
      "lastModified" : "2024-11-21T05:44:49.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TPM Device Driver Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información del TPM Device Driver"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "2ACA9287-B475-4AF7-A4DA-A7143CEF9E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1656",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1656",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1657",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.340",
      "lastModified" : "2024-11-21T05:44:49.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Fax Compose Form Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Windows Fax Compose Form"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1657",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1658",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.400",
      "lastModified" : "2024-11-21T05:44:49.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1658",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1659",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.463",
      "lastModified" : "2024-11-21T05:44:50.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1688, CVE-2021-1693"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1659",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1659",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1660",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.510",
      "lastModified" : "2024-11-21T05:44:50.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1660",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1661",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.573",
      "lastModified" : "2024-11-21T05:44:50.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Installer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1661",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1662",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.637",
      "lastModified" : "2024-11-21T05:44:50.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Event Tracing"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1662",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1663",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.680",
      "lastModified" : "2024-11-21T05:44:50.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Projected File System FS Filter Driver Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información en Windows Projected File System FS Filter Driver. Este ID de CVE es diferente de CVE-2021-1670, CVE-2021-1672"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1663",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1664",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.743",
      "lastModified" : "2024-11-21T05:44:50.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1664",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1665",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.807",
      "lastModified" : "2024-11-21T05:44:50.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GDI+ Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota GDI+"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1665",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1665",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1666",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.853",
      "lastModified" : "2024-11-21T05:44:50.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1666",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1667",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.917",
      "lastModified" : "2024-11-21T05:44:51.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1667",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1667",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1668",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:31.977",
      "lastModified" : "2024-11-21T05:44:51.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft DTV-DVD Video Decoder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DTV-DVD Video Decoder de Microsoft"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1668",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1669",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.040",
      "lastModified" : "2025-07-07T18:15:34.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Remote Desktop Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad de Windows Remote Desktop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:remote_desktop:-:*:*:*:*:-:*:*",
            "matchCriteriaId" : "8F849DBF-AA7C-4CE6-B746-B1982E1AB2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:remote_desktop:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "4BD1EB79-7ABA-4E80-A54E-5E9B87731F90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:remote_desktop_client:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "05B5E1F9-B1CF-443F-8687-9DEA82C71613"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1669",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1670",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.087",
      "lastModified" : "2024-11-21T05:44:51.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Projected File System FS Filter Driver Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información en Windows Projected File System FS Filter Driver. Este ID de CVE es diferente de CVE-2021-1663, CVE-2021-1672"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1670",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1671",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.150",
      "lastModified" : "2024-11-21T05:44:51.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1673, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1671",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1671",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1672",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.213",
      "lastModified" : "2024-11-21T05:44:51.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Projected File System FS Filter Driver Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información en Windows Projected File System FS Filter Driver. Este ID de CVE es diferente de CVE-2021-1663, CVE-2021-1670"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1672",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1673",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.277",
      "lastModified" : "2024-11-21T05:44:51.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1700, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1673",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1673",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1674",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.337",
      "lastModified" : "2024-11-21T05:44:52.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Remote Desktop Protocol Core Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad de  Protocol Core de Windows Remote Desktop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1674",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1674",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1676",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.400",
      "lastModified" : "2024-11-21T05:44:52.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows NT Lan Manager Datagram Receiver Driver Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Lan Manager Datagram Receiver Driver de Windows NT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1676",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1677",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.463",
      "lastModified" : "2024-11-21T05:44:52.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Active Directory Pod Identity Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Azure Active Directory Pod"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_kubernetes_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934ECDD0-31D7-409A-A1BD-0743E24BFE8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1677",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1677",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1678",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.510",
      "lastModified" : "2024-11-21T05:44:52.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Funcionalidad de NTLM Security"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1678",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1679",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.573",
      "lastModified" : "2024-11-21T05:44:52.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CryptoAPI  Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de Windows CryptoAPI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1679",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1680",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.637",
      "lastModified" : "2024-11-21T05:44:52.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Diagnostics Hub Standard Collector. Este ID de CVE es diferente de CVE-2021-1651"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "62FE95C2-066B-491D-82BF-3EF173822B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.8",
            "matchCriteriaId" : "754856ED-0708-4505-B3CC-C3CF1818DD59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.7.0",
            "matchCriteriaId" : "DB2C7A8D-85BA-4BA5-868B-AABEBCCBCDE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:16.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE9B863-01E5-486C-8B9D-6DC0F78222A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1680",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1680",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1681",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.697",
      "lastModified" : "2024-11-21T05:44:53.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WalletService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows WalletService. Este ID de CVE es diferente de CVE-2021-1686, CVE-2021-1687, CVE-2021-1690"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1681",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1681",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1682",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.743",
      "lastModified" : "2024-11-21T05:44:53.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1682",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1683",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.807",
      "lastModified" : "2024-11-21T05:44:53.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft is aware of the &quot;Impersonation in the Passkey Entry Protocol&quot; vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.\nTo address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad de Windows Bluetooth. Este ID de CVE es diferente de CVE-2021-1638, CVE-2021-1684"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1683",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1684",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.853",
      "lastModified" : "2024-11-21T05:44:53.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft is aware of the &quot;Impersonation in the Passkey Entry Protocol&quot; vulnerability. For more information regarding the vulnerability, please see this statement from the Bluetooth SIG.\nTo address the vulnerability, Microsoft has released a software update that will fail attempts to pair if the remote device exchanges a public key with the same X coordinate as the locally exchanged public key"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Funcionalidad de Windows Bluetooth Security. Este ID de CVE es diferente de CVE-2021-1638, CVE-2021-1683"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1684",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1685",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.933",
      "lastModified" : "2024-11-21T05:44:53.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows AppX Deployment Extensions Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows AppX Deployment Extensions. Este ID de CVE es diferente de CVE-2021-1642"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1685",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1686",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:32.993",
      "lastModified" : "2024-11-21T05:44:53.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WalletService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows WalletService. Este ID de CVE es diferente de CVE-2021-1681, CVE-2021-1687, CVE-2021-1690"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1686",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1687",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.057",
      "lastModified" : "2024-11-21T05:44:53.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WalletService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows WalletService. Este ID de CVE es diferente de CVE-2021-1681, CVE-2021-1686, CVE-2021-1690"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1687",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1688",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.167",
      "lastModified" : "2024-11-21T05:44:53.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1693"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1688",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1689",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.230",
      "lastModified" : "2024-11-21T05:44:54.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Multipoint Management Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Multipoint Management"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1689",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1689",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1690",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.290",
      "lastModified" : "2024-11-21T05:44:54.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WalletService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows WalletService. Este ID de CVE es diferente de CVE-2021-1681, CVE-2021-1686, CVE-2021-1687"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1690",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1690",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1691",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.353",
      "lastModified" : "2024-11-21T05:44:54.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de Hyper-V. Este ID de CVE es diferente de CVE-2021-1692"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1691",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1691",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1692",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.400",
      "lastModified" : "2024-11-21T05:44:54.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de Hyper-V. Este ID de CVE es diferente de CVE-2021-1691"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1692",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1693",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.463",
      "lastModified" : "2024-11-21T05:44:54.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows CSC Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Windows CSC Service. Este ID de CVE es diferente de CVE-2021-1652, CVE-2021-1653, CVE-2021-1654, CVE-2021-1655, CVE-2021-1659, CVE-2021-1688"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1693",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1693",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1694",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.510",
      "lastModified" : "2024-11-21T05:44:54.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Update Stack Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Update Stack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1694",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1695",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.557",
      "lastModified" : "2024-11-21T05:44:54.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios en Windows Print Spooler"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1695",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1695",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1696",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.620",
      "lastModified" : "2024-11-21T05:44:55.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Windows Graphics Component"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1696",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1697",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.683",
      "lastModified" : "2024-11-21T05:44:55.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows InstallService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows InstallService"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1697",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1699",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.743",
      "lastModified" : "2024-11-21T05:44:55.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows (modem.sys) Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Windows (modem.sys)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1699",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1700",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.807",
      "lastModified" : "2024-11-21T05:44:55.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1700",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1701",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.870",
      "lastModified" : "2024-11-21T05:44:55.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-1658, CVE-2021-1660, CVE-2021-1664, CVE-2021-1666, CVE-2021-1667, CVE-2021-1671, CVE-2021-1673, CVE-2021-1700"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1701",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1702",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.933",
      "lastModified" : "2024-11-21T05:44:55.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios en Windows Remote Procedure Call Runtime"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1702",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1703",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:33.993",
      "lastModified" : "2024-11-21T05:44:56.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Logging Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Windows Event Logging Service"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1703",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1704",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.040",
      "lastModified" : "2024-11-21T05:44:56.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Hyper-V"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "21074553-EDF2-468D-8E79-C39851B5BC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "1981BA0D-0920-40C0-8A6A-5D5A1B221560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CF580BA-6938-40F6-9D86-F43044A6BACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "61F0792D-7587-4297-8EE7-D4DC3A30EE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "09D9A720-8D3C-4699-AC57-CB4531E5BFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "7FE8B00B-4F39-4755-A323-8AD71F5E3EBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2127D10C-B6F3-4C1D-B9AA-5D78513CC996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1704",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1705",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.103",
      "lastModified" : "2024-11-21T05:44:56.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (HTML-based) Memory Corruption Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Corrupción de la Memoria de Microsoft Edge (basada en HTML)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1705",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1706",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.167",
      "lastModified" : "2024-11-21T05:44:56.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows LUAFV Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows LUAFV"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "2B96C1AE-05F1-4178-93A3-9B2BA59ACA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "89DF25F2-4319-4043-AAB6-6E231EB80353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1706",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1707",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.230",
      "lastModified" : "2024-11-21T05:44:56.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81443CAD-F47E-4FD1-8E0E-8D646C90E4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1707",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1708",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.277",
      "lastModified" : "2024-11-21T05:44:56.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Windows GDI+"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1708",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1709",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.357",
      "lastModified" : "2024-11-21T05:44:56.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Win32k"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1709",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1710",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.417",
      "lastModified" : "2024-11-21T05:44:57.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Media Foundation Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Windows Media Foundation"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "BA592626-F17C-4F46-823B-0947D102BBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1710",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1711",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.463",
      "lastModified" : "2024-11-21T05:44:57.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Office"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:x64:*",
            "matchCriteriaId" : "BB0CF266-A7EE-474A-B3D3-4A7FE33F4C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:x86:*",
            "matchCriteriaId" : "DC25ACD6-8F48-4534-AF7B-53F0D10C0843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "24DD7E07-4BB1-4914-9CDE-5A27A9A3920E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:x86:*",
            "matchCriteriaId" : "ADA0E394-3B5E-4C34-955B-EAB645A37518"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "72324216-4EB3-4243-A007-FEF3133C7DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "0FBB0E61-7997-4F26-9C07-54912D3F1C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x64:*",
            "matchCriteriaId" : "68F37A38-9BC3-43FD-8E71-4EED079156D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:x86:*",
            "matchCriteriaId" : "AFFA09D5-9992-462F-B52E-A1DDE2462064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1711",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1712",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.527",
      "lastModified" : "2024-11-21T05:44:57.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Microsoft SharePoint. Este ID de CVE es diferente de CVE-2021-1719"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1712",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1713",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.573",
      "lastModified" : "2024-11-21T05:44:57.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-1714"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1713",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1714",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.637",
      "lastModified" : "2024-11-21T05:44:57.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-1713"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA44CFC-016A-4D68-93E2-33883E34E26D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1714",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1714",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1715",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.697",
      "lastModified" : "2024-11-21T05:44:57.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Word. Este ID de CVE es diferente de CVE-2021-1716"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "32E1400A-836A-4E48-B2CD-2B0A9A8241BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1715",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1716",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.743",
      "lastModified" : "2024-11-21T05:44:57.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Word. Este ID de CVE es diferente de CVE-2021-1715"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D3A185-BE57-403E-914E-FDECEC3A477C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1716",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1717",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.807",
      "lastModified" : "2024-11-21T05:44:57.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Microsoft SharePoint. Este ID de CVE es diferente de CVE-2021-1641"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1717",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1718",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.870",
      "lastModified" : "2024-11-21T05:44:58.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Tampering Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Manipulación de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81443CAD-F47E-4FD1-8E0E-8D646C90E4E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1718",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1719",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.933",
      "lastModified" : "2024-11-21T05:44:58.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Microsoft SharePoint.. Este ID de CVE es diferente de CVE-2021-1712"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1719",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1723",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:34.993",
      "lastModified" : "2024-11-21T05:44:58.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ASP.NET Core and Visual Studio Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de ASP.NET Core y Visual Studio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.10",
            "matchCriteriaId" : "C21F09B3-A69F-43B9-B35E-EBF93314F31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:asp.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.1",
            "matchCriteriaId" : "7C91649F-55B9-4675-BA0F-2B876A73D9A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.8",
            "matchCriteriaId" : "FD824DE6-3564-4B7D-B45C-2EEE1F84C9D2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1723",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1725",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-01-12T20:15:35.040",
      "lastModified" : "2024-11-21T05:44:58.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bot Framework SDK Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Bot Framework SDK"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:.net_framework:*:*",
            "matchCriteriaId" : "27734128-731E-42F1-A1DC-FE24A7E0D6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:javascript:*:*",
            "matchCriteriaId" : "8DFED477-3305-4C47-A078-D5A48D2F9A89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:bot_framework_software_development_kit:-:*:*:*:*:python:*:*",
            "matchCriteriaId" : "C753CFAA-D795-4848-9390-455D43213CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-1725",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T20:15:35.103",
      "lastModified" : "2024-11-21T06:20:57.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mubu 2.2.1 allows local users to gain privileges to execute commands, aka CNVD-2020-68878."
      }, {
        "lang" : "es",
        "value" : "Mubu versión 2.2.1, permite a los usuarios locales alcanzar privilegios para ejecutar comandos, también se conoce como  CNVD-2020-68878"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mubu:mubu:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA0F35A-A867-4CCB-93D0-C334686C9850"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://mubu.com/doc/d5501245199",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/2638444",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://mubu.com/doc/d5501245199",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/2638444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23123",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-01-12T21:15:18.887",
      "lastModified" : "2024-11-21T05:51:14.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.0.0 through 3.9.23. The lack of ACL checks in the orderPosition endpoint of com_modules leak names of unpublished and/or inaccessible modules."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.0.0 hasta 3.9.23.&#xa0;Una falta de comprobaciones de ACL en el endpoint orderPosition de com_modules filtran nombres de módulos no publicados y/o inaccesibles"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.9.23",
            "matchCriteriaId" : "84203552-B289-4214-90BD-7516866AE847"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/836-20210101-core-com-modules-exposes-module-names.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/836-20210101-core-com-modules-exposes-module-names.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23124",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-01-12T21:15:18.947",
      "lastModified" : "2024-11-21T05:51:15.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.9.0 through 3.9.23. The lack of escaping in mod_breadcrumbs aria-label attribute allows XSS attacks."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.9.0 hasta 3.9.23.&#xa0;Una falta de escape en el atributo aria-label de mod_breadcrumbs permite ataques XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndIncluding" : "3.9.23",
            "matchCriteriaId" : "EC244249-043A-4640-8466-AA3CEF976998"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/837-20210102-core-xss-in-mod-breadcrumbs-aria-label-attribute.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/837-20210102-core-xss-in-mod-breadcrumbs-aria-label-attribute.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23125",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-01-12T21:15:18.997",
      "lastModified" : "2024-11-21T05:51:15.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.1.0 through 3.9.23. The lack of escaping of image-related parameters in multiple com_tags views cause lead to XSS attack vectors."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.1.0 hasta 3.9.23.&#xa0;Una falta de escape de los parámetros relacionados con imagen varias vistas de com_tags conducen a vectores de ataque XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndIncluding" : "3.9.23",
            "matchCriteriaId" : "7B086D02-5E7A-4B0C-BE71-9AA209C7CE06"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/838-20210103-core-xss-in-com-tags-image-parameters.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/838-20210103-core-xss-in-com-tags-image-parameters.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.447",
      "lastModified" : "2024-11-21T05:52:03.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows SSRF via a URL with an @ character in an appsuite/api/oauth/proxy PUT request."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo SSRF por medio de una URL con un carácter @ en una petición PUT de appsuite/api/oauth/proxy"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.4",
            "matchCriteriaId" : "9451471A-06E1-456C-8B82-ADEB746B97C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.510",
      "lastModified" : "2024-11-21T05:52:03.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.3 allows XSS via the ajax/apps/manifests query string."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.3, permite un ataque de tipo XSS por medio de la cadena de consulta ajax/apps/manifiestos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.573",
      "lastModified" : "2024-11-21T05:52:04.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via a crafted Content-Disposition header in an uploaded HTML document to an ajax/share/<share-token>?delivery=view URI."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio de un encabezado Content-Disposition diseñado en un documento HTML cargado en un URI ajax/share/(share-token)?delivery=view"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.637",
      "lastModified" : "2024-11-21T05:52:04.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via use of the conversion API for a distributedFile."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS mediante el uso de la API conversion para un archivo distribuido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.697",
      "lastModified" : "2024-11-21T05:52:04.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via an inline binary file."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio de un archivo binario en línea"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.760",
      "lastModified" : "2024-11-21T05:52:04.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via an inline image with a crafted filename."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio de una imagen en línea con un nombre de archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.823",
      "lastModified" : "2024-11-21T05:52:04.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via JavaScript in a Note referenced by a mail:// URL."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio de un JavaScript en una Nota referenciada mediante una URL mail://"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.887",
      "lastModified" : "2024-11-21T05:52:04.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via a contact whose name contains JavaScript code."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio de un contacto cuyo nombre contiene código JavaScript"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:12.947",
      "lastModified" : "2024-11-21T05:52:05.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via an appointment in which the location contains JavaScript code."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio de una cita en el que la ubicación contiene código JavaScript"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.3",
            "matchCriteriaId" : "FB465D15-78EA-47FA-BC7C-5A6631EC9578"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-12T22:15:13.010",
      "lastModified" : "2024-11-21T05:52:05.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite through 7.10.4 allows XSS via the subject of a task."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones hasta 7.10.4, permite un ataque de tipo XSS por medio del asunto de una tarea"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.4",
            "matchCriteriaId" : "9451471A-06E1-456C-8B82-ADEB746B97C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160853/OX-App-Suite-OX-Documents-7.10.x-XSS-SSRF.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20616",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-13T10:15:15.190",
      "lastModified" : "2024-11-21T05:46:53.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in the installer of SKYSEA Client View Ver.1.020.05b to Ver.16.001.01g allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en el instalador de SKYSEA Client View versiones Ver.1.020.05b hasta Ver.16.001.01g, permite a un atacante alcanzar privilegios por medio de una DLL de tipo caballo de Troya en un directorio no especificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:skygroup:skysea_client_view:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.020.05b",
            "versionEndIncluding" : "16.001.01g",
            "matchCriteriaId" : "D8BC55DE-9335-4229-9382-4B622C6698CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN69635538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.skyseaclientview.net/news/210112_01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN69635538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.skyseaclientview.net/news/210112_01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21602",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.337",
      "lastModified" : "2024-11-21T05:48:40.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows reading arbitrary files using the file browser for workspaces and archived artifacts by following symlinks."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, permite leer archivos arbitrarios usando el explorador de archivos para espacios de trabajo y artefactos archivados al seguir enlaces simbólicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1452",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21603",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.460",
      "lastModified" : "2024-11-21T05:48:40.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape notification bar response contents, resulting in a cross-site scripting (XSS) vulnerability."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, no escapan el contenido de respuesta de la barra de notificaciones, resultando en una vulnerabilidad de tipo cross-site scripting (XSS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1889",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21604",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.523",
      "lastModified" : "2024-11-21T05:48:41.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows attackers with permission to create or configure various objects to inject crafted content into Old Data Monitor that results in the instantiation of potentially unsafe objects once discarded by an administrator."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, permite a atacantes con permiso para crear o configurar varios objetos para inyectar contenido diseñado en Old Data Monitor que resulta en la instanciación de objetos potencialmente no seguros una vez que son descartados por un administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1923",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-1923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21605",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.600",
      "lastModified" : "2024-11-21T05:48:41.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names that cause Jenkins to override the global `config.xml` file."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, permite a usuarios con permiso Agent/Configure elegir nombres de agente que causa que Jenkins anule el archivo global \"config.xml\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2021",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21606",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.663",
      "lastModified" : "2024-11-21T05:48:41.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier improperly validates the format of a provided fingerprint ID when checking for its existence allowing an attacker to check for the existence of XML files with a short path."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, comprueban inapropiadamente el formato de una identificación de huella digital proporcionada al comprobar su existencia, permitiendo a un atacante comprobar la existencia de archivos XML con una ruta corta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21607",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.740",
      "lastModified" : "2024-11-21T05:48:41.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not limit sizes provided as query parameters to graph-rendering URLs, allowing attackers to request crafted URLs that use all available memory in Jenkins, potentially leading to out of memory errors."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, no limitan tamaños proporcionados como parámetros de consulta hacia unas URL de representación de gráficos, permitiendo a atacantes pedir URL diseñadas que usan toda la memoria disponible en Jenkins, conllevando potencialmente a unos errores de memoria insuficiente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2025",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21608",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.837",
      "lastModified" : "2024-11-21T05:48:41.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape button labels in the Jenkins UI, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to control button labels."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y  anteriores, no escapan las etiquetas de los botones en la Interfaz de Usuario de Jenkins, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) explotable por unos atacantes con la habilidad de controlar unas etiquetas de unos botones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2035",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21609",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:13.897",
      "lastModified" : "2024-11-21T05:48:41.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not correctly match requested URLs to the list of always accessible paths, allowing attackers without Overall/Read permission to access some URLs as if they did have Overall/Read permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, no hacen coincidir correctamente unas URL pedidas con la lista de rutas siempre accesibles, permitiendo a atacantes sin permiso general y de lectura acceder a algunas URL como si tuvieran permiso general y de lectura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2047",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21610",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:14.007",
      "lastModified" : "2024-11-21T05:48:41.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not implement any restrictions for the URL rendering a formatted preview of markup passed as a query parameter, resulting in a reflected cross-site scripting (XSS) vulnerability if the configured markup formatter does not prohibit unsafe elements (JavaScript) in markup."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS versiones 2.263.1 y anteriores, no implementan ninguna restricción para la URL que presenta una vista previa formateada del marcado pasado como un parámetro de consulta, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) reflejada si el formateador de marcado configurado no prohíbe elementos no seguros (JavaScript) en el marcado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2153",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21611",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:14.087",
      "lastModified" : "2024-11-21T05:48:41.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.274 and earlier, LTS 2.263.1 and earlier does not escape display names and IDs of item types shown on the New Item page, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to specify display names or IDs of item types."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.274 y anteriores, LTS 2.263.1 y anteriores, no escapan los nombres a mostrar y los ID de los tipos de elementos que se muestran en la página New Item, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por unos atacantes capaces de especificar nombres a mostrar o ID de tipos de elementos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.263.1",
            "matchCriteriaId" : "1D0A8DA2-6151-430D-9FC2-1332E25B4E3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.274",
            "matchCriteriaId" : "9A6F1AB1-BFB3-448F-BDAC-2A3487CBFEB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2171",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21612",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:14.147",
      "lastModified" : "2024-11-21T05:48:41.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins TraceTronic ECU-TEST Plugin 2.23.1 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "Jenkins TraceTronic ECU-TEST Plugin versiones 2.23.1 y anteriores, almacenan unas credenciales sin cifrar en su archivo de configuración global en el controlador de Jenkins, donde pueden visualizarlas por usuarios con acceso al sistema de archivos del controlador de Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:tracetronic_ecu-test:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.23.1",
            "matchCriteriaId" : "B50E5F06-5814-415D-B0BE-EC9BA7A3E6D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2057",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21613",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:14.273",
      "lastModified" : "2024-11-21T05:48:41.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins TICS Plugin 2020.3.0.6 and earlier does not escape TICS service responses, resulting in a cross-site scripting (XSS) vulnerability exploitable by attackers able to control TICS service response content."
      }, {
        "lang" : "es",
        "value" : "Jenkins TICS Plugin versiones 2020.3.0.6 y  anteriores, no escapan a unas respuestas del servicio TICS, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) explotable por atacantes capaces de controlar el contenido de respuesta del servicio TICS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:tics:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2020.3.0.6",
            "matchCriteriaId" : "0DE4C7E2-68B9-44F0-839E-3127749D7089"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2098",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21614",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-13T16:15:14.350",
      "lastModified" : "2024-11-21T05:48:42.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Bumblebee HP ALM Plugin 4.1.5 and earlier stores credentials unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "Jenkins Bumblebee HP ALM Plugin versiones 4.1.5 y anteriores, almacenan unas credenciales sin cifrar en su archivo de configuración global en el controlador de Jenkins, donde pueden visualizarlas por usuarios con acceso al sistema de archivos del controlador de Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:bumblebee_hp_alm:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "4.1.5",
            "matchCriteriaId" : "988E3685-72A8-4CFF-A0B7-ADE1DFF9BF1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2156",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-13/#SECURITY-2156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-13T16:15:14.413",
      "lastModified" : "2024-11-21T05:52:01.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OWASP json-sanitizer before 1.2.2 may emit closing SCRIPT tags and CDATA section delimiters for crafted input. This allows an attacker to inject arbitrary HTML or XML into embedding documents."
      }, {
        "lang" : "es",
        "value" : "OWASP json-sanitizer versiones anteriores a 1.2.2, puede emitir etiquetas SCRIPT de cierre y delimitadores de sección CDATA para una  entrada diseñada.&#xa0;Esto permite a un atacante inyectar HTML o XML arbitrario en documentos insertados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:json-sanitizer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "C22C77CE-0FF1-474E-B921-438980F66C82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-13T16:15:14.490",
      "lastModified" : "2024-11-21T05:52:01.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations."
      }, {
        "lang" : "es",
        "value" : "OWASP json-sanitizer versiones anteriores a  1.2.2, puede generar JSON no válido o lanzar una excepción no declarada para una entrada diseñada.&#xa0;Esto puede conllevar a una denegación del servicio si la aplicación no está preparada para manejar estas situaciones."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:owasp:json-sanitizer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "C22C77CE-0FF1-474E-B921-438980F66C82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3131",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-13T16:15:14.553",
      "lastModified" : "2024-11-21T06:20:57.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter."
      }, {
        "lang" : "es",
        "value" : "El servidor Web en 1C: Enterprise versiones 8 anteriores a  8.3.17.1851, envía credenciales codificadas en base64 en el parámetro URL creds."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:1c:1c\\:enterprise:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.3.17.1851",
            "matchCriteriaId" : "31B4FB24-B5BE-4D20-B9C2-7DA28BCD2146"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jet-pentest/CVE-2021-3131",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jet-pentest/CVE-2021-3131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-13T16:15:14.617",
      "lastModified" : "2024-11-21T06:20:58.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Open-iSCSI tcmu-runner 1.3.x, 1.4.x, and 1.5.x through 1.5.2, xcopy_locate_udev in tcmur_cmd_handler.c lacks a check for transport-layer restrictions, allowing remote attackers to read or write files via directory traversal in an XCOPY request. For example, an attack can occur over a network if the attacker has access to one iSCSI LUN. NOTE: relative to CVE-2020-28374, this is a similar mistake in a different algorithm."
      }, {
        "lang" : "es",
        "value" : "En Open-iSCSI tcmu-runner versiones 1.3.x, 1.4.x y versiones 1.5.x hasta 1.5.2, en la función xcopy_locate_udev en el archivo tcmur_cmd_handler.c carece de una comprobación de restricciones de la capa de transporte, permitiendo a atacantes remotos leer o escribir archivos por medio de un salto de directorio en una petición XCOPY.&#xa0;Por ejemplo, un ataque puede ocurrir en una red si el atacante presenta acceso a un iSCSI LUN.&#xa0;NOTA: en relación con CVE-2020-28374, este es un error similar en un algoritmo diferente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tcmu-runner_project:tcmu-runner:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "1.5.2",
            "matchCriteriaId" : "8926E8CD-ABE4-4BAA-9AD6-C92CCEE815E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/13/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/attachment.cgi?id=844938",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1178372",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/pull/644",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/12/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/13/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/attachment.cgi?id=844938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1178372",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open-iscsi/tcmu-runner/pull/644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/12/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-13T17:15:12.913",
      "lastModified" : "2024-11-21T06:20:47.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution."
      }, {
        "lang" : "es",
        "value" : "git-big-picture versiones anteriores a 1.0.0, maneja inapropiadamente los caracteres en un nombre de rama, conllevando a una ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-big-picture_project:git-big-picture:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0",
            "matchCriteriaId" : "A910F207-D431-4707-B90D-00CF13CECACC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/git-big-picture/git-big-picture/pull/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-big-picture/git-big-picture/pull/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-big-picture/git-big-picture/pull/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-big-picture/git-big-picture/pull/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-big-picture/git-big-picture/releases/tag/v1.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3031",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-01-13T18:15:14.603",
      "lastModified" : "2024-11-21T06:20:47.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets. This issue is also known as Etherleak and is detected by security scanners as CVE-2003-0001. This issue impacts: PAN-OS 8.1 version earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5."
      }, {
        "lang" : "es",
        "value" : "Los bytes de relleno en los paquetes Ethernet en los firewalls PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series y PA-7000 Series, no son borrados antes de que se cree la trama de datos.&#xa0;Esto filtra una pequeña cantidad de información aleatoria de la memoria del firewall para los paquetes Ethernet.&#xa0;Un atacante en la misma subred Ethernet que el firewall PAN-OS puede recopilar información potencialmente confidencial de estos paquetes.&#xa0;Este problema también se conoce como Etherleak y los escáneres de seguridad lo detectan como CVE-2003-0001.&#xa0;Este problema afecta: PAN-OS 8.1 versiones anteriores a PAN-OS 8.1.18;&#xa0;PAN-OS 9.0 versiones anteriores a PAN-OS 9.0.12;&#xa0;PAN-OS 9.1 versiones anteriores a PAN-OS 9.1.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.18",
            "matchCriteriaId" : "33293775-DC4C-41E0-89CD-B15F4B73D130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.12",
            "matchCriteriaId" : "9DABB61F-8BFA-4476-9A59-E0DC68873022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.5",
            "matchCriteriaId" : "872E6056-5BE6-4FE8-BE33-F98CF0DBC67C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A00CA4-326B-45A1-A4C1-46DDA28819AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D4C591-22F5-44A8-8490-7B4AD0682414"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-2050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF87CC5-485D-4F39-953C-A727CF0A5305"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75FBB9F-24D9-413A-ABC8-6ACFD99F4097"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-3020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FCBC3C-C1EC-43D3-80CE-6C8D0C465FD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-3050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2480738F-8A68-4B15-8893-0BD9AA4660B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-3060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DA3033-6239-47D4-9CF9-11AE51E0308E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-3220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D39EA7-7F92-4CF0-AF52-D6DA4A35683A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2632686-9B16-4CDB-8874-55CDB86CA90F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-3260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED6DB33-02C3-421E-B289-0E735293F100"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6550421C-0EA0-4C04-93C9-F862B1CDED67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0196D5B4-9C82-4DC6-9A3D-3397BE92D153"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:paloaltonetworks:pa-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC340BF-F1B1-4EE8-91C9-DF650B26555F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3031",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3032",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-01-13T18:15:14.883",
      "lastModified" : "2024-11-21T06:20:47.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “http”, “email”, and “snmptrap” v3 log forwarding server profiles can be logged to the logrcvr.log system log. Logged information may include up to 1024 bytes of the configuration including the username and password in an encrypted form and private keys used in any certificate profiles set for log forwarding server profiles. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.18; PAN-OS 9.0 versions earlier than PAN-OS 9.0.12; PAN-OS 9.1 versions earlier than PAN-OS 9.1.4; PAN-OS 10.0 versions earlier than PAN-OS 10.0.1."
      }, {
        "lang" : "es",
        "value" : "Se presenta una exposición de información mediante una vulnerabilidad del archivo de registro en el software PAN-OS de Palo Alto Networks, donde los secretos de configuración para los perfiles del servidor de reenvío de registros V3 “http”, “email”, y “snmptrap” pueden ser registrados en el registro del sistema logrcvr.log.&#xa0;La información registrada puede incluir hasta 1024 bytes de la configuración, incluyendo el nombre de usuario y la contraseña en forma cifrada y las claves privadas usadas en cualquier perfil de certificado establecido para perfiles de servidor de reenvío de registros.&#xa0;Este problema afecta: PAN-OS 8.1 versiones anteriores a PAN-OS 8.1.18;&#xa0;PAN-OS 9.0 versiones anteriores a PAN-OS 9.0.12;&#xa0;PAN-OS 9.1 versiones anteriores a PAN-OS 9.1.4;&#xa0;PAN-OS 10.0 versiones anteriores a PAN-OS 10.0.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.18",
            "matchCriteriaId" : "33293775-DC4C-41E0-89CD-B15F4B73D130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.12",
            "matchCriteriaId" : "9DABB61F-8BFA-4476-9A59-E0DC68873022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.4",
            "matchCriteriaId" : "F307ABF3-27DB-4C76-A488-60E1F6A6D17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.1",
            "matchCriteriaId" : "09926771-7377-487B-B660-809265E7D8A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3032",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21252",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-13T19:15:17.183",
      "lastModified" : "2024-11-21T05:47:52.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jQuery Validation Plugin provides drop-in validation for your existing forms. It is published as an npm package \"jquery-validation\". jquery-validation before version 1.19.3 contains one or more regular expressions that are vulnerable to ReDoS (Regular Expression Denial of Service). This is fixed in 1.19.3."
      }, {
        "lang" : "es",
        "value" : "El Plugin jQuery Validation proporciona una validación directa para sus formularios existentes. Es publicado como un paquete npm \"jquery-validation\".&#xa0;jquery-validation versiones anteriores a 1.19.3, contiene una o más expresiones regulares que son vulnerables a una ReDoS (Denegación de servicio de expresión regular).&#xa0;Esto es corregido en la versión 1.19.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jqueryvalidation:jquery_validation:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.19.3",
            "matchCriteriaId" : "B7701C09-0633-47C1-995C-6FCB8D338135"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jquery-validation/jquery-validation/pull/2371",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0005/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jquery-validation",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jquery-validation/jquery-validation/commit/5d8f29eef363d043a8fec4eb86d42cadb5fa5f7d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jquery-validation/jquery-validation/pull/2371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jquery-validation/jquery-validation/security/advisories/GHSA-jxwx-85vp-gvwm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/08/msg00040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jquery-validation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1189",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T21:15:12.723",
      "lastModified" : "2024-11-21T05:43:47.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1126",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.303",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the storage of proxy server credentials of Cisco Firepower Management Center (FMC) could allow an authenticated, local attacker to view credentials for a configured proxy server. The vulnerability is due to clear-text storage and weak permissions of related configuration files. An attacker could exploit this vulnerability by accessing the CLI of the affected software and viewing the contents of the affected files. A successful exploit could allow the attacker to view the credentials that are used to access the proxy server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el almacenamiento de las credenciales del servidor proxy de Cisco Firepower Management Center (FMC), podría permitir a un atacante local autenticado visualizar credenciales de un servidor proxy configurado.&#xa0;La vulnerabilidad es debido al almacenamiento de texto sin cifrar y los permisos débiles de los archivos de configuración relacionados.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el acceso hacia la CLI del software afectado y al visualizar el contenido de los archivos afectados.&#xa0;Una explotación con éxito podría permitir al atacante visualizar las credenciales que son utilizadas para acceder al servidor proxy."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "681AD618-9A3F-422B-96F0-BB6E38D9DE08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-infodisc-RJdktM6f",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-infodisc-RJdktM6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1127",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.410",
      "lastModified" : "2024-11-21T05:43:38.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based management interface. The vulnerability is due to improper input validation of log file content stored on the affected device. An attacker could exploit this vulnerability by modifying a log file with malicious code and getting a user to view the modified log file. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del software Cisco Enterprise NFV Infrastructure Software (NFVIS), podría permitir a un atacante autenticado remoto conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz de administración basada en web.&#xa0;La vulnerabilidad es debido a una comprobación inapropiada de entrada del contenido del archivo de registro almacenado en el dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad al modificar un archivo de registro con código malicioso y haciendo que un usuario visualice el archivo de registro modificado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1",
            "matchCriteriaId" : "9A232F87-498C-4564-91FE-A09DD08FD8D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-xss-smsz5Vhb",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-xss-smsz5Vhb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1130",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.473",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco DNA Center software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information. To exploit this vulnerability, an attacker would need to have administrative credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del software Cisco DNA Center, podría permitir a un atacante autenticado remoto conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz de un dispositivo afectado.&#xa0;La vulnerabilidad se presenta porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario para cliquear un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial basada en el navegador.&#xa0;Para explotar esta vulnerabilidad, un atacante debería tener credenciales administrativas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.1.0",
            "matchCriteriaId" : "C4379135-F71A-4D39-85CA-52828D8E6345"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-xss-HfV73cS3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-xss-HfV73cS3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1131",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.583",
      "lastModified" : "2024-11-21T05:43:39.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause an affected IP camera to reload. The vulnerability is due to missing checks when Cisco Discovery Protocol messages are processed. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected IP camera. A successful exploit could allow the attacker to cause the affected IP camera to reload unexpectedly, resulting in a denial of service (DoS) condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación del Cisco Discovery Protocol para Cisco Video Surveillance 8000 Series IP Cameras, podría permitir a un atacante adyacente no autenticado causar la recarga de una cámara IP afectada.&#xa0;La vulnerabilidad es debido a una falta de comprobaciones cuando los mensajes son procesados desde Cisco Discovery Protocol.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete de Cisco Discovery Protocol malicioso hacia una cámara IP afectada.&#xa0;Una explotación con éxito podría permitir al atacante hacer que la cámara IP afectada se recargue inesperadamente, resultando en una condición de denegación de servicio (DoS).&#xa0;Nota: Cisco Discovery Protocol es un protocolo de capa 2.&#xa0;Para explotar esta vulnerabilidad, un atacante debe estar en el mismo dominio de transmisión que el dispositivo afectado (Capa 2 adyacente)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8000p_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "C2AB3C9D-D1F8-452B-82C2-14167467FE3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8000p_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9E412F-A659-405F-BC32-D034AC7A228F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8020_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "9B0BE259-8FBA-40E0-A745-E50F648414E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8020_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "764808D3-9A38-4334-91E3-7EDCCD2A46C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8030_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "83A5CADE-D019-4CE8-AD14-75864508FE08"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8030_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA8A09E-5F21-4F4A-B671-5DD513727250"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8070_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "F83CF0FB-BCD6-419D-BF93-2C50F89410B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8070_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD91C70-4909-4588-930D-A986B3175D97"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8400_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "C64BA2DD-2E71-47B2-AC5C-EE9A66150F8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8400_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB895D42-6A1A-4E3B-95C5-4B3C164269AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8620_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "ED7B7291-DD87-40A1-8E98-636EB60E1C69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8620_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA30C8E-0971-44BD-A405-364F2B96CA61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8630_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "FDD1E253-29CB-4508-9710-03D28BD73FCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8630_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DABCFB48-AF26-456D-B85A-24B7D4BA81DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8930_speed_dome_ip_camera_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-8",
            "matchCriteriaId" : "F31B3AB8-E5C3-43E9-8E6B-0448F549960E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8930_speed_dome_ip_camera:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0620275-AE33-4F5D-961F-90F271B33313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcameras-dos-9zdZcUfq",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcameras-dos-9zdZcUfq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1143",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.660",
      "lastModified" : "2024-11-21T05:43:41.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Connected Mobile Experiences (CMX) API authorizations could allow an authenticated, remote attacker to enumerate what users exist on the system. The vulnerability is due to a lack of authorization checks for certain API GET requests. An attacker could exploit this vulnerability by sending specific API GET requests to an affected device. A successful exploit could allow the attacker to enumerate users of the CMX system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en autorizaciones de Cisco Connected Mobile Experiences (CMX) API, podría permitir a un atacante autenticado remoto enumerar qué usuarios existen en el sistema.&#xa0;La vulnerabilidad es debido a una falta de controles de autorización para determinadas peticiones GET de la API.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones GET de la API especifica hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante enumerar a los usuarios del sistema CMX."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_mobile_experiences:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B3BCD8-4F1F-4503-9427-1787B7B5B112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_mobile_experiences:10.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4548832-9572-4CBF-B77F-1A72ABAF2910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_mobile_experiences:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8CAC5F-18EF-446B-9A69-A5AB70EA753A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmxapi-KsKwCmfp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmxapi-KsKwCmfp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1144",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.723",
      "lastModified" : "2024-11-21T05:43:41.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Connected Mobile Experiences (CMX) could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An authenticated attacker without administrative privileges could exploit this vulnerability by sending a modified HTTP request to an affected device. A successful exploit could allow the attacker to alter the passwords of any user on the system, including an administrative user, and then impersonate that user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Connected Mobile Experiences (CMX), podría permitir a un atacante autenticado remoto sin privilegios administrativos alterar la contraseña de cualquier usuario en un sistema afectado.&#xa0;La vulnerabilidad es debido al manejo incorrecto de las comprobaciones de autorización para cambiar una contraseña.&#xa0;Un atacante autenticado sin privilegios administrativos podría explotar esta vulnerabilidad mediante el envío de una petición HTTP modificada hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante alterar las contraseñas de cualquier usuario del sistema, incluyendo un usuario administrativo, y luego hacerse pasar por ese usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_mobile_experiences:10.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46B3BCD8-4F1F-4503-9427-1787B7B5B112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_mobile_experiences:10.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4548832-9572-4CBF-B77F-1A72ABAF2910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:connected_mobile_experiences:10.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8CAC5F-18EF-446B-9A69-A5AB70EA753A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmxpe-75Asy9k",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cmxpe-75Asy9k",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1145",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.803",
      "lastModified" : "2024-11-21T05:43:41.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Secure FTP (SFTP) of Cisco StarOS for Cisco ASR 5000 Series Routers could allow an authenticated, remote attacker to read arbitrary files on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the affected device. The vulnerability is due to insecure handling of symbolic links. An attacker could exploit this vulnerability by sending a crafted SFTP command to an affected device. A successful exploit could allow the attacker to read arbitrary files on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los Enrutadores Secure FTP (SFTP) de Cisco StarOS para Cisco ASR 5000 Series, podría permitir a un atacante autenticado remoto leer archivos arbitrarios en un dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante debería tener credenciales válidas en el dispositivo afectado.&#xa0;La vulnerabilidad es debido al manejo no seguro de enlaces simbólicos.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un comando SFTP diseñado hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante leer archivos arbitrarios en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-61"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.19.7",
            "matchCriteriaId" : "63993C7F-3FE3-4095-A896-2109DEE40D1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746254AC-B039-432C-AA5C-A82260E57AD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301681DF-2A9E-4A91-9918-4A46153ADC01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EF0299-16A7-446D-855D-BFF91EE65534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-staros-file-read-L3RDvtey",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-staros-file-read-L3RDvtey",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1146",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.863",
      "lastModified" : "2024-11-21T05:43:41.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto inyectar comandos arbitrarios que son ejecutados con privilegios root.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado.&#xa0;Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1147",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:14.943",
      "lastModified" : "2024-11-21T05:43:41.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto inyectar comandos arbitrarios que son ejecutados con privilegios root.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado.&#xa0;Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1148",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.007",
      "lastModified" : "2024-11-21T05:43:41.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto inyectar comandos arbitrarios que son ejecutados con privilegios root.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado.&#xa0;Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1149",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.083",
      "lastModified" : "2024-11-21T05:43:41.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto inyectar comandos arbitrarios que son ejecutados con privilegios root.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado.&#xa0;Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1150",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.160",
      "lastModified" : "2024-11-21T05:43:41.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto inyectar comandos arbitrarios que son ejecutados con privilegios root.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado.&#xa0;Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-LBdQ2KRN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1151",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.223",
      "lastModified" : "2024-11-21T05:43:42.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1152",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.303",
      "lastModified" : "2024-11-21T05:43:42.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1153",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.397",
      "lastModified" : "2024-11-21T05:43:42.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1154",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.473",
      "lastModified" : "2024-11-21T05:43:42.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1155",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.553",
      "lastModified" : "2024-11-21T05:43:42.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1156",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.630",
      "lastModified" : "2024-11-21T05:43:42.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1157",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.707",
      "lastModified" : "2024-11-21T05:43:42.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1158",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.803",
      "lastModified" : "2024-11-21T05:43:42.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to conduct cross-site scripting (XSS) attacks against a user of the interface. The vulnerabilities are due to insufficient input validation by the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto conducir ataques de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Las vulnerabilidades son debido a una comprobación insuficiente de entrada por parte de la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-stored-xss-LPTQ3EQC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1159",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.880",
      "lastModified" : "2024-11-21T05:43:43.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1160",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:15.957",
      "lastModified" : "2024-11-21T05:43:43.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1161",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.037",
      "lastModified" : "2024-11-21T05:43:43.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1162",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.113",
      "lastModified" : "2024-11-21T05:43:43.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1163",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.193",
      "lastModified" : "2024-11-21T05:43:43.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1164",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.270",
      "lastModified" : "2024-11-21T05:43:43.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1165",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.380",
      "lastModified" : "2024-11-21T05:43:44.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1166",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.473",
      "lastModified" : "2024-11-21T05:43:44.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1167",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.537",
      "lastModified" : "2024-11-21T05:43:44.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D742A59B-AC7F-4249-AC40-44C63BECC86C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160953/Cisco-RV110W-1.2.1.7-Denial-Of-Service.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160953/Cisco-RV110W-1.2.1.7-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1168",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.630",
      "lastModified" : "2024-11-21T05:43:44.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1169",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.693",
      "lastModified" : "2024-11-21T05:43:44.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en la web de los routers Cisco Small Business RV110W, RV130, RV130W y RV215W podrían permitir a un atacante autenticado y remoto ejecutar un código arbitrario o hacer que un dispositivo afectado se reinicie de forma inesperada. Las vulnerabilidades se deben a una validación inadecuada de los datos suministrados por el usuario en la interfaz de gestión basada en la web. Un atacante podría explotar estas vulnerabilidades enviando peticiones HTTP elaboradas a un dispositivo afectado. Un exploit exitoso podría permitir al atacante ejecutar código arbitrario como usuario raíz en el sistema operativo subyacente o hacer que el dispositivo se recargue, lo que resultaría en una condición de denegación de servicio (DoS). Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que resuelvan estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1170",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.770",
      "lastModified" : "2024-11-21T05:43:44.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1171",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.850",
      "lastModified" : "2024-11-21T05:43:44.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1172",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.910",
      "lastModified" : "2024-11-21T05:43:45.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1173",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:16.990",
      "lastModified" : "2024-11-21T05:43:45.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1174",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.053",
      "lastModified" : "2024-11-21T05:43:45.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1175",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.130",
      "lastModified" : "2024-11-21T05:43:45.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1176",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.207",
      "lastModified" : "2024-11-21T05:43:45.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1177",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.270",
      "lastModified" : "2024-11-21T05:43:45.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1178",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.350",
      "lastModified" : "2024-11-21T05:43:45.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1179",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.410",
      "lastModified" : "2024-11-21T05:43:45.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1180",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.473",
      "lastModified" : "2024-11-21T05:43:46.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1181",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.553",
      "lastModified" : "2024-11-21T05:43:46.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1182",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.613",
      "lastModified" : "2024-11-21T05:43:46.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1183",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.693",
      "lastModified" : "2024-11-21T05:43:46.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1184",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.757",
      "lastModified" : "2024-11-21T05:43:46.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1185",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.833",
      "lastModified" : "2024-11-21T05:43:46.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1186",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.897",
      "lastModified" : "2024-11-21T05:43:46.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1187",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:17.973",
      "lastModified" : "2024-11-21T05:43:46.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1188",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.037",
      "lastModified" : "2024-11-21T05:43:47.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1190",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.207",
      "lastModified" : "2024-11-21T05:43:47.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1191",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.270",
      "lastModified" : "2024-11-21T05:43:47.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1192",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.350",
      "lastModified" : "2024-11-21T05:43:47.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1193",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.410",
      "lastModified" : "2024-11-21T05:43:47.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1194",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.490",
      "lastModified" : "2024-11-21T05:43:47.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1195",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.553",
      "lastModified" : "2024-11-21T05:43:48.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1196",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.613",
      "lastModified" : "2024-11-21T05:43:48.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1197",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.693",
      "lastModified" : "2024-11-21T05:43:48.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1198",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.770",
      "lastModified" : "2024-11-21T05:43:48.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1199",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.850",
      "lastModified" : "2024-11-21T05:43:48.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1200",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:18.927",
      "lastModified" : "2024-11-21T05:43:48.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA4AB9C-B969-4076-8C60-AC1F15057D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127CDFCA-5654-43EE-AF91-B56D668A0907"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1201",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.007",
      "lastModified" : "2024-11-21T05:43:48.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA4AB9C-B969-4076-8C60-AC1F15057D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127CDFCA-5654-43EE-AF91-B56D668A0907"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1202",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.083",
      "lastModified" : "2024-11-21T05:43:49.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA4AB9C-B969-4076-8C60-AC1F15057D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127CDFCA-5654-43EE-AF91-B56D668A0907"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1203",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.160",
      "lastModified" : "2024-11-21T05:43:49.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1204",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.223",
      "lastModified" : "2024-11-21T05:43:49.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1205",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.303",
      "lastModified" : "2024-11-21T05:43:49.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A41582B-1C06-4670-BBE5-F91D3383B7DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58880230-54F3-45E9-9F0C-079E1D62AC87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA4AB9C-B969-4076-8C60-AC1F15057D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F6B3EC-7B4B-48B7-A621-85810FA066AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.44:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4749115-5558-4741-BF55-8B0CE1D46616"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127CDFCA-5654-43EE-AF91-B56D668A0907"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1206",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.380",
      "lastModified" : "2024-11-21T05:43:49.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1207",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.457",
      "lastModified" : "2024-11-21T05:43:49.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1208",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.553",
      "lastModified" : "2024-11-21T05:43:49.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1209",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.630",
      "lastModified" : "2024-11-21T05:43:50.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1210",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.707",
      "lastModified" : "2024-11-21T05:43:50.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1211",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.787",
      "lastModified" : "2024-11-21T05:43:50.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1212",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.863",
      "lastModified" : "2024-11-21T05:43:50.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1213",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:19.927",
      "lastModified" : "2024-11-21T05:43:50.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1214",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.007",
      "lastModified" : "2024-11-21T05:43:50.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1215",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.083",
      "lastModified" : "2024-11-21T05:43:50.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1216",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.177",
      "lastModified" : "2024-11-21T05:43:50.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818DD411-2312-4BC8-8909-8392B26EDA7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA0B7A6-EAE1-4BE8-BE63-2EAE0B3A388E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3F1C89A-C44F-4547-967E-918FA10ED8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04F9D87-B28C-45AE-9AD3-477A1DE65CE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B0589D7-1930-4A25-A077-BE155D66B2F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:1.3.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0A1ADE-2C39-45F9-BCFE-0A6EF3FB8197"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_extension_platform:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFB84906-A29C-427D-9BE2-D38686E8F86F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1217",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.257",
      "lastModified" : "2024-11-21T05:43:51.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado. Cisco no ha publicado actualizaciones de software que aborden estas vulnerabilidades."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_wireless-n_vpn_firewall_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF7B6E7F-355A-4055-8CB0-75CFD0645F73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w_wireless-n_vpn_firewall:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA92B2A4-A9D9-4BF5-A687-848917283E8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_vpn_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF47C9BB-807F-4432-8EDE-7077123C00D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBD42A1-5F35-4052-B528-27EE508FD276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_wireless-n_multifunction_vpn_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1E09B2-B5DF-49AE-B4DC-87E161A40700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w_wireless-n_multifunction_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD30B0C7-E04A-4B05-82D1-9DA487F8639D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_wireless-n_vpn_router_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B7E92AF-4DC3-4756-A123-40094B0FC41F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w_wireless-n_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE146ECF-BE5C-4CA1-A325-C3402F540FBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1223",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.317",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of an HTTP range header. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos de Cisco están afectados por una vulnerabilidad en el motor de detección de Snort que podría permitir a un atacante remoto no autenticado omita una política de archivos configurada para HTTP.&#xa0;La vulnerabilidad es debido al manejo incorrecto de un encabezado de rango HTTP.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes HTTP diseñados a través de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante omitir la política de archivos configurada para paquetes HTTP y entregar una carga útil maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "CB1B5DAC-CE54-43E4-89F6-6DFD7A65C8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2986D5BD-1936-41BD-A992-7672C019F27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42493B4F-0CF2-45F0-B72D-36F0597CC274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F2E7D8-BB95-480D-AE3E-F9B97C3A5379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.4.1",
            "matchCriteriaId" : "72B91784-38A9-4A2A-AA92-8AB558924BBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:csr_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8B0B49-2C99-410B-B011-5B821C5992FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:isa_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510E97A-FD78-43C6-85BC-223001ACA264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.17",
            "matchCriteriaId" : "715F9721-D26C-4086-873F-837D0FCAF1A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-67DEwMe2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-filepolbypass-67DEwMe2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1224",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.410",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability with TCP Fast Open (TFO) when used in conjunction with the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect detection of the HTTP payload if it is contained at least partially within the TFO connection handshake. An attacker could exploit this vulnerability by sending crafted TFO packets with an HTTP payload through an affected device. A successful exploit could allow the attacker to bypass configured file policy for HTTP packets and deliver a malicious payload."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos de Cisco están afectados por una vulnerabilidad con TCP Fast Open (TFO) cuando se usan en conjunto con el motor de detección Snort que podría permitir a un atacante remoto no autenticado omitir una política de archivos configurada para HTTP.&#xa0;La vulnerabilidad es debido a la detección incorrecta de la carga útil HTTP si está contenida al menos parcialmente dentro del protocolo de enlace de la conexión TFO.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes TFO diseñados con una carga útil HTTP a través de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante omitir la política de archivos configurada para paquetes HTTP y entregar una carga útil maliciosa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "CB1B5DAC-CE54-43E4-89F6-6DFD7A65C8EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2986D5BD-1936-41BD-A992-7672C019F27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42493B4F-0CF2-45F0-B72D-36F0597CC274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F2E7D8-BB95-480D-AE3E-F9B97C3A5379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F41C382-C849-465C-AF77-0A787CA03BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80AD91C6-B7E3-48AC-8A51-3C05FE2659AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408B880A-50EF-4246-BF38-213D812BD0BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.4.1",
            "matchCriteriaId" : "72B91784-38A9-4A2A-AA92-8AB558924BBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:csr_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8B0B49-2C99-410B-B011-5B821C5992FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:isa_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510E97A-FD78-43C6-85BC-223001ACA264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.17",
            "matchCriteriaId" : "715F9721-D26C-4086-873F-837D0FCAF1A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BCF0950-162A-4E47-BA2A-43701EA7782E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx64:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE749570-1EA6-4734-B96A-D02B3BA3A756"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx64w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CD8683-DFB3-45E3-B6E2-92AFD846B0BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx64w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1038F5F-020D-41FD-9C3D-F2685F1EA916"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx67_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF993C79-4C7F-4B99-B8BB-3996C4F3D8F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx67:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2702FE73-E4AC-45C7-A212-44D783720798"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx67c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C6A8AAC-9813-45C9-8C69-0579C0ADA0C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx67c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9725A9F-B9B9-4784-AEEA-A5E5CE0A41F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx67w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2F5CB3-1AE0-4905-A28B-090FDA56622E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx67w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2529662-8A54-4DFC-80E7-922CF22DE2F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx68_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24AB6590-8775-4744-BF84-892F0BD10225"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx68:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6B4B5E-4FBB-48A9-B828-00C8AB479FB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx68cw_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39884334-73AF-4E98-B05A-20FFF82B5DF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx68cw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E682AA-05AD-483F-915F-A2B2C98233B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx68w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EF67F0-973F-4FD1-8077-CE68D2AB1149"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx68w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03F9C184-3811-4A26-846D-54ECE7CF939F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C0B39F-AE49-44D7-8951-9DB0464FE43B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4DE139-CCB5-4BDD-8827-07348B8F0FF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx84_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8398495B-47DB-4A16-AF8C-053685D5DD9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx84:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A4239D-E115-4368-895A-002BBD94F243"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90EC4BA2-0FA2-4841-9AB1-3FC92D22530D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6CBE98-6B20-4F05-8871-0BEAD1D351B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:meraki_mx450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A685A8D6-9B97-46B3-8087-0D44EE0D65AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:meraki_mx450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B35EB71-8584-4803-A438-AEC406FD8445"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-tfo-bypass-MmzZrtes",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-tfo-bypass-MmzZrtes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1226",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.490",
      "lastModified" : "2024-11-21T05:43:52.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the audit logging component of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM &amp; Presence Service, Cisco Unity Connection, Cisco Emergency Responder, and Cisco Prime License Manager could allow an authenticated, remote attacker to view sensitive information in clear text on an affected system. The vulnerability is due to the storage of certain unencrypted credentials. An attacker could exploit this vulnerability by accessing the audit logs on an affected system and obtaining credentials that they may not normally have access to. A successful exploit could allow the attacker to use those credentials to discover and manage network devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de registro de auditoría de Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service, Cisco Unity Connection, Cisco Emergency Responder y Cisco Prime License Manager, podría permitir a un atacante remoto autenticado visualizar información confidencial en texto sin cifrar en un sistema afectado.&#xa0;La vulnerabilidad es debido al almacenamiento de determinadas credenciales no cifradas.&#xa0;Un atacante podría explotar esta vulnerabilidad accediendo a los registros de auditoría en un sistema afectado y obteniendo credenciales a las que normalmente no tiene acceso.&#xa0;Una explotación con éxito podría permitir al atacante usar esas credenciales para detectar y administrar dispositivos de red."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su3",
            "matchCriteriaId" : "46879FDA-3BFF-439D-9683-AA5ED3BB46AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:10.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E36DA38-0004-4C87-95F1-8C3589644872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:11.5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9622F846-B220-458C-B09D-FF89B929F07B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:emergency_responder:12.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "299AC12F-EC43-4EF9-82B4-ACF0AAEC5702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5\\(1\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "C86A6174-1B31-459A-B439-B2BC0564AC89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_license_manager:10.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C5ABB4D-0350-43F6-869D-4D9EC21CA8F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "11.5\\(1\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "6FFCC0CA-4FF2-45E5-84E3-44FCCB24C330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "11.5\\(1\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "B7B52D74-F14C-4053-9C18-90B01898B26E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\):*:*:*:-:*:*:*",
            "matchCriteriaId" : "6781FEB3-73CF-451E-A373-19657DE750FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\):*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "37F53ABC-C019-4BBB-8881-395F286EA43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5\\(1\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "DA468D5D-A539-44BC-9F60-7AB432CD24DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su3",
            "matchCriteriaId" : "A2F6D898-8253-425A-9D40-3394E581FAAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:10.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "006A2272-F680-49A1-B719-14252C69A6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:12.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68CC25F-B7F5-482C-AED6-4AAB336969BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.5\\(1\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "C01C8779-6458-4DD6-8FF0-539028EB8180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0\\(1\\)",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "E47F4BAF-AE5F-45F6-AF54-E889320FF230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su3",
            "matchCriteriaId" : "B1977E6A-433E-4BA6-91AA-EB825D8BFCD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:10.5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F5AF19-C869-4A55-B4D7-38C0FFABCC6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-logging-6QSWKRYz",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-logging-6QSWKRYz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1236",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.583",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort application detection engine that could allow an unauthenticated, remote attacker to bypass the configured policies on an affected system. The vulnerability is due to a flaw in the detection algorithm. An attacker could exploit this vulnerability by sending crafted packets that would flow through an affected system. A successful exploit could allow the attacker to bypass the configured policies and deliver a malicious payload to the protected network."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos de Cisco están afectados por una vulnerabilidad en el motor de detección de aplicaciones de Snort que podría permitir a un atacante remoto no autenticado omitir las políticas configuradas en un sistema afectado.&#xa0;La vulnerabilidad es debido a un fallo en el algoritmo de detección.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes diseñados que fluirían a través de un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante omitir las políticas configuradas y entregar una carga útil maliciosa a la red protegida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.4.1",
            "matchCriteriaId" : "72B91784-38A9-4A2A-AA92-8AB558924BBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2D2305B-B69E-4F74-A44E-07B3205CE9F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26DD41B3-1D1D-44D3-BA8E-5A66AFEE77E6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AAD4397-6DCF-493A-BD61-3A890F6F3AB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-2p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F2F0A8E-97F6-41AC-BE67-4B2D60F9D36B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109-4p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB9229F3-7BCE-46C4-9879-D57B5BAAE44E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x-8p_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A606FE-E6F1-43F9-B1CD-D9DF35FC3573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451-x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "818CEFA6-208C-43C3-8E43-474A93ADCF21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:csr_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF8B0B49-2C99-410B-B011-5B821C5992FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:isa_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510E97A-FD78-43C6-85BC-223001ACA264"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.0.5",
            "matchCriteriaId" : "4AFD5C16-FA94-4FDA-9378-F93661419098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2986D5BD-1936-41BD-A992-7672C019F27E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.14.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D320926-6890-4A7F-85E2-7F46C2791499"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42493B4F-0CF2-45F0-B72D-36F0597CC274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06F2E7D8-BB95-480D-AE3E-F9B97C3A5379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:2.9.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F41C382-C849-465C-AF77-0A787CA03BA7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.14",
            "matchCriteriaId" : "0ADB3B5E-B17C-4D12-9ABE-1817CED279B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBYCATq",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snort-app-bypass-cSBYCATq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1237",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.677",
      "lastModified" : "2024-11-21T05:43:53.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Network Access Manager and Web Security Agent components of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL injection attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by inserting a configuration file in a specific path in the system which, in turn, causes a malicious DLL file to be loaded when the application starts. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los componentes Network Access Manager y Web Security Agent de Cisco AnyConnect Secure Mobility Client para Windows, podría permitir a un atacante local autenticado llevar a cabo un ataque de inyección de DLL.&#xa0;Para explotar esta vulnerabilidad, el atacante debería tener credenciales válidas en el sistema Windows.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de los recursos que son cargados por la aplicación en el tiempo de ejecución.&#xa0;Un atacante podría explotar esta vulnerabilidad insertando un archivo de configuración en una ruta específica en el sistema que, a su vez, causa que se cargue un archivo DLL malicioso cuando la aplicación se inicia.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en la máquina afectada con privilegios SYSTEM."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.04043",
            "matchCriteriaId" : "AD874F02-DC71-4FC4-A8B3-F2745864AF7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-injec-pQnryXLf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-injec-pQnryXLf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1238",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.757",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Firepower Management Center (FMC), podrían permitir a un atacante remoto autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario de la interfaz de un sistema afectado.&#xa0;Las vulnerabilidades se presentan porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario de la interfaz para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "681AD618-9A3F-422B-96F0-BB6E38D9DE08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-stored-xss-djKfCzf2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-stored-xss-djKfCzf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1239",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.817",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected system. The vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Firepower Management Center (FMC), podrían permitir a un atacante remoto autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario de la interfaz de un sistema afectado.&#xa0;Las vulnerabilidades se presentan porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades persuadiendo a un usuario de la interfaz para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.0",
            "matchCriteriaId" : "681AD618-9A3F-422B-96F0-BB6E38D9DE08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-stored-xss-djKfCzf2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-stored-xss-djKfCzf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1240",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.897",
      "lastModified" : "2024-11-21T05:43:54.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file in a specific location on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with the privileges of another user&rsquo;s account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de carga de archivos DLL específicos en Cisco Proximity Desktop para Windows, podría permitir a un atacante local autenticado cargar una biblioteca maliciosa.&#xa0;Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Esta vulnerabilidad se debe al manejo incorrecto de las rutas de directorio en tiempo de ejecución.&#xa0;Un atacante podría explotar esta vulnerabilidad colocando un archivo DLL malicioso en una ubicación específica del sistema apuntado.&#xa0;Este archivo se ejecutará cuando se inicie la aplicación vulnerable.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en el sistema objetivo con los privilegios de la cuenta de otro usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:proximity:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "3.1.0",
            "matchCriteriaId" : "81783A42-F28B-4FAB-B63E-21832093B149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-proximity-dll-UvW4VHPM",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-proximity-dll-UvW4VHPM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1242",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:20.990",
      "lastModified" : "2024-11-21T05:43:54.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Webex Teams could allow an unauthenticated, remote attacker to manipulate file names within the messaging interface. The vulnerability exists because the affected software mishandles character rendering. An attacker could exploit this vulnerability by sharing a file within the application interface. A successful exploit could allow the attacker to modify how the shared file name displays within the interface, which could allow the attacker to conduct phishing or spoofing attacks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Webex Teams, podría permitir a un atacante remoto no autenticado manipular nombres de archivos dentro de la interfaz de mensajería.&#xa0;La vulnerabilidad se presenta porque el software afectado maneja inapropiadamente la representación de caracteres.&#xa0;Un atacante podría explotar esta vulnerabilidad compartiendo un archivo dentro de la interfaz de la aplicación.&#xa0;Una explotación con éxito podría permitirle al atacante modificar cómo se muestra el nombre del archivo compartido dentro de la interfaz, lo que podría permitir al atacante realizar ataques de phishing o suplantación de identidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-450"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_teams:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "40.12.0.17293",
            "matchCriteriaId" : "845BE1B4-1D05-491B-8EA9-E3A5028C6535"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-teams-7ZMcXG99",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-teams-7ZMcXG99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1245",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.083",
      "lastModified" : "2024-11-21T05:43:54.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Finesse and Cisco Unified CVP OpenSocial Gadget Editor Cross-Site Scripting Vulnerability\r\n\r\nA vulnerability in the web-based management interface of Cisco Finesse and Cisco Unified CVP could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface.\r\nThe vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information.\r\nCisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Finesse, podrían permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) y obtener información potencialmente confidencial aprovechando un fallo en el mecanismo de autenticación.&#xa0;Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0\\(1\\)",
            "matchCriteriaId" : "DD40E978-4C22-42CF-BDAF-EEB2EB6B3416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):-:*:*:*:*:*:*",
            "matchCriteriaId" : "2D876E49-DF49-4CEF-B2E8-95AEB5FE651A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es1:*:*:*:*:*:*",
            "matchCriteriaId" : "02E2FDD7-5C71-426B-8578-2B57582BC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es2:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE1945-C1AF-488D-90AA-BDF6BE2C9B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es3:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF7143-A46F-4591-96CA-765503897C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB52449-3211-42CC-85D7-C0E6EC4A4BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es5:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28915E-1F4D-4A65-9FEB-848908567277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):-:*:*:*:*:*:*",
            "matchCriteriaId" : "3629695A-A121-4963-9BAC-9AEF3A4FABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es1:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DC24C6-F2A0-431F-86BA-68F706E19549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F457A6B-426E-426D-9229-0609727E59AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es3:*:*:*:*:*:*",
            "matchCriteriaId" : "96F4A329-A0DE-4853-B605-F26DD5C96BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es4:*:*:*:*:*:*",
            "matchCriteriaId" : "B75F5E70-70EB-4C39-972D-5E55FACC6540"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multi-vuln-finesse-qp6gbUO2",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multi-vuln-finesse-qp6gbUO2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1246",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.193",
      "lastModified" : "2024-11-21T05:43:55.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP OpenSocial Gadget Editor Unauthenticated Access Vulnerability\r\n\r\nA vulnerability in the web management interface of Cisco Finesse, Cisco Virtualized Voice Browser, and Cisco Unified CVP could allow an unauthenticated, remote attacker to access the OpenSocial Gadget Editor without providing valid user credentials.\r\nThe vulnerability is due to missing authentication for a specific section of the web-based management interface. An attacker could exploit this vulnerability by accessing a crafted URL. A successful exploit could allow the attacker to obtain access to a section of the interface, which they could use to obtain potentially confidential information and create arbitrary XML files.\r\nCisco&nbsp;has released software updates that address this vulnerability. There are no workarounds that address this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Finesse, podrían permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) y obtener información potencialmente confidencial aprovechando un fallo en el mecanismo de autenticación.&#xa0;Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.0\\(1\\)",
            "matchCriteriaId" : "DD40E978-4C22-42CF-BDAF-EEB2EB6B3416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):-:*:*:*:*:*:*",
            "matchCriteriaId" : "2D876E49-DF49-4CEF-B2E8-95AEB5FE651A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es1:*:*:*:*:*:*",
            "matchCriteriaId" : "02E2FDD7-5C71-426B-8578-2B57582BC76F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es2:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE1945-C1AF-488D-90AA-BDF6BE2C9B8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es3:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEF7143-A46F-4591-96CA-765503897C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB52449-3211-42CC-85D7-C0E6EC4A4BDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.0\\(1\\):es5:*:*:*:*:*:*",
            "matchCriteriaId" : "5E28915E-1F4D-4A65-9FEB-848908567277"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):-:*:*:*:*:*:*",
            "matchCriteriaId" : "3629695A-A121-4963-9BAC-9AEF3A4FABF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es1:*:*:*:*:*:*",
            "matchCriteriaId" : "F6DC24C6-F2A0-431F-86BA-68F706E19549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es2:*:*:*:*:*:*",
            "matchCriteriaId" : "6F457A6B-426E-426D-9229-0609727E59AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es3:*:*:*:*:*:*",
            "matchCriteriaId" : "96F4A329-A0DE-4853-B605-F26DD5C96BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:finesse:12.5\\(1\\):es4:*:*:*:*:*:*",
            "matchCriteriaId" : "B75F5E70-70EB-4C39-972D-5E55FACC6540"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multi-vuln-finesse-qp6gbUO2",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-multi-vuln-finesse-qp6gbUO2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1258",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.287",
      "lastModified" : "2024-11-21T05:43:56.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the local CLI to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying OS of the affected device. The attacker would need to have valid user credentials to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente de actualización de Cisco AnyConnect Secure Mobility Client, podría permitir a un atacante local autenticado con pocos privilegios leer archivos arbitrarios en el sistema operativo (SO) subyacente de un dispositivo afectado.&#xa0;La vulnerabilidad es debido a restricciones de permisos de archivos insuficientes.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un comando diseñado desde la CLI local para la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante leer archivos arbitrarios en el sistema operativo subyacente del dispositivo afectado.&#xa0;El atacante debería tener credenciales de usuario válidas para explotar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:linux_kernel:*:*",
            "versionEndExcluding" : "4.9.03047",
            "matchCriteriaId" : "437D6FD7-BBD1-47AC-B1A1-553A3E4BBE23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "4.9.03047",
            "matchCriteriaId" : "C4D4811F-C38B-4BC2-BC57-5A55215370AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.03049",
            "matchCriteriaId" : "3A2F752C-F227-4FFE-B5D5-A27179AC33D3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:agent_epolicy_orchestrator_extension:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.6",
            "matchCriteriaId" : "E1B3C345-1F99-4D64-9135-BAA5F5EE1812"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10382",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-fileread-PbHbgHMj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-fileread-PbHbgHMj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1267",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.380",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the dashboard widget of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to improper restrictions on XML entities. An attacker could exploit this vulnerability by crafting an XML-based widget on an affected server. A successful exploit could cause increased memory and CPU utilization, which could result in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el widget dashboard del software Cisco Firepower Management Center (FMC), podría permitir a un atacante remoto autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a restricciones inapropiadas en entidades XML.&#xa0;Un atacante podría explotar esta vulnerabilidad al crear un widget basado en XML en un servidor afectado.&#xa0;Una explotación con éxito podría causar una mayor utilización de la memoria y la CPU, lo que podría resultar en una condición DoS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.1",
            "matchCriteriaId" : "49ED2A60-CA5B-4AE7-A45B-8444353C753A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xee-DFzARDcs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xee-DFzARDcs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1307",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.473",
      "lastModified" : "2024-11-21T05:44:03.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670BF7A6-F2C1-4CD4-B6E6-208C95A32E57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8376ED-8273-4296-A90F-AA16156B8104"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF66A7CE-469A-48CD-AE85-2F49E1C505FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0909B440-99B7-43BE-BD8F-65EB3CF941ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1310",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.553",
      "lastModified" : "2024-11-21T05:44:03.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to redirect a user to an untrusted web page, bypassing the warning mechanism that should prompt the user before the redirection. This vulnerability is due to improper input validation of the URL parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website, bypassing the Webex URL check that should result in a warning before the redirection to the web page. Attackers may use this type of vulnerability, known as an open redirect attack, as part of a phishing attack to convince users to unknowingly visit malicious sites."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco Webex Meetings, podría permitir a un atacante remoto no autenticado redirecciona a un usuario a una página web que no sea de confianza, sin pasar por el mecanismo de advertencia que debería avisar al usuario antes del redireccionamiento.&#xa0;Esta vulnerabilidad se debe a una validación de entrada incorrecta de los parámetros de URL en una petición HTTP.&#xa0;Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario para que haga clic en un vínculo creado.&#xa0;Una explotación con éxito podría permitir al atacante redirigir a un usuario a un sitio web malicioso, sin pasar por la verificación de URL de Webex que debería generar una advertencia antes del redireccionamiento a la página web.&#xa0;Los atacantes pueden utilizar este tipo de vulnerabilidad, conocida como ataque de redireccionamiento abierto, como parte de un ataque de phishing para convencer a los usuarios de que visiten sitios maliciosos sin saberlo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "40.11.1",
            "matchCriteriaId" : "16E3E396-FE11-45CF-B820-DD167762BED1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-open-redirect-PWvBQ2q",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-open-redirect-PWvBQ2q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1311",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.630",
      "lastModified" : "2024-11-21T05:44:03.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the reclaim host role feature of Cisco Webex Meetings and Cisco Webex Meetings Server could allow an authenticated, remote attacker to take over the host role during a meeting. This vulnerability is due to a lack of protection against brute forcing of the host key. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Webex Meetings Server site. A successful exploit would require the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. A successful exploit could allow the attacker to acquire or take over the host role for a meeting."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad reclaim host role de host de Cisco Webex Meetings y Cisco Webex Meetings Server, podría permitir a un atacante remoto autenticado se haga cargo de la función de host durante una reunión.&#xa0;Esta vulnerabilidad se debe a la falta de protección contra la fuerza bruta de la clave del host.&#xa0;Un atacante podría explotar esta vulnerabilidad enviando solicitudes diseñadas a un sitio vulnerable de Cisco Webex Meetings o Webex Meetings Server.&#xa0;Una explotación con éxito requeriría que el atacante tuviera acceso para unirse a una reunión de Webex, incluidos los vínculos y las contraseñas correspondientes para unirse a la reunión.&#xa0;Una explotación con éxito podría permitir al atacante adquirir o asumir el rol de anfitrión de una reunión."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "40.12.0",
            "matchCriteriaId" : "E7F9AE91-0588-4752-A061-E66378DDD1C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "DE22BE9B-374E-43DC-BA91-E3B9699A4C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "61D1081F-87E8-4E8B-BEBD-0F239E745586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1:*:*:*:*:*:*",
            "matchCriteriaId" : "8D138973-02B0-4FEC-A646-FF1278DA1EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2:*:*:*:*:*:*",
            "matchCriteriaId" : "30B55A5B-8C5E-4ECB-9C85-A8A3A3030850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:*:*:*:*:*:*",
            "matchCriteriaId" : "14DBEC10-0641-441C-BE15-8F72C1762DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release4:*:*:*:*:*:*",
            "matchCriteriaId" : "4646849B-8190-4798-833C-F367E28C1881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CF856-093A-4E89-A71D-50A2887C265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*",
            "matchCriteriaId" : "B36A9043-0621-43CD-BFCD-66529F937859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*",
            "matchCriteriaId" : "8842B42E-C412-4356-9F54-DFC53B683D3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*",
            "matchCriteriaId" : "D25BC647-C569-46E5-AD45-7E315EBEB784"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-brutef-hostkey-FWRMxVF",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-brutef-hostkey-FWRMxVF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1360",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-13T22:15:21.723",
      "lastModified" : "2024-11-21T05:44:10.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device. Cisco has not released software updates that address these vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco Small Business RV110W, RV130, RV130W, y RV215W, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Las vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF28AEEA-34F1-40F1-ACDC-25FDD56EA282"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA4AB9C-B969-4076-8C60-AC1F15057D0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9EA4F1-ED61-4ED1-8678-1F6BD75007E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.2.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127CDFCA-5654-43EE-AF91-B56D668A0907"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-WUnUgv4U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21006",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:13.883",
      "lastModified" : "2024-11-21T05:47:23.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop version 22.1 (and earlier) is affected by a heap buffer overflow vulnerability when handling a specially crafted font file. Successful exploitation could lead to arbitrary code execution. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 22.1 (y anteriores) está afectado por una vulnerabilidad de desbordamiento del búfer de pila cuando se maneja un archivo de fuente especialmente diseñado.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código arbitraria.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "22.1",
            "matchCriteriaId" : "2D8BEEBC-BA11-4F0B-B797-E657041C0054"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-01.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21007",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:13.963",
      "lastModified" : "2024-11-21T05:47:23.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Illustrator version 25.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Illustrator versiones 25.0 (y anteriores) está afectado por un elemento de ruta de búsqueda no controlada que podría resultar en una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.0",
            "matchCriteriaId" : "CA8C9471-BD38-4A4A-88D2-8782D636092B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb21-02.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb21-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21008",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:14.057",
      "lastModified" : "2024-11-21T05:47:23.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0 (and earlier) is affected by an uncontrolled search path element that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0 (y anteriores) está afectado por un elemento de ruta de búsqueda no controlada que podría resultar en una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0",
            "matchCriteriaId" : "A3C81595-19F5-45A2-99D2-B0C9F8F5178D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-03.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21009",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:14.133",
      "lastModified" : "2024-11-21T05:47:23.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Campaign Classic Gold Standard 10 (and earlier), 20.3.1 (and earlier), 20.2.3 (and earlier), 20.1.3 (and earlier), 19.2.3 (and earlier) and 19.1.7 (and earlier) are affected by a server-side request forgery (SSRF) vulnerability. Successful exploitation could allow an attacker to use the Campaign instance to issue unauthorized requests to internal or external resources."
      }, {
        "lang" : "es",
        "value" : "Adobe Campaign Classic Gold Standard versiones 10 (y anteriores), versiones 20.3.1 (y anteriores), versiones 20.2.3 (y anteriores), versiones 20.1.3 (y anteriores), versiones 19.2.3 (y anteriores) y versiones 19.1.7 (y anteriores), están afectados por una vulnerabilidad de tipo server-side request forgery (SSRF).&#xa0;Una explotación con éxito podría permitir a un atacante usar la instancia de Campaign para emitir peticiones no autorizadas hacia recursos internos o externos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign_classic:*:*:*:*:gold_standard:*:*:*",
            "versionEndIncluding" : "10",
            "matchCriteriaId" : "DF29148D-982C-41A3-B2D4-524BDAD83BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "19.1.7",
            "matchCriteriaId" : "34510280-B108-43B4-859C-6020DFD06D7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.2",
            "versionEndIncluding" : "19.2.3",
            "matchCriteriaId" : "D487EC81-DA9A-4AE1-8639-5954C8D35B14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndIncluding" : "20.1.3",
            "matchCriteriaId" : "063F08B2-196E-4297-9B29-6913AF25AE7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.2",
            "versionEndIncluding" : "20.2.3",
            "matchCriteriaId" : "E35A0FD5-B4D1-4CD3-BBC3-336DBA783ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:campaign_classic:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndIncluding" : "20.3.1",
            "matchCriteriaId" : "2CCF60B0-D9E1-4891-A039-5E3D5C3FB1C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb21-04.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/campaign/apsb21-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21010",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:14.213",
      "lastModified" : "2024-11-21T05:47:23.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "InCopy version 15.1.1 (and earlier) for Windows is affected by an uncontrolled search path vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "InCopy versiones 15.1.1 (y anteriores) para Windows está afectado por una vulnerabilidad de ruta de búsqueda no controlada que podría resultar en una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;La explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:incopy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.1.3",
            "matchCriteriaId" : "6707A68D-CF76-43D8-9A74-55B78A5B1F6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb21-05.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/incopy/apsb21-05.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21011",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:14.337",
      "lastModified" : "2024-11-21T05:47:23.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Captivate 2019 version 11.5.1.499 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with permissions to write to the file system could leverage this vulnerability to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "Adobe Captivate 2019 versiones 11.5.1.499 (y anteriores) está afectado por una vulnerabilidad de elemento de ruta de búsqueda no controlada que podría conllevar a una escalada de privilegios.&#xa0;Un atacante con permisos para escribir en el sistema de archivos podría aprovechar esta vulnerabilidad para escalar los privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:captivate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.5.1.499",
            "matchCriteriaId" : "60FE4F6A-85A8-4BE1-9725-957DE2AC67E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/captivate/apsb21-06.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/captivate/apsb21-06.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21012",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:14.400",
      "lastModified" : "2024-11-21T05:47:24.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the checkout module. Successful exploitation could lead to sensitive information disclosure."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Magento 2.4.1 (y anteriores), 2.4.0-p1 (y anteriores) y 2.3.6 (y anteriores) son vulnerables a una vulnerabilidad de objeto directo inseguro (IDOR) en el módulo de pago. Una explotación exitosa podría llevar a la divulgación de información sensible"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_commerce:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.6",
            "matchCriteriaId" : "1DC7DD78-8F03-48F0-B0B9-CFA2A5688C68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_commerce:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929B3E3E-C779-4450-B44A-558A8B558C25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_commerce:2.4.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2DABEE-A259-44AC-894F-030F8B208D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_commerce:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE41A2C2-4A58-4AF4-BC43-42DB7E33933C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.6",
            "matchCriteriaId" : "0F4D60F4-33B9-40FE-B165-C049014C49E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1B94967-3ADF-4C8E-81B8-BB3D506F415E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B32F980-5FA7-455F-8DC0-E6484CD72096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento_open_source:2.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65174537-3A50-4E08-9CBE-9D84B4CC414B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21013",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-01-13T23:15:14.493",
      "lastModified" : "2024-11-21T05:47:24.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object vulnerability (IDOR) in the customer API module. Successful exploitation could lead to sensitive information disclosure and update arbitrary information on another user's account."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Magento 2.4.1 (y anteriores), 2.4.0-p1 (y anteriores) y 2.3.6 (y anteriores) son vulnerables a una vulnerabilidad de objeto directo inseguro (IDOR) en el módulo API de cliente. Una explotación exitosa podría llevar a la divulgación de información sensible y a la actualización de información arbitraria en la cuenta de otro usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento:*:*:*:*:commerce:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "871DB577-0B6B-4F48-9EC9-EFFDAD55DC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*",
            "versionStartIncluding" : "2.4.1",
            "matchCriteriaId" : "897EC3B5-0CC2-4B62-87DF-C189C9DDAF22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-14T04:15:15.073",
      "lastModified" : "2024-11-21T06:20:58.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms."
      }, {
        "lang" : "es",
        "value" : "En Discourse versiones 2.7.0 hasta beta1, una omisión del límite de velocidad conlleva a una omisión del requisito de 2FA para determinadas formularios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.0",
            "matchCriteriaId" : "568E1103-5423-4BDB-896C-6B54A6000B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discourse:discourse:2.7.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F608C5E-6B27-4DA0-BB2A-00A0DF1540A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162256/Discourse-2.7.0-2FA-Bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mesh3l911/Disource",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162256/Discourse-2.7.0-2FA-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mesh3l911/Disource",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/discourse/discourse/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20617",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-14T09:15:13.367",
      "lastModified" : "2024-11-21T05:46:53.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in acmailer ver. 4.0.1 and earlier, and acmailer DB ver. 1.1.3 and earlier allows remote attackers to execute an arbitrary OS command, or gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en acmailer versiones ver.&#xa0;4.0.1 y anteriores, y acmailer DB versiones ver.&#xa0;1.1.3 y anteriores, permiten a atacantes remotos ejecutar un comando arbitrario del Sistema Operativo y alcanzar un privilegio administrativo que puede resultar en la obtención de información confidencial en el servidor por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acmailer:acmailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "D103A485-F353-4EFB-A9B8-A6AB0347DB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acmailer:acmailer_db:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.3",
            "matchCriteriaId" : "0A6A96DA-719B-44EC-81E9-9CAF9A5C410F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35906450/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.acmailer.jp/info/de.cgi?id=101",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN35906450/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.acmailer.jp/info/de.cgi?id=101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20618",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-14T09:15:13.740",
      "lastModified" : "2024-11-21T05:46:53.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication and to gain an administrative privilege which may result in obtaining the sensitive information on the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de encadenamiento de privilegios en acmailer versiones ver.&#xa0;4.0.2 y anteriores, y acmailer DB versiones ver.&#xa0;1.1.4 y anteriores, permiten a atacantes remotos omitir la autenticación y alcanzar un privilegio administrativo que puede resultar en la obtención de información confidencial en el servidor por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acmailer:acmailer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "4E22335A-B970-443E-BE48-83D29D4B02EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acmailer:acmailer_db:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "53E9A059-D02B-409B-81EB-DB11CEFE523C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35906450/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.acmailer.jp/info/de.cgi?id=101",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN35906450/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.acmailer.jp/info/de.cgi?id=101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23926",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-01-14T15:15:13.337",
      "lastModified" : "2024-11-21T05:52:03.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0."
      }, {
        "lang" : "es",
        "value" : "Los analizadores XML usados por XMLBeans versiones hasta 2.6.0 no establecían las propiedades necesarias para proteger al usuario de entradas XML maliciosas.&#xa0;Unas vulnerabilidades incluyen posibilidades de ataques de Expansión de Entidades XML.&#xa0;Afecta a XMLBeans versiones hasta v2.6.0 incluyéndola"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-776"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:xmlbeans:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.6.0",
            "matchCriteriaId" : "434CB755-FE31-4A94-9434-70706BCCD6EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4D418D-B526-46B9-B439-E1963BF88C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4754FB-E3EB-454A-AB1A-AE3835C5350C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:oracle:*:*",
            "matchCriteriaId" : "26A2B713-7D6D-420A-93A4-E0D983C983DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapmanager:-:*:*:*:*:sap:*:*",
            "matchCriteriaId" : "64DE38C8-94F1-4860-B045-F33928F676A8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCFDDAC-CF84-4259-BA65-98DC5482A0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB179A8-DFB7-4DCF-8DE3-096F376989F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://issues.apache.org/jira/browse/XMLBEANS-517",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2dc5588009dc9f0310b7382269f932cc96cae4c3901b747dda1a7fed%40%3Cjava-dev.axis.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbb01d10512098894cd5f22325588197532c64f1c818ea7e4120d40c1%40%3Cjava-dev.axis.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00024.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://poi.apache.org/",
        "source" : "security@apache.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0004/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/XMLBEANS-517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2dc5588009dc9f0310b7382269f932cc96cae4c3901b747dda1a7fed%40%3Cjava-dev.axis.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbb01d10512098894cd5f22325588197532c64f1c818ea7e4120d40c1%40%3Cjava-dev.axis.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://poi.apache.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24122",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-01-14T15:15:13.400",
      "lastModified" : "2024-11-21T05:52:23.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When serving resources from a network location using the NTFS file system, Apache Tomcat versions 10.0.0-M1 to 10.0.0-M9, 9.0.0.M1 to 9.0.39, 8.5.0 to 8.5.59 and 7.0.0 to 7.0.106 were susceptible to JSP source code disclosure in some configurations. The root cause was the unexpected behaviour of the JRE API File.getCanonicalPath() which in turn was caused by the inconsistent behaviour of the Windows API (FindFirstFileW) in some circumstances."
      }, {
        "lang" : "es",
        "value" : "Cuando se sirven recursos desde una ubicación de red usando el sistema de archivos NTFS, Apache Tomcat versiones 10.0.0-M1 hasta 10.0.0-M9, versiones 9.0.0.M1 hasta 9.0.39, versiones 8.5.0 hasta 8.5.59 y versiones 7.0.0 hasta 7.0.106, fueron susceptibles a una divulgación del código fuente JSP en algunas configuraciones.&#xa0;La causa raíz fue el comportamiento inesperado de la función File.getCanonicalPath() de la API JRE que a su vez fue causado por el comportamiento incoherente de la API de Windows (FindFirstFileW) en algunas circunstancias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.106",
            "matchCriteriaId" : "AD7B0066-F7CD-4609-91F5-A778DD56EAE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0",
            "versionEndIncluding" : "8.5.59",
            "matchCriteriaId" : "1F74CD42-7B43-4444-B121-B9C1ECFDB67D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.1",
            "versionEndIncluding" : "9.0.39",
            "matchCriteriaId" : "2EA947E9-FC93-4FAA-9988-27BC4C26CA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "EF411DDA-2601-449A-9046-D250419A0E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4FBF97-DE16-4E5E-BE19-471E01818D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "3B266B1E-24B5-47EE-A421-E0E3CC0C7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "29614C3A-6FB3-41C7-B56E-9CC3F45B04F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AB156C-8FF6-4727-AF75-590D0DCB3F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "90CD7E85-4FF9-4158-AC78-4BFCBC882A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA56B52-1015-40CD-B10C-393768094269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "501B0D4A-D636-4736-979B-D5023599CEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "94E7764F-BF9E-463E-B446-A9A8DB92BB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9F7EE-AF2A-43E5-B708-0198784AB45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "AC872C5F-63AF-4BB8-8629-334FC9704AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "94B95C95-DF3E-49C1-9CA0-4474DD7EF7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "310B0163-01DE-40DA-A2EA-FFA4A6100037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "75420449-A951-4133-A5F1-4C01F2DF843B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14ABF04-E460-4911-9C6C-B7BCEFE68E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/14/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7382e1e35b9bc7c8f320b90ad77e74c13172d08034e20c18000fe710%40%3Cdev.tomee.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r776c64337495bf28b7d5597268114a888e3fad6045c40a0da0c66d4d%40%3Cdev.tomee.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7e0bb9ea415724550e2b325e143b23e269579e54d66fcd7754bd0c20%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb32a73b7cb919d4f44a2596b6b951274c0004fc8b0e393d6829a45f9%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca833c6d42b7b9ce1563488c0929f29fcc95947d86e5e740258c8937%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210212-0008/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/14/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1595889b083e05986f42b944dc43060d6b083022260b6ea64d2cec52%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7382e1e35b9bc7c8f320b90ad77e74c13172d08034e20c18000fe710%40%3Cdev.tomee.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r776c64337495bf28b7d5597268114a888e3fad6045c40a0da0c66d4d%40%3Cdev.tomee.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7e0bb9ea415724550e2b325e143b23e269579e54d66fcd7754bd0c20%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb32a73b7cb919d4f44a2596b6b951274c0004fc8b0e393d6829a45f9%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca833c6d42b7b9ce1563488c0929f29fcc95947d86e5e740258c8937%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210212-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21722",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-01-14T16:15:19.053",
      "lastModified" : "2024-11-21T05:48:52.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ZTE Smart STB is impacted by an information leak vulnerability. The device did not fully verify the log, so attackers could use this vulnerability to obtain sensitive user information for further information detection and attacks. This affects: ZXV10 B860A V2.1-T_V0032.1.1.04_jiangsuTelecom."
      }, {
        "lang" : "es",
        "value" : "Un ZTE Smart STB está afectado por una vulnerabilidad de filtrado de información.&#xa0;El dispositivo no verificó completamente el registro, por lo que los atacantes podrían usar esta vulnerabilidad para obtener información confidencial del usuario para mayor detección de información y ataques.&#xa0;Esto afecta a: ZXV10 B860A V2.1-T_V0032.1.1.04_jiangsuTelecom"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxv10_b860a_firmware:v2.1-t_v0032.1.1.04_jiangsutelecom:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82FF3FEF-2943-4327-90F6-0C8AA7A63182"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxv10_b860a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290044BC-2211-4044-8899-5D4B69C6A881"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014324",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21261",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-14T20:15:12.360",
      "lastModified" : "2024-11-21T05:47:53.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. A bug was discovered in the `flatpak-portal` service that can allow sandboxed applications to execute arbitrary code on the host system (a sandbox escape). This sandbox-escape bug is present in versions from 0.11.4 and before fixed versions 1.8.5 and 1.10.0. The Flatpak portal D-Bus service (`flatpak-portal`, also known by its D-Bus service name `org.freedesktop.portal.Flatpak`) allows apps in a Flatpak sandbox to launch their own subprocesses in a new sandbox instance, either with the same security settings as the caller or with more restrictive security settings. For example, this is used in Flatpak-packaged web browsers such as Chromium to launch subprocesses that will process untrusted web content, and give those subprocesses a more restrictive sandbox than the browser itself. In vulnerable versions, the Flatpak portal service passes caller-specified environment variables to non-sandboxed processes on the host system, and in particular to the `flatpak run` command that is used to launch the new sandbox instance. A malicious or compromised Flatpak app could set environment variables that are trusted by the `flatpak run` command, and use them to execute arbitrary code that is not in a sandbox. As a workaround, this vulnerability can be mitigated by preventing the `flatpak-portal` service from starting, but that mitigation will prevent many Flatpak apps from working correctly. This is fixed in versions 1.8.5 and 1.10.0."
      }, {
        "lang" : "es",
        "value" : "Flatpak es un sistema para crear, distribuir y ejecutar aplicaciones de escritorio en sandbox en Linux. Se detectó un fallo en el servicio \"flatpak-portal\" que puede permitir que las aplicaciones en sandbox ejecuten código arbitrario en el sistema host (un escape del sandbox). Este fallo de escape del sandbox está presente en las versiones 0.11.4 y anteriores a las versiones reparadas 1.8.5 y 1.10.0. El servicio D-Bus del portal Flatpak (\"flatpak-portal\", también conocido por su nombre de servicio D-Bus \"org.freedesktop.portal.Flatpak\") permite que las aplicaciones en un sandbox de Flatpak inicien sus propios subprocesos en una nueva instancia del sandbox, ya sea con la misma configuración de seguridad que la persona que llama o con una configuración de seguridad más restrictiva. Por ejemplo, esto se usa en navegadores web empaquetados con Flatpak, como Chromium, para iniciar subprocesos que procesarán contenido web no confiable. y dar a esos subprocesos un sandbox más restrictivo que el propio navegador. En versiones vulnerables, el servicio del portal Flatpak pasa las variables de entorno especificadas por la persona que llama hacia procesos que no están en el sandbox en el sistema host y, en particular, al comando \"flatpak run\" que se usa para iniciar la nueva instancia del sandbox. Una aplicación Flatpak maliciosa o comprometida podría establecer variables de entorno en las que confíe el comando \"flatpak run\" y usarlas para ejecutar código arbitrario que no se encuentra en un sandbox. Como solución alternativa, esta vulnerabilidad puede ser mitigada evitando que se inicie el servicio \"flatpak-portal\", pero esa mitigación impedirá que muchas aplicaciones de Flatpak funcionen correctamente. Esto se corrige en las versiones 1.8.5 y 1.10.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.11.4",
            "versionEndExcluding" : "1.8.5",
            "matchCriteriaId" : "041D999E-622C-4771-9819-57C6F1BE7056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.1",
            "versionEndExcluding" : "1.10.0",
            "matchCriteriaId" : "FD8B7A39-7AB9-43AA-9B31-B2112B6D90CF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpak/flatpak/commit/6d1773d2a54dde9b099043f07a2094a4f1c2f486",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/6e5ae7a109cdfa9735ea7ccbd8cb79f9e8d3ae8b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/aeb6a7ab0abaac4a8f4ad98b3df476d9de6b8bd4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/cc1401043c075268ecc652eac557ef8076b5eaba",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/releases/tag/1.8.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-21",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4830",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/6d1773d2a54dde9b099043f07a2094a4f1c2f486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/6e5ae7a109cdfa9735ea7ccbd8cb79f9e8d3ae8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/aeb6a7ab0abaac4a8f4ad98b3df476d9de6b8bd4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/cc1401043c075268ecc652eac557ef8076b5eaba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/releases/tag/1.8.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-4ppf-fxf6-vxg2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22132",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2021-01-14T20:15:13.407",
      "lastModified" : "2024-11-21T05:49:34.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Elasticsearch versions 7.7.0 to 7.10.1 contain an information disclosure flaw in the async search API. Users who execute an async search will improperly store the HTTP headers. An Elasticsearch user with the ability to read the .tasks index could obtain sensitive request headers of other users in the cluster. This issue is fixed in Elasticsearch 7.10.2"
      }, {
        "lang" : "es",
        "value" : "Elasticsearch versiones 7.7.0 hasta 7.10.1, contienen un fallo de divulgación de información en la API de búsqueda asíncrona.&#xa0;Los usuarios que ejecutan una búsqueda asíncrona almacenarán inapropiadamente los encabezados HTTP.&#xa0;Un usuario de Elasticsearch con la capacidad de leer el índice .tasks podría obtener encabezados de petición confidenciales de otros usuarios en el clúster.&#xa0;Este problema es corregido en Elasticsearch versión 7.10.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.10.2",
            "matchCriteriaId" : "FB1F6EA5-5747-4DB0-BD17-148468730A3F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FB24DB-AF91-48D0-9CA5-C8250D183FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elasticsearch-7-10-2-security-update/261164",
        "source" : "security@elastic.co",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0004/",
        "source" : "security@elastic.co",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@elastic.co",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elasticsearch-7-10-2-security-update/261164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-15T07:15:13.970",
      "lastModified" : "2024-11-21T05:51:54.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in flatCore before 2.0.0 build 139. A local file disclosure vulnerability was identified in the docs_file HTTP request body parameter for the acp interface. This can be exploited with admin access rights. The affected parameter (which retrieves the contents of the specified file) was found to be accepting malicious user input without proper sanitization, thus leading to retrieval of backend server sensitive files, e.g., /etc/passwd, SQLite database files, PHP source code, etc."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en flatCore versiones anteriores a 2.0.0 compilación 139. Se identificó una vulnerabilidad de divulgación de archivos locales en el parámetro del cuerpo de una petición HTTP docs_file body para la interfaz acp.&#xa0;Esto puede ser explotado con derechos de acceso de administrador.&#xa0;Se encontró que el parámetro afectado (que recupera el contenido del archivo especificado) acepta la entrada de usuarios maliciosos sin un saneamiento apropiado, conllevando entonces a una recuperación de archivos confidenciales del servidor del backend, por ejemplo, /etc/passwd, archivos de la base de datos SQLite, código fuente PHP, etc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "295D969A-0491-4679-8414-BDCCA13B7563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-15T07:15:14.033",
      "lastModified" : "2024-11-21T05:51:54.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in flatCore before 2.0.0 build 139. A stored XSS vulnerability was identified in the prefs_smtp_psw HTTP request body parameter for the acp interface. An admin user can inject malicious client-side script into the affected parameter without any form of input sanitization. The injected payload will be executed in the browser of a user whenever one visits the affected module page."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en flatCore versiones anteriores a 2.0.0 build 139. Se identificó una vulnerabilidad de tipo XSS almacenado en el parámetro del cuerpo de una petición HTTP prefs_smtp_psw para la interfaz acp.&#xa0;Un usuario administrador puede inyectar un script malicioso del lado del cliente en el parámetro afectado sin ningún tipo de saneamiento de la entrada.&#xa0;La carga útil inyectada será ejecutada en el navegador de un usuario cada vez que visite la página del módulo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "295D969A-0491-4679-8414-BDCCA13B7563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-15T07:15:14.097",
      "lastModified" : "2024-11-21T05:51:54.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in flatCore before 2.0.0 build 139. A time-based blind SQL injection was identified in the selected_folder HTTP request body parameter for the acp interface. The affected parameter (which retrieves the file contents of the specified folder) was found to be accepting malicious user input without proper sanitization, thus leading to SQL injection. Database related information can be successfully retrieved."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en flatCore versiones anteriores a 2.0.0 build 139. Se identificó una inyección SQL ciega basada en tiempo en el parámetro del cuerpo una petición HTTP selected_folder para la interfaz acp.&#xa0;Se encontró que el parámetro afectado (que recupera el contenido del archivo de la carpeta especificada) acepta la entrada de usuarios maliciosos sin un saneamiento apropiado, conllevando entonces a una inyección SQL.&#xa0;La información relacionada con la base de datos puede ser recuperada con éxito"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "295D969A-0491-4679-8414-BDCCA13B7563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-15T07:15:14.143",
      "lastModified" : "2024-11-21T05:51:54.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in flatCore before 2.0.0 build 139. A reflected XSS vulnerability was identified in the media_filter HTTP request body parameter for the acp interface. The affected parameter accepts malicious client-side script without proper input sanitization. For example, a malicious user can leverage this vulnerability to steal cookies from a victim user and perform a session-hijacking attack, which may then lead to unauthorized access to the site."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en flatCore versiones anteriores a 2.0.0 build 139. Se identificó una vulnerabilidad de tipo XSS reflejado en el parámetro del cuerpo de una petición HTTP media_filter para la interfaz acp.&#xa0;El parámetro afectado acepta scripts del lado del cliente malicioso sin un saneamiento de la entrada apropiado.&#xa0;Por ejemplo, un usuario malicioso puede aprovechar esta vulnerabilidad para robar cookies de un usuario víctima y llevar a cabo un ataque de secuestro de sesión, que luego puede conllevar a un acceso no autorizado al sitio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatcore:flatcore:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "295D969A-0491-4679-8414-BDCCA13B7563"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/160936/flatCore-CMS-XSS-File-Disclosure-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/flatCore/flatCore-CMS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20189",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-15T15:15:12.847",
      "lastModified" : "2023-11-07T03:28:59.130",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22166",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-01-15T16:15:13.217",
      "lastModified" : "2024-11-21T05:49:37.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker could cause a Prometheus denial of service in GitLab 13.7+ by sending an HTTP request with a malformed method"
      }, {
        "lang" : "es",
        "value" : "Un atacante podría causar una denegación de servicio de Prometheus en GitLab versiones 13.7+, mediante el envío de una petición HTTP con un método malformado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "E11B3DE6-9F69-44A1-A8C6-5747F07466AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "CA1FA034-49A4-49AF-95CC-8447B0F24C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22166.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/labkit/-/issues/29",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22166.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/labkit/-/issues/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22167",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-01-15T16:15:13.390",
      "lastModified" : "2024-11-21T05:49:37.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 12.1. Incorrect headers in specific project page allows attacker to have a temporary read access to the private repository"
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab afectando a todas las versiones desde la 12.1.&#xa0;Los encabezados incorrectos en la página del proyecto específico permiten a un atacante tener un acceso de lectura temporal al repositorio privado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "B9959AF1-1970-4108-A7D7-7C4E8F67033E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "3402E3D1-B367-4186-BBED-2003CE8749EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "F36EF782-E1B3-4C84-8EC6-A3A159C3AB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "1D008652-E883-44CA-987F-A1B64F1B4349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "E11B3DE6-9F69-44A1-A8C6-5747F07466AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "CA1FA034-49A4-49AF-95CC-8447B0F24C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22167.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/289944",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1043480",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22167.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/289944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1043480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22168",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-01-15T16:15:13.453",
      "lastModified" : "2024-11-21T05:49:37.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A regular expression denial of service issue has been discovered in NuGet API affecting all versions of GitLab starting from version 12.8."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema de denegación de servicio de una expresión regular en la API de NuGet afectando a todas las versiones de GitLab desde la versión 12.8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "BC2B68FC-295B-4246-8985-2949FC4AAC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "CD23C4BC-7E72-4073-A6FE-74BC6DE0C940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "F36EF782-E1B3-4C84-8EC6-A3A159C3AB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "1D008652-E883-44CA-987F-A1B64F1B4349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "E11B3DE6-9F69-44A1-A8C6-5747F07466AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "CA1FA034-49A4-49AF-95CC-8447B0F24C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22168.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/289950",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22168.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/289950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22171",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-01-15T16:15:13.517",
      "lastModified" : "2024-11-21T05:49:38.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of authentication parameters in GitLab Pages for GitLab 11.5+ allows an attacker to steal a victim's API token if they click on a maliciously crafted link"
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de los parámetros de autenticación en GitLab Pages para GitLab versiones 11.5+, permite a un atacante robar el token de la API de una víctima si hace clic en un enlace diseñado con fines maliciosos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "19F956E7-EBA6-4BA2-83A9-95E3492BD74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.5.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "564FCF94-928E-44C8-83BC-DEA308BA28C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "F36EF782-E1B3-4C84-8EC6-A3A159C3AB02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "1D008652-E883-44CA-987F-A1B64F1B4349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "E11B3DE6-9F69-44A1-A8C6-5747F07466AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "CA1FA034-49A4-49AF-95CC-8447B0F24C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22171.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-pages/-/issues/262",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/718460",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22171.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-pages/-/issues/262",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/718460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0202",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.370",
      "lastModified" : "2024-11-21T05:42:11.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPC (Modular Port Concentrator) where Integrated Routing and Bridging (IRB) interface is configured and it is mapped to a VPLS instance or a Bridge-Domain, certain network events at Customer Edge (CE) device may cause memory leak in the MPC which can cause an out of memory and MPC restarts. When this issue occurs, there will be temporary traffic interruption until the MPC is restored. An administrator can use the following CLI command to monitor the status of memory usage level of the MPC: user@device> show system resource-monitor fpc FPC Resource Usage Summary Free Heap Mem Watermark : 20 % Free NH Mem Watermark : 20 % Free Filter Mem Watermark : 20 % * - Watermark reached Slot # % Heap Free RTT Average RTT 1 87 PFE # % ENCAP mem Free % NH mem Free % FW mem Free 0 NA 88 99 1 NA 89 99 When the issue is occurring, the value of “% NH mem Free” will go down until the MPC restarts. This issue affects MX Series and EX9200 Series with Trio-based PFEs (Packet Forwarding Engines). Please refer to https://kb.juniper.net/KB25385 for the list of Trio-based PFEs. This issue affects Juniper Networks Junos OS on MX Series, EX9200 Series: 17.3R3-S8; 17.4R3-S2; 18.2R3-S4, 18.2R3-S5; 18.3R3-S2, 18.3R3-S3; 18.4 versions starting from 18.4R3-S1 and later versions prior to 18.4R3-S6; 19.2 versions starting from 19.2R2 and later versions prior to 19.2R3-S1; 19.4 versions starting from 19.4R2 and later versions prior to 19.4R2-S3, 19.4R3; 20.2 versions starting from 20.2R1 and later versions prior to 20.2R1-S3, 20.2R2. This issue does not affect Juniper Networks Junos OS: 18.1, 19.1, 19.3, 20.1."
      }, {
        "lang" : "es",
        "value" : "En plataformas Juniper Networks Serie MX y Serie EX9200 con Trio-based MPC (Modular Port Concentrator), donde la interfaz Integrated Routing and Bridging (IRB) está configurada y mapeada a una instancia VPLS o Bridge-Domain, determinados eventos de red en Customer Edge (CE) puede causar una pérdida de memoria en el MPC, lo que puede causar una falta de memoria y el reinicio del MPC.&#xa0;Cuando este problema ocurre, habrá una interrupción temporal del tráfico hasta que el MPC es restaurado.&#xa0;Un administrador puede usar el siguiente comando CLI para monitorear el estado del nivel de uso de memoria del MPC: user@device) show system resource-monitor fpc FPC Resource Usage Summary Free Heap Mem Watermark : 20 % Free NH Mem Watermark : 20 % Free Filter Mem Watermark : 20 % * - Watermark reached Slot # % Heap Free RTT Average RTT 1 87 PFE # % ENCAP mem Free % NH mem Free % FW mem Free 0 NA 88 99 1 NA 89 99. Cuando se produce el problema, el valor de “% NH mem Free” bajará hasta que el MPC reinicie.&#xa0;Este problema afecta la Serie MX y Serie EX9200 con Trio-based PFEs (Packet Forwarding Engines).&#xa0;Consulte https://kb.juniper.net/KB25385 para visualizar la lista de PFE Trio-based.&#xa0;Este problema afecta al Juniper Networks Junos OS en la Serie MX, Serie EX9200: versiones 17.3R3-S8;&#xa0;17,4R3-S2;&#xa0;18.2R3-S4, 18.2R3-S5;&#xa0;18.3R3-S2, 18.3R3-S3;&#xa0;18.4 versiones desde 18.4R3-S1 y versiones posteriores a 18.4R3-S6;&#xa0;19.2 versiones desde 19.2R2 y versiones posteriores a 19.2R3-S1;&#xa0;19.4 versiones a partir de 19.4R2 y versiones posteriores a 19.4R2-S3, 19.4R3;&#xa0;20.2 versiones desde 20.2R1 y versiones posteriores a 20.2R1-S3,&#xa0;20.2R2.&#xa0;Este problema no afecta a Juniper Networks Junos OS: 18.1, 19.1, 19.3, 20.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11092",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0203",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.543",
      "lastModified" : "2024-11-21T05:42:11.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG interface might not take affect when it reaches the threshold condition. Storm Control enables the device to monitor traffic levels and to drop broadcast, multicast, and unknown unicast packets when a specified traffic level is exceeded, thus preventing packets from proliferating and degrading the LAN. Note: this issue does not affect EX2200, EX3300, EX4200, and EX9200 Series. This issue affects Juniper Networks Junos OS on EX Series and QFX5K Series: 15.1 versions prior to 15.1R7-S7; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R2-S5, 18.4R3-S3; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R2-S1, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2."
      }, {
        "lang" : "es",
        "value" : "En las plataformas Juniper Networks Serie EX y QFX5K configuradas con Redundant Trunk Group (RTG), el perfil Storm Control aplicado en la interfaz RTG puede no tener efecto cuando alcanza la condición de umbral.&#xa0;Storm Control permite al dispositivo monitorear los niveles de tráfico y descartar paquetes de difusión, multidifusión y unidifusión desconocidos cuando un nivel de tráfico específico es excedido, impidiendo así que los paquetes proliferen y degraden la LAN.&#xa0;Nota: este problema no afecta a las series EX2200, EX3300, EX4200 y EX9200.&#xa0;Este problema afecta al Juniper Networks Junos OS en las series EX y QFX5K: versiones 15.1 anteriores a 15.1R7-S7;&#xa0;versiones 16.1 anteriores a 16.1R7-S8;&#xa0;versiones 17.2 anteriores a 17.2R3-S4;&#xa0;versiones 17.3 anteriores a 17.3R3-S8;&#xa0;versiones 17.4 anteriores a 17.4R2-S11, 17.4R3-S2;&#xa0;versiones 18.1 anteriores a 18.1R3-S10;&#xa0;versiones 18.2 anteriores a 18.2R3-S5;&#xa0;versiones 18.&#xa0;3 anteriores a 18.3R2-S4, 18.3R3-S2;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S3;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S2;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R2-S1, 19.2R3;&#xa0;versiones 19.3 anteriores a 19.3R2-S4, 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R1-S3, 19.4R2-S1, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R1-S2, 20.1R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-794"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "684A7156-DCB0-499E-B7F9-21F5F1598A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C3597-C53B-4F4B-9EA7-126DA036C86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A536DA-5A57-4255-AB22-F99F8B7FF62A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07B0E0B-D2F2-4CF1-A8EA-A1E8DE83BBB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1E61-07A1-40B0-B616-F1A6E06D11C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11093",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0204",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.637",
      "lastModified" : "2024-11-21T05:42:11.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authenticated shell user the ability to create and read database files generated by the dexp utility, including password hashes of local users. Since dexp is shipped with setuid permissions enabled and is owned by the root user, this vulnerability may allow a local privileged user the ability to run dexp with root privileges and access sensitive information in the dexp database. This issue affects Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S8; 15.1X49 versions prior to 15.1X49-D230; 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.2X75 versions prior to 18.2X75-D34; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información confidencial en el recurso de configuración de delta-export (dexp) de Juniper Networks Junos OS puede permitir a un usuario del shell autenticado local la capacidad de crear y leer archivos de base de la datos generados por el recurso dexp, incluidos los hash de contraseña de usuarios locales.&#xa0;Dado que dexp es enviado con permisos setuid habilitados y es propiedad del usuario root, esta vulnerabilidad puede permitir a un usuario privilegiado local la capacidad de ejecutar dexp con privilegios root y acceder a información confidencial en la base de datos de dexp.&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 15.1 anteriores a 15.1R7-S8;&#xa0;versiones 15.1X49 anteriores a 15.1X49-D230;&#xa0;versiones 17.3 anteriores a 17.3R3-S9;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.2X75 anteriores a 18.2X75-D34;&#xa0;versiones 18.3 anteriores a 18.&#xa0;3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S7, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R1-S3, 19.4R2-S2, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R1-S4, 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S2, 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11114",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0205",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.697",
      "lastModified" : "2024-11-21T05:42:11.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When the \"Intrusion Detection Service\" (IDS) feature is configured on Juniper Networks MX series with a dynamic firewall filter using IPv6 source or destination prefix, it may incorrectly match the prefix as /32, causing the filter to block unexpected traffic. This issue affects only IPv6 prefixes when used as source and destination. This issue affects MX Series devices using MS-MPC, MS-MIC or MS-SPC3 service cards with IDS service configured. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S10 on MX Series; 17.4 versions prior to 17.4R3-S3 on MX Series; 18.1 versions prior to 18.1R3-S11 on MX Series; 18.2 versions prior to 18.2R3-S6 on MX Series; 18.3 versions prior to 18.3R3-S4 on MX Series; 18.4 versions prior to 18.4R3-S6 on MX Series; 19.1 versions prior to 19.1R2-S2, 19.1R3-S3 on MX Series; 19.2 versions prior to 19.2R3-S1 on MX Series; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1 on MX Series; 19.4 versions prior to 19.4R3 on MX Series; 20.1 versions prior to 20.1R2 on MX Series; 20.2 versions prior to 20.2R2 on MX Series;"
      }, {
        "lang" : "es",
        "value" : "Cuando la funcionalidad \"Intrusion Detection Service\" (IDS) está configurada en la serie Juniper Networks MX con un filtro de firewall dinámico usando el prefijo de origen o destino de IPv6, puede coincidir incorrectamente con el prefijo como /32, causando que el filtro bloquee el tráfico inesperado.&#xa0;Este problema afecta solo a los prefijos de IPv6 cuando se utilizan como origen y destino.&#xa0;Este problema afecta a los dispositivos de la Serie MX que utilizan tarjetas de servicio MS-MPC, MS-MIC o MS-SPC3 con el servicio IDS configurado.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 17.3 anteriores a 17.3R3-S10 en la Serie MX;&#xa0;versiones 17.4 anteriores a 17.4R3-S3 en la Serie MX;&#xa0;versiones 18.1 anteriores a 18.1R3-S11 en la Serie MX;&#xa0;versiones 18.2 anteriores a 18.2R3-S6 en la Serie MX;&#xa0;versiones 18.3 anteriores a 18.3R3-S4 en la Serie MX;&#xa0;versiones 18.4 anteriores a 18.4R3-S6 en la Serie MX;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S3 en la Serie MX;&#xa0;versiones 19.2 anteriores a 19.2R3-S1 en la Serie MX;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3-S1 en la Serie MX;&#xa0;versiones 19.4 anteriores a 19.4R3 en la Serie MX;&#xa0;20.1 versiones anteriores a 20.1R2 en la Serie MX;&#xa0;20.2 versiones anteriores a 20.2R2 en la Serie MX"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11095",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0206",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.777",
      "lastModified" : "2024-11-21T05:42:12.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL Pointer Dereference vulnerability in Juniper Networks Junos OS allows an attacker to send a specific packet causing the packet forwarding engine (PFE) to crash and restart, resulting in a Denial of Service (DoS). By continuously sending these specific packets, an attacker can repeatedly disable the PFE causing a sustained Denial of Service (DoS). This issue only affects Juniper Networks NFX Series, SRX Series platforms when SSL Proxy is configured. This issue affects Juniper Networks Junos OS on NFX Series and SRX Series: 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S1; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S2, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions on NFX Series and SRX Series prior to 18.3R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desreferencia del puntero NULL en Juniper Networks Junos OS permite a un atacante enviar un paquete específico causando que el motor de reenvío de paquetes (PFE) se bloquee y se reinicie, resultando en una Denegación de Servicio (DoS). Mediante el envío continuamente de estos paquetes específicos, un atacante puede desactivar repetidamente el PFE causando una Denegación de Servicio (DoS) sostenida.&#xa0;Este problema solo afecta a las plataformas de la Serie NFX y Serie SRX de Juniper Networks cuando un proxy SSL es configurado.&#xa0;Este problema afecta al Juniper Networks Junos OS en las Serie NFX y Serie SRX: versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S1;&#xa0;S4;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3;&#xa0;S4;&#xa0;versiones 19.2 anteriores a 19.2R1-S2, 19.2R2;&#xa0;S4;&#xa0;versiones 19.3 anteriores a 19.3R2.&#xa0;Este problema no afecta a versiones del Juniper Networks Junos OS en Serie NFX y Serie SRX versiones anteriores a 18.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AE81FA-B0F3-4F0B-A2D1-2BB590345058"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB56048-A486-4A46-B438-CC3084BD9CB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11096",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0207",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.840",
      "lastModified" : "2024-11-21T05:42:12.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper interpretation conflict of certain data between certain software components within the Juniper Networks Junos OS devices does not allow certain traffic to pass through the device upon receipt from an ingress interface filtering certain specific types of traffic which is then being redirected to an egress interface on a different VLAN. This causes a Denial of Service (DoS) to those clients sending these particular types of traffic. Such traffic being sent by a client may appear genuine, but is non-standard in nature and should be considered as potentially malicious, and can be targeted to the device, or destined through it for the issue to occur. This issues affects IPv4 and IPv6 traffic. An indicator of compromise may be found by checking log files. You may find that traffic on the input interface has 100% of traffic flowing into the device, yet the egress interface shows 0 pps leaving the device. For example: [show interfaces \"interface\" statistics detail] Output between two interfaces would reveal something similar to: Ingress, first interface: -------------------- Interface Link Input packets (pps) Output packets (pps) et-0/0/0 Up 9999999999 (9999) 1 (0) -------------------- Egress, second interface: -------------------- Interface Link Input packets (pps) Output packets (pps) et-0/0/1 Up 0 (0) 9999999999 (0) -------------------- Dropped packets will not show up in DDoS monitoring/protection counters as issue is not caused by anti-DDoS protection mechanisms. This issue affects: Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S7 on NFX250, QFX5K Series, EX4600; 17.4 versions prior to 17.4R2-S11, 17.4R3-S3 on NFX250, QFX5K Series, EX4600; 18.1 versions prior to 18.1R3-S9 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4600; 18.2 versions prior to 18.2R3-S3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600; 18.3 versions prior to 18.3R3-S1 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.2 versions prior to 19.2R1-S5, 19.2R2 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.3 versions prior to 19.3R2-S3, 19.3R3 on NFX250, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series; 19.4 versions prior to 19.4R1-S2, 19.4R2 on NFX250, NFX350, QFX5K Series, EX2300 Series, EX3400 Series, EX4300 Multigigabit, EX4600 Series. This issue does not affect Junos OS releases prior to 17.2R2."
      }, {
        "lang" : "es",
        "value" : "Un conflicto de interpretación incorrecta de determinados datos entre ciertos componentes de software dentro de los dispositivos de Juniper Networks Junos OS no permite que determinado tráfico pase a través del dispositivo al recibirlo desde una interfaz de entrada que filtra ciertos tipos específicos de tráfico que luego se redirecciona a una interfaz de salida en una VLAN diferente.&#xa0;Esto causa una Denegación de Servicio (DoS) a aquellos clientes que envían estos tipos particulares de tráfico.&#xa0;Dicho tráfico enviado por un cliente puede parecer genuino, pero no es de naturaleza estándar y debe ser considerado potencialmente malicioso, y puede dirigirse al dispositivo o destinarse por medio de él para que ocurra el problema.&#xa0;Este problema afecta al tráfico IPv4 e IPv6.&#xa0;Se puede encontrar un indicador de compromiso al verificar los archivos de registro.&#xa0;Puede encontrar que el tráfico en la interfaz de entrada tiene el 100% del tráfico que fluye hacia el dispositivo, pero la interfaz de salida muestra 0 pps saliendo del dispositivo.&#xa0;Por ejemplo: [show interfaces \"interface\" statistics detail] La salida entre dos interfaces revelaría algo similar a: Ingress, first interface: -------------------- Interface Link Input packets (pps) Output packets (pps) et-0/0/0 Up 9999999999 (9999) 1 (0) -------------------- Egress, second interface: -------------------- Interface Link Input packets (pps) Output packets (pps) et-0/0/1 Up 0 (0) 9999999999 (0) -------------------- Los paquetes descartados no aparecerán en los contadores de protección/monitoreo de DDoS ya que el problema no es causado por mecanismos de protección anti-DDoS.&#xa0;Este problema afecta a: Juniper Networks Junos OS: versiones 17.3 anteriores a 17.3R3-S7 en Series NFX250, QFX5K, EX4600;&#xa0;versiones 17.&#xa0;4 anteriores a 17.4R2-S11, 17.4R3-S3 en Series NFX250, QFX5K, EX4600;&#xa0;versiones 18.1 anteriores a 18.1R3-S9 en NFX250, Serie QFX5K, Serie EX2300, Serie EX3400, EX4600;&#xa0;versiones 18.2 anteriores a 18.2R3-S3 en NFX250, Serie QFX5K, Serie EX2300, Serie EX3400, EX4300 Multigigabit, EX4600;&#xa0;versiones 18.3 anteriores a 18.3R3-S1 en Series NFX250, QFX5K, Serie EX2300, Serie EX3400, EX4300 Multigigabit, Serie EX4600;&#xa0;versiones 18.4 anteriores a 18.4R1-S5, 18.4R2-S3, 18.4R3 en NFX250, Serie QFX5K, Serie EX2300, Serie EX3400, EX4300 Multigigabit, Serie EX4600;&#xa0;versiones 19.1 anteriores a 19.1R1-S5, 19.1R2-S1, 19.1R3 en NFX250, Serie QFX5K, Serie EX2300, Serie EX3400, EX4300 Multigigabit, Serie EX4600;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R2 en NFX250, Serie QFX5K, Serie EX2300, Serie EX3400, Serie EX4300 Multigigabit, Serie EX4600;&#xa0;versiones 19.3 anteriores a 19.&#xa0;3R2-S3, 19.3R3 en NFX250, Serie QFX5K, Serie EX2300, Serie EX3400, EX4300 Multigigabit, Serie EX4600;&#xa0;versiones 19.4 anteriores a 19.4R1-S2, 19.4R2 en NFX250, NFX350, Serie QFX5K, Serie EX2300, Serie EX3400, EX4300 Multigigabit, Serie EX4600.&#xa0;Este problema no afecta a las versiones de Junos OS anteriores a 17.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-115"
        }, {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB56048-A486-4A46-B438-CC3084BD9CB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11097",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0208",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:14.947",
      "lastModified" : "2024-11-21T05:42:12.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper input validation vulnerability in the Routing Protocol Daemon (RPD) service of Juniper Networks Junos OS allows an attacker to send a malformed RSVP packet when bidirectional LSPs are in use, which when received by an egress router crashes the RPD causing a Denial of Service (DoS) condition. Continued receipt of the packet will sustain the Denial of Service. This issue affects: Juniper Networks Junos OS: All versions prior to 17.3R3-S10 except 15.1X49-D240 for SRX series; 17.4 versions prior to 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S4; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R3-S3; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R1-S4, 20.1R2; 15.1X49 versions prior to 15.1X49-D240 on SRX Series. Juniper Networks Junos OS Evolved: 19.3 versions prior to 19.3R2-S5-EVO; 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S4-EVO."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación de entrada inapropiada en el servicio Routing Protocol Daemon (RPD) de Juniper Networks Junos OS permite a un atacante enviar un paquete RSVP malformado cuando LSP bidireccionales son usados, que cuando lo recibe un enrutador de salida bloquea el RPD causando una condición de Denegación de Servicio (DoS).&#xa0;La recepción continua del paquete respaldará la Denegación de servicio.&#xa0;Este problema afecta a: Juniper Networks Junos OS: todas las versiones anteriores a 17.3R3-S10 excepto 15.1X49-D240 para la serie SRX;&#xa0;versiones 17.4 anteriores a 17.4R3-S2;&#xa0;versiones 18.1 anteriores a 18.1R3-S10;&#xa0;versiones 18.2 anteriores a 18.2R2-S7, 18.2R3-S4;&#xa0;versiones 18.3 anteriores a 18.3R3-S2;&#xa0;versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S6, 18.4R3-S2;&#xa0;versiones 19.1 anteriores a 19.1R1-S5, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R3;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3-S1;&#xa0;versiones 20.&#xa0;1 anteriores a 20.1R1-S4, 20.1R2;&#xa0;versiones de 15.1X49 anteriores a 15.1X49-D240 en la serie SRX.&#xa0;Juniper Networks Junos OS Evolved: versiones 19.3 anteriores a 19.3R2-S5-EVO;&#xa0;versiones 19.4 anteriores a 19.4R2-S2-EVO;&#xa0;versiones 20.1 anteriores a 20.1R1-S4-EVO"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d200:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F0055-74B8-41F3-BB43-6CBF3F231674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D617C-E88E-4981-91E1-0FAB5029E4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6480A5C9-3280-40C5-BC08-509555F28363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "83447F3F-79A3-41DF-8FD1-31DCFCBE40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B14CED1-BEAF-4343-A05D-FB1E2B6AC955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB91C38-8C70-436A-83DB-42B8DF81D7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED25FB6-E3FA-4543-90B2-50068D683D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBE159F-5D94-4C18-B922-331586BEA2CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11098",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/corouted-bidirectional-edit-protocols-mpls.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/disable-edit-protocols-rsvp.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/corouted-bidirectional-edit-protocols-mpls.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/disable-edit-protocols-rsvp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0209",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.027",
      "lastModified" : "2024-11-21T05:42:12.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Juniper Networks Junos OS Evolved an attacker sending certain valid BGP update packets may cause Junos OS Evolved to access an uninitialized pointer causing RPD to core leading to a Denial of Service (DoS). Continued receipt of these types of valid BGP update packets will cause an extended Denial of Service condition. RPD will require a restart to recover. An indicator of compromise is to see if the file rpd.re exists by issuing the command: show system core-dumps This issue affects: Juniper Networks Junos OS Evolved 19.4 versions prior to 19.4R2-S2-EVO; 20.1 versions prior to 20.1R1-S2-EVO, 20.1R2-S1-EVO. This issue does not affect Junos OS."
      }, {
        "lang" : "es",
        "value" : "En Juniper Networks Junos OS Evolved, un atacante que envía determinados paquetes de actualización de BGP válidos puede causar que Junos OS Evolved acceda a un puntero no inicializado, causando que RPD se convierta en el core conllevando a una Denegación de servicio (DoS).&#xa0;La recepción continua de estos tipos de paquetes de actualización de BGP válidos causará una condición de denegación de servicio extendida.&#xa0;RPD requerirá un reinicio para recuperarse.&#xa0;Un indicador de compromiso es visualizar si el archivo rpd.re existe al emitir el comando: show system core-dumps Este problema afecta a: Juniper Networks Junos OS Evolved versiones 19.4 anteriores a 19.4R2-S2-EVO;&#xa0;versiones 20.1 anteriores a 20.1R1-S2-EVO, 20.1R2-S1-EVO.&#xa0;Este problema no afecta a Junos OS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 5.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "83447F3F-79A3-41DF-8FD1-31DCFCBE40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B14CED1-BEAF-4343-A05D-FB1E2B6AC955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB91C38-8C70-436A-83DB-42B8DF81D7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED25FB6-E3FA-4543-90B2-50068D683D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBE159F-5D94-4C18-B922-331586BEA2CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11099",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0210",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.090",
      "lastModified" : "2024-11-21T05:42:12.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure vulnerability in J-Web of Juniper Networks Junos OS allows an unauthenticated attacker to elevate their privileges over the target system through opportunistic use of an authenticated users session. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3, 19.2R3-S1; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de exposición de la información en J-Web de Juniper Networks Junos OS permite a un atacante no autenticado elevar sus privilegios sobre el sistema objetivo mediante el uso oportunista de una sesión de usuarios autenticados.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 12.3 anteriores a 12.3R12-S17;&#xa0;versiones 17.3 anteriores a 17.3R3-S10;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S5;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R3, 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R2-S4, 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R1-S3, 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R1-S4, 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S1, 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C33DE7-4947-41D1-8DDF-DC7C9541414E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12D5D63-479D-4B27-8179-3B8985DB51F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4D8EE5-E93F-4F50-9D31-CD5A69531962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "B786F950-0E07-4ADC-B988-917994FE99CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2F703D05-C7A4-4EBF-A2FB-8AFE8E13DCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s13:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE640C-9ED9-4976-9083-DEEBDDAA5516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s14:*:*:*:*:*:*",
            "matchCriteriaId" : "9813A1FF-9AB3-46C0-BD65-5462E2942FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s15:*:*:*:*:*:*",
            "matchCriteriaId" : "564E4FA2-671F-4762-979F-4B8C93275412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s16:*:*:*:*:*:*",
            "matchCriteriaId" : "93C75780-930E-4263-9418-44682237EA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "99C8DC55-60AF-44D0-86C1-1F90C5DB0235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D23CEC9A-BF5F-489C-8CA7-1946238E20D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0010CCA3-6A76-4C18-82C4-BF44FECA4B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4D353E7F-F773-4502-B4EE-E73BA2DE1BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11100",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0211",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.167",
      "lastModified" : "2024-11-21T05:42:12.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved Routing Protocol Daemon (RPD) service allows an attacker to send a valid BGP FlowSpec message thereby causing an unexpected change in the route advertisements within the BGP FlowSpec domain leading to disruptions in network traffic causing a Denial of Service (DoS) condition. Continued receipt of these update messages will cause a sustained Denial of Service condition. This issue affects Juniper Networks: Junos OS: All versions prior to 17.3R3-S10 with the exceptions of 15.1X49-D240 on SRX Series and 15.1R7-S8 on EX Series; 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R1-S3, 19.4R2-S3, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S3 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2. Junos OS Evolved: All versions prior to 20.3R1-S1-EVO, 20.3R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada de condiciones inusuales o excepcionales en Juniper Networks. El servicio Routing Protocol Daemon (RPD) de Junos OS y Junos OS Evolved permite a un atacante enviar un mensaje BGP FlowSpec válido, causando un cambio inesperado en los anuncios de ruta dentro del dominio BGP FlowSpec que conlleva a interrupciones en el tráfico de la red que causan una condición de Denegación de Servicio (DoS).&#xa0;La recepción continua de estos mensajes de actualización causará una condición sostenida de Denegación de Servicio.&#xa0;Este problema afecta a Juniper Networks: Junos OS: todas las versiones anteriores a 17.3R3-S10 con las excepciones de 15.1X49-D240 en la serie SRX y 15.1R7-S8 en la Serie EX;&#xa0;versiones 17.3  anteriores a 17.3R3-S10;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S4; versiones&#xa0;18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S6; versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.&#xa0;4R1-S8, 18.4R2-S6, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R1-S3, 19.4R2-S3, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S3 20.2R2;&#xa0;versiones 20.3 anteriores a 20.3R1-S1, 20.3R2.&#xa0;Junos OS Evolved: todas las versiones anteriores a 20.3R1-S1-EVO, 20.3R2-EVO"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "14C57D33-01BB-4190-B787-F5BDACE82AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "83447F3F-79A3-41DF-8FD1-31DCFCBE40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2B14CED1-BEAF-4343-A05D-FB1E2B6AC955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB91C38-8C70-436A-83DB-42B8DF81D7D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AED25FB6-E3FA-4543-90B2-50068D683D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "487A82C9-7B7E-4ACA-BABF-65B8504079AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*",
            "matchCriteriaId" : "40D42ACF-860C-4B47-8E25-7DEC30FB8064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d200:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F0055-74B8-41F3-BB43-6CBF3F231674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D617C-E88E-4981-91E1-0FAB5029E4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-F643-40B7-B34F-3926151B0DFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C751DBA2-5E15-4953-A19A-BA320BC0D557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d140:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2302E8E5-E659-45E0-9819-249064124C14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d150:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA1D9AB-E5C7-41AB-9F00-860B871B34BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49-d160:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63E9B877-18EA-4CAB-8A01-58E09CC60DE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550_hm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06685D0E-A075-49A5-9EF4-34F0F795C8C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "17C66198-8D9A-454C-B645-A040A5C1E12E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "E0309A32-5087-4918-B1EE-10EC28F50B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex_rps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42877394-A0A1-4136-A1D3-D287BFCC85E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D4F71-8476-4F0D-A976-A308D6483D6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2200-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7BD5636-93D5-4C06-964F-00055DF6B2B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2200-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D066A90D-F7F2-4EA5-8F0C-D0E189DDB05D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C3597-C53B-4F4B-9EA7-126DA036C86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A536DA-5A57-4255-AB22-F99F8B7FF62A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7A20FC-A19F-4881-A0E8-C440E9FE60D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC326549-217D-4194-8310-AB398D6FF3F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32B9B26-8BF0-4C56-A9BF-D9BBAEA50506"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53269C69-3D1E-4F05-8EF6-81743D7A699E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4200-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0F54ADF-7C13-4AA6-B61E-627D4DBB1CF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-24p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BEA4BC3-093F-4DE6-BED1-2C7D2FC2C8A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-24p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "592377CC-4044-4FDD-A3DF-CBF25754EE4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-24t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12E8275-EF6B-44F9-A7D8-A769CDB5EED5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-24t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E63215-246E-49F3-A537-8A90D512DAB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-32f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1A5E69-928A-41A0-8B9B-91F307D99854"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-32f-dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B71953D-016D-4E72-B598-55667A507681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-32f-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CABBC37B-EB93-424D-A1E7-4686039C0955"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24526B69-E3E3-4249-80A4-A886BED5C07E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48mp-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2209605-65B6-44B3-9700-9EC543BF2408"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C348CF-65C1-4A53-8F4F-99B5A4113679"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48p-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60CB5F91-DC40-4D09-BB93-4539B8581877"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE8EB69-95DD-44E9-80A6-F2B5E34BBD5B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48t-afi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEEDB14F-E74A-4C48-A969-1D22D7F7C7C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48t-dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE3866E-109E-479F-9FFE-3F6E81C0DE7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48t-dc-afi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A17D793-5F01-4818-956D-D6BC5A6C4CEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48t-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4C3E8E-C8B4-42A5-8DB6-7E8114FCC030"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48tafi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77AF34EC-A154-4042-BE0B-B2BA9EEDEE93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48tdc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9FD3D9F-B49C-48EC-8AE1-FE3B399809DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-48tdc-afi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10DC1840-7409-4BD0-9522-B55B1166CF9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EECCB3-37B3-4146-8F8C-4BBFF84499E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "303ADB06-5CB5-44DA-8387-39FACC539EF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07B0E0B-D2F2-4CF1-A8EA-A1E8DE83BBB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B43F6CB-0595-4957-8B3B-ADD4EA84D8C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEE8AE4-B393-442C-AD68-4AC43E76A8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4500-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D842407-7A13-47C7-BBC9-FB0E978221CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E98077-92AF-4E3E-96F0-2E6F9D6343D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4550-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B84C72A-C314-46FB-8DD8-1DF29C6C4B0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4550\\/vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3612D798-7A5F-4068-A5A2-92173893450E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ECB975-D1A0-4318-9C5E-752A3C98F76F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex6200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CC1C89-B37F-4C5F-9F79-12997C79711D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex6210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FF88C7-89CB-4E04-BADA-AD64F8060C6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFE829C-325D-4E66-A6A2-A81BE8BCAB72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8200-vc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74B12A6-1CE2-4293-ABA5-E3F23E15485C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E67A5A-0DFF-42D9-81A7-570E9BCA463D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8216:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51C5371-51E9-40AE-8619-BC1267DD1D08"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E82CE3-F43D-4B29-A64D-B14ADB6CC357"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C0199E-B9F0-41D3-B625-083990517CDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9214:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8790B456-DFC7-4E82-9A0C-C89787139B79"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1E61-07A1-40B0-B616-F1A6E06D11C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9251:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "079290E9-DCC5-43F7-9480-64874DBF2696"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9253:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA71434-CCBF-4A55-8B30-D213A43E8641"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11101",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0212",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.260",
      "lastModified" : "2024-11-21T05:42:13.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail Networking versions prior to 1911.31."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Exposición de Información en Juniper Networks Contrail Networking, permite a un atacante autenticado localmente sea capaz de leer archivos para recuperar las credenciales de administrador almacenadas en texto plano, elevando así sus privilegios sobre el sistema.&#xa0;Este problema afecta: Juniper Networks Contrail Networking versiones anteriores a 1911.31"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:contrail_networking:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1911.31",
            "matchCriteriaId" : "9BB51C8D-545B-4F05-ACC2-108CB90B26BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11102",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0215",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.340",
      "lastModified" : "2024-11-21T05:42:13.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos EX series, QFX Series, MX Series and SRX branch series devices, a memory leak occurs every time the 802.1X authenticator port interface flaps which can lead to other processes, such as the pfex process, responsible for packet forwarding, to crash and restart. An administrator can use the following CLI command to monitor the status of memory consumption: user@device> show task memory detail Please refer to https://kb.juniper.net/KB31522 for details. This issue affects Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D54; 15.1X49 versions prior to 15.1X49-D240 ; 15.1X53 versions prior to 15.1X53-D593; 16.1 versions prior to 16.1R7-S8; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10 ; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S2, 19.4R2. This issue does not affect Juniper Networks Junos OS 12.3, 15.1."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos de Juniper Networks Junos serie EX, Serie QFX y serie de la rama SRX, ocurre un filtrado de memoria cada vez que la interfaz del puerto del autenticador 802.1X se interrumpe, lo que puede conllevar a que otros procesos, tales como el proceso pfex, responsable del reenvío de paquetes, se bloquee y reinicie. Un administrador puede usar el siguiente comando CLI para monitorear el estado del consumo de memoria: user@device&gt; show task memory detail Consulte https://kb.juniper.net/KB31522 para obtener más detalles. Este problema afecta a Juniper Networks Junos OS: versiones 14.1X53 anteriores a 14.1X53-D54; versiones 15.1X49 anteriores a 15.1X49-D240; versiones 15.1X53 anteriores a 15.1X53-D593; versiones 16.1 anteriores a 16.1R7-S8; versiones17.2 anteriores a 17.2R3-S4; versiones 17.3 anteriores a 17.3R3-S8; versiones 17.4 anteriores a 17.4R2-S11, 17.4R3-S2; versiones 18.1 anteriores a 18.1R3-S10 ; versiones 18.2 anteriores a 18.2R2-S7, 18.2R3-S3; versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S2; versiones 18.4 anteriores a 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; versiones 19.1 anteriores a 19.1R1-S5, 19.1R2-S2, 19.1R3; versiones 19.2 anteriores a 19.2R1-S5, 19.2R2; versiones 19.3 anteriores a 19.3R2-S3, 19.3R3; versiones 19.4 anteriores a 19.4R1-S2, 19.4R2. Este problema no afecta a Juniper Networks Junos OS versiones OS 12.3, 15.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0F3845-0966-469E-B6C6-8FA372208733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d44:*:*:*:*:*:*",
            "matchCriteriaId" : "81BEA7EA-FF95-425B-9245-21927E1F30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "E03E379C-BC08-4FB7-9C01-41F75DFD281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "6019BEF8-BEF4-463E-8E0C-149492BBD0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d52:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D4FAA9-982D-4442-AAFA-89FBA6A1EB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d53:*:*:*:*:*:*",
            "matchCriteriaId" : "DABD1E98-020F-42B6-B395-9D82D78CBC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d200:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F0055-74B8-41F3-BB43-6CBF3F231674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D617C-E88E-4981-91E1-0FAB5029E4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C9511DD0-D910-4C29-B0E3-8F9D0531F09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d230:*:*:*:*:*:*",
            "matchCriteriaId" : "3E364FE2-5FB1-4E14-8DF5-CA21F4BFBBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d231:*:*:*:*:*:*",
            "matchCriteriaId" : "7F22C4C2-20E0-428F-A9BF-37E8BD63A9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d232:*:*:*:*:*:*",
            "matchCriteriaId" : "71334963-7BF1-49DB-84E6-D6F2A927458B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d233:*:*:*:*:*:*",
            "matchCriteriaId" : "E773AA7F-AB97-488A-B73D-682FB5553B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d234:*:*:*:*:*:*",
            "matchCriteriaId" : "E9196882-FE7B-489A-81AC-55355864DA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d235:*:*:*:*:*:*",
            "matchCriteriaId" : "93CCFF32-D589-4E84-9A08-D667B14B0B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d236:*:*:*:*:*:*",
            "matchCriteriaId" : "F218BBE0-8F18-4A8E-8C95-8249B6776958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d237:*:*:*:*:*:*",
            "matchCriteriaId" : "E56F9D8C-27AA-43EC-9043-7A480265CE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d31:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3ED4F6-483F-41DC-BBCF-3605641ACAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "684A7156-DCB0-499E-B7F9-21F5F1598A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11105",
        "source" : "sirt@juniper.net",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0217",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.417",
      "lastModified" : "2024-11-21T05:42:13.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in processing of certain DHCP packets from adjacent clients on EX Series and QFX Series switches running Juniper Networks Junos OS with DHCP local/relay server configured may lead to exhaustion of DMA memory causing a Denial of Service (DoS). Over time, exploitation of this vulnerability may cause traffic to stop being forwarded, or to crashing of the fxpc process. When Packet DMA heap utilization reaches 99%, the system will become unstable. Packet DMA heap utilization can be monitored through the following command: user@junos# request pfe execute target fpc0 timeout 30 command \"show heap\" ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 213301a8 536870488 387228840 149641648 27 Kernel 1 91800000 8388608 3735120 4653488 55 DMA 2 92000000 75497472 74452192 1045280 1 PKT DMA DESC 3 d330000 335544320 257091400 78452920 23 Bcm_sdk 4 96800000 184549376 2408 184546968 99 Packet DMA <--- 5 903fffe0 20971504 20971504 0 0 Blob An indication of the issue occurring may be observed through the following log messages: Dec 10 08:07:00.124 2020 hostname fpc0 brcm_pkt_buf_alloc:523 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.126 2020 hostname fpc0 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.128 2020 hostname fpc0 brcm_pkt_buf_alloc:523 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.130 2020 hostnameC fpc0 (buf alloc) failed allocating packet buffer This issue affects Juniper Networks Junos OS on EX Series and QFX Series: 17.4R3 versions prior to 17.4R3-S3; 18.1R3 versions between 18.1R3-S6 and 18.1R3-S11; 18.2R3 versions prior to 18.2R3-S6; 18.3R3 versions prior to 18.3R3-S4; 18.4R2 versions prior to 18.4R2-S5; 18.4R3 versions prior to 18.4R3-S6; 19.1 versions between 19.1R2 and 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2. Junos OS versions prior to 17.4R3 are unaffected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de determinados paquetes DHCP de clientes adyacentes en switches de la Serie EX y Serie QFX que ejecutan el Juniper Networks Junos OS con un servidor de local/relay DHCP configurado puede conllevar a un agotamiento de la memoria DMA causando una Denegación de Servicio (DoS). Con el tiempo, una explotación de esta vulnerabilidad puede causar que el tráfico deje de ser reenviado o bloquearse un proceso fxpc. Cuando la utilización de la pila de paquetes DMA alcanza el 99%, el sistema se volverá inestable. La utilización de la pila de paquetes DMA puede ser monitoreada mediante el siguiente comando: user@junos# request pfe execute target fpc0 timeout 30 command \"show heap\" ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 213301a8 536870488 387228840 149641648 27 Kernel 1 91800000 8388608 3735120 4653488 55 DMA 2 92000000 75497472 74452192 1045280 1 PKT DMA DESC 3 d330000 335544320 257091400 78452920 23 Bcm_sdk 4 96800000 184549376 2408 184546968 99 Packet DMA (--- 5 903fffe0 20971504 20971504 0 0 Blob. Se puede observar una indicación del problema mediante los siguientes mensajes de registro: Dec 10 08:07:00.124 2020 hostname fpc0 brcm_pkt_buf_alloc:523 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.126 2020 hostname fpc0 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.128 2020 hostname fpc0 brcm_pkt_buf_alloc:523 (buf alloc) failed allocating packet buffer Dec 10 08:07:00.130 2020 hostnameC fpc0 (buf alloc) failed allocating packet buffer . Este problema afecta a Juniper Networks Junos SO en la Serie EX y Serie QFX: versiones 17.4R3 anteriores a 17.4R3-S3; versiones 18.1R3 entre 18.1R3-S6 y 18.1R3-S11; versiones 18.2R3 anteriores a 18.2R3-S6; versiones 18.3R3 anteriores a 18.3R3-S4; versiones 18.4R2 anteriores a 18.4R2-S5; versiones 18.4R3 anteriores a 18.4R3-S6; versiones 19.1 entre 19.1R2 y 19.1R3-S3; versiones 19.2 versiones anteriores a 19.2R3-S1; versiones 19.3 anteriores a 19.3R2-S5, 19.3R3; versiones 19.4 anteriores a 19.4R2-S2, 19.4R3; versiones 20.1 anteriores a 20.1R2; versiones 20.2 anteriores a 20.2R1-S2, 20.2R2. Las versiones de Junos OS anteriores a 17.4R3 no están afectadas por esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C3597-C53B-4F4B-9EA7-126DA036C86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A536DA-5A57-4255-AB22-F99F8B7FF62A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F07B0E0B-D2F2-4CF1-A8EA-A1E8DE83BBB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1E61-07A1-40B0-B616-F1A6E06D11C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11107",
        "source" : "sirt@juniper.net",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0218",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.510",
      "lastModified" : "2024-11-21T05:42:13.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user executes the command 'request system license update' via the CLI. An attacker with access to this CLI command may be able to exploit the vulnerability. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en el demonio de comprobación de licencias del Juniper Networks Junos OS, que puede permitir a un atacante autenticado localmente con pocos privilegios ejecutar comandos con privilegios root.&#xa0;license-check es un demonio que es usado para administrar licencias en Junos OS.&#xa0;Para actualizar las licencias, un usuario ejecuta el comando \"request system license update\" por medio de la CLI.&#xa0;Un atacante con acceso a este comando de la CLI puede explotar la vulnerabilidad.&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 17.3 anteriores a 17.3R3-S9;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R1-S4, 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S2, 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11108",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0219",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.590",
      "lastModified" : "2024-11-21T05:42:13.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with privileges to execute commands with root privilege. To validate a package in Junos before installation, an administrator executes the command 'request system software add validate-on-host' via the CLI. An attacker with access to this CLI command may be able to exploit this vulnerability. This issue affects Juniper Networks Junos OS: all versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R2-S8, 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2; 20.3 versions prior to 20.3R1-S1, 20.3R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en el subsistema de comprobación de paquetes de instalación del Juniper Networks Junos OS, que puede permitir a un atacante autenticado localmente privilegiado ejecutar comandos con privilegios root.&#xa0;Para comprobar un paquete en Junos antes de la instalación, un administrador ejecuta el comando \"request system software add validate-on-host\" por medio de la CLI.&#xa0;Un atacante con acceso a este comando de la CLI puede ser capaz de explotar esta vulnerabilidad.&#xa0;Este problema afecta a Juniper Networks Junos OS: todas las versiones anteriores a 17.3R3-S10;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.&#xa0;3 anteriores a 19.3R2-S5, 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S2, 20.2R2;&#xa0;versiones 20.3 anteriores a 20.3R1-S1, 20.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11109",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0220",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.667",
      "lastModified" : "2024-11-21T05:42:14.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Junos Space Network Management Platform has been found to store shared secrets in a recoverable format that can be exposed through the UI. An attacker who is able to execute arbitrary code in the victim browser (for example via XSS) or access cached contents may be able to obtain a copy of credentials managed by Junos Space. The impact of a successful attack includes, but is not limited to, obtaining access to other servers connected to the Junos Space Management Platform. This issue affects Juniper Networks Junos Space versions prior to 20.3R1."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado que Junos Space Network Management Platform almacena secretos compartidos en un formato recuperable que puede ser expuesto por medio de la Interfaz de Usuario.&#xa0;Un atacante que puede ejecutar código arbitrario en el navegador de la víctima (por ejemplo, por medio de un ataque de tipo XSS) o acceder al contenido almacenado en caché puede obtener una copia de las credenciales administradas por Junos Space.&#xa0;El impacto de un ataque con éxito incluye, pero no está limitado a, conseguir acceso a otros servidores conectados a Junos Space Management Platform.&#xa0;Este problema afecta a Juniper Networks Junos Space versiones anteriores a 20.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-257"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "289CAAE5-882C-4236-BF76-B20F8A7F3014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA36F3E8-0F58-4635-843C-B3C62FD48682"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA96869-72CF-49D2-94E1-4FF8102A29CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21DA6F2F-72F5-4D3A-AB4C-2C5D56C615FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6CF9AF7-A335-4C05-9F45-08253A521D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F7E9A7-CA85-4F4D-8F0C-DF0C79A80B93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61A323AE-7C8D-49F3-BB47-15DEBAFC86BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEC058B-C096-455B-9A75-5191E00A367D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E79208-AF42-48D9-990C-E2E2E1DE8E1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:11.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5E2C05-12C0-48B6-BE84-0A045B2A2B91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "167749D0-F3B8-48F3-BFC8-37A531E48C16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C754E5-ACBB-45DE-B983-0888A8EB7CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84E7CE7F-4410-461D-9381-B186789B6509"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:13.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE1AAAA-0C4E-4059-96E7-4D118BF2DBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:13.1:r1.8:*:*:*:*:*:*",
            "matchCriteriaId" : "04858E4C-720A-400E-81AF-B5572424B351"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:13.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5EDD9296-6FB1-45E2-80EE-9F0F84CAFC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DC29AA1D-4CBC-413A-9333-72F3616CE918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D618D6-F413-47DD-BD26-4F62B7227A7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A79F3A-80B9-4D98-92EE-681ED2E716B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4B00D0-93F9-4145-BA91-6F4A66F19854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:15.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB3FCB-192A-48A7-9FF3-3D228729AC60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB54773-A54F-4D9E-B213-464421B4FA88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "28D46176-27CE-4EAF-AF83-83F81A798103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EAC6FC-A2DC-4EF1-BF56-93728A9CDDAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:17.2:r1.4:*:*:*:*:*:*",
            "matchCriteriaId" : "BE35151C-FCF6-4A89-8283-B24225019241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "041D10A1-B577-4109-A98D-DA20560FDA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:18.1r1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D82DF30A-C838-49AC-95DC-16D765FD5588"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3FD83E88-0DD9-4584-B594-2839D15FA055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1FA208-9AC5-414A-917A-6595917440EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "746F17A3-C20A-495D-9EEA-635392ECE907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:junos_space:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F113B1F6-CF32-4BB4-A3C5-638D1531FE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5AA529-494F-4297-88FE-4C58B8FCA8F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:15.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0F319D4E-938C-44AF-868A-FBFF077D6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7481D0BF-0B4E-41E1-9DC7-0CBEE8375A1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C4A0C81-8572-4611-BD73-FE84099E7D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "58BFEC5C-5F42-4222-8B5B-AAC9466AEC94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA0A62-CEBF-4B19-AB8C-AB29209EC59E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "93C64B73-6631-4369-9CC3-8CE4EDB7A790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DD163C75-D934-4960-9834-8BA2A0218A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "222D409D-F0C5-4B52-84FC-D199A00A7ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "34CAC9C5-05C5-4027-A011-6EAA3DC5DB03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C04B6957-6526-4387-B146-8D9A11943F59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "480F31B7-6C19-466B-8083-0740D83D6309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_space:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BE62ED23-10C0-470A-8835-B6E6DACF1023"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11110",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0221",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.760",
      "lastModified" : "2024-11-21T05:42:14.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In an EVPN/VXLAN scenario, if an IRB interface with a virtual gateway address (VGA) is configured on a PE, a traffic loop may occur upon receipt of specific IP multicast traffic. The traffic loop will cause interface traffic to increase abnormally, ultimately leading to a Denial of Service (DoS) in packet processing. The following command could be used to monitor the interface traffic: user@junos> monitor interface traffic Interface Link Input packets (pps) Output packets (pps) et-0/0/1 Up 6492089274364 (70994959) 6492089235319 (70994956) et-0/0/25 Up 343458103 (1) 156844 (0) ae0 Up 9132519197257 (70994959) 9132519139454 (70994956) This issue affects Juniper Networks Junos OS on QFX Series: all versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S3; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2."
      }, {
        "lang" : "es",
        "value" : "En un escenario EVPN/VXLAN, si es configurada una interfaz IRB con una dirección de puerta de enlace virtual (VGA) en un PE, puede ocurrir un bucle de tráfico al recibir tráfico de multidifusión IP específico.&#xa0;El bucle de tráfico causará que un tráfico de la interfaz aumente anormalmente, lo que últimamente conllevará a una Denegación de Servicio (DoS) en el procesamiento de paquetes.&#xa0;El siguiente comando podría ser usado para monitorear el tráfico de la interfaz: user@junos&gt; monitor interface traffic Interface Link Input packets (pps) Output packets (pps) et-0/0/1 Up 6492089274364 (70994959) 6492089235319 (70994956) et-0/0/25 Up 343458103 (1) 156844 (0) ae0 Up 9132519197257 (70994959) 9132519139454 (70994956). Este problema afecta a Juniper Networks Junos OS en la Serie QFX: todas las versiones anteriores a 17.3R3-S10;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S5;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S2, 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11111",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0222",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.823",
      "lastModified" : "2024-11-21T05:42:14.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) to the device by sending certain crafted protocol packets from an adjacent device with invalid payloads to the device. These crafted packets, which should be discarded, are instead replicated and sent to the RE. Over time, a Denial of Service (DoS) occurs. Continued receipt of these crafted protocol packets will cause an extended Denial of Service (DoS) condition, which may cause wider traffic impact due to protocol flapping. An indication of compromise is to check \"monitor interface traffic\" on the ingress and egress port packet counts. For each ingress packet, two duplicate packets are seen on egress. This issue can be triggered by IPv4 and IPv6 packets. This issue affects all traffic through the device. This issue affects: Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D53 on EX4300, QFX3500, QFX5100, EX4600; 15.1 versions prior to 15.1R7-S6 on EX4300, QFX3500, QFX5100, EX4600; 16.1 versions prior to 16.1R7-S7 on EX4300, QFX5100, EX4600; 17.1 versions prior to 17.1R2-S11 on EX4300, QFX5100, EX4600; 17.1 versions prior to 117.1R3-S2 on EX4300; 17.2 versions prior to 17.2R1-S9 on EX4300; 17.2 versions prior to 17.2R3-S3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on EX4300, QFX5100, EX4600, QFX5110, QFX5200; 17.4 versions prior to 17.4R2-S9, 17.4R3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200; 18.1 versions prior to 18.1R3-S9 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, EX2300, EX3400; 18.2 versions prior to 18.2R2-S7 on EX4300; 18.2 versions prior to 18.2R3-S3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, EX2300, EX3400; 18.3 versions prior to 18.3R2-S3, on EX4300; 18.3 versions prior to 18.3R1-S7, 18.3R3-S1 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 19.1 versions prior to 19.1R1-S4, 19.1R2-S1, 19.1R3 on EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 19.2 versions prior to 19.2R1-S4, 19.2R2 on EX4300; 19.2 versions prior to 19.2R1-S3, 19.2R2 on QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; 19.3 versions prior to 19.3R2-S1, 19.3R3 on EX4300; 19.3 versions prior to 19.3R1-S1, 19.3R2, 19.3R3 on QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks Junos OS, permite a un atacante causar una Denegación de Servicio (DoS) al dispositivo mediante el envío de determinados paquetes de protocolo diseñados desde un dispositivo adyacente con cargas útiles no válidas al dispositivo. Estos paquetes diseñados, que deben ser descartados,  en lugar de eso son replicados y enviados al RE. Con el tiempo, ocurre una denegación de servicio (DoS). La recepción continua de estos paquetes de protocolo diseñados causará una condición de Denegación de Servicio (DoS) extendida, que puede causar un mayor impacto en el tráfico debido a la alteración del protocolo. Una indicación de compromiso es comprobar el \"monitor interface traffic\" en los recuentos de paquetes de puertos de entrada y salida. Para cada paquete de entrada, son vistos dos paquetes duplicados en la salida. Este problema puede ser desencadenado por paquetes IPv4 e IPv6. Este problema afecta a todo el tráfico a través del dispositivo. Este problema afecta: Juniper Networks Junos OS: versiones 14.1X53 anteriores a 14.1X53-D53 en EX4300, QFX3500, QFX5100, EX4600; versiones 15.1 anteriores a 15.1R7-S6 en EX4300, QFX3500, QFX5100, EX4600; versiones 16.1 anteriores a 16.1R7-S7 en EX4300, QFX5100, EX4600; versiones 17.1 anteriores a 17.1R2-S11 en EX4300, QFX5100, EX4600; versiones 17.1 anteriores a 117.1R3-S2 en EX4300; versiones 17.2 anteriores a 17.2R1-S9 en EX4300; versiones 17.2 anteriores a 17.2R3-S3 en EX4300, QFX5100, EX4600, QFX5110, QFX5200; versiones 17.3 anteriores a 17.3R2-S5, 17.3R3-S7 en EX4300, QFX5100, EX4600, QFX5110, QFX5200; versiones 17.4 anteriores a 17.4R2-S9, 17.4R3 en EX4300, QFX5100, EX4600, QFX5110, QFX5200; versiones 18.1 anteriores a 18.1R3-S9 en EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, EX2300, EX3400; versiones 18.2 anteriores a 18.2R2-S7 en EX4300; versiones 18.2 anteriores a 18.2R3-S3 en EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, EX2300, EX3400; versiones 18.3 anteriores a 18.3R2-S3, en EX4300; versiones 18.3 anteriores a 18.3R1-S7, 18.3R3-S1 en EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; versiones 18.4 anteriores a 18.4R1-S5, 18.4R2-S3, 18.4R3 en EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; versiones 19.1 anteriores a 19.1R1-S4, 19.1R2-S1, 19.1R3 en EX4300, QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; versiones 19.2 anteriores a 19.2R1-S4, 19.2R2 en EX4300; versiones 19.2 anteriores a 19.2R1-S3, 19.2R2 en QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; versiones  19.3 anteriores a 19.3R2-S1, 19.3R3 en EX4300; versiones 19.3 anteriores a 19.3R1-S1, 19.3R2, 19.3R3 en QFX5100, EX4600, QFX5110, QFX5200, QFX5210, QFX5120, EX4650, EX2300, EX3400; QFX5210, EX2300, EX3400"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0F3845-0966-469E-B6C6-8FA372208733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d44:*:*:*:*:*:*",
            "matchCriteriaId" : "81BEA7EA-FF95-425B-9245-21927E1F30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "E03E379C-BC08-4FB7-9C01-41F75DFD281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "6019BEF8-BEF4-463E-8E0C-149492BBD0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d52:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D4FAA9-982D-4442-AAFA-89FBA6A1EB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A336BD3-4AB0-4E9E-8AD5-E6413A5A53FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11094",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0223",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-01-15T18:15:15.900",
      "lastModified" : "2024-11-21T05:42:14.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and execute arbitrary commands as root. telnetd.real is shipped with setuid permissions enabled and is owned by the root user, allowing local users to run telnetd.real with root privileges. This issue affects Juniper Networks Junos OS: all versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios local en telnetd.real de Juniper Networks Junos OS, puede permitir a un usuario de shell autenticado local escalar privilegios y ejecutar comandos arbitrarios como root.&#xa0;telnetd.real es enviado con permisos setuid habilitados y es propiedad del usuario root, permitiendo a usuarios locales ejecutar telnetd.real con privilegios root.&#xa0;Este problema afecta a Juniper Networks Junos OS: todas las versiones anteriores a 15.1R7-S9;&#xa0;versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S7, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S4;&#xa0;versiones 19.2 anteriores a 19.2R1-S6, 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.&#xa0;1R1-S4, 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11114",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21237",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T18:15:15.980",
      "lastModified" : "2024-11-21T05:47:50.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git LFS is a command line extension for managing large files with Git. On Windows, if Git LFS operates on a malicious repository with a git.bat or git.exe file in the current directory, that program would be executed, permitting the attacker to execute arbitrary code. This does not affect Unix systems. This is the result of an incomplete fix for CVE-2020-27955. This issue occurs because on Windows, Go includes (and prefers) the current directory when the name of a command run does not contain a directory separator. Other than avoiding untrusted repositories or using a different operating system, there is no workaround. This is fixed in v2.13.2."
      }, {
        "lang" : "es",
        "value" : "Git LFS es una extensión de línea de comandos para administrar archivos grandes con Git.&#xa0;En Windows, si Git LFS opera en un repositorio malicioso con un archivo git.bat o git.exe en el directorio actual, ese programa será ejecutado, permitiendo al atacante ejecutar código arbitrario.&#xa0;Esto no afecta a los sistemas Unix.&#xa0;Este es el resultado de una corrección incompleta para CVE-2020-27955.&#xa0;Este problema ocurre porque en Windows, Go incluye (y prefiere) el directorio actual cuando el nombre de un comando ejecutado no contiene un separador de directorio.&#xa0;Aparte de evitar los repositorios que no son confiables o usando un sistema operativo diferente, no se presenta una solución alternativa.&#xa0;Esto es corregido en versión v2.13.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git_large_file_storage_project:git_large_file_storage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.13.2",
            "matchCriteriaId" : "ED5A8512-DFF5-4912-9924-FE6C511D14A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27955",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/commit/fc664697ed2c2081ee9633010de0a7f9debea72a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/security/advisories/GHSA-cx3w-xqmc-84g5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-27955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/commit/fc664697ed2c2081ee9633010de0a7f9debea72a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/releases/tag/v2.13.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git-lfs/git-lfs/security/advisories/GHSA-cx3w-xqmc-84g5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21243",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T20:15:12.037",
      "lastModified" : "2024-11-21T05:47:51.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, a Kubernetes REST endpoint exposes two methods that deserialize untrusted data from the request body. These endpoints do not enforce any authentication or authorization checks. This issue may lead to pre-auth RCE. This issue was fixed in 4.0.3 by not using deserialization at KubernetesResource side."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a 4.0.3, un endpoint REST de Kubernetes expone dos métodos que deserializan datos no confiables desde el cuerpo de la petición.&#xa0;Estos endpoints no aplican ninguna comprobación de autenticación o autorización.&#xa0;Este problema puede conllevar a una RCE previa a la autenticación.&#xa0;Este problema se corrigió en la versión 4.0.3 al no usar la deserialización en el lado de KubernetesResource"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/9637fc8fa461c5777282a0021c3deb1e7a48f137",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-9mmq-fm8c-q4fv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/9637fc8fa461c5777282a0021c3deb1e7a48f137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-9mmq-fm8c-q4fv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21244",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T20:15:12.097",
      "lastModified" : "2024-11-21T05:47:51.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, There is a vulnerability that enabled pre-auth server side template injection via Bean validation message tampering. Full details in the reference GHSA. This issue was fixed in 4.0.3 by disabling validation interpolation completely."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a  4.0.3. Se presenta una vulnerabilidad que habilita una inyección de plantilla del lado del servidor previa a la autenticación por medio de la manipulación del mensaje de comprobación de Bean.&#xa0;Detalles completos en la referencia GHSA.&#xa0;Este problema se corrigió en la versión 4.0.3 al deshabilitar la interpolación de comprobación por completo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/4f5dc6fb9e50f2c41c4929b0d8c5824b2cca3d65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-vm26-xg39-cfj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/4f5dc6fb9e50f2c41c4929b0d8c5824b2cca3d65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-vm26-xg39-cfj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21242",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.227",
      "lastModified" : "2024-11-21T05:47:50.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the `Attachment-Support` header. This Servlet does not enforce any authentication or authorization checks. This issue may lead to pre-auth remote code execution. This issue was fixed in 4.0.3 by removing AttachmentUploadServlet and not using deserialization"
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a  4.0.3, Se presenta una vulnerabilidad crítica que puede conllevar a una ejecución de código remota previa a la autenticación.&#xa0;El componente AttachmentUploadServlet deserializa los datos no confiables desde el encabezado \"Attachment-Support\".&#xa0;Este Servlet no aplica ninguna comprobación de autenticación o autorización.&#xa0;Este problema puede causar una ejecución de código remota previa a la autenticación.&#xa0;Este problema es corregido en versión 4.0.3 al eliminar AttachmentUploadServlet y no usar la deserialización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/f864053176c08f59ef2d97fea192ceca46a4d9be",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-5q3q-f373-2jv8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/f864053176c08f59ef2d97fea192ceca46a4d9be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-5q3q-f373-2jv8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21245",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.413",
      "lastModified" : "2024-11-21T05:47:51.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled data (`request.getInputStream()`) to a user specified location (`request.getHeader(\"File-Name\")`). This issue may lead to arbitrary file upload which can be used to upload a WebShell to OneDev server. This issue is addressed in 4.0.3 by only allowing uploaded file to be in attachments folder. The webshell issue is not possible as OneDev never executes files in attachments folder."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a  4.0.3, AttachmentUploadServlet también guarda unos datos controlados por el usuario (\"request.getInputStream()\") en una ubicación especificada del usuario (\"request.getHeader (\"File-Name\")\").&#xa0;Este problema puede conllevar a una carga de archivos arbitrarios que pueden ser usados para cargar un WebShell en el servidor de OneDev.&#xa0;Este problema es abordado en la versión 4.0.3, al permitir solo que el archivo cargado esté en la carpeta de archivos adjuntos.&#xa0;El problema del webshell no es posible ya que OneDev nunca ejecuta archivos en la carpeta de archivos adjuntos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/0c060153fb97c0288a1917efdb17cc426934dacb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-62m2-38q5-96w9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/0c060153fb97c0288a1917efdb17cc426934dacb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-62m2-38q5-96w9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21246",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.490",
      "lastModified" : "2024-11-21T05:47:51.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a security check to make sure that only administrators can list user details. However for the `/users/{id}` endpoint there are no security checks enforced so it is possible to retrieve arbitrary user details including their Access Tokens! These access tokens can be used to access the API or clone code in the build spec via the HTTP(S) protocol. It has permissions to all projects accessible by the user account. This issue may lead to `Sensitive data leak` and leak the Access Token which can be used to impersonate the administrator or any other users. This issue was addressed in 4.0.3 by removing user info from restful api."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a  4.0.3, el endpoint de REST UserResource lleva a cabo una comprobación de seguridad para asegurarse de que solo los administradores puedan enumerar los detalles del usuario.&#xa0;Sin embargo, para el endpoint \"/users/{id}\" no son aplicados controles de seguridad, por lo que es posible recuperar detalles arbitrarios del usuario, incluyendo sus tokens de acceso.&#xa0;Estos tokens de acceso pueden ser usados para acceder a la API o al código de clonación en la especificación de compilación por medio del protocolo HTTP(S).&#xa0;Presenta permisos para todos los proyectos accesibles por la cuenta de usuario.&#xa0;Este problema puede conllevar a una \"filtración de datos confidenciales\" y el token de acceso, que puede ser usada para hacerse pasar por el administrador o cualquier otro usuario.&#xa0;Este problema fue abordado en la versión 4.0.3 al eliminar la información del usuario de la API restful"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/a4491e5f79dc6cc96eac20972eedc8905ddf6089",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-66v7-gg85-f4gx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/a4491e5f79dc6cc96eac20972eedc8905ddf6089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-66v7-gg85-f4gx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21247",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.583",
      "lastModified" : "2024-11-21T05:47:51.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the application's BasePage registers an AJAX event listener (`AbstractPostAjaxBehavior`) in all pages other than the login page. This listener decodes and deserializes the `data` query parameter. We can access this listener by submitting a POST request to any page. This issue may lead to `post-auth RCE` This endpoint is subject to authentication and, therefore, requires a valid user to carry on the attack. This issue was addressed in 4.0.3 by encrypting serialization payload with secrets only known to server."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a  4.0.3, la BasePage de la aplicación registra un detector de eventos AJAX (\"AbstractPostAjaxBehavior\") en todas las páginas excepto en la página de inicio de sesión.&#xa0;Este oyente decodifica y deserializa el parámetro de consulta \"data\".&#xa0;Podemos acceder a este oyente mediante el envío de una petición  POST a cualquier página.&#xa0;Este problema puede conllevar a una \"post-auth RCE\". Este endpoint está sujeto a autenticación y, por lo tanto, requiere un usuario válido para llevar a cabo el ataque.&#xa0;Este problema fue abordado en la versión 4.0.3 al descifrar una carga útil de serialización con secretos que solo conoce el servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-6pxf-75cf-vwjp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-6pxf-75cf-vwjp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21248",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.663",
      "lastModified" : "2024-11-21T05:47:51.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability involving the build endpoint parameters. InputSpec is used to define parameters of a Build spec. It does so by using dynamically generated Groovy classes. A user able to control job parameters can run arbitrary code on OneDev's server by injecting arbitrary Groovy code. The ultimate result is in the injection of a static constructor that will run arbitrary code. For a full example refer to the referenced GHSA. This issue was addressed in 4.0.3 by escaping special characters such as quote from user input."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a 4.0.3. Se presenta una vulnerabilidad crítica que involucra los parámetros del endpoint de compilación.&#xa0;InputSpec es usada para definir parámetros de una especificación de compilación.&#xa0;Lo hace al usar clases Groovy generadas dinámicamente.&#xa0;Un usuario capaz de controlar los parámetros de trabajo puede ejecutar código arbitrario en el servidor de OneDev inyectando código Groovy arbitrario.&#xa0;El resultado final es la inyección de un constructor estático que ejecutará código arbitrario.&#xa0;Para obtener un ejemplo completo, consulte la GHSA referenciada.&#xa0;Este problema fue abordado en la versión 4.0.3 al escapar de caracteres especiales tal y como la cita de la entrada del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/39d95ab8122c5d9ed18e69dc024870cae08d2d60",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-gwp4-5498-hv5f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/39d95ab8122c5d9ed18e69dc024870cae08d2d60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-gwp4-5498-hv5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21249",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.740",
      "lastModified" : "2024-11-21T05:47:51.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is an issue involving YAML parsing which can lead to post-auth remote code execution. In order to parse and process YAML files, OneDev uses SnakeYaml which by default (when not using `SafeConstructor`) allows the instantiation of arbitrary classes. We can leverage that to run arbitrary code by instantiating classes such as `javax.script.ScriptEngineManager` and using `URLClassLoader` to load the script engine provider, resulting in the instantiation of a user controlled class. For a full example refer to the referenced GHSA. This issue was addressed in 4.0.3 by only allowing certain known classes to be deserialized"
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a 4.0.3, Se presenta un problema relacionado con el análisis de YAML que puede conllevar a una ejecución de código remota  posterior a la autenticación.&#xa0;Para analizar y procesar archivos YAML, OneDev usa SnakeYaml que por defecto (cuando no usa \"SafeConstructor\") permite la instanciación de clases arbitrarias.&#xa0;Podemos aprovechar eso para ejecutar código arbitrario creando instancias de clases como \"javax.script.ScriptEngineManager\" y usando \"URLClassLoader\" para cargar el proveedor del motor de script, resultando en la instanciación de una clase controlada por el usuario.&#xa0;Para obtener un ejemplo completo, consulte la GHSA referenciada.&#xa0;Este problema fue abordado en la versión 4.0.3, al permitir que determinadas clases conocidas sean deserializadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/d6fc4212b1ac1e9bbe3ce444e95f9af1e3ab8b66",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-7xhq-m2q9-6hpm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/d6fc4212b1ac1e9bbe3ce444e95f9af1e3ab8b66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-7xhq-m2q9-6hpm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21250",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.803",
      "lastModified" : "2024-11-21T05:47:51.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which may lead to arbitrary file read. When BuildSpec is provided in XML format, the spec is processed by XmlBuildSpecMigrator.migrate(buildSpecString); which processes the XML document without preventing the expansion of external entities. These entities can be configured to read arbitrary files from the file system and dump their contents in the final XML document to be migrated. If the files are dumped in properties included in the YAML file, it will be possible for an attacker to read them. If not, it is possible for an attacker to exfiltrate the contents of these files Out Of Band. This issue was addressed in 4.0.3 by ignoring ENTITY instructions in xml file."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a 4.0.3, Se presenta una vulnerabilidad crítica que puede conllevar a una lectura arbitraria de archivos.&#xa0;Cuando BuildSpec se proporciona en formato XML, XmlBuildSpecMigrator.migrate (buildSpecString) procesa la especificación;&#xa0;que procesa el documento XML sin evitar la expansión de entidades externas.&#xa0;Estas entidades se pueden configurar para leer archivos arbitrarios del sistema de archivos y volcar su contenido en el documento XML final que se migrará.&#xa0;Si los archivos se vuelcan en propiedades incluidas en el archivo YAML, un atacante podrá leerlos.&#xa0;Si no es así, es posible a un atacante exfiltre el contenido de estos archivos Fuera de la Banda.&#xa0;Este problema es corregido en versión 4.0.3 ignorando las instrucciones de ENTITY en el archivo xml"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/commit/9196fd795e87dab069b4260a3590a0ea886e770f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-9pph-8gfc-6w2r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/commit/9196fd795e87dab069b4260a3590a0ea886e770f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-9pph-8gfc-6w2r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21251",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-15T21:15:13.880",
      "lastModified" : "2024-11-21T05:47:51.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical \"zip slip\" vulnerability. This issue may lead to arbitrary file write. The KubernetesResource REST endpoint untars user controlled data from the request body using TarUtils. TarUtils is a custom library method leveraging Apache Commons Compress. During the untar process, there are no checks in place to prevent an untarred file from traversing the file system and overriding an existing file. For a successful exploitation, the attacker requires a valid __JobToken__ which may not be possible to get without using any of the other reported vulnerabilities. But this should be considered a vulnerability in `io.onedev.commons.utils.TarUtils` since it lives in a different artifact and can affect other projects using it. This issue was addressed in 4.0.3 by validating paths in tar archive to only allow them to be in specified folder when extracted."
      }, {
        "lang" : "es",
        "value" : "OneDev es una plataforma devops todo en uno.&#xa0;En OneDev versiones anteriores a 4.0.3, se presenta una vulnerabilidad crítica de \"zip slip\".&#xa0;Este problema puede conllevar a una escritura de archivo arbitraria.&#xa0;El endpoint REST KubernetesResource deshace los datos controlados por el usuario desde el cuerpo de la petición usando TarUtils.&#xa0;TarUtils es un método de biblioteca personalizado que aprovecha Apache Commons Compress.&#xa0;Durante el proceso untar, no existen comprobaciones para impedir que un archivo sin clasificar atraviese el sistema de archivos y anular un archivo existente.&#xa0;Para una explotación con éxito, el atacante requiere un __JobToken__ válido que puede que no sea posible obtener sin usar ninguna de las otras vulnerabilidades reportadas.&#xa0;Pero esto debería considerarse una vulnerabilidad en \"io.onedev.commons.utils.TarUtils\" ya que vive en un artefacto diferente y puede afectar a otros proyectos que lo usen.&#xa0;Este problema es corregido en la versión 4.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onedev_project:onedev:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "5287F01C-3A77-4491-AB49-401A50FAA6E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-2w6j-wc8c-9mq2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/theonedev/onedev/security/advisories/GHSA-2w6j-wc8c-9mq2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-15T22:15:13.227",
      "lastModified" : "2024-11-21T06:21:02.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Docker Desktop Community versiones anteriores a  2.5.0.0 en macOS, maneja inapropiadamente  una comprobación de certificados, conllevando a una escalada de privilegios local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "2.5.0.0",
            "matchCriteriaId" : "21F7B319-CE78-4BF7-A16D-7C94DAB3BCDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/docker-for-mac/release-notes/#docker-desktop-community-2500",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/_r3ggi",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.docker.com/docker-for-mac/release-notes/#docker-desktop-community-2500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/_r3ggi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-17T03:15:15.457",
      "lastModified" : "2024-11-21T06:20:54.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netsia SEBA+ through 0.16.1 build 70-e669dcd7 allows remote attackers to discover session cookies via a direct /session/list/allActiveSession request. For example, the attacker can discover the admin's cookie if the admin account happens to be logged in when the allActiveSession request occurs, and can then use that cookie immediately for admin access,"
      }, {
        "lang" : "es",
        "value" : "Netsia SEBA+ versiones hasta 0.16.1 build 70-e669dcd7, permite a atacantes remotos detectar cookies de sesión por medio de una petición directa a /session/list/allActiveSession.&#xa0;Por ejemplo, el atacante puede detectar la cookie del administrador si la cuenta de administrador ha iniciado sesión cuando ocurre la petición allActiveSession, y luego puede usar esa cookie inmediatamente para el acceso de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netsia:seba\\+:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.16.1",
            "matchCriteriaId" : "12A5B4B9-310E-4725-BED3-4B65F496D05F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49435",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.netsia.com/#netsiaseba",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.pentest.com.tr/exploits/Netsia-SEBA-0-16-1-Authentication-Bypass-Add-Root-User-Metasploit.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.netsia.com/#netsiaseba",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.pentest.com.tr/exploits/Netsia-SEBA-0-16-1-Authentication-Bypass-Add-Root-User-Metasploit.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T05:15:12.527",
      "lastModified" : "2024-11-21T06:21:02.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a firmware update when the filename Settings_DSL-N14U-B1.trx is used. Once this file is loaded, shutdown measures on a wide range of services are triggered as if it were a real update, resulting in a persistent outage of those services."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos ASUS DSL-N14U-B1 versión 1.1.2.3_805.&#xa0;Un atacante puede cargar contenido de archivo arbitrario como una actualización de firmware cuando el nombre de archivo Settings_DSL-N14U-B1.trx es usado.&#xa0;Una vez que es cargado este archivo, unas medidas de cierre en una amplia gama de servicios son desencadenadas como si fuera una actualización real, resultando en una interrupción persistente de esos servicios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:dsl-n14u_b1_firmware:1.1.2.3_805:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79217286-D764-4B98-A71C-4726579C9C83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:dsl-n14u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B82EA2-676E-4315-A142-D6D1F594381D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kaisersource/kaisersource.github.io/blob/main/_posts/2021-01-17-dsl-n14u.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kaisersource.github.io/dsl-n14u",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kaisersource/kaisersource.github.io/blob/main/_posts/2021-01-17-dsl-n14u.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kaisersource.github.io/dsl-n14u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T06:15:12.897",
      "lastModified" : "2024-11-21T05:54:41.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCATS through 0.9.5-3 unsafely deserializes index.php?m=activity requests, leading to remote code execution. This occurs because lib/DataGrid.php calls unserialize for the parametersactivity:ActivityDataGrid parameter. The PHP object injection exploit chain can leverage an __destruct magic method in guzzlehttp."
      }, {
        "lang" : "es",
        "value" : "OpenCATS versiones hasta 0.9.5-3, deserializa de manera no segura unas peticiones index.php?m=activity, conllevando a una ejecución de código remota.&#xa0;Esto ocurre porque la biblioteca lib/DataGrid.php llama sin serializar para el parámetro parametersactivity:ActivityDataGrid.&#xa0;La cadena de explotación de la inyección de objetos PHP puede explotar un método mágico __destruct en guzzlehttp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.5-3",
            "matchCriteriaId" : "BD326932-2195-452C-9DF1-8732C76FA938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snoopysecurity.github.io/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opencats.org/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snoopysecurity.github.io/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opencats.org/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T06:15:13.707",
      "lastModified" : "2024-11-21T05:54:42.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenCATS through 0.9.5-3 has multiple Cross-site Scripting (XSS) issues."
      }, {
        "lang" : "es",
        "value" : "OpenCATS versiones hasta 0.9.5-3, presenta múltiples problemas de tipo Cross-site Scripting (XSS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opencats:opencats:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.5-3",
            "matchCriteriaId" : "BD326932-2195-452C-9DF1-8732C76FA938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snoopysecurity.github.io/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opencats.org/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/snoopysecurity/snoopysecurity.github.io/blob/master/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snoopysecurity.github.io/web-application-security/2021/01/16/09_opencats_php_object_injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opencats.org/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T08:15:13.023",
      "lastModified" : "2024-11-21T05:54:29.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory allocation with excessive size vulnerability exists when reading malformed DGN files, which allows attackers to cause a crash, potentially enabling denial of service (crash, exit, or restart)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Open Design Alliance Drawings SDK versiones anteriores a 2021.12.&#xa0;Se presenta una vulnerabilidad de asignación de la memoria con un tamaño excesivo al leer archivos DGN malformados, lo que permite a los atacantes causar un bloqueo, permitiendo potencialmente un ataque de denegación de servicio (Bloqueo, Salida o Reinicio)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.12",
            "matchCriteriaId" : "CE4CF113-408B-4294-83FB-6FFC2D732143"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "4FB80DF8-5E85-4072-8999-02EDA895A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "0EB3193F-54C0-4678-A22D-A98D2134F9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-225/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-225/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T08:15:13.117",
      "lastModified" : "2024-11-21T05:54:30.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2021.12. A memory corruption vulnerability exists when reading malformed DGN files. It can allow attackers to cause a crash, potentially enabling denial of service (Crash, Exit, or Restart)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Open Design Alliance Drawings SDK versiones anteriores a 2021.12.&#xa0;Se presenta una vulnerabilidad de corrupción de la memoria al leer archivos DGN malformados.&#xa0;Puede permitir a los atacantes causar un bloqueo, permitiendo potencialmente un ataque de denegación de servicio (Bloqueo, Salida o Reinicio)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.12",
            "matchCriteriaId" : "CE4CF113-408B-4294-83FB-6FFC2D732143"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "4FB80DF8-5E85-4072-8999-02EDA895A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "0EB3193F-54C0-4678-A22D-A98D2134F9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-226/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-226/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T08:15:13.180",
      "lastModified" : "2024-11-21T05:54:30.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Conversion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el SDK de dibujos de Open Design Alliance anterior a la versión 2021.11. Existe un problema de conversión de tipos al renderizar archivos .DXF y .DWG malformados. Esto puede permitir que los atacantes provoquen un fallo, permitiendo potencialmente un ataque de denegación de servicio (Bloqueo, Salida o Reinicio)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.11",
            "matchCriteriaId" : "DADB9784-46BC-459C-A8E3-BF688917FF31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "4FB80DF8-5E85-4072-8999-02EDA895A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "0EB3193F-54C0-4678-A22D-A98D2134F9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-218/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-223/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-224/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-244/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-245/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-246/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-223/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-224/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-244/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-245/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-246/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T08:15:13.227",
      "lastModified" : "2024-11-21T05:54:30.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A NULL pointer dereference exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el SDK de dibujos de Open Design Alliance anterior a la versión 2021.11. Existe una derivación de puntero nulo al renderizar archivos .DXF y .DWG malformados. Esto puede permitir a los atacantes provocar un fallo, permitiendo potencialmente un ataque de denegación de servicio (Bloqueo, Salida o Reinicio)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.11",
            "matchCriteriaId" : "DADB9784-46BC-459C-A8E3-BF688917FF31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "4FB80DF8-5E85-4072-8999-02EDA895A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "0EB3193F-54C0-4678-A22D-A98D2134F9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-221/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-222/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-221/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-222/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T08:15:13.273",
      "lastModified" : "2024-11-21T05:54:30.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A Type Confusion issue exists when rendering malformed .DXF and .DWG files. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el SDK de dibujos de Open Design Alliance anterior a la versión 2021.11. Existe un problema de confusión de tipos al renderizar archivos .DXF y .DWG malformados. Esto puede permitir a los atacantes provocar un fallo, permitiendo potencialmente un ataque de denegación de servicio (Bloqueo, Salida o Reinicio)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.11",
            "matchCriteriaId" : "DADB9784-46BC-459C-A8E3-BF688917FF31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "4FB80DF8-5E85-4072-8999-02EDA895A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "0EB3193F-54C0-4678-A22D-A98D2134F9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-219/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-219/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-18T08:15:13.337",
      "lastModified" : "2024-11-21T05:54:30.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Open Design Alliance Drawings SDK before 2021.11. A stack-based buffer overflow vulnerability exists when the recover operation is run with malformed .DXF and .DWG files. This can allow attackers to cause a crash potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Open Design Alliance Drawings SDK versiones anteriores a 2021.11.&#xa0;Se presenta una vulnerabilidad de desbordamiento del búfer en la región stack de la memoria cuando la operación de recuperación se ejecuta con archivos .DXF y .DWG malformados.&#xa0;Esto puede permitir a los atacantes causar un bloqueo permitiendo potencialmente un ataque de denegación de servicio (bloqueo, salida o reinicio) o una posible ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.11",
            "matchCriteriaId" : "DADB9784-46BC-459C-A8E3-BF688917FF31"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:jt2go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "4FB80DF8-5E85-4072-8999-02EDA895A112"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:teamcenter_visualization:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.1.0.1",
            "matchCriteriaId" : "0EB3193F-54C0-4678-A22D-A98D2134F9E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-220/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-240/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-243/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-663999.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-220/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-240/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-243/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20619",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-19T05:15:13.933",
      "lastModified" : "2024-11-21T05:46:53.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in GROWI (v4.2 Series) versions prior to v4.2.3 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en GROWI (serie v4.2) versiones anteriores a v4.2.3, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.3",
            "matchCriteriaId" : "D3FA8C18-BFF8-4F57-8CE7-D0C2A3B99006"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/weseek/growi",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57544707/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/01/18/vulnerability/growi-prevent-xss4/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/weseek/growi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN57544707/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/01/18/vulnerability/growi-prevent-xss4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T06:15:12.967",
      "lastModified" : "2025-12-18T15:15:48.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely."
      }, {
        "lang" : "es",
        "value" : "Python versiones 3.x hasta 3.9.1, presenta un desbordamiento de búfer en la función PyCArg_repr en el archivo _ctypes/callproc.c, que puede conllevar a una ejecución de código remota en determinadas aplicaciones de Python que aceptan números de punto flotante como entrada no confiable, como es demostrado por un argumento 1e300 para c_double.from_param.&#xa0;Esto ocurre porque sprintf es usado de manera no segura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndIncluding" : "3.6.12",
            "matchCriteriaId" : "36BA2707-5796-40F7-BF68-45B526055EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndIncluding" : "3.7.9",
            "matchCriteriaId" : "341BD393-7E8A-444A-862A-A0D4CFAAEE19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndIncluding" : "3.8.7",
            "matchCriteriaId" : "293F06D4-DF52-4F97-A3A0-0FB0B3A34D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndIncluding" : "3.9.1",
            "matchCriteriaId" : "45EB1A7C-6F8B-4462-93FB-435E3E36AEA3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:22.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B77BFB7-C105-4A42-A9A4-45EF4EC8556F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49ACFC73-A509-4D1C-8FC3-F68F495AB055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B49D71-6A31-497A-B6A9-06E84F086E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.python.org/issue42938",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/24239",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/02/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRHOCQYX3QLDGDQGTWQAUUT2GGIZCZUO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCFZMVRQUKCBQIG5F2CBVADK63NFSE4A/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPE7SMXYUIWPOIZV4DQYXODRXMFX3C5E/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MGSV6BJQLRQ6RKVUXK7JGU7TP4QFGQXC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NQPARTLNSFQVMMQHPNBFOCOZOO3TMQNA/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXSMBHES3ANXXS2RSO5G6Q24BR4B2PWK/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6XJAULOS5JVB2L67NCKKMJ5NTKZJBSD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4KSYYWMGAKOA2JVCQA422OINT6CKQ7O/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDTZVGSXQ7HR7OCGSUHTRNTMBG43OMKU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7GZV74KM72O2PEJN2C4XP3V5Q5MZUOO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://news.ycombinator.com/item?id=26185005",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-18",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.python.org/issue42938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/24239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/02/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRHOCQYX3QLDGDQGTWQAUUT2GGIZCZUO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCFZMVRQUKCBQIG5F2CBVADK63NFSE4A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FPE7SMXYUIWPOIZV4DQYXODRXMFX3C5E/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MGSV6BJQLRQ6RKVUXK7JGU7TP4QFGQXC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NQPARTLNSFQVMMQHPNBFOCOZOO3TMQNA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NXSMBHES3ANXXS2RSO5G6Q24BR4B2PWK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V6XJAULOS5JVB2L67NCKKMJ5NTKZJBSD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4KSYYWMGAKOA2JVCQA422OINT6CKQ7O/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YDTZVGSXQ7HR7OCGSUHTRNTMBG43OMKU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7GZV74KM72O2PEJN2C4XP3V5Q5MZUOO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://news.ycombinator.com/item?id=26185005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://python-security.readthedocs.io/vuln/ctypes-buffer-overflow-pycarg_repr.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T07:15:13.443",
      "lastModified" : "2024-11-21T06:21:04.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, allows remote attackers to traverse to other parts of the filesystem via READDIRPLUS. NOTE: some parties argue that such a subdirectory export is not intended to prevent this attack; see also the exports(5) no_subtree_check default behavior"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** en el archivo fs/nfsd/nfs3xdr.c en el kernel de Linux versiones hasta 5.10.8, cuando se presenta una exportación NFS de un subdirectorio de un sistema de archivos, permite a atacantes remotos saltar otras partes del sistema de archivos por medio de READDIRPLUS.&#xa0;NOTA: algunas terceros argumentan que tal exportación de subdirectorios no intenta impedir este ataque;&#xa0;véase también el comportamiento predeterminado de no_subtree_check de exports(5)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10.8",
            "matchCriteriaId" : "6F39D11B-E596-4D1C-AA3A-29C3D33CDC0D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51b2ee7d006a736a9126e8111d1f24e4fd0afaa6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SGB7TNDVQEOJ7NVTGX56UWHDNQM5TRC/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=51b2ee7d006a736a9126e8111d1f24e4fd0afaa6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5SGB7TNDVQEOJ7NVTGX56UWHDNQM5TRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://patchwork.kernel.org/project/linux-nfs/patch/20210111210129.GA11652%40fieldses.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22850",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-01-19T10:15:15.243",
      "lastModified" : "2024-11-21T05:50:45.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga EIP product lacks ineffective access control in certain pages that allow attackers to access database or perform privileged functions."
      }, {
        "lang" : "es",
        "value" : "El producto HGiga EIP carece de un control de acceso ineficaz en determinadas páginas que permiten a atacantes acceder a la base de datos o llevar a cabo funciones privilegiadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_portal:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E80D865-87E7-4019-8238-198743CCCD8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4326-3d9d2-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4326-3d9d2-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22851",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-01-19T10:15:15.807",
      "lastModified" : "2024-11-21T05:50:45.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (document management page) to obtain database schema and data."
      }, {
        "lang" : "es",
        "value" : "El producto HGiga EIP, contiene vulnerabilidad de inyección SQL.&#xa0;Los atacantes pueden inyectar comandos SQL en un parámetro URL específico (página de administración de documentos) para obtener el esquema y los datos de la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_openid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.0-54",
            "matchCriteriaId" : "5FD039C1-D416-485C-A413-5D6EF6B31E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_openid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0-54",
            "matchCriteriaId" : "B6FB0F7D-7B74-4485-86FE-30A0A7CF9E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4327-50e99-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4327-50e99-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22852",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-01-19T10:15:15.930",
      "lastModified" : "2024-11-21T05:50:45.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga EIP product contains SQL Injection vulnerability. Attackers can inject SQL commands into specific URL parameter (online registration) to obtain database schema and data."
      }, {
        "lang" : "es",
        "value" : "El producto HGiga EIP, contiene vulnerabilidad de inyección SQL.&#xa0;Los atacantes pueden inyectar comandos SQL en un parámetro URL específico (registro en línea) para obtener el esquema y los datos de la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_openid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.0-54",
            "matchCriteriaId" : "5FD039C1-D416-485C-A413-5D6EF6B31E4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:oaklouds_openid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0-54",
            "matchCriteriaId" : "B6FB0F7D-7B74-4485-86FE-30A0A7CF9E0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4328-97765-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/eb024200-7cf9-4c58-a063-c451dbc9daef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4328-97765-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T15:15:12.327",
      "lastModified" : "2024-11-21T06:21:04.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rfc822.c in Mutt through 2.0.4 allows remote attackers to cause a denial of service (mailbox unavailability) by sending email messages with sequences of semicolon characters in RFC822 address fields (aka terminators of empty groups). A small email message from the attacker can cause large memory consumption, and the victim may then be unable to see email messages from other persons."
      }, {
        "lang" : "es",
        "value" : "El archivo rfc822.c en Mutt versiones hasta 2.0.4, permite a atacantes remotos causar una denegación de servicio (buzón de correo no disponible) mediante el envío de mensajes de correo electrónico con secuencias de caracteres de punto y coma en los campos de dirección RFC822 (también se conoce como terminadores de grupos vacíos).&#xa0;Un pequeño mensaje de correo electrónico del atacante puede causar un gran consumo de memoria y, por lo tanto, es posible que la víctima no pueda ver los mensajes de correo electrónico de otras personas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.4",
            "matchCriteriaId" : "E8849245-2623-4D3C-B487-743A1D80B1EC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/19/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/27/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/4a2becbdb4422aaffe3ce314991b9d670b7adf17",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/939b02b33ae29bc0d642570c1dcfd4b339037d19",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/d4305208955c5cdd9fe96dfa61e7c1e14e176a14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/issues/323",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXGWXFO77HBCD3VYEIYHHYU33LYWWWNQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2OMLQKAOHPYQA4GI7ZUO6UKCPUHLYO7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-25",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4838",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/19/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/27/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/4a2becbdb4422aaffe3ce314991b9d670b7adf17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/939b02b33ae29bc0d642570c1dcfd4b339037d19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/d4305208955c5cdd9fe96dfa61e7c1e14e176a14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/issues/323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DXGWXFO77HBCD3VYEIYHHYU33LYWWWNQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2OMLQKAOHPYQA4GI7ZUO6UKCPUHLYO7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T15:15:12.403",
      "lastModified" : "2024-11-21T06:21:04.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DCS-5220 devices have a buffer overflow. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** Los dispositivos D-Link DCS-5220 presentan un desbordamiento del búfer.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dcs-5220_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7C2CF41-9326-4BAF-9AAA-F6D90C198C66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dcs-5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE766792-3942-4F81-A300-74BD7FF6F17A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10203",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T15:15:12.467",
      "lastModified" : "2024-11-21T06:21:05.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Files.com Fat Client 3.3.6 allows authentication bypass because the client continues to have access after a logout and a removal of a login profile."
      }, {
        "lang" : "es",
        "value" : "Files.com Fat Client versión 3.3.6, permite omitir la autenticación porque el cliente continúa teniendo acceso después de cerrar sesión y eliminar un perfil de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:files:fat_client:3.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51CD7C43-7154-4B00-8E07-9D4C28077D84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://seclists.org/fulldisclosure/2021/Jan/20",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2021/Jan/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22498",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-01-19T16:15:13.250",
      "lastModified" : "2024-11-21T05:50:13.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XML External Entity Injection vulnerability in Micro Focus Application Lifecycle Management (Previously known as Quality Center) product. The vulnerability affects versions 12.x, 12.60 Patch 5 and earlier, 15.0.1 Patch 2 and earlier and 15.5. The vulnerability could be exploited to allow an XML External Entity Injection."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Inyección de Entidad Externa XML en el producto Micro Focus Application Lifecycle Management (anteriormente se conoce como Quality Center).&#xa0;La vulnerabilidad afecta a las versiones 12.x, 12.60 Parche 5 y anteriores, 15.0.1 Parche 2 y anteriores y 15.5.&#xa0;La vulnerabilidad podría ser explotada para permitir una Inyección de Entidad Externa XML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.50",
            "versionEndIncluding" : "12.60",
            "matchCriteriaId" : "04E989E6-96B6-431F-A68E-44C3DC4CCC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndIncluding" : "15.0.1",
            "matchCriteriaId" : "8C2AA512-D7E4-4ABF-B495-542D4EB856C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "7424FAB0-201A-4908-8826-245DA119C5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "48260409-EAC4-4294-A665-76F5D97F74BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "2D261545-AB84-4C3D-8EDB-9986B5B5C252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "E49D67E6-5499-4653-B945-C17DE52ADD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:12.60:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "E19D3008-08D5-4E5F-9F67-99E917EDE855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:15.0.1:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "B90BEA78-299C-4AE2-ABE7-D499F05C4E8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:15.0.1:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "41910128-1873-40CB-9875-48940AC95AD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_lifecycle_management:15.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B5A87A-BE3D-4041-A971-8DF3A32D578A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03771781",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03771781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25323",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T16:15:13.327",
      "lastModified" : "2024-11-21T05:54:44.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default setting of MISP 2.4.136 did not enable the requirements (aka require_password_confirmation) to provide the previous password when changing a password."
      }, {
        "lang" : "es",
        "value" : "La configuración predeterminada de MISP versión 2.4.136 no habilitó los requisitos (también se conoce como require_password_confirmation) para proporcionar la contraseña anterior al cambiar una contraseña"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847602BA-85D7-432D-917D-76D14E6D2769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/afbf95a478b6e94f532ca0776c79da1b08be7eed",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/afbf95a478b6e94f532ca0776c79da1b08be7eed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25324",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T16:15:13.390",
      "lastModified" : "2024-11-21T05:54:45.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MISP 2.4.136 has Stored XSS in the galaxy cluster view via a cluster name to app/View/GalaxyClusters/view.ctp."
      }, {
        "lang" : "es",
        "value" : "MISP versión 2.4.136, presenta un XSS Almacenado en la vista del clúster galaxy por medio de un nombre de clúster en el archivo app/View/GalaxyClusters/view.ctp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847602BA-85D7-432D-917D-76D14E6D2769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/741243f707cac7de1a3769a38e03004f037f4a3d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/741243f707cac7de1a3769a38e03004f037f4a3d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T16:15:13.453",
      "lastModified" : "2024-11-21T05:54:45.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MISP 2.4.136 has XSS via galaxy cluster element values to app/View/GalaxyElements/ajax/index.ctp. Reference types could contain javascript: URLs."
      }, {
        "lang" : "es",
        "value" : "MISP versión 2.4.136, presenta un XSS por medio de valores de elementos del clúster galaxy en el archivo app/View/GalaxyElements/ajax/index.ctp.&#xa0;Los tipos de referencia pueden contener unas URL javascript:"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847602BA-85D7-432D-917D-76D14E6D2769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/829c3199ba3afdecb52e0719509f3df4463be5b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/829c3199ba3afdecb52e0719509f3df4463be5b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-19T16:15:13.560",
      "lastModified" : "2024-11-21T06:21:05.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button."
      }, {
        "lang" : "es",
        "value" : "MISP versión 2.4.136, presenta un XSS por medio de una URL diseñada para el botón favorito de la página de inicio del usuario app/View/Elements/global_menu.ctp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.136:*:*:*:*:*:*:*",
            "matchCriteriaId" : "847602BA-85D7-432D-917D-76D14E6D2769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/8283e0fbec551f45f3f181cdb2cf29cddc23df66",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/8283e0fbec551f45f3f181cdb2cf29cddc23df66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20190",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-19T17:15:13.427",
      "lastModified" : "2025-08-27T21:15:36.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in jackson-databind before 2.9.10.7. FasterXML mishandles the interaction between serialization gadgets and typing. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en jackson-databind versiones anteriores a 2.9.10.7.&#xa0;FasterXML maneja inapropiadamente la interacción entre los gadgets de serialización y escritura.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.7.5",
            "matchCriteriaId" : "92CF0272-B961-44D2-95F6-162A23169E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fasterxml:jackson-databind:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.9.10.7",
            "matchCriteriaId" : "8D404972-B307-4BF1-A261-8E8E317301ED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC98B22-FFAA-4B59-8E63-EBAA4336AD13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:service_level_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7081652A-D28B-494E-94EF-CA88117F23EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nifi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndIncluding" : "1.12.1",
            "matchCriteriaId" : "6CBC8F5C-01FF-4F4E-9A86-550EDCAE8980"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_guided_search_and_experience_manager:11.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6553225-EDFB-42D1-BCEC-6ACF35C08150"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1916633",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/2854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r380e9257bacb8551ee6fcf2c59890ae9477b2c78e553fa9ea08e9d9a%40%3Ccommits.nifi.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0008/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1916633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FasterXML/jackson-databind/issues/2854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r380e9257bacb8551ee6fcf2c59890ae9477b2c78e553fa9ea08e9d9a%40%3Ccommits.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21263",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-19T20:15:13.300",
      "lastModified" : "2024-11-21T05:47:53.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Laravel is a web application framework. Versions of Laravel before 6.20.11, 7.30.2 and 8.22.1 contain a query binding exploitation. This same exploit applies to the illuminate/database package which is used by Laravel. If a request is crafted where a field that is normally a non-array value is an array, and that input is not validated or cast to its expected type before being passed to the query builder, an unexpected number of query bindings can be added to the query. In some situations, this will simply lead to no results being returned by the query builder; however, it is possible certain queries could be affected in a way that causes the query to return unexpected results."
      }, {
        "lang" : "es",
        "value" : "Laravel es un framework de aplicación web.&#xa0;Las versiones de Laravel anteriores a 6.20.11, 7.30.2 y 8.22.1 contienen una explotación de enlace de consultas.&#xa0;Esta misma explotación se aplica al paquete illuminate/database que usa Laravel.&#xa0;Si una petición es diseñada donde un campo que normalmente es un valor que no es una matriz es una matriz, y esa entrada no es comprobada ni se convierte al tipo esperado antes de pasarla al generador de consultas, una cantidad inesperada de enlaces de consulta pueden ser agregadas a la consulta.&#xa0;En algunas situaciones, esto simplemente conllevará a que el generador de consultas no devuelva resultados;&#xa0;sin embargo, es posible que determinadas consultas estén afectadas de forma que cause que la consulta devuelva resultados inesperados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.20.11",
            "matchCriteriaId" : "B836AE41-90D9-421F-A03D-8FFA614D6036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.30.2",
            "matchCriteriaId" : "B854A88E-3CF8-4AD3-B0F6-428D3FA518D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:laravel:laravel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.22.1",
            "matchCriteriaId" : "4938EC41-68FD-4EA4-9B44-A40B74F118BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.laravel.com/security-laravel-62011-7302-8221-released",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/pull/35865",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/illuminate/database",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/laravel/framework",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.laravel.com/security-laravel-62011-7302-8221-released",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/pull/35865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laravel/framework/security/advisories/GHSA-3p32-j457-pg5x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/illuminate/database",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/laravel/framework",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3137",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-20T04:15:13.170",
      "lastModified" : "2024-11-21T06:20:58.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki 12.10.2 allows XSS via an SVG document to the upload feature of the comment section."
      }, {
        "lang" : "es",
        "value" : "XWiki versión 12.10.2, permite un ataque de tipo XSS por medio de un documento SVG en la funcionalidad de carga de la sección de comentarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:12.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D84C1F8E-A412-42F6-8727-DAB134816F23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49437",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23326",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-01-20T13:15:12.893",
      "lastModified" : "2024-11-21T05:51:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package @graphql-tools/git-loader before 6.2.6. The use of exec and execSync in packages/loaders/git/src/load-git.ts allows arbitrary command injection."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete @graphql-tools/git-loader versiones anteriores a 6.2.6.&#xa0;El uso de exec y execSync en el archivo packages/loaders/git/src/load-git.ts permite una inyección de comandos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:the-guild:graphql-tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.6",
            "matchCriteriaId" : "A2F072CE-E503-488D-99E9-74C530587BF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4300",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ardatan/graphql-tools/commit/6a966beee8ca8b2f4adfe93318b96e4a5c501eac",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ardatan/graphql-tools/pull/2470",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ardatan/graphql-tools/releases/tag/%40graphql-tools%2Fgit-loader%406.2.6",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-GRAPHQLTOOLSGITLOADER-1062543",
        "source" : "report@snyk.io",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4300",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ardatan/graphql-tools/commit/6a966beee8ca8b2f4adfe93318b96e4a5c501eac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ardatan/graphql-tools/pull/2470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ardatan/graphql-tools/releases/tag/%40graphql-tools%2Fgit-loader%406.2.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-GRAPHQLTOOLSGITLOADER-1062543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-20T13:15:13.033",
      "lastModified" : "2024-11-21T06:20:54.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_products[] parameter."
      }, {
        "lang" : "es",
        "value" : "El sistema de tienda en PrestaShop versión 1.7.7.0, permite una inyección SQL booleana basada en el tiempo por medio del parámetro id_products[] de module=productcomments controller=CommentGrade"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:1.7.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49D8A352-FD0E-4537-86AC-06DC97ED2A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40gondaliyajaimin797/cve-2021-3110-75a24943ca5e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.exploit-db.com/exploits/49410",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://medium.com/%40gondaliyajaimin797/cve-2021-3110-75a24943ca5e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.exploit-db.com/exploits/49410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1993",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:44.643",
      "lastModified" : "2024-11-21T05:45:45.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 4.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Java VM de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante poco privilegiado que tenga privilegio Create Session con acceso de red por medio de Oracle Net comprometer a Java VM.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Java VM.&#xa0;CVSS 3.1 Puntuación Base 4.8 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6833701E-5510-4180-9523-9CFD318DEE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2204841-585F-40C7-A1D9-C34E612808CA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED59B62-C9BF-4C0E-B351-3884E8441655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1994",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:44.737",
      "lastModified" : "2024-11-21T05:45:46.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Web Services).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0 y 12.1.3.0.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_repository:11.1.1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69300B13-8C0F-4433-A6E8-B2CE32C4723D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1995",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:44.817",
      "lastModified" : "2024-11-21T05:45:46.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Web Services).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0 y 12.1.3.0.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1996",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:44.877",
      "lastModified" : "2024-11-21T05:45:46.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 2.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Web Services).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0 y 12.1.3.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 2.4 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C9DBB8-3D50-4D5D-859A-B022EB7C2E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED59B62-C9BF-4C0E-B351-3884E8441655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12",
            "matchCriteriaId" : "30DB69BD-0F6E-4AB5-A861-7CB911C35660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1997",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:44.957",
      "lastModified" : "2024-11-21T05:45:46.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Report). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Reporting and Analytics. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Hospitality Reporting and Analytics accessible data as well as unauthorized access to critical data or complete access to all Oracle Hospitality Reporting and Analytics accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Hospitality Reporting and Analytics de Oracle Food and Beverage Applications (componente: Report).&#xa0;La versión compatible que está afectada es 9.1.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle Hospitality Reporting and Analytics.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Hospitality Reporting and Analytics, así como en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Hospitality Reporting and Analytics.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "887C35CC-2F9D-4DC9-B8EB-6E93D99F390C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1998",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.017",
      "lastModified" : "2024-11-21T05:45:46.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 3.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.20 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server y la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 3.8 (Impactos de Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.20",
            "matchCriteriaId" : "0E1A3769-E443-4511-B349-B5304F5E6EBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1999",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.097",
      "lastModified" : "2024-11-21T05:45:46.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: RAS subsystems). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle ZFS Storage Appliance Kit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 5.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle ZFS Storage Appliance Kit de Oracle Systems (componente: RAS subsystems).&#xa0;La versión compatible que está afectada es la 8.8.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle ZFS Storage Appliance Kit comprometer a Oracle ZFS Storage Appliance Kit.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle ZFS Storage Appliance Kit, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles del Oracle ZFS Storage Appliance Kit.&#xa0;CVSS 3.1 Puntuación Base 5.0 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED59B62-C9BF-4C0E-B351-3884E8441655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2000",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.190",
      "lastModified" : "2024-11-21T06:02:08.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having SYS Account privilege with network access via Oracle Net to compromise Unified Audit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Unified Audit accessible data. CVSS 3.1 Base Score 2.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Unified Audit de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado que tenga privilegio de Cuenta SYS con acceso de red por medio de Oracle Net comprometer a Unified Audit.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Unified Audit.&#xa0;CVSS 3.1 Puntuación Base 2.4 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6833701E-5510-4180-9523-9CFD318DEE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2204841-585F-40C7-A1D9-C34E612808CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2001",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.273",
      "lastModified" : "2024-11-21T06:02:09.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.50 and prior, 5.7.30 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 5.6.50 y anteriores, 5.7.30 y anteriores y 8.0.17 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.50",
            "matchCriteriaId" : "6541CAD4-B010-4337-96D2-093AEE22C134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.30",
            "matchCriteriaId" : "E1A68EF8-15AA-42A7-9734-6F9470EB35CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.17",
            "matchCriteriaId" : "16A0897F-E8C2-4BED-9642-7DB481758FA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2002",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.330",
      "lastModified" : "2024-11-21T06:02:09.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Replication).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2003",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.410",
      "lastModified" : "2024-11-21T06:02:09.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web Dashboards). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Analytics Web Dashboards).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Business Intelligence Enterprise Edition.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada,&#xa0;insertar o eliminar el acceso a algunos de los datos accesibles de Business Intelligence Enterprise Edition, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Business Intelligence Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 5.4 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "523CD57C-43D4-4C79-BA00-A9A65C6588E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2004",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.487",
      "lastModified" : "2024-11-21T06:02:09.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel Core - Server BizLogic Script product of Oracle Siebel CRM (component: Integration - Scripting). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server BizLogic Script. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Siebel Core - Server BizLogic Script accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Siebel Core - Server BizLogic Script de Oracle Siebel CRM (componente: Integration - Scripting).&#xa0;Las versiones compatibles que están afectadas son la 20.12 y anteriores.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Siebel Core - Server BizLogic Script.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Siebel Core - Server BizLogic Script.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:server_bizlogic_script:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12",
            "matchCriteriaId" : "F9D609C7-C498-4A85-8FC3-413CFF288798"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2005",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.567",
      "lastModified" : "2024-11-21T06:02:09.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: BI Platform Security).&#xa0;Las versiones compatibles que están afectadas son 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Business Intelligence Enterprise Edition.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 4.7 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2006",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.643",
      "lastModified" : "2024-11-21T06:02:09.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.19 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Client de Oracle MySQL (componente: C API).&#xa0;Las versiones compatibles que están afectadas son 8.0.19 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante poco privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Client.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Client.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.19",
            "matchCriteriaId" : "84C8821E-87C5-4A4A-87E5-B6EF780F7A15"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2007",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.720",
      "lastModified" : "2024-11-21T06:02:09.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.47 and prior, 5.7.29 and prior and 8.0.19 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Client de Oracle MySQL (componente: C API).&#xa0;Las versiones compatibles que están afectadas son 5.6.47 y anteriores, 5.7.29 y anteriores y 8.0.19 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red por medio de múltiples protocolos comprometer a MySQL Client.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Client.&#xa0;CVSS 3.1 Puntuación Base 3.7 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.47",
            "matchCriteriaId" : "7B3B2244-16A1-4990-A9C1-9CA3F3CCDD85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.29",
            "matchCriteriaId" : "0B17ED99-F2C6-4637-A116-8FAF48AD0263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.19",
            "matchCriteriaId" : "84C8821E-87C5-4A4A-87E5-B6EF780F7A15"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.65",
            "matchCriteriaId" : "30A8DC99-7CFD-499A-B29C-5C3C588C2335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.41",
            "matchCriteriaId" : "3C4AD4E4-A6B5-416D-AED2-180CDBF30A47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.26",
            "matchCriteriaId" : "83EFB2B2-6061-470F-B3F3-95B61F27AA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.17",
            "matchCriteriaId" : "B25AC2A8-498C-4B5D-A203-2EC2C219ED71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.7",
            "matchCriteriaId" : "B68BEB7B-B05B-4C30-9B98-225236879788"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2009",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.783",
      "lastModified" : "2024-11-21T06:02:10.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Security: Roles).&#xa0;Las versiones compatibles que están afectadas son 8.0.19 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.19",
            "matchCriteriaId" : "84C8821E-87C5-4A4A-87E5-B6EF780F7A15"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2010",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.863",
      "lastModified" : "2024-11-21T06:02:10.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Client accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Client. CVSS 3.1 Base Score 4.2 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Client de Oracle MySQL (componente: C API).&#xa0;Las versiones compatibles que están afectadas son 5.6.50 y anteriores, 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante poco privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Client.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Client y la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de MySQL Client.&#xa0;CVSS 3.1 Puntuación Base 4.2 (Impactos de Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.50",
            "matchCriteriaId" : "6541CAD4-B010-4337-96D2-093AEE22C134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2011",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:45.923",
      "lastModified" : "2024-11-21T06:02:10.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Client. CVSS 3.1 Base Score 5.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Client de Oracle MySQL (componente: C API).&#xa0;Las versiones compatibles que están afectadas son 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red por medio de múltiples protocolos comprometer a MySQL Client.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Client.&#xa0;CVSS 3.1 Puntuación Base 5.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.61",
            "matchCriteriaId" : "7003CE08-91D0-4D31-A2DE-BD743B62E956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.35",
            "matchCriteriaId" : "0B468863-D143-4287-A3FC-34053C4C86FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.33",
            "matchCriteriaId" : "A0F1C3CD-0EE1-46FD-BC07-938852E6AE65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.15",
            "matchCriteriaId" : "6950525B-F729-4DCF-8D24-C05EFDCFEEDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2012",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.003",
      "lastModified" : "2024-11-21T06:02:10.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Security: Privileges).&#xa0;Las versiones compatibles que están afectadas son 8.0.20 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.20",
            "matchCriteriaId" : "0E1A3769-E443-4511-B349-B5304F5E6EBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2013",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.067",
      "lastModified" : "2024-11-21T06:02:10.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: BI Publisher Security). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: BI Publisher Security).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle BI Publisher.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle BI Publisher, así como también una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle BI Publisher y capacidad no autorizada para causar una negación parcial servicio (DOS parcial) de Oracle BI Publisher.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:5.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E79D52-33E2-4305-A9F5-A4C88C0FF120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9430793-49B0-4D74-A3D8-6518A26D2475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542158AD-09AC-4132-A1CA-ACE671CCA1FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2014",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.127",
      "lastModified" : "2024-11-21T06:02:10.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 5.7.32 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: PAM Auth Plugin).&#xa0;Las versiones compatibles que están afectadas son 5.7.32 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2015",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.190",
      "lastModified" : "2024-11-21T06:02:11.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Workflow, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Workflow accessible data as well as unauthorized update, insert or delete access to some of Oracle Workflow accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Workflow de Oracle E-Business Suite (componente: Worklist).&#xa0;Las versiones compatibles que están afectadas son 12.2.3-12.2.10.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Workflow.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Workflow, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Workflow, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Workflow.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9901F6BA-78D5-45B8-9409-07FF1C6DDD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FADE563-5AAA-42FF-B43F-35B20A2386C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:workflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "FDD2377E-9F02-41D5-8D09-9C4DC01FBDE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2016",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.267",
      "lastModified" : "2024-11-21T06:02:11.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.19 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.19",
            "matchCriteriaId" : "84C8821E-87C5-4A4A-87E5-B6EF780F7A15"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2017",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.363",
      "lastModified" : "2024-11-21T06:02:11.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle User Management de Oracle E-Business Suite (componente: Proxy User Delegation).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle User Management.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle User Management.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_data_quality:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCC2C59-BB9B-4BD2-80A4-33B72737FA10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36CF85A9-2C29-46E7-961E-8ADD0B5822CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8893CB1D-F18C-404D-BC06-CA2617BFAE58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42227DD8-6671-4B38-9E42-4ACF78F09C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_invoice_matching:14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69962BD9-A102-4621-9461-018E87261657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:user_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "7429709B-5F9F-41CA-BFFE-DEB59C8B8ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:user_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA66BCAB-CE6D-4F37-9A9A-7B5B7EC154D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2018",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.440",
      "lastModified" : "2024-11-21T06:02:11.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: CVE-2021-2018 affects Windows platform only. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Advanced Networking Option de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 18c y 19c.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red por medio de Oracle Net comprometer a Advanced Networking Option.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Advanced Networking Option, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Advanced Networking Option.&#xa0;Nota: CVE-2021-2018 afecta solo a la plataforma Windows.&#xa0;CVSS 3.1 Puntuación Base 8.3 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_networking_option:18c:*:*:*:*:*:*:.",
            "matchCriteriaId" : "A581A1BC-5AD1-4BB1-84B1-3FA369EB46D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_networking_option:19c:*:*:*:*:*:*:.",
            "matchCriteriaId" : "C6DAF61B-87BF-4AD5-897C-42E8CBA26814"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:adaptive_access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "530B1012-03DF-4AE2-863E-FB07351FE4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2CF70CF-3DDF-45A2-A14C-340CC65EBDC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9901F6BA-78D5-45B8-9409-07FF1C6DDD38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FADE563-5AAA-42FF-B43F-35B20A2386C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_fusion_applications:13.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "941E3CB6-013B-4AD4-8D36-2254E6D3C2F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:18.2.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455173C4-7FCF-45F9-8F6F-DC00D77B32A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_simphony:19.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "642DE02B-F471-4922-9AFB-FBA0C29D7E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2019",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.550",
      "lastModified" : "2024-11-21T06:02:11.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Security: Privileges).&#xa0;Las versiones compatibles que están afectadas son 8.0.19 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 2.7 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.19",
            "matchCriteriaId" : "84C8821E-87C5-4A4A-87E5-B6EF780F7A15"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2020",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.673",
      "lastModified" : "2024-11-21T06:02:11.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.20 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.20 y anteriores.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.20",
            "matchCriteriaId" : "0E1A3769-E443-4511-B349-B5304F5E6EBD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2021",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.753",
      "lastModified" : "2024-11-21T06:02:11.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2022",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.830",
      "lastModified" : "2024-11-21T06:02:11.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 5.6.50 y anteriores, 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.50",
            "matchCriteriaId" : "6541CAD4-B010-4337-96D2-093AEE22C134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.46",
            "matchCriteriaId" : "F409232B-5093-4A59-871A-3FCCE9C414EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.33",
            "matchCriteriaId" : "424DBA34-644E-4F3B-801A-31EE1A0B20EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.24",
            "matchCriteriaId" : "BAA087FF-F39B-4888-9AAE-1A4C8BB953D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "91FD379D-2DE1-4242-952D-6C0E4385FE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.5",
            "matchCriteriaId" : "2DD40481-6361-4D62-A74A-081CC4F055D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CS5THZSGI7O2CZO44NWYE57AG2T7NK3K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T7EAHJPWOOF4D6PEFLXW5IQWRRSZ3HRC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2023",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.910",
      "lastModified" : "2024-11-21T06:02:12.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Installed Base, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Installed Base accessible data. CVSS 3.1 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Installed Base de Oracle E-Business Suite (componente: API).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.9.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Installed Base.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Installed Base, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Installed Base. CVSS 3.1 Puntuación Base 4.7 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:installed_base:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "EB9F9093-89DA-4D7D-A530-D65AFCC11700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:installed_base:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.9",
            "matchCriteriaId" : "B7D503BF-1BBF-4051-B9DF-F356A1DCF3CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2024",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:46.970",
      "lastModified" : "2024-11-21T06:02:12.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2025",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.050",
      "lastModified" : "2024-11-21T06:02:12.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Analytics Web General).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Business Intelligence Enterprise Edition.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como en una actualización no autorizada.&#xa0;insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "523CD57C-43D4-4C79-BA00-A9A65C6588E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2026",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.127",
      "lastModified" : "2024-11-21T06:02:12.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite (componente: Marketing Administration).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Marketing.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Marketing, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Marketing, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Marketing.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "B3749410-8BCD-44F3-85A2-DA5AC81F64B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "69B2C35C-46AA-4E72-89F3-F34E3688880D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2027",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.207",
      "lastModified" : "2024-11-21T06:02:12.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite (componente: Marketing Administration).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Marketing.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Marketing, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Marketing, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Marketing.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "B3749410-8BCD-44F3-85A2-DA5AC81F64B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "69B2C35C-46AA-4E72-89F3-F34E3688880D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2028",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.283",
      "lastModified" : "2024-11-21T06:02:12.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 8.0.21 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS:(CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.21",
            "matchCriteriaId" : "7A885799-F19A-41B5-B015-B318ED959755"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2029",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.347",
      "lastModified" : "2024-11-21T06:02:12.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in takeover of Oracle Scripting. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Scripting de Oracle E-Business Suite (componente: Miscellaneous).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.8.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Scripting.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Scripting.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "81FC549C-F6DB-4CCF-BBE0-3395DE72C164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.8",
            "matchCriteriaId" : "5960C494-080F-4631-BDC1-79CC29D81B25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2030",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.410",
      "lastModified" : "2024-11-21T06:02:13.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.21 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.21",
            "matchCriteriaId" : "7A885799-F19A-41B5-B015-B318ED959755"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2031",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.470",
      "lastModified" : "2024-11-21T06:02:13.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2032",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.550",
      "lastModified" : "2024-11-21T06:02:13.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Information Schema).&#xa0;Las versiones compatibles que están afectadas son 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.11",
            "matchCriteriaId" : "1CAB12CA-E6CF-4C51-B892-BDDCE09E0442"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2033",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.613",
      "lastModified" : "2024-11-21T06:02:13.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core Components).&#xa0;Las versiones compatibles que están afectadas son 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos de Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2034",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.690",
      "lastModified" : "2024-11-21T06:02:13.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications Calendar, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Common Applications Calendar de Oracle E-Business Suite (componente: Tasks).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Common Applications Calendar.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Common Applications Calendar, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles del Oracle Common Applications Calendar, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles del Oracle Common Applications Calendar.&#xa0;CVSS 3.1 Puntuación base 8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "C4ECD047-AE7F-4080-914D-AD0FE6E19C1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2035",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.753",
      "lastModified" : "2024-11-21T06:02:13.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the RDBMS Scheduler component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows low privileged attacker having Export Full Database privilege with network access via Oracle Net to compromise RDBMS Scheduler. Successful attacks of this vulnerability can result in takeover of RDBMS Scheduler. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente RDBMS Scheduler de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;Una vulnerabilidad explotable fácilmente permite a un atacante poco privilegiado tener el privilegio Export Full Database con acceso de red por medio de Oracle Net comprometer a RDBMS Scheduler.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de RDBMS Scheduler.&#xa0;CVSS 3.1 Puntuación Base 8.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_scheduler:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FD3A13-7830-4942-B364-CBA27AE4BADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_scheduler:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FBAAFEB-2202-43EC-9EEA-F1285852A1B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_scheduler:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473F9C47-D9F1-40FE-93A5-8917DC72A700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_scheduler:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3981C8A-F66A-44D9-A590-707CCE63B768"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2036",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.817",
      "lastModified" : "2024-11-21T06:02:14.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2038",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.877",
      "lastModified" : "2024-11-21T06:02:14.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Components Services).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2039",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:47.940",
      "lastModified" : "2024-11-21T06:02:14.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Siebel Core - Server Framework product of Oracle Siebel CRM (component: Search). Supported versions that are affected are 20.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel Core - Server Framework. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Siebel Core - Server Framework, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Siebel Core - Server Framework accessible data as well as unauthorized update, insert or delete access to some of Siebel Core - Server Framework accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Siebel Core - Server Framework de Oracle Siebel CRM (componente: Search).&#xa0;Las versiones compatibles que están afectadas son la 20.12 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Siebel Core - Server Framework.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Siebel Core - Server Framework, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Siebel Core - Server Framework, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Siebel Core - Server Framework.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS:(CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core_-_server_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12",
            "matchCriteriaId" : "82B7101E-535E-45BC-824D-5996224A9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2040",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.003",
      "lastModified" : "2024-11-21T06:02:14.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Case Form, Local Affiliate Form). The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Argus Safety. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Argus Safety accessible data as well as unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Argus Safety de Oracle Health Sciences Applications (componente: Case Form, Local Affiliate Form).&#xa0;La versión compatible que está afectada es 8.2.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Argus Safety.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Argus Safety, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Argus Safety, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Argus Safety.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:argus_safety:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F05D844-38BD-4EEB-AF91-E5ED18B1E7E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2041",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.080",
      "lastModified" : "2024-11-21T06:02:14.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Installation).&#xa0;Las versiones compatibles que están afectadas son 12.2.1.3.0 y 12.2.1.4.0.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Business Intelligence Enterprise Edition.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Business Intelligence Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2042",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.143",
      "lastModified" : "2024-11-21T06:02:14.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 8.0.21 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta MySQL Server comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 2.3 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.21",
            "matchCriteriaId" : "7A885799-F19A-41B5-B015-B318ED959755"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2043",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.220",
      "lastModified" : "2024-11-21T06:02:15.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Portal).&#xa0;Las versiones compatibles que están afectadas son 8.56, 8.57 y 8.58.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a PeopleSoft Enterprise PeopleTools.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en PeopleSoft Enterprise PeopleTools, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS:  (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2044",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.283",
      "lastModified" : "2024-11-21T06:02:15.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise FIN Payables product of Oracle PeopleSoft (component: Financial Sanctions). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise FIN Payables. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all PeopleSoft Enterprise FIN Payables accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise FIN Payables de Oracle PeopleSoft (componente: Financial Sanctions).&#xa0;La versión compatible que está afectada es la 9.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a PeopleSoft Enterprise FIN Payables.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de PeopleSoft Enterprise FIN Payables.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_fin_payables:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF9FCCB-163E-4929-9AC2-DBA281FE87A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2045",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.347",
      "lastModified" : "2024-11-21T06:02:15.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Text component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Oracle Text. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Text. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Text de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante poco privilegiado tener el privilegio Create Session con acceso de red por medio de Oracle Net comprometer a Oracle Text.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Oracle Text.&#xa0;CVSS 3.1 Puntuación Base 3.1 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:text:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D36BE05-C35B-4034-B949-31DBC1FF89D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:text:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB46E81E-0CDD-4055-869F-444C7422E5C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:text:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9DECC3C-D77B-4B78-9D2E-89F4716A54A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:text:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FA6F677-D29E-479A-B17C-4FD9C06C770E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2046",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.410",
      "lastModified" : "2024-11-21T06:02:15.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. While the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.8 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Aunque la vulnerabilidad se encuentra en MySQL Server, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.8 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2047",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.490",
      "lastModified" : "2024-11-21T06:02:15.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core Components). Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, y 12.2.1.3.0. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de IIOP, T3 comprometer a Oracle WebLogic Server. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server. CVSS 3.1 Puntuación Base 9.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2048",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.550",
      "lastModified" : "2024-11-21T06:02:15.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 5.0 (Impactos de la Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:C",
            "baseScore" : 7.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2049",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.627",
      "lastModified" : "2024-11-21T06:02:15.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Administration). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: Administration).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle BI Publisher.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle BI Publisher, así como también una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle BI Publisher y capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Oracle BI Publisher.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:5.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E79D52-33E2-4305-A9F5-A4C88C0FF120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9430793-49B0-4D74-A3D8-6518A26D2475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542158AD-09AC-4132-A1CA-ACE671CCA1FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2050",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.707",
      "lastModified" : "2024-11-21T06:02:16.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: E-Business Suite - XDO).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle BI Publisher.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle BI Publisher, así como también una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle BI Publisher y capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Oracle BI Publisher.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:5.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E79D52-33E2-4305-A9F5-A4C88C0FF120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9430793-49B0-4D74-A3D8-6518A26D2475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542158AD-09AC-4132-A1CA-ACE671CCA1FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2051",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.767",
      "lastModified" : "2024-11-21T06:02:16.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: E-Business Suite - XDO). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle BI Publisher. CVSS 3.1 Base Score 7.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: E-Business Suite - XDO).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle BI Publisher.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle BI Publisher, así como también una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle BI Publisher y capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Oracle BI Publisher.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:5.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E79D52-33E2-4305-A9F5-A4C88C0FF120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9430793-49B0-4D74-A3D8-6518A26D2475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542158AD-09AC-4132-A1CA-ACE671CCA1FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2052",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.830",
      "lastModified" : "2024-11-21T06:02:16.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). The supported version that is affected is Prior to 9.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. While the vulnerability is in JD Edwards EnterpriseOne Orchestrator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 5.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto JD Edwards EnterpriseOne Orchestrator de Oracle JD Edwards (componente: E1 IOT Orchestrator Security).&#xa0;La versión compatible que está afectada es la anterior a 9.2.5.1.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a JD Edwards EnterpriseOne Orchestrator.&#xa0;Aunque la vulnerabilidad se encuentra en JD Edwards EnterpriseOne Orchestrator, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de JD Edwards EnterpriseOne Orchestrator.&#xa0;CVSS 3.1 Puntuación Base 5.8 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.5.1",
            "matchCriteriaId" : "666110E3-BD76-443B-99A9-579FD5EA2891"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2054",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:48.923",
      "lastModified" : "2024-11-21T06:02:16.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the RDBMS Sharding component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any Procedure, Create Any View, Create Any Trigger privilege with network access via Oracle Net to compromise RDBMS Sharding. Successful attacks of this vulnerability can result in takeover of RDBMS Sharding. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente RDBMS Sharding de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.2.0.1, 18c y 19c.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado tener el privilegio Create Any Procedure, Create Any View, Create Any Trigger con acceso de red por medio de Oracle Net comprometer a RDBMS Sharding.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de RDBMS Sharding.&#xa0;CVSS 3.1 Puntuación Base 7.2 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_sharding:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7245DC7F-322A-4DE1-B7C0-C055277C47CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_sharding:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "463B374D-4E95-450A-91C3-79D48901450A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rdbms_sharding:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32ECDE0C-DE75-4EA1-8B6E-8E9881391A36"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-083/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-083/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2055",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.003",
      "lastModified" : "2024-11-21T06:02:16.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.21 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.21",
            "matchCriteriaId" : "7A885799-F19A-41B5-B015-B318ED959755"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2056",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.080",
      "lastModified" : "2024-11-21T06:02:16.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2057",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.143",
      "lastModified" : "2024-11-21T06:02:17.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Internal Operations). The supported version that is affected is 19.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Retail Customer Management and Segmentation Foundation. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Retail Customer Management and Segmentation Foundation accessible data as well as unauthorized read access to a subset of Oracle Retail Customer Management and Segmentation Foundation accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Retail Customer Management and Segmentation Foundation. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Retail Customer Management and Segmentation Foundation de Oracle Retail Applications (componente: Internal Operations).&#xa0;La versión compatible que está afectada es la 19.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle Retail Customer Management and Segmentation Foundation.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Retail Customer Management and Segmentation Foundation, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Retail Customer Management and Segmentation Foundation  y capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Oracle Retail Customer Management and Segmentation Foundation.&#xa0;CVSS 3.1 Puntuación Base 6.3 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFAEA84-E376-40A2-8C9F-3E0676FEC527"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2058",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.220",
      "lastModified" : "2024-11-21T06:02:17.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Locking). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Locking).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2059",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.283",
      "lastModified" : "2024-11-21T06:02:17.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Web Interface).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2060",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.363",
      "lastModified" : "2024-11-21T06:02:17.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.50 and prior, 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 5.6.50 y anteriores, 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndIncluding" : "5.6.50",
            "matchCriteriaId" : "6541CAD4-B010-4337-96D2-093AEE22C134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2061",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.423",
      "lastModified" : "2024-11-21T06:02:17.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.22 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DDL).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2062",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.487",
      "lastModified" : "2024-11-21T06:02:17.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Web Server). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle BI Publisher. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle BI Publisher, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle BI Publisher accessible data as well as unauthorized update, insert or delete access to some of Oracle BI Publisher accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle BI Publisher de Oracle Fusion Middleware (componente: Web Server).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle BI Publisher.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle BI Publisher, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle BI Publisher, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle BI Publisher.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:5.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E79D52-33E2-4305-A9F5-A4C88C0FF120"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF6E68-C7FA-4D38-970B-88F37DA7BCCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9430793-49B0-4D74-A3D8-6518A26D2475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542158AD-09AC-4132-A1CA-ACE671CCA1FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2063",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.550",
      "lastModified" : "2024-11-21T06:02:17.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where PeopleSoft Enterprise PeopleTools executes to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Portal).&#xa0;Las versiones compatibles que están afectadas son 8.56, 8.57 y 8.58.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con inicio de sesión en la infraestructura donde se ejecuta PeopleSoft Enterprise PeopleTools comprometer a PeopleSoft Enterprise PeopleTools.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de PeopleSoft Enterprise PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 8.4 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2064",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.643",
      "lastModified" : "2024-11-21T06:02:18.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core Components).&#xa0;La versión compatible que está afectada es 12.1.3.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de IIOP, T3 comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2065",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.720",
      "lastModified" : "2024-11-21T06:02:18.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2066",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.783",
      "lastModified" : "2024-11-21T06:02:18.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Outside In Technology de Oracle Fusion Middleware (componente: Outside In Filters).&#xa0;Las versiones compatibles que están afectadas son 8.5.4 y 8.5.5.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Outside In Technology.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Outside In Technology, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Outside In Technology y la capacidad no autorizada de causar una denegación parcial de servicio (DOS parcial) de Oracle Outside In Technology.&#xa0;Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDK).&#xa0;El protocolo y la puntuación CVSS dependen del software que utiliza el código de Outside In Technology.&#xa0;La puntuación CVSS asume que el software pasa los datos recibidos por medio de una red directamente al código de Outside In Technology, pero si los datos no se reciben por medio de una red, la puntuación CVSS puede ser menor.&#xa0;CVSS 3.1 Puntuación Base 8.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F1A960-EBA5-4BDB-B629-20F0D2384562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2067",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.847",
      "lastModified" : "2024-11-21T06:02:18.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Outside In Technology de Oracle Fusion Middleware (componente: Outside In Filters).&#xa0;Las versiones compatibles que están afectadas son 8.5.4 y 8.5.5.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Outside In Technology.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Outside In Technology, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Outside In Technology y la capacidad no autorizada de causar una denegación parcial de servicio (DOS parcial) de Oracle Outside In Technology.&#xa0;Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDK).&#xa0;El protocolo y la puntuación CVSS dependen del software que utiliza el código de Outside In Technology.&#xa0;La puntuación CVSS asume que el software pasa los datos recibidos por medio de una red directamente al código de Outside In Technology, pero si los datos no se reciben por medio de una red, la puntuación CVSS puede ser menor.&#xa0;CVSS 3.1 Puntuación Base 8.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F1A960-EBA5-4BDB-B629-20F0D2384562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2068",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.910",
      "lastModified" : "2024-11-21T06:02:18.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Outside In Technology de Oracle Fusion Middleware (componente: Outside In Filters).&#xa0;Las versiones compatibles que están afectadas son 8.5.4 y 8.5.5.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Outside In Technology.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Outside In Technology, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Outside In Technology y la capacidad no autorizada de causar una denegación parcial de servicio (DOS parcial) de Oracle Outside In Technology.&#xa0;Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDK).&#xa0;El protocolo y la puntuación CVSS dependen del software que utiliza el código de Outside In Technology.&#xa0;La puntuación CVSS asume que el software pasa los datos recibidos por medio de una red directamente al código de Outside In Technology, pero si los datos no se reciben por medio de una red, la puntuación CVSS puede ser menor.&#xa0;CVSS 3.1 Puntuación Base 8.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F1A960-EBA5-4BDB-B629-20F0D2384562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2069",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:49.970",
      "lastModified" : "2024-11-21T06:02:18.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). Supported versions that are affected are 8.5.4 and 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS score depend on the software that uses the Outside In Technology code. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology code, but if data is not received over a network the CVSS score may be lower. CVSS 3.1 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Outside In Technology de Oracle Fusion Middleware (componente: Outside In Filters).&#xa0;Las versiones compatibles que están afectadas son 8.5.4 y 8.5.5.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Outside In Technology.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Outside In Technology, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Outside In Technology y la capacidad no autorizada de causar una denegación parcial de servicio (DOS parcial) de Oracle Outside In Technology.&#xa0;Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDK).&#xa0;El protocolo y la puntuación CVSS dependen del software que utiliza el código de Outside In Technology.&#xa0;La puntuación CVSS asume que el software pasa los datos recibidos por medio de una red directamente al código de Outside In Technology, pero si los datos no se reciben por medio de una red, la puntuación CVSS puede ser menor.&#xa0;CVSS 3.1 Puntuación Base 8.6 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F1A960-EBA5-4BDB-B629-20F0D2384562"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2070",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.050",
      "lastModified" : "2024-11-21T06:02:18.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2071",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.113",
      "lastModified" : "2024-11-21T06:02:18.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.56, 8.57 and 8.58. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in takeover of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Elastic Search).&#xa0;Las versiones compatibles que están afectadas son 8.56, 8.57 y 8.58.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a PeopleSoft Enterprise PeopleTools.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de PeopleSoft Enterprise PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2072",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.190",
      "lastModified" : "2024-11-21T06:02:19.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2073",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.253",
      "lastModified" : "2024-11-21T06:02:19.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2074",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.330",
      "lastModified" : "2024-11-21T06:02:19.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2075",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.393",
      "lastModified" : "2024-11-21T06:02:19.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Samples). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Samples).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de IIOP, T3 comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2076",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.457",
      "lastModified" : "2024-11-21T06:02:19.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2077",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.517",
      "lastModified" : "2024-11-21T06:02:19.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle iStore, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2078",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.597",
      "lastModified" : "2024-11-21T06:02:19.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Configurator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data as well as unauthorized update, insert or delete access to some of Oracle Configurator accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Configurator de Oracle Supply Chain (componente: UI Servlet).&#xa0;Las versiones compatibles que están afectadas son 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Configurator.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Configurator, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Configurator, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Configurator.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FD181D-9CFA-4FCC-AE17-D12E069669AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1E7A6A-D895-4870-8CE1-C22B14C4DD10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2079",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.673",
      "lastModified" : "2024-11-21T06:02:20.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Configurator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data as well as unauthorized update, insert or delete access to some of Oracle Configurator accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Configurator de Oracle Supply Chain (componente: UI Servlet).&#xa0;Las versiones compatibles que están afectadas son 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Configurator.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Configurator, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Configurator, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Configurator.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FD181D-9CFA-4FCC-AE17-D12E069669AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1E7A6A-D895-4870-8CE1-C22B14C4DD10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2080",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.753",
      "lastModified" : "2024-11-21T06:02:20.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Configurator product of Oracle Supply Chain (component: UI Servlet). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Configurator. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Configurator, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Configurator accessible data as well as unauthorized update, insert or delete access to some of Oracle Configurator accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Configurator de Oracle Supply Chain (componente: UI Servlet).&#xa0;Las versiones compatibles que están afectadas son 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Configurator.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Configurator, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Configurator, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Configurator.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46FD181D-9CFA-4FCC-AE17-D12E069669AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:configurator:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1E7A6A-D895-4870-8CE1-C22B14C4DD10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2081",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.817",
      "lastModified" : "2024-11-21T06:02:20.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2082",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.893",
      "lastModified" : "2024-11-21T06:02:20.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle iStore, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2083",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:50.957",
      "lastModified" : "2024-11-21T06:02:20.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: User Responsibilities). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iSupport de Oracle E-Business Suite (componente: User Responsibilities).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iSupport.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle iSupport, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle iSupport, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iSupport.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "897A10C1-A8EA-4E1B-9B40-B815F980CFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "F26CDFF3-DEB0-415F-81FC-0285C8D3B245"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2084",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.033",
      "lastModified" : "2024-11-21T06:02:20.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle CRM Technical Foundation de Oracle E-Business Suite (componente: Preferences).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle CRM Technical Foundation.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle CRM Technical Foundation, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle CRM Technical Foundation.&#xa0;CVSS 3.1 Puntuación Base  8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "57E34132-E1B4-4A0D-8480-05DFC3C3A089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10215644-3B05-480F-B175-4BDB72619A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2085",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.097",
      "lastModified" : "2024-11-21T06:02:20.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle CRM Technical Foundation de Oracle E-Business Suite (componente: Preferences).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle CRM Technical Foundation.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle CRM Technical Foundation, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle CRM Technical Foundation.&#xa0;CVSS 3.1 Puntuación Base  8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "57E34132-E1B4-4A0D-8480-05DFC3C3A089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10215644-3B05-480F-B175-4BDB72619A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2086",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.160",
      "lastModified" : "2024-11-21T06:02:20.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2087",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.237",
      "lastModified" : "2024-11-21T06:02:21.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta MySQL Server comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2088",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.317",
      "lastModified" : "2024-11-21T06:02:21.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta MySQL Server comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2089",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.377",
      "lastModified" : "2024-11-21T06:02:21.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Runtime Catalog). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Runtime Catalog).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle iStore, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2090",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.440",
      "lastModified" : "2024-11-21T06:02:21.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Email Center de Oracle E-Business Suite (componente: Message Display).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Email Center.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Email Center, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Email Center, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Email Center.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "A8BF78C0-6D75-4334-8254-48CE17110436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1BEAA15C-0FC4-47DE-B0F5-C3C1646F0029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2091",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.550",
      "lastModified" : "2024-11-21T06:02:21.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Scripting, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Scripting accessible data as well as unauthorized update, insert or delete access to some of Oracle Scripting accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Scripting de Oracle E-Business Suite (componente: Miscellaneous).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Scripting.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Scripting, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Scripting, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Scripting.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "81FC549C-F6DB-4CCF-BBE0-3395DE72C164"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:scripting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "35BBBA7A-2065-49B3-A751-43E388800DAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2092",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.627",
      "lastModified" : "2024-11-21T06:02:21.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle CRM Technical Foundation de Oracle E-Business Suite (componente: Preferences).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle CRM Technical Foundation.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle CRM Technical Foundation, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle CRM Technical Foundation.&#xa0;CVSS 3.1 Puntuación Base  8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "57E34132-E1B4-4A0D-8480-05DFC3C3A089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10215644-3B05-480F-B175-4BDB72619A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2093",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.690",
      "lastModified" : "2024-11-21T06:02:21.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: CRM User Management Framework). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Common Applications de Oracle E-Business Suite (componente: CRM User Management Framework).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Common Applications.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Common Applications, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Common Applications, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Common Applications.&#xa0;CVSS 3.1 Puntuación Base  8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "299D2B6C-479F-40AB-B5D3-13666515E4F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "9D9E3DDE-2D8C-46DD-BC3A-407D5BA4F818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2094",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.770",
      "lastModified" : "2024-11-21T06:02:22.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle One-to-One Fulfillment, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data as well as unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle One-to-One Fulfillment de Oracle E-Business Suite (componente: Print Server).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle One-to-One Fulfillment.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle One-to-One Fulfillment, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle One-to-One Fulfillment.&#xa0;CVSS 3.1 Puntuación Base  8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "1B5EFA7C-3EB6-4979-B987-F95C4B92C74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1167A8B4-2D67-441A-BF7D-7AC4268EE306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2096",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.830",
      "lastModified" : "2024-11-21T06:02:22.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle iStore, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2097",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.910",
      "lastModified" : "2024-11-21T06:02:22.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSupport product of Oracle E-Business Suite (component: Profile). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iSupport. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iSupport, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iSupport accessible data as well as unauthorized update, insert or delete access to some of Oracle iSupport accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle iSupport de Oracle E-Business Suite (componente: Profile).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle iSupport.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle iSupport, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle iSupport, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iSupport.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "897A10C1-A8EA-4E1B-9B40-B815F980CFA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isupport:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "F26CDFF3-DEB0-415F-81FC-0285C8D3B245"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2098",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:51.970",
      "lastModified" : "2024-11-21T06:02:22.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Email Center. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Email Center de Oracle E-Business Suite (componente: Message Display).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Email Center.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Email Center, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Email Center, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Email Center.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "A8BF78C0-6D75-4334-8254-48CE17110436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1BEAA15C-0FC4-47DE-B0F5-C3C1646F0029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2099",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.033",
      "lastModified" : "2024-11-21T06:02:22.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle CRM Technical Foundation, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data as well as unauthorized update, insert or delete access to some of Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle CRM Technical Foundation de Oracle E-Business Suite (componente: Preferences).&#xa0;Las versiones compatibles que están afectadas son 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle CRM Technical Foundation.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle CRM Technical Foundation, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle CRM Technical Foundation.&#xa0;CVSS 3.1 Puntuación Base  8.&#xa0;2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "57E34132-E1B4-4A0D-8480-05DFC3C3A089"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2100",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.097",
      "lastModified" : "2024-11-21T06:02:22.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle One-to-One Fulfillment de Oracle E-Business Suite (componente: Print Server).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle One-to-One Fulfillment.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle One-to-One Fulfillment, así como en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment .&#xa0;CVSS 3.1 Puntuación Base 9.1 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "1B5EFA7C-3EB6-4979-B987-F95C4B92C74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1167A8B4-2D67-441A-BF7D-7AC4268EE306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2101",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.177",
      "lastModified" : "2024-11-21T06:02:22.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Print Server). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle One-to-One Fulfillment accessible data as well as unauthorized access to critical data or complete access to all Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle One-to-One Fulfillment de Oracle E-Business Suite (componente: Print Server).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle One-to-One Fulfillment.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle One-to-One Fulfillment, así como en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle One-to-One Fulfillment .&#xa0;CVSS 3.1 Puntuación Base 9.1 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "1B5EFA7C-3EB6-4979-B987-F95C4B92C74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1167A8B4-2D67-441A-BF7D-7AC4268EE306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2102",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.253",
      "lastModified" : "2024-11-21T06:02:22.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Complex Maintenance, Repair y Overhaul de Oracle Supply Chain (componente: Dialog Box).&#xa0;Las versiones compatibles que están afectadas son 11.5.10, 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Complex Maintenance, Repair, y Overhaul.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Complex Maintenance, Repair, y Overhaul, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Complex Maintenance, Repair, y Overhaul, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos datos accesibles de Oracle Complex Maintenance, Repair, and Overhaul.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance\\,_repair\\,_and_overhaul:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE4613F-3E3C-4F69-900D-153008B09559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance\\,_repair\\,_and_overhaul:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41461A44-18C5-4D83-998F-6DF8E32E0487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance_repair_and_overhaul:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2910DB63-31F1-4A26-B525-2F777E0B8FC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2103",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.317",
      "lastModified" : "2024-11-21T06:02:23.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Complex Maintenance, Repair y Overhaul de Oracle Supply Chain (componente: Dialog Box).&#xa0;Las versiones compatibles que están afectadas son 11.5.10, 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Complex Maintenance, Repair, y Overhaul.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Complex Maintenance, Repair, y Overhaul, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Complex Maintenance, Repair, y Overhaul, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos datos accesibles de Oracle Complex Maintenance, Repair, and Overhaul.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance\\,_repair\\,_and_overhaul:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE4613F-3E3C-4F69-900D-153008B09559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance\\,_repair\\,_and_overhaul:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41461A44-18C5-4D83-998F-6DF8E32E0487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance_repair_and_overhaul:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2910DB63-31F1-4A26-B525-2F777E0B8FC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2104",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.393",
      "lastModified" : "2024-11-21T06:02:23.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle Supply Chain (component: Dialog Box). Supported versions that are affected are 11.5.10, 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Complex Maintenance, Repair, and Overhaul. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Complex Maintenance, Repair, and Overhaul, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Complex Maintenance, Repair, and Overhaul accessible data as well as unauthorized update, insert or delete access to some of Oracle Complex Maintenance, Repair, and Overhaul accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Complex Maintenance, Repair y Overhaul de Oracle Supply Chain (componente: Dialog Box).&#xa0;Las versiones compatibles que están afectadas son 11.5.10, 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Complex Maintenance, Repair, y Overhaul.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Complex Maintenance, Repair, y Overhaul, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o en un acceso completo a todos los datos accesibles de Oracle Complex Maintenance, Repair, y Overhaul, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos datos accesibles de Oracle Complex Maintenance, Repair, and Overhaul.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance\\,_repair\\,_and_overhaul:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAE4613F-3E3C-4F69-900D-153008B09559"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance\\,_repair\\,_and_overhaul:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41461A44-18C5-4D83-998F-6DF8E32E0487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:complex_maintenance_repair_and_overhaul:11.5.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2910DB63-31F1-4A26-B525-2F777E0B8FC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2105",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.470",
      "lastModified" : "2024-11-21T06:02:23.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Customer Interaction History de Oracle E-Business Suite (componente: Outcome-Result).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Customer Interaction History.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Customer Interaction History, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Customer Interaction History, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Customer Interaction History.&#xa0;CVSS 3.&#xa0;1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E6DDD132-A8E9-4E68-87B3-2EDE2E76EC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "C78BCA5C-68B5-4050-9001-70DBF34D2F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2106",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.537",
      "lastModified" : "2024-11-21T06:02:23.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Customer Interaction History de Oracle E-Business Suite (componente: Outcome-Result).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Customer Interaction History.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Customer Interaction History, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Customer Interaction History, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Customer Interaction History.&#xa0;CVSS 3.&#xa0;1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E6DDD132-A8E9-4E68-87B3-2EDE2E76EC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "C78BCA5C-68B5-4050-9001-70DBF34D2F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2107",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.597",
      "lastModified" : "2024-11-21T06:02:23.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite (component: Outcome-Result). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Customer Interaction History. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Customer Interaction History, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Customer Interaction History accessible data as well as unauthorized update, insert or delete access to some of Oracle Customer Interaction History accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Customer Interaction History de Oracle E-Business Suite (componente: Outcome-Result).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Customer Interaction History.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante, y aunque la vulnerabilidad se encuentra en Oracle Customer Interaction History, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Customer Interaction History, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Customer Interaction History.&#xa0;CVSS 3.&#xa0;1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "E6DDD132-A8E9-4E68-87B3-2EDE2E76EC0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customer_interaction_history:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "C78BCA5C-68B5-4050-9001-70DBF34D2F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2108",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.690",
      "lastModified" : "2024-11-21T06:02:23.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core Components).&#xa0;La versión compatible que está afectada es 12.1.3.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de IIOP, T3 comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2109",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.753",
      "lastModified" : "2024-11-21T06:02:23.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Console).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 7.2 (Impactos de la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161053/Oracle-WebLogic-Server-14.1.1.0-Remote-Code-Execution.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161053/Oracle-WebLogic-Server-14.1.1.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2110",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.817",
      "lastModified" : "2024-11-21T06:02:24.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications (component: Letters). The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Argus Safety. While the vulnerability is in Oracle Argus Safety, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Argus Safety accessible data. CVSS 3.1 Base Score 5.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Argus Safety de Oracle Health Sciences Applications (componente: Letters).&#xa0;La versión compatible que está afectada es 8.2.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle Argus Safety.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle Argus Safety, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Argus Safety.&#xa0;CVSS 3.1 Puntuación Base 5.0 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:argus_safety:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F05D844-38BD-4EEB-AF91-E5ED18B1E7E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2111",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.910",
      "lastModified" : "2024-11-21T06:02:24.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2112",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:52.973",
      "lastModified" : "2024-11-21T06:02:24.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2113",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.067",
      "lastModified" : "2024-11-21T06:02:24.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Financial Services Revenue Management and Billing product of Oracle Financial Services Applications (component: On Demand Billing). Supported versions that are affected are 2.9.0.0 and 2.9.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Revenue Management and Billing. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Revenue Management and Billing accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Financial Services Revenue Management and Billing de Oracle Financial Services Applications (componente: On Demand Billing).&#xa0;Las versiones compatibles que están afectadas son 2.9.0.0 y 2.9.0.1.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer Oracle Financial Services Revenue Management and Billing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Financial Services Revenue Management and Billing.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos de la integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E126D8C5-3476-4DDB-B111-C7FFBC6BD30B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A58DA52D-95F4-4EA0-A100-D41D6190D3D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2114",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.127",
      "lastModified" : "2024-11-21T06:02:24.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Applications Calendar). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications Calendar, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Common Applications Calendar de Oracle E-Business Suite (componente: Applications Calendar).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Common Applications Calendar.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Common Applications Calendar, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles del Oracle Common Applications Calendar, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles del Oracle Common Applications Calendar.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "C4ECD047-AE7F-4080-914D-AD0FE6E19C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "D424F2ED-D8ED-4ED0-9BBB-1685D31FB032"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2115",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.207",
      "lastModified" : "2024-11-21T06:02:24.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite (component: Tasks). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Common Applications Calendar. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Common Applications Calendar, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Common Applications Calendar accessible data as well as unauthorized update, insert or delete access to some of Oracle Common Applications Calendar accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Common Applications Calendar de Oracle E-Business Suite (componente: Tasks).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso de red por medio de HTTP comprometer a Oracle Common Applications Calendar.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Common Applications Calendar, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles del Oracle Common Applications Calendar, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles del Oracle Common Applications Calendar.&#xa0;CVSS 3.1 Puntuación Base 7.&#xa0;6 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "C4ECD047-AE7F-4080-914D-AD0FE6E19C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:common_applications_calendar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "D424F2ED-D8ED-4ED0-9BBB-1685D31FB032"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2116",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.347",
      "lastModified" : "2024-11-21T06:02:24.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Express Opportunity Tracker component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Opportunity Tracker. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Opportunity Tracker, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Opportunity Tracker accessible data as well as unauthorized read access to a subset of Oracle Application Express Opportunity Tracker accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Express Opportunity Tracker de Oracle Database Server.&#xa0;La versión compatible que está afectada es la anterior a la 20.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado que tenga privilegio de Cuenta de Usuario Válido con acceso de red por medio de HTTP comprometer a Oracle Application Express Opportunity Tracker.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Application Express Opportunity Tracker, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Oracle Application Express Opportunity Tracker, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Application Express Opportunity Tracker.&#xa0;CVSS 3.1 Puntuación Base 5.4 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_express_opportunity_tracker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.2",
            "matchCriteriaId" : "A6E6ECE7-6DAB-4375-93ED-F44D4FE76070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2117",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.427",
      "lastModified" : "2024-11-21T06:02:25.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Express Survey Builder component of Oracle Database Server. The supported version that is affected is Prior to 20.2. Easily exploitable vulnerability allows low privileged attacker having Valid User Account privilege with network access via HTTP to compromise Oracle Application Express Survey Builder. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Application Express Survey Builder, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Application Express Survey Builder accessible data as well as unauthorized read access to a subset of Oracle Application Express Survey Builder accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el componente Oracle Application Express Survey Builder de Oracle Database Server.&#xa0;La versión compatible que está afectada es la anterior a la 20.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado que tenga privilegio de Cuenta de Usuario Válido con acceso de red por medio de HTTP comprometer a Oracle Application Express Survey Builder.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Application Express Survey Builder, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Application Express Survey Builder, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Application Express Survey Builder.&#xa0;CVSS 3.1 Puntuación Base 5.&#xa0;4 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_express_survey_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.2",
            "matchCriteriaId" : "4C026D7B-213C-4789-9E11-AF839D173715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2118",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.487",
      "lastModified" : "2024-11-21T06:02:25.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Marketing, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Marketing accessible data as well as unauthorized update, insert or delete access to some of Oracle Marketing accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite (componente: Marketing Administration).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso de red por medio de HTTP comprometer a Oracle Marketing.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Oracle Marketing, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Marketing, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Marketing.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "B3749410-8BCD-44F3-85A2-DA5AC81F64B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "69B2C35C-46AA-4E72-89F3-F34E3688880D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2119",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.550",
      "lastModified" : "2024-11-21T06:02:25.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2120",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.677",
      "lastModified" : "2024-11-21T06:02:25.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2121",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:53.940",
      "lastModified" : "2024-11-21T06:02:25.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2122",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.283",
      "lastModified" : "2024-11-21T06:02:25.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DDL).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso de red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos de la disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2123",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.330",
      "lastModified" : "2024-11-21T06:02:25.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 3.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 3.2 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2124",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.393",
      "lastModified" : "2024-11-21T06:02:26.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 6.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2125",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.470",
      "lastModified" : "2024-11-21T06:02:26.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle VM VirtualBox accessible data as well as unauthorized read access to a subset of Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle VM VirtualBox, así como en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 4.6 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS:(CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2126",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.533",
      "lastModified" : "2024-11-21T06:02:26.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2127",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.613",
      "lastModified" : "2024-11-21T06:02:26.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2128",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.707",
      "lastModified" : "2024-11-21T06:02:26.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos de la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2129",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.783",
      "lastModified" : "2024-11-21T06:02:26.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.9 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle VM VirtualBox, así como en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.9 (Impactos de la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2130",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.863",
      "lastModified" : "2024-11-21T06:02:26.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completo) de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos de la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2131",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-01-20T15:15:54.927",
      "lastModified" : "2024-11-21T06:02:26.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.18. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.18.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad se encuentra en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.18",
            "matchCriteriaId" : "88AE739C-7C5B-41F0-A493-F67EE0026586"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-20T16:15:14.867",
      "lastModified" : "2024-11-21T06:20:57.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP strings from users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to change the obfuscation so that the credentials are visible."
      }, {
        "lang" : "es",
        "value" : "Dentro de la aplicación Open-AudIT hasta la versión 3.5.3, la interfaz web oculta los secretos SSH, las contraseñas de Windows y las cadenas SNMP de los usuarios que usan la ofuscación del HTML \"password field\".&#xa0;Mediante el uso de herramientas del Desarrollador o similar, es posible cambiar la ofuscación para que las credenciales sean visibles"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opmantek:open-audit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.2",
            "matchCriteriaId" : "182FC762-DD58-415B-8231-6A45EF40E40B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://opmantek.com/network-discovery-inventory-software/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/B0D0B0P0T/CVE/main/CVE-2021-3130",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://opmantek.com/network-discovery-inventory-software/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://raw.githubusercontent.com/B0D0B0P0T/CVE/main/CVE-2021-3130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21269",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-20T18:15:12.627",
      "lastModified" : "2024-11-21T05:47:53.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0, the assets endpoint did not check for the extension. The rust `join` method without checking user input might have made it abe to do a Path Traversal attack causing to read more files than allowed. This is fixed in version 0.2.0."
      }, {
        "lang" : "es",
        "value" : "Keymaker es un servidor de páginas de lista de servidores Matrix Community basado en Mastodon Community Finder.&#xa0;En Keymaker anterior a versión 0.2.0, el endpoint de activos no comprobaba la extensión.&#xa0;El método de rust \"join\" sin verificar la entrada del usuario podría haber hecho que sea posible realizar un ataque de Salto de Ruta causando la lectura de más archivos de los permitidos.&#xa0;Esto es corregido en la versión 0.2.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keymaker_project:keymaker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.2.0",
            "matchCriteriaId" : "DB094811-E3DB-42F0-B93C-9A852D9B92AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keymaker-mx/keymaker/commit/63f3012b390ff1519a84100df9e5dff5058bb926",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keymaker-mx/keymaker/security/advisories/GHSA-pg25-xfcf-vjvm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keymaker-mx/keymaker/commit/63f3012b390ff1519a84100df9e5dff5058bb926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keymaker-mx/keymaker/security/advisories/GHSA-pg25-xfcf-vjvm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1129",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:13.050",
      "lastModified" : "2024-11-21T05:43:39.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the authentication for the general purpose APIs implementation of Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA), and Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to access general system information and certain configuration information from an affected device. The vulnerability exists because a secure authentication token is not required when authenticating to the general purpose API. An attacker could exploit this vulnerability by sending a crafted request for information to the general purpose API on an affected device. A successful exploit could allow the attacker to obtain system and configuration information from the affected device, resulting in an unauthorized information disclosure."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la autenticación para la implementación de las API de propósito general de Cisco Email Security Appliance (ESA), Cisco Content Security Management Appliance (SMA) y Cisco Web Security Appliance (WSA), podría permitir a un atacante no autenticado remoto acceder a información general del sistema y determinada información de configuración de un dispositivo afectado. La vulnerabilidad se presenta porque no se requiere un token de autenticación seguro al autenticarse en la API de propósito general. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición diseñada para información de la API de propósito general en un dispositivo afectado. Una explotación con éxito podría permitir al atacante obtener información del sistema y la configuración del dispositivo afectado, resultando en una divulgación de información no autorizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA69641-8EAA-4398-8318-CE2140B78FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:13.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE7D34C-83CD-4044-8F1F-8486A3CB155D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:11.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A765083-C718-454F-846C-5EF42E94E446"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-RHp44vAC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-RHp44vAC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1133",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:13.313",
      "lastModified" : "2024-11-21T05:43:39.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el endpoint de la API REST de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto autenticado visualizar, modificar y eliminar datos sin la debida autorización. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.4\\(1\\)",
            "matchCriteriaId" : "C1304640-C408-4C06-861C-713F4F4F5140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-api-path-TpTApx2p",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-api-path-TpTApx2p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1253",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:13.580",
      "lastModified" : "2024-11-21T05:43:56.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto con privilegios de operador de red conducir un ataque de tipo cross-site scripting (XSS) o un ataque de descarga de archivo reflejado (RFD) contra un usuario de la interfaz. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1255",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:13.987",
      "lastModified" : "2024-11-21T05:43:56.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el punto final de la API REST de Cisco Data Center Network Manager (DCNM) podrían permitir a un atacante remoto autenticado ver, modificar y eliminar datos sin la debida autorización. Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.4\\(1\\)",
            "matchCriteriaId" : "C1304640-C408-4C06-861C-713F4F4F5140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-api-path-TpTApx2p",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-api-path-TpTApx2p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1257",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:14.207",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco DNA Center Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack to manipulate an authenticated user into executing malicious actions without their awareness or consent. The vulnerability is due to insufficient CSRF protections for the web-based management interface of an affected device. An attacker could exploit this vulnerability by persuading a web-based management user to follow a specially crafted link. A successful exploit could allow the attacker to perform arbitrary actions on the device with the privileges of the authenticated user. These actions include modifying the device configuration, disconnecting the user's session, and executing Command Runner commands."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del Software Cisco DNA Center, podría permitir a un atacante no autenticado remoto conducir un ataque de tipo cross-site request forgery (CSRF) para manipular a un usuario autenticado para que ejecutar acciones maliciosas sin su conocimiento o consentimiento. La vulnerabilidad es debido a unas protecciones CSRF insuficientes para la interfaz de administración basada en web de un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad persuadiendo a un usuario de administración basado en web para que siga un enlace especialmente diseñado. Una explotación con éxito podría permitir al atacante llevar a cabo acciones arbitrarias en el dispositivo con los privilegios del usuario autenticado. Estas acciones incluyen modificar la configuración del dispositivo, desconectar la sesión del usuario y ejecutar comandos de Command Runner"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.1.0",
            "matchCriteriaId" : "6A61A019-AD52-4283-B896-80C1CF4E89D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:agent:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "5.7.6",
            "matchCriteriaId" : "499A5596-C52F-4797-AF4C-C3C4DC44AA9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:agent:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "5.7.6",
            "matchCriteriaId" : "34D003BD-7A11-437A-AAD9-814F05952248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:agent:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "5.7.6",
            "matchCriteriaId" : "7DA069CD-CA90-47CE-903F-BC1B7BD0A681"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10382",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-csrf-dC83cMcV",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-csrf-dC83cMcV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1259",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:14.503",
      "lastModified" : "2024-11-21T05:43:56.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain write access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to write arbitrary files on the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del Software Cisco SD-WAN vManage, podría permitir a un atacante remoto autenticado conducir ataques de salto de ruta y obtener acceso de escritura a archivos confidenciales en un sistema afectado. La vulnerabilidad es debido a una comprobación insuficiente de las peticiones HTTP. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada que contiene secuencias de caracteres de salto de directorio para un sistema afectado. Una explotación con éxito podría permitir al atacante escribir archivos arbitrarios en el sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.2.0",
            "matchCriteriaId" : "0A9CA2A1-3A07-448B-BDAD-264B79812CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-pathtrav-Z5mCVsjf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-pathtrav-Z5mCVsjf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1260",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:14.643",
      "lastModified" : "2024-11-21T05:43:56.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante autenticado llevar a cabo ataques de inyección de comandos contra un dispositivo afectado, lo que podría permitirle al atacante tomar determinadas acciones con privilegios root en el dispositivo. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0E7F2D-6999-4FCD-A922-B57070FD9BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C163B3-5B5D-4216-91FC-42757E3A680D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04E45E9-9905-4FBC-B632-5EF429F6FC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478B7BB3-6358-46F6-8F59-786BA8D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1261",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:14.800",
      "lastModified" : "2024-11-21T05:43:57.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante autenticado llevar a cabo ataques de inyección de comandos contra un dispositivo afectado, lo que podría permitirle al atacante tomar determinadas acciones con privilegios root en el dispositivo. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0E7F2D-6999-4FCD-A922-B57070FD9BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C163B3-5B5D-4216-91FC-42757E3A680D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04E45E9-9905-4FBC-B632-5EF429F6FC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478B7BB3-6358-46F6-8F59-786BA8D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1262",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:14.970",
      "lastModified" : "2024-11-21T05:43:57.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : ""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.4",
            "matchCriteriaId" : "31234E6E-6B7F-4B47-9A77-4264C8356C43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.3.0",
            "versionEndExcluding" : "20.1.2",
            "matchCriteriaId" : "7E8DDF91-1646-49EE-A536-2F7AE5AD88A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.2",
            "matchCriteriaId" : "34133B76-199A-4E35-838B-E533137B7990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C982CE-0B5B-4A3E-BCBF-FE64BC899DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1263",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.127",
      "lastModified" : "2024-11-21T05:43:57.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante autenticado llevar a cabo ataques de inyección de comandos contra un dispositivo afectado, lo que podría permitirle al atacante tomar determinadas acciones con privilegios root en el dispositivo. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0E7F2D-6999-4FCD-A922-B57070FD9BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C163B3-5B5D-4216-91FC-42757E3A680D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04E45E9-9905-4FBC-B632-5EF429F6FC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478B7BB3-6358-46F6-8F59-786BA8D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1264",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.267",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Command Runner tool of Cisco DNA Center could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient input validation by the Command Runner tool. An attacker could exploit this vulnerability by providing crafted input during command execution or via a crafted command runner API call. A successful exploit could allow the attacker to execute arbitrary CLI commands on devices managed by Cisco DNA Center."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la herramienta Command Runner de Cisco DNA Center, podría permitir a un atacante remoto autenticado conducir un ataque de inyección de comandos. La vulnerabilidad es debido a una comprobación insuficiente de la entrada por parte de la herramienta Command Runner. Un atacante podría explotar esta vulnerabilidad al proporcionar una entrada diseñada durante la ejecución del comando o mediante una llamada a la API de command runner. Una explotación con éxito podría permitir al atacante ejecutar comandos de la CLI arbitrarios en dispositivos administrados por Cisco DNA Center"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1.0",
            "matchCriteriaId" : "A67AEA65-5185-4750-A3C1-6C23A33B4D01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-cmdinj-erumsWh9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-cmdinj-erumsWh9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1265",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.407",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the configuration archive functionality of Cisco DNA Center could allow any privilege-level authenticated, remote attacker to obtain the full unmasked running configuration of managed devices. The vulnerability is due to the configuration archives files being stored in clear text, which can be retrieved by various API calls. An attacker could exploit this vulnerability by authenticating to the device and executing a series of API calls. A successful exploit could allow the attacker to retrieve the full unmasked running configurations of managed devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad del archivo de configuración de Cisco DNA Center, podría permitir a cualquier atacante remoto autenticado en el nivel de privilegio obtener la configuración en ejecución sin máscara completa de los dispositivos administrados. La vulnerabilidad es debido a que los archivos del archivo de configuración se almacenan en texto sin cifrar, que pueden recuperarse mediante varias llamadas de la API. Un atacante podría explotar esta vulnerabilidad si se autentica en el dispositivo y ejecuta una serie de llamadas de la API. Una explotación con éxito podría permitir al atacante recuperar las configuraciones en ejecución sin mascara completamente de los dispositivos administrados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.1.0",
            "matchCriteriaId" : "6A61A019-AD52-4283-B896-80C1CF4E89D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnacid-OfeeRjcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnacid-OfeeRjcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1269",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.657",
      "lastModified" : "2024-11-21T05:43:58.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto autenticado visualizar, modificar y eliminar datos sin la debida autorización. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-authbypass-OHBPbxu",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-authbypass-OHBPbxu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1270",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.737",
      "lastModified" : "2024-11-21T05:43:58.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto autenticado visualizar, modificar y eliminar datos sin la debida autorización. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-authbypass-OHBPbxu",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-authbypass-OHBPbxu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1271",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.783",
      "lastModified" : "2024-11-21T05:43:58.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface of an affected device. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious data into a specific data field in an affected interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco AsyncOS para Cisco Web Security Appliance (WSA), podría permitir a un atacante remoto autenticado conducir un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario de la interfaz de un dispositivo afectado. La vulnerabilidad se presenta porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario. Un atacante podría explotar esta vulnerabilidad insertando datos maliciosos en un campo de datos específico en una interfaz afectada. Una explotación con éxito podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5.1",
            "matchCriteriaId" : "040AA33F-3211-4DDD-B3B1-51A861327239"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-xss-RuB5WGqL",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-xss-RuB5WGqL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1272",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.830",
      "lastModified" : "2024-11-21T05:43:58.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. This vulnerability is due to insufficient validation of parameters in a specific HTTP request by an attacker. An attacker could exploit this vulnerability by sending a crafted HTTP request to an authenticated user of the DCNM web application. A successful exploit could allow the attacker to bypass access controls and gain unauthorized access to the Device Manager application, which provides access to network devices managed by the system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de comprobación de sesión de Cisco Data Center Network Manager (DCNM), podría permitir a un atacante no autenticado remoto omitir los controles de acceso y conducir un ataque de tipo server-side request forgery (SSRF) en un sistema objetivo. Esta vulnerabilidad es debido a una comprobación insuficiente de los parámetros en una petición HTTP específica por parte de un atacante. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada hacia un usuario autenticado de la aplicación web de DCNM. Una explotación con éxito podría permitir al atacante omitir los controles de acceso y conseguir acceso no autorizado a la aplicación Device Manager, que proporciona acceso a los dispositivos de red administrados por el sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-ssrf-F2vX6q5p",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-ssrf-F2vX6q5p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1273",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.923",
      "lastModified" : "2024-11-21T05:43:58.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante no autenticado remoto ejecutar ataques de denegación de servicio (DoS) contra un dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EE0731-351C-4889-8335-3E7E7955A385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0015FD1E-1BCD-40AB-8C21-264AB9F6E123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0717AEB4-93B0-47F5-9F1B-153A519AD2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0065B109-5020-48AE-B10F-3452444748C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C2CBB8-7296-4549-B98C-D39FA1D35E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1274",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:15.970",
      "lastModified" : "2024-11-21T05:43:58.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante no autenticado remoto ejecutar ataques de denegación de servicio (DoS) contra un dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EE0731-351C-4889-8335-3E7E7955A385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0015FD1E-1BCD-40AB-8C21-264AB9F6E123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0717AEB4-93B0-47F5-9F1B-153A519AD2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0065B109-5020-48AE-B10F-3452444748C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C2CBB8-7296-4549-B98C-D39FA1D35E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1276",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.050",
      "lastModified" : "2024-11-21T05:43:59.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when establishing HTTPS requests with the affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante falsificar un host confiable o construir un ataque de tipo man-in-the-middle para extraer información confidencial o alterar determinadas peticiones de la API. Estas vulnerabilidades son debido a una comprobación de certificados insuficiente cuando se establecen peticiones HTTPS con el dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-cert-check-BdZZV9T3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-cert-check-BdZZV9T3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1277",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.110",
      "lastModified" : "2024-11-21T05:43:59.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Data Center Network Manager (DCNM) could allow an attacker to spoof a trusted host or construct a man-in-the-middle attack to extract sensitive information or alter certain API requests. These vulnerabilities are due to insufficient certificate validation when establishing HTTPS requests with the affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante falsificar un host confiable o construir un ataque de tipo man-in-the-middle para extraer información confidencial o alterar determinadas peticiones de la API. Estas vulnerabilidades son debido a una comprobación de certificados insuficiente cuando se establecen peticiones HTTPS con el dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-cert-check-BdZZV9T3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-cert-check-BdZZV9T3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1278",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.173",
      "lastModified" : "2024-11-21T05:43:59.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante no autenticado remoto ejecutar ataques de denegación de servicio (DoS) contra un dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EE0731-351C-4889-8335-3E7E7955A385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0015FD1E-1BCD-40AB-8C21-264AB9F6E123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0717AEB4-93B0-47F5-9F1B-153A519AD2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0065B109-5020-48AE-B10F-3452444748C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C2CBB8-7296-4549-B98C-D39FA1D35E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1279",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.253",
      "lastModified" : "2024-11-21T05:43:59.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante no autenticado remoto ejecutar ataques de denegación de servicio (DoS) contra un dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EE0731-351C-4889-8335-3E7E7955A385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0015FD1E-1BCD-40AB-8C21-264AB9F6E123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0717AEB4-93B0-47F5-9F1B-153A519AD2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0065B109-5020-48AE-B10F-3452444748C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C2CBB8-7296-4549-B98C-D39FA1D35E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1280",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.330",
      "lastModified" : "2024-11-21T05:43:59.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the loading mechanism of specific DLLs of Cisco Advanced Malware Protection (AMP) for Endpoints for Windows and Immunet for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack. To exploit this vulnerability, the attacker would need valid credentials on the Windows system. This vulnerability is due to incorrect handling of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on the targeted system. This file will execute when the vulnerable application launches. A successful exploit could allow the attacker to execute arbitrary code on the targeted system with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el mecanismo de carga de unas DLL específicas de Cisco Advanced Malware Protection (AMP) para Endpoints de Windows e Immunet de Windows, podría permitir a un atacante local autenticado llevar a cabo un ataque de secuestro de DLL. Para explotar esta vulnerabilidad, el atacante necesitaría credenciales válidas en el sistema Windows. Esta vulnerabilidad es debido al manejo incorrecto de las rutas de búsqueda de directorios en el tiempo de ejecución. Un atacante podría explotar esta vulnerabilidad al colocar un archivo DLL malicioso en el sistema apuntado. Este archivo se ejecutará cuando se inicie la aplicación vulnerable. Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en el sistema apuntado con privilegios SYSTEM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.3.3",
            "matchCriteriaId" : "D04E7913-3836-4686-A2AE-B2E438EB562C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:immunet:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.3.12",
            "matchCriteriaId" : "D885B2CC-18B9-4A90-9694-C0D32385E95C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp-imm-dll-5PAZ3hRV",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp-imm-dll-5PAZ3hRV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1282",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.407",
      "lastModified" : "2024-11-21T05:43:59.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&amp;P also affects Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) and could allow an attacker to conduct SQL injection attacks on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) podría permitir a un atacante conducir ataques de salto de ruta y ataques de inyección SQL en un sistema afectado. Una de las vulnerabilidades de inyección SQL que afecta a Unified CM IM&amp;P también afecta a Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y podría permitir a un atacante conducir ataques de inyección SQL en un sistema afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-35"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "2E04AFBD-C69F-4462-9742-914CD9AD2BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "F709C2EB-2724-443B-B362-0916AB8935EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "64674375-4962-410C-A837-339258B344C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "99FBA7C5-CE7D-41F0-ACFF-8A24079B7DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "7ABF16F2-3695-490C-B4B2-D6BAF80F9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "829CD76A-0785-426B-851F-04790870713D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "6986C5A9-7211-463E-B016-18E19B66ADBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "211822F9-04D8-49F4-BB92-B5F740AAB2D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1283",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.503",
      "lastModified" : "2024-11-21T05:44:00.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the logging subsystem of Cisco Data Center Network Manager (DCNM) could allow an authenticated, local attacker to view sensitive information in a system log file that should be restricted. The vulnerability exists because sensitive information is not properly masked before it is written to system log files. An attacker could exploit this vulnerability by authenticating to an affected device and inspecting a specific system log file. A successful exploit could allow the attacker to view sensitive information in the system log file. To exploit this vulnerability, the attacker would need to have valid user credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el subsistema de registro de Cisco Data Center Network Manager (DCNM), podría permitir a un atacante local autenticado visualizar información confidencial en un archivo de registro del sistema que debería estar restringido. La vulnerabilidad se presenta porque la información confidencial no se enmascara apropiadamente antes de que se escriba en los archivos de registro del sistema. Un atacante podría explotar esta vulnerabilidad si se autentica en un dispositivo afectado e inspecciona un archivo de registro del sistema específico. Una explotación con éxito podría permitir al atacante visualizar información confidencial en el archivo de registro del sistema. Para explotar esta vulnerabilidad, el atacante debería tener credenciales de usuario válidas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-info-disc-QCSJB6YG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-info-disc-QCSJB6YG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1286",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.563",
      "lastModified" : "2024-11-21T05:44:00.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto con privilegios de operador de red conducir un ataque de tipo cross-site scripting (XSS) o un ataque de descarga de archivo reflejado (RFD) contra un usuario de la interfaz. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1298",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.643",
      "lastModified" : "2024-11-21T05:44:02.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante autenticado conducir ataques de inyección de comandos contra un dispositivo afectado, lo que podría permitirle al atacante tomar determinadas acciones con privilegios root en el dispositivo. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0E7F2D-6999-4FCD-A922-B57070FD9BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C163B3-5B5D-4216-91FC-42757E3A680D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04E45E9-9905-4FBC-B632-5EF429F6FC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478B7BB3-6358-46F6-8F59-786BA8D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1299",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.720",
      "lastModified" : "2024-11-21T05:44:02.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an authenticated attacker to perform command injection attacks against an affected device, which could allow the attacker to take certain actions with root privileges on the device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante autenticado llevar a cabo ataques de inyección de comandos contra un dispositivo afectado, lo que podría permitir al atacante tomar determinadas acciones con privilegios root en el dispositivo. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0E7F2D-6999-4FCD-A922-B57070FD9BCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C163B3-5B5D-4216-91FC-42757E3A680D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A04E45E9-9905-4FBC-B632-5EF429F6FC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "478B7BB3-6358-46F6-8F59-786BA8D2AF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-cmdinjm-9QMSmgcn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1300",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.800",
      "lastModified" : "2024-11-21T05:44:02.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante no autenticado remoto ejecutar ataques contra un dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1301",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.877",
      "lastModified" : "2024-11-21T05:44:02.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante no autenticado remoto ejecutar ataques contra un dispositivo afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-bufovulns-B5NrSHbj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1302",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:16.970",
      "lastModified" : "2024-11-21T05:44:02.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del Software Cisco SD-WAN vManage, podrían permitir a un atacante autenticado remoto omitir la autorización y modificar la configuración de un sistema afectado, conseguir acceso a información confidencial y visualizar información para la que no está autorizado acceder. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1303",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.033",
      "lastModified" : "2025-07-23T15:26:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the user management roles of Cisco DNA Center could allow an authenticated, remote attacker to execute unauthorized commands on an affected device. The vulnerability is due to improper enforcement of actions for assigned user roles. An attacker could exploit this vulnerability by authenticating as a user with an Observer role and executing commands on the affected device. A successful exploit could allow a user with the Observer role to execute commands to view diagnostic information of the devices that Cisco DNA Center manages."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los roles de administración de usuarios de Cisco DNA Center, podría permitir a un atacante remoto autenticado ejecutar comandos no autorizados en un dispositivo afectado. La vulnerabilidad es debido a la aplicación inapropiada de acciones para los roles de usuario asignados. Un atacante podría explotar esta vulnerabilidad al autenticarse como usuario con un rol de observador y ejecutar comandos en el dispositivo afectado. Una explotación con éxito podría permitir que un usuario con el rol de Observador ejecutar comandos para visualizar información de diagnóstico de los dispositivos que administra Cisco DNA Center"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.2.0",
            "matchCriteriaId" : "CB7DE478-0258-4EE4-A5CE-E1D6A48F1202"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-privesc-6qjA3hVh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dnac-privesc-6qjA3hVh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1304",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.127",
      "lastModified" : "2024-11-21T05:44:02.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del Software Cisco SD-WAN vManage, podrían permitir a un atacante remoto autenticado omitir la autorización y modificar la configuración de un sistema afectado, conseguir acceso a información confidencial y visualizar información para la que no está autorizado acceder. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1305",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.207",
      "lastModified" : "2024-11-21T05:44:03.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to bypass authorization and modify the configuration of an affected system, gain access to sensitive information, and view information that they are not authorized to access. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del Software Cisco SD-WAN vManage, podrían permitir a un atacante remoto autenticado omitir la autorización y modificar la configuración de un sistema afectado, conseguir acceso a información confidencial y visualizar información para la que no está autorizado acceder. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.2",
            "matchCriteriaId" : "ADFA9DB8-3168-467D-8EE7-2368C072142E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CB625A-C638-414A-95F9-9E147C897C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-abyp-TnGFHrS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1312",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.283",
      "lastModified" : "2024-11-21T05:44:04.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the system resource management of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) to the health monitor API on an affected device. The vulnerability is due to inadequate provisioning of kernel parameters for the maximum number of TCP connections and SYN backlog. An attacker could exploit this vulnerability by sending a flood of crafted TCP packets to an affected device. A successful exploit could allow the attacker to block TCP listening ports that are used by the health monitor API. This vulnerability only affects customers who use the health monitor API."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la administración de recursos del sistema de Cisco Elastic Services Controller (ESC), podría permitir a un atacante no autenticado remoto causar una denegación de servicio (DoS) a la API del monitor de salud en un dispositivo afectado. La vulnerabilidad es debido al aprovisionamiento inadecuado de los parámetros del kernel para el número máximo de conexiones TCP y atrasos de SYN. Un atacante podría explotar esta vulnerabilidad mediante el envío de una avalancha de paquetes TCP diseñados hacia un dispositivo afectado. Una explotación con éxito podría permitir al atacante bloquear los puertos de escucha TCP que usa la API del monitor de salud. Esta vulnerabilidad solo afecta a los clientes que usan la API del monitor de salud"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:elastic_services_controller:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0.94",
            "matchCriteriaId" : "DB9BDD0A-68E5-4349-BE3E-C0D70175D440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esc-dos-4Gw6D527",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esc-dos-4Gw6D527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1349",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.377",
      "lastModified" : "2024-11-21T05:44:09.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct Cypher query language injection attacks on an affected system. The vulnerability is due to insufficient input validation by the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to the interface of an affected system. A successful exploit could allow the attacker to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del Software Cisco SD-WAN vManage, podría permitir a un atacante remoto autenticado conducir ataques de inyección de lenguaje de consulta de Cifrado en un sistema afectado. La vulnerabilidad es debido a una comprobación insuficiente de la entrada por parte de la interfaz de administración basada en web. Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas a la interfaz de un sistema afectado. Una explotación con éxito podría permitir al atacante conseguir información confidencial"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-943"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.2",
            "matchCriteriaId" : "F37C441E-5DFD-499C-8DEC-68B0F5108191"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-cql-inject-72EhnUc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-cql-inject-72EhnUc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1350",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.457",
      "lastModified" : "2024-11-21T05:44:09.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web UI of Cisco Umbrella could allow an unauthenticated, remote attacker to negatively affect the performance of this service. The vulnerability exists due to insufficient rate limiting controls in the web UI. An attacker could exploit this vulnerability by sending crafted HTTPS packets at a high and sustained rate. A successful exploit could allow the attacker to negatively affect the performance of the web UI. Cisco has addressed this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la Interfaz de Usuario web de Cisco Umbrella, podría permitir a un atacante no autenticado remoto afectar negativamente el rendimiento de este servicio. La vulnerabilidad se presenta debido a insuficientes controles de limitación de velocidad en la Interfaz de Usuario web. Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes HTTPS diseñados a una velocidad alta y sostenida. Una explotación con éxito podría permitir al atacante afectar negativamente el rendimiento de la Interfaz de Usuario web. Cisco ha abordado esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:umbrella:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCF83B-9E18-4B12-BCE1-85F5E8284374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umb-dos-dgKzDEBP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umb-dos-dgKzDEBP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1353",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.533",
      "lastModified" : "2024-11-21T05:44:09.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv4 protocol handling of Cisco StarOS could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to a memory leak that occurs during packet processing. An attacker could exploit this vulnerability by sending a series of crafted IPv4 packets through an affected device. A successful exploit could allow the attacker to exhaust the available memory and cause an unexpected restart of the npusim process, leading to a DoS condition on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo del protocolo IPv4 de Cisco StarOS, podría permitir a un atacante no autenticado remoto causar una condición de denegación de servicio (DoS) en un dispositivo afectado. La vulnerabilidad es debido a una pérdida de memoria que se produce durante el procesamiento de paquetes. Un atacante podría explotar esta vulnerabilidad mediante el envío de una serie de paquetes IPv4 diseñados por medio de un dispositivo afectado. Una explotación con éxito podría permitir al atacante agotar la memoria disponible y causar un reinicio inesperado del proceso npusim, conllevando a una condición DoS en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.22.0",
            "matchCriteriaId" : "741DB403-12E1-4C6E-BC0A-FD92A32B0F89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746254AC-B039-432C-AA5C-A82260E57AD7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "301681DF-2A9E-4A91-9918-4A46153ADC01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9EF0299-16A7-446D-855D-BFF91EE65534"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:virtualized_packet_core-single_instance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A57A0338-1FB7-464E-9968-102163EB8362"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr-mem-leak-dos-MTWGHKk3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asr-mem-leak-dos-MTWGHKk3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1355",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.610",
      "lastModified" : "2024-11-21T05:44:09.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&amp;P also affects Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) and could allow an attacker to conduct SQL injection attacks on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Unified Communications Manager IM &amp; amp; Presence Service (Unified CM IM&amp;P), podría permitir a un atacante conducir ataques de salto de ruta y ataques de inyección SQL en un sistema afectado. Una de las vulnerabilidades de inyección SQL que afecta a Unified CM IM&amp;P también afecta a Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y podría permitir a un atacante conducir ataques de inyección SQL en un sistema afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-35"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "2E04AFBD-C69F-4462-9742-914CD9AD2BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "F709C2EB-2724-443B-B362-0916AB8935EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "64674375-4962-410C-A837-339258B344C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "99FBA7C5-CE7D-41F0-ACFF-8A24079B7DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "7ABF16F2-3695-490C-B4B2-D6BAF80F9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "829CD76A-0785-426B-851F-04790870713D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "6986C5A9-7211-463E-B016-18E19B66ADBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "211822F9-04D8-49F4-BB92-B5F740AAB2D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1357",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.690",
      "lastModified" : "2024-11-21T05:44:10.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&amp;P also affects Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) and could allow an attacker to conduct SQL injection attacks on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;:P), podría permitir a un atacante conducir ataques de salto de ruta y ataques de inyección SQL en un sistema afectado. Una de las vulnerabilidades de inyección SQL que afecta a Unified CM IM&amp;P también afecta a Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y podría permitir a un atacante conducir ataques de inyección SQL en un sistema afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-35"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "2E04AFBD-C69F-4462-9742-914CD9AD2BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "F709C2EB-2724-443B-B362-0916AB8935EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "64674375-4962-410C-A837-339258B344C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "99FBA7C5-CE7D-41F0-ACFF-8A24079B7DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "7ABF16F2-3695-490C-B4B2-D6BAF80F9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "829CD76A-0785-426B-851F-04790870713D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "6986C5A9-7211-463E-B016-18E19B66ADBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "211822F9-04D8-49F4-BB92-B5F740AAB2D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1364",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T20:15:17.753",
      "lastModified" : "2024-11-21T05:44:11.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P) could allow an attacker to conduct path traversal attacks and SQL injection attacks on an affected system. One of the SQL injection vulnerabilities that affects Unified CM IM&amp;P also affects Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) and could allow an attacker to conduct SQL injection attacks on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM &amp;), podría permitir a un atacante conducir ataques de salto de ruta y ataques de inyección SQL en un sistema afectado. Una de las vulnerabilidades de inyección SQL que afecta a Unified CM IM amp;P también afecta a Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y podría permitir a un atacante conducir ataques de inyección SQL en un sistema afectado. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-35"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "2E04AFBD-C69F-4462-9742-914CD9AD2BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "F709C2EB-2724-443B-B362-0916AB8935EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "64674375-4962-410C-A837-339258B344C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.0\\(1\\)su4",
            "matchCriteriaId" : "99FBA7C5-CE7D-41F0-ACFF-8A24079B7DDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "7ABF16F2-3695-490C-B4B2-D6BAF80F9D25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.5",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "829CD76A-0785-426B-851F-04790870713D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "6986C5A9-7211-463E-B016-18E19B66ADBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "211822F9-04D8-49F4-BB92-B5F740AAB2D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-trav-inj-dM687ZD6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1135",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.130",
      "lastModified" : "2024-11-21T05:43:39.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to view, modify, and delete data without proper authorization. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el endpoint de la API REST de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto autenticado visualizar, modificar y eliminar datos sin la debida autorización. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.4\\(1\\)",
            "matchCriteriaId" : "C1304640-C408-4C06-861C-713F4F4F5140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-api-path-TpTApx2p",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-api-path-TpTApx2p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1138",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.210",
      "lastModified" : "2024-11-21T05:43:40.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario web de Cisco Smart Software Manager Satellite, podrían permitir a un atacante no autenticado remoto ejecutar comandos arbitrarios en el sistema operativo subyacente. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_satellite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "625C8157-B2F8-4C8D-9131-6A97E7F6AB0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1139",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.287",
      "lastModified" : "2024-11-21T05:43:40.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario web de Cisco Smart Software Manager Satellite, podrían permitir a un atacante no autenticado remoto ejecutar comandos arbitrarios en el sistema operativo subyacente. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_satellite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "625C8157-B2F8-4C8D-9131-6A97E7F6AB0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1140",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.367",
      "lastModified" : "2024-11-21T05:43:40.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario web de Cisco Smart Software Manager Satellite, podrían permitir a un atacante no autenticado remoto ejecutar comandos arbitrarios en el sistema operativo subyacente. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_satellite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "625C8157-B2F8-4C8D-9131-6A97E7F6AB0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1141",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.443",
      "lastModified" : "2024-11-21T05:43:40.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario web de Cisco Smart Software Manager Satellite, podrían permitir a un atacante no autenticado remoto ejecutar comandos arbitrarios en el sistema operativo subyacente. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_satellite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "625C8157-B2F8-4C8D-9131-6A97E7F6AB0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1142",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.520",
      "lastModified" : "2024-11-21T05:43:40.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco Smart Software Manager Satellite could allow an unauthenticated, remote attacker to execute arbitrary commands on the underlying operating system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario web de Cisco Smart Software Manager Satellite, podrían permitir a un atacante no autenticado remoto ejecutar comandos arbitrarios en el sistema operativo subyacente. Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_satellite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "625C8157-B2F8-4C8D-9131-6A97E7F6AB0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-multici-pgG5WM5A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1218",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.617",
      "lastModified" : "2024-11-21T05:43:51.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web management interface of Cisco Smart Software Manager satellite could allow an authenticated, remote attacker to redirect a user to an undesired web page. The vulnerability is due to improper input validation of the URL parameters in an HTTP request that is sent to an affected device. An attacker could exploit this vulnerability by sending a crafted HTTP request that could cause the web application to redirect the request to a specified malicious URL. A successful exploit could allow the attacker to redirect a user to a malicious website."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración web de Cisco Smart Software Manager Satellite, podría permitir a un atacante remoto autenticado redireccionar a un usuario hacia a una página web no deseada. La vulnerabilidad es debido a una comprobación inapropiada de entrada de los parámetros de URL en una petición HTTP que es enviada hacia un dispositivo afectado. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada que podría hacer que la aplicación web redireccionar la petición hacia una URL maliciosa específica. Una explotación con éxito podría permitir al atacante redireccionar a un usuario a un sitio web malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_on-prem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0",
            "matchCriteriaId" : "AB2D3E25-A979-46FC-86E8-650E0A853284"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssmor-MDCWkT2x",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssmor-MDCWkT2x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1219",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.693",
      "lastModified" : "2024-11-21T05:43:51.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Smart Software Manager Satellite could allow an authenticated, local attacker to access sensitive information on an affected system. The vulnerability is due to insufficient protection of static credentials in the affected software. An attacker could exploit this vulnerability by gaining access to the static credential that is stored on the local device. A successful exploit could allow the attacker to view static credentials, which the attacker could use to carry out further attacks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Smart Software Manager Satellite, podría permitir a un atacante local autenticado acceder a información confidencial en un sistema afectado. La vulnerabilidad es debido a una protección insuficiente de las credenciales estáticas en el software afectado. Un atacante podría explotar esta vulnerabilidad al obtener acceso a la credencial estática almacenada en el dispositivo local. Una explotación con éxito podría permitir al atacante visualizar credenciales estáticas, que el atacante podría usar para llevar a cabo futuros ataques"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_on-prem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "CEE3E0AB-600A-44B2-834C-AA5F962A69EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-sc-Jd42D4Tq",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-sc-Jd42D4Tq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1222",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.770",
      "lastModified" : "2024-11-21T05:43:51.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Smart Software Manager Satellite could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability exists because the web-based management interface improperly validates values within SQL queries. An attacker could exploit this vulnerability by authenticating to the application and sending malicious SQL queries to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database or the operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco Smart Software Manager Satellite, podría permitir a un atacante remoto autenticado conducir ataques de inyección SQL en un sistema afectado. La vulnerabilidad se presenta porque la interfaz de administración basada en web comprueba inapropiadamente los valores dentro de las consultas SQL. Un atacante podría explotar esta vulnerabilidad al autenticarse en la aplicación y enviar consultas SQL maliciosas hacia un sistema afectado. Una explotación con éxito podría permitir al atacante modificar o devolver valores de la base de datos subyacente o del sistema operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:smart_software_manager_on-prem:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.0",
            "matchCriteriaId" : "CEE3E0AB-600A-44B2-834C-AA5F962A69EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-sqi-h5fDvZWp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cssm-sqi-h5fDvZWp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1225",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.867",
      "lastModified" : "2024-11-21T05:43:52.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities exist because the web-based management interface improperly validates values in SQL queries. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious SQL queries to an affected system. A successful exploit could allow the attacker to modify values on or return values from the underlying database or the operating system."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades en la interfaz de administración basada en web del Software Cisco SD-WAN vManage, podrían permitir a un atacante remoto no autenticado conducir ataques de inyección SQL en un sistema afectado. Estas vulnerabilidades se presentan porque la interfaz de administración basada en web comprueba inapropiadamente los valores en las consultas SQL. Un atacante podría explotar estas vulnerabilidades al autenticarse en la aplicación y enviar consultas SQL maliciosas hacia un sistema afectado. Una explotación con éxito podría permitir al atacante modificar o devolver valores de la base de datos subyacente o del sistema operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.3",
            "matchCriteriaId" : "218660F0-F6E8-4088-8A8E-ED375C3AD4FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-sqlinjm-xV8dsjq5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vman-sqlinjm-xV8dsjq5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1233",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:11.943",
      "lastModified" : "2024-11-21T05:43:53.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to access sensitive information on an affected device. The vulnerability is due to insufficient input validation of requests that are sent to the iperf tool. An attacker could exploit this vulnerability by sending a crafted request to the iperf tool, which is included in Cisco SD-WAN Software. A successful exploit could allow the attacker to obtain any file from the filesystem of an affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco SD-WAN, podría permitir a un atacante local autenticado acceder a información confidencial en un dispositivo afectado. La vulnerabilidad es debido a una comprobación insuficiente de la entrada de las peticiones que son enviadas hacia la herramienta iperf. Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición diseñada a la herramienta iperf, que se incluye en el Software Cisco SD-WAN. Una explotación con éxito podría permitir al atacante obtener cualquier archivo del sistema de archivos de un dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.4.3",
            "matchCriteriaId" : "7A859F83-EE40-4E63-9F51-9DF643CBFEAB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-2-UPO232DG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-infodis-2-UPO232DG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1235",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:12.020",
      "lastModified" : "2024-11-21T05:43:53.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to read sensitive database files on an affected system. The vulnerability is due to insufficient user authorization. An attacker could exploit this vulnerability by accessing the vshell of an affected system. A successful exploit could allow the attacker to read database files from the filesystem of the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco SD-WAN vManage, podría permitir a un atacante local autenticado leer archivos de bases de datos confidenciales en un sistema afectado. La vulnerabilidad es debido a una autorización de usuario insuficiente. Un atacante podría explotar esta vulnerabilidad mediante el acceso al vshell de un sistema afectado. Una explotación con éxito podría permitir al atacante leer archivos desde la base de datos del sistema de archivos del sistema operativo subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.3",
            "matchCriteriaId" : "218660F0-F6E8-4088-8A8E-ED375C3AD4FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vinfdis-MC8L58dj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vinfdis-MC8L58dj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1241",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:12.100",
      "lastModified" : "2024-11-21T05:43:54.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN products could allow an unauthenticated, remote attacker to execute denial of service (DoS) attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades en los productos Cisco SD-WAN, podrían permitir a un atacante remoto no autenticado ejecutar ataques de denegación de servicio (DoS) contra un dispositivo afectado. Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EE0731-351C-4889-8335-3E7E7955A385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBD6FD9-84EE-416C-B77D-843D2FAAF1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0015FD1E-1BCD-40AB-8C21-264AB9F6E123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C9F1DA-0527-4442-B0B4-4467960D30C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:18.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0717AEB4-93B0-47F5-9F1B-153A519AD2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0065B109-5020-48AE-B10F-3452444748C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C535AB3-DCCE-4CFB-8479-08550552E863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07C2CBB8-7296-4549-B98C-D39FA1D35E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74606C6-B292-4D23-8652-5CF49BDD8369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_firmware:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF9C5E2-1A91-43A0-8F51-05A2E204BF01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:sd-wan_vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFBC49D2-5618-416A-AE3C-6421B8B09C80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66AEE108-5CF9-4F19-9A52-40850F850E91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7AF418B-E5C4-4FEA-A9B9-9D29002702CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8282DC4-099F-4379-8B2A-7B876AE29779"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9952ECE-2659-4CAC-B29C-6439391FADDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBAF9E5F-C858-44C8-9F81-0916324CF513"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA0F3A1-3442-4491-95D6-F5B17A09DB73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E1CFE1-8CF7-48BE-833F-03F72B3BAFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3773F59-DF2E-4387-8E27-C08FE1E6549D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE3D96F7-3574-443F-9AD4-5E62E0F5E4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dosmulti-48jJuEUP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1247",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:12.177",
      "lastModified" : "2024-11-21T05:43:55.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades en determinados endpoints de la API REST de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto autenticado ejecutar comandos SQL arbitrarios en un dispositivo afectado. Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1248",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:12.257",
      "lastModified" : "2024-11-21T05:43:55.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in certain REST API endpoints of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to execute arbitrary SQL commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades en determinados endpoints de la API REST de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto autenticado ejecutar comandos SQL arbitrarios en un dispositivo afectado. Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-sql-inj-OAQOObP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1249",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:12.317",
      "lastModified" : "2024-11-21T05:43:55.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades en la interfaz de administración basada en web de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto con privilegios de operador de red conducir un ataque de tipo cross-site scripting (XSS) o un ataque de descarga de archivo reflejado (RFD) contra un usuario de la interfaz. Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1250",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-01-20T21:15:12.397",
      "lastModified" : "2024-11-21T05:43:55.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow a remote attacker with network-operator privileges to conduct a cross-site scripting (XSS) attack or a reflected file download (RFD) attack against a user of the interface. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Varias vulnerabilidades en la interfaz de administración basada en web de Cisco Data Center Network Manager (DCNM), podrían permitir a un atacante remoto con privilegios de operador de red conducir un ataque de tipo cross-site scripting (XSS) o un ataque de descarga de archivo reflejado (RFD) contra un usuario de la interfaz. Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:data_center_network_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.5\\(1\\)",
            "matchCriteriaId" : "DF576422-7AFB-49D1-AAEE-ED6759A011C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-dcnm-xss-vulns-GuUJ39gh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1067",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-20T23:15:10.443",
      "lastModified" : "2024-11-21T05:43:31.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the implementation of the RPMB command status, in which an attacker can write to the Write Protect Configuration Block, which may lead to denial of service or escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA SHIELD TV, todas las versiones anteriores a 8.2.2, contiene una vulnerabilidad en la implementación del estado del comando RPMB, en el cual un atacante puede escribir en el Bloque de configuración de protección contra escritura, lo que puede conllevar a la denegación de servicio o la escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.2",
            "matchCriteriaId" : "E84A213F-2C1C-4358-9233-17A606F66569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5148",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1068",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-20T23:15:10.583",
      "lastModified" : "2024-11-21T05:43:32.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVDEC component, in which an attacker can read from or write to a memory location that is outside the intended boundary of the buffer, which may lead to denial of service or escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "NVIDIA SHIELD TV, todas las versiones anteriores a 8.2.2, contiene una vulnerabilidad en el componente NVDEC, en el cual un atacante puede leer o escribir en una ubicación de memoria que está fuera del límite previsto del búfer, lo que puede conllevar a la denegación de servicio o escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.2",
            "matchCriteriaId" : "E84A213F-2C1C-4358-9233-17A606F66569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5148",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1069",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-20T23:15:10.647",
      "lastModified" : "2024-11-21T05:43:32.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA SHIELD TV, all versions prior to 8.2.2, contains a vulnerability in the NVHost function, which may lead to abnormal reboot due to a null pointer reference, causing data loss."
      }, {
        "lang" : "es",
        "value" : "NVIDIA SHIELD TV, todas las versiones anteriores a 8.2.2, contiene una vulnerabilidad en la función NVHost, que puede conllevar a un reinicio anormal debido a una referencia de puntero nulo, causando la pérdida de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:shield_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.2",
            "matchCriteriaId" : "E84A213F-2C1C-4358-9233-17A606F66569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r32.5",
            "matchCriteriaId" : "B53AC0D9-2453-4E98-BA1D-029C04EB720A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD3D2AA-2A9F-470D-BB0F-A7B7C2EC2490"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2B041F-21A8-4F0B-BBAF-7CDD8B911547"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E153CA-BE89-4C66-8B72-8901BF592423"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1FDAD-C594-43D9-9BF6-F7461177AB91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9D4A55-A232-4AF2-B7E9-CD58D7D17479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AA5976-FD71-4A53-BD4F-D342E871FEB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5147",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5148",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21238",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-21T15:15:14.110",
      "lastModified" : "2024-11-21T05:47:50.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. All users of pysaml2 that need to validate signed SAML documents are impacted. The vulnerability is a variant of XML Signature wrapping because it did not validate the SAML document against an XML schema. This allowed invalid XML documents to be processed and such a document can trick pysaml2 with a wrapped signature. This is fixed in PySAML2 6.5.0."
      }, {
        "lang" : "es",
        "value" : "PySAML2 es una implementación de Python pura de SAML Versión 2 Estándar. PySAML2 versiones anteriores a 6.5.0, presenta una verificación inapropiada de una vulnerabilidad de firma criptográfica. Todos los usuarios de pysaml2 que necesitan comprobar documentos SAML firmados están afectados. La vulnerabilidad es una variante del empaquetado de firma XML porque no validó el documento SAML con un esquema XML. Esto permitió que documentos XML sean procesados no válidos y dicho documento puede engañar a pysaml2 con una firma empaquetada. Esto es corregido en PySAML2 versión 6.5.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pysaml2_project:pysaml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.0",
            "matchCriteriaId" : "A94B9227-93A8-4D3D-A8C3-E56F3A84F8B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IdentityPython/pysaml2/commit/1d8fd268f5bf887480a403a7a5ef8f048157cc14",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/releases/tag/v6.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/security/advisories/GHSA-f4g9-h89h-jgv9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/pysaml2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/commit/1d8fd268f5bf887480a403a7a5ef8f048157cc14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/releases/tag/v6.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/security/advisories/GHSA-f4g9-h89h-jgv9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/pysaml2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21239",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-21T15:15:14.423",
      "lastModified" : "2024-11-21T05:47:50.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML documents are impacted. PySAML2 does not ensure that a signed SAML document is correctly signed. The default CryptoBackendXmlSec1 backend is using the xmlsec1 binary to verify the signature of signed SAML documents, but by default xmlsec1 accepts any type of key found within the given document. xmlsec1 needs to be configured explicitly to only use only _x509 certificates_ for the verification process of the SAML document signature. This is fixed in PySAML2 6.5.0."
      }, {
        "lang" : "es",
        "value" : "PySAML2 es una implementación de Python pura de SAML Versión 2 Estándar. PySAML2 versiones anteriores a 6.5.0, presenta una verificación inapropiada de una vulnerabilidad de firma criptográfica. Los usuarios de pysaml2 que utilizan el backend CryptoBackendXmlSec1 predeterminado y necesitan verificar los documentos SAML firmados están afectados. PySAML2 no garantiza que un documento SAML firmado esté correctamente firmado. El backend CryptoBackendXmlSec1 predeterminado está usando el binario xmlsec1 para verificar la firma de los documentos SAML firmados, pero por defecto xmlsec1 acepta cualquier tipo de clave que se encuentre dentro del documento dado. xmlsec1 debe configurarse explícitamente para usar solo _x509 certificates_ para el proceso de verificación de la firma del documento SAML. Esto es corregido en PySAML2 versión 6.5.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pysaml2_project:pysaml2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.0",
            "matchCriteriaId" : "A94B9227-93A8-4D3D-A8C3-E56F3A84F8B2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IdentityPython/pysaml2/commit/46578df0695269a16f1c94171f1429873f90ed99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/releases/tag/v6.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/security/advisories/GHSA-5p3x-r448-pc62",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00038.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/pysaml2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.aleksey.com/pipermail/xmlsec/2013/009717.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/commit/46578df0695269a16f1c94171f1429873f90ed99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/releases/tag/v6.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IdentityPython/pysaml2/security/advisories/GHSA-5p3x-r448-pc62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/pysaml2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.aleksey.com/pipermail/xmlsec/2013/009717.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21253",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-21T15:15:14.580",
      "lastModified" : "2024-11-21T05:47:52.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OnlineVotingSystem is an open source project hosted on GitHub. OnlineVotingSystem before version 1.1.2 hashes user passwords without a salt, which is vulnerable to dictionary attacks. Therefore there is a threat of security breach in the voting system. Without a salt, it is much easier for attackers to pre-compute the hash value using dictionary attack techniques such as rainbow tables to crack passwords. This problem is fixed and published in version 1.1.2. A long randomly generated salt is added to the password hash function to better protect passwords stored in the voting system."
      }, {
        "lang" : "es",
        "value" : "OnlineVotingSystem es un proyecto de código abierto alojado en GitHub. OnlineVotingSystem anterior a versión 1.1.2, aplica un hash a las contraseñas de los usuarios sin sal, lo que es vulnerable a ataques de diccionario. Por lo tanto, se presenta una amenaza de violación de seguridad en el sistema de votación. Sin una sal, es mucho más fácil para los atacantes calcular previamente el valor hash usando técnicas de ataque de diccionario como tablas rainbow para descifrar contraseñas. Este problema está corregido y publicado en la versión 1.1.2. Se agrega una sal generada aleatoriamente a la función password hash para proteger mejor las contraseñas almacenadas en el sistema de votación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-759"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-916"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlinevotingsystem_project:onlinevotingsystem:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "9512C3B9-84DD-4E95-8091-B4C18719D719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dbijaya/OnlineVotingSystem/commit/0181cb0272857696c8eb3e44fcf6cb014ff90f09",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dbijaya/OnlineVotingSystem/security/advisories/GHSA-wwg8-372v-v332",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dbijaya/OnlineVotingSystem/commit/0181cb0272857696c8eb3e44fcf6cb014ff90f09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dbijaya/OnlineVotingSystem/security/advisories/GHSA-wwg8-372v-v332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22847",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-01-22T09:15:13.227",
      "lastModified" : "2024-11-21T05:50:45.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyweb HyCMS-J1's API fail to filter POST request parameters. Remote attackers can inject SQL syntax and execute commands without privilege."
      }, {
        "lang" : "es",
        "value" : "La API de Hyweb HyCMS-J1 no filtra los parámetros de la petición POST.&#xa0;Los atacantes remotos pueden inyectar sintaxis SQL y ejecutar comandos sin privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyweb:hycms-j1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.3",
            "matchCriteriaId" : "C5C67527-AB11-4334-A745-6264331BDDB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4316-298fc-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4316-298fc-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22849",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-01-22T09:15:13.790",
      "lastModified" : "2024-11-21T05:50:45.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyweb HyCMS-J1 backend editing function does not filter special characters. Users after log-in can inject JavaScript syntax to perform a stored XSS (Stored Cross-site scripting) attack."
      }, {
        "lang" : "es",
        "value" : "La función de edición del backend de Hyweb HyCMS-J1 no filtra los caracteres especiales.&#xa0;Los usuarios después de iniciar sesión pueden inyectar una sintaxis JavaScript para llevar a cabo un ataque de tipo XSS almacenado (Cross-site Scripting Almacenado)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyweb:hycms-j1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4.3",
            "matchCriteriaId" : "C5C67527-AB11-4334-A745-6264331BDDB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4318-09cd3-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4318-09cd3-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21259",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-22T17:15:12.867",
      "lastModified" : "2024-11-21T05:47:52.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedgeDoc is open source software which lets you create real-time collaborative markdown notes. In HedgeDoc before version 1.7.2, an attacker can inject arbitrary JavaScript into a HedgeDoc note, which is executed when the note is viewed in slide mode. Depending on the configuration of the instance, the attacker may not need authentication to create or edit notes. The problem is patched in HedgeDoc 1.7.2. As a workaround, disallow loading JavaScript from 3rd party sites using the `Content-Security-Policy` header. Note that this will break some embedded content."
      }, {
        "lang" : "es",
        "value" : "HedgeDoc es un software de código abierto que permite crear notas markdown colaborativas en tiempo real. En HedgeDoc antes de la versión 1.7.2, un atacante puede inyectar JavaScript arbitrario en una nota de HedgeDoc, que se ejecuta cuando la nota se ve en modo de diapositivas. Dependiendo de la configuración de la instancia, el atacante puede no necesitar autenticación para crear o editar notas. El problema está parcheado en HedgeDoc versión 1.7.2. Como solución, deshabilite la carga de JavaScript desde sitios de terceros utilizando la cabecera `Content-Security-Policy`. Tenga en cuenta que esto romperá algunos contenidos incrustados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hedgedoc:hedgedoc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "6EF4EA31-5B63-4C26-A744-E8A8B03D8DEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hackmdio/codimd/issues/1648",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/commit/35b0d39a12aa35f27fba8c1f50b1886706e7efef",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/releases/tag/1.7.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-44w9-vm8p-3cxw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hackmdio/codimd/issues/1648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/commit/35b0d39a12aa35f27fba8c1f50b1886706e7efef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/releases/tag/1.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-44w9-vm8p-3cxw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21260",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-22T18:15:12.610",
      "lastModified" : "2024-11-21T05:47:52.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Invoicing System (OIS) is open source software which is a lean invoicing system for small businesses, consultants and freelancers created using AppGini. In OIS version 4.0 there is a stored XSS which can enables an attacker takeover of the admin account through a payload that extracts a csrf token and sends a request to change password. It has been found that Item description is reflected without sanitization in app/items_view.php which enables the malicious scenario."
      }, {
        "lang" : "es",
        "value" : "El Sistema de Facturación en Línea (OIS) es un software de código abierto que es un sistema de facturación ajustado para pequeñas empresas, consultores y autónomos creado con AppGini. En OIS versión 4.0 se presenta una vulnerabilidad de tipo XSS almacenado que puede permitir que un atacante tome el control de la cuenta de administrador por medio de una carga útil que extrae un token csrf y envía una petición para cambiar la contraseña. Se ha detectado que la descripción del artículo se refleja sin saneamiento en el archivo app/items_view.php, lo que habilita el escenario malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigprof:online_invoicing_system:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03A30130-6CAE-4330-95EF-8658D93EF4C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigprof-software/online-invoicing-system/releases/tag/4.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigprof-software/online-invoicing-system/security/advisories/GHSA-rm79-5596-r7q4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigprof-software/online-invoicing-system/releases/tag/4.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigprof-software/online-invoicing-system/security/advisories/GHSA-rm79-5596-r7q4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21270",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-22T18:15:12.687",
      "lastModified" : "2024-11-21T05:47:53.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OctopusDSC is a PowerShell module with DSC resources that can be used to install and configure an Octopus Deploy Server and Tentacle agent. In OctopusDSC version 4.0.977 and earlier a customer API key used to connect to Octopus Server is exposed via logging in plaintext. This vulnerability is patched in version 4.0.1002."
      }, {
        "lang" : "es",
        "value" : "OctopusDSC es un módulo de PowerShell con recursos de DSC, que se puede utilizar para instalar y configurar un agente de Octopus Deploy Server and Tentacle. En OctopusDSC versión 4.0.977 y anteriores, una clave de la API del cliente usada para conectarse a Octopus Server es expuesta mediante el inicio de sesión en texto plano. Esta vulnerabilidad está parcheada en la versión 4.0.1002"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octopus:octopusdsc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.1002",
            "matchCriteriaId" : "6C2A1440-E4C7-464D-9FB8-25DE6573A278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/commit/24b448e6ac964ed938475add494a145c0473ac42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/pull/270",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/releases/tag/v4.0.1002",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/security/advisories/GHSA-phmm-rfg9-94fm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/commit/24b448e6ac964ed938475add494a145c0473ac42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/pull/270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/releases/tag/v4.0.1002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OctopusDeploy/OctopusDSC/security/advisories/GHSA-phmm-rfg9-94fm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23901",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-01-25T10:16:33.470",
      "lastModified" : "2024-11-21T05:52:01.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML data. It often allows an attacker to view files on the application server filesystem, and to interact with any back-end or external systems that the application itself can access. This issue is fixed in Apache Nutch 1.18."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección de XML external entity (XXE) en Nutch DmozParser y se sabe que afecta a Nutch versiones anteriores a 1.18. Una inyección de entidad externa XML (también se conoce como XXE) es una vulnerabilidad de seguridad web que permite a un atacante interferir con el procesamiento de datos XML de una aplicación. A menudo permite a un atacante visualizar archivos en el sistema de archivos del servidor de aplicaciones e interactuar con cualquier sistema del back-end o externo al que la aplicación pueda acceder. Este problema se corrigió en Apache Nutch versión 1.18"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:nutch:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18",
            "matchCriteriaId" : "5F4D691E-6CD6-497F-A81C-AE5144D3870E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snap_creator_framework:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F4754FB-E3EB-454A-AB1A-AE3835C5350C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://issues.apache.org/jira/browse/NUTCH-2841",
        "source" : "security@apache.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r090321840b44cc91086c4e317bf2baffa270749dde6c1273b6567f7c%40%3Cdev.nutch.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e2f7737b42c73a3325f3c2c8cdee1ec27631b3a0e144104d84d70e6%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ddfd680aa7ea001ca8da63bb23e3f8caa095a8b4f2261e46bade5c7%40%3Cdev.nutch.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0003/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/NUTCH-2841",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r090321840b44cc91086c4e317bf2baffa270749dde6c1273b6567f7c%40%3Cdev.nutch.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e2f7737b42c73a3325f3c2c8cdee1ec27631b3a0e144104d84d70e6%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ddfd680aa7ea001ca8da63bb23e3f8caa095a8b4f2261e46bade5c7%40%3Cdev.nutch.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21272",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-25T19:15:12.847",
      "lastModified" : "2024-11-21T05:47:54.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a \"zip-slip\" vulnerability. The directory support feature allows the downloaded gzipped tarballs to be automatically extracted to the user-specified directory where the tarball can have symbolic links and hard links. A well-crafted tarball or tarballs allow malicious artifact providers linking, writing, or overwriting specific files on the host filesystem outside of the user-specified directory unexpectedly with the same permissions as the user who runs `oras pull`. Users of the affected versions are impacted if they are `oras` CLI users who runs `oras pull`, or if they are Go programs, which invoke `github.com/deislabs/oras/pkg/content.FileStore`. The problem has been fixed in version 0.9.0. For `oras` CLI users, there is no workarounds other than pulling from a trusted artifact provider. For `oras` package users, the workaround is to not use `github.com/deislabs/oras/pkg/content.FileStore`, and use other content stores instead, or pull from a trusted artifact provider."
      }, {
        "lang" : "es",
        "value" : "ORAS es un software de código abierto que permite una forma de empujar artefactos OCI a registros conformes con OCI. ORAS es tanto un CLI para pruebas iniciales como un módulo Go. En ORAS a partir de la versión 0.4.0 y anterior a la versión 0.9.0, existe una vulnerabilidad de \"deslizamiento de zip\". La función de soporte de directorios permite que los tarballs gzipped descargados se extraigan automáticamente al directorio especificado por el usuario, donde el tarball puede tener enlaces simbólicos y enlaces duros. Un tarball o tarballs bien elaborados permiten a los proveedores de artefactos maliciosos enlazar, escribir o sobrescribir archivos específicos en el sistema de archivos del host fuera del directorio especificado por el usuario de forma inesperada con los mismos permisos que el usuario que ejecuta `oras pull`. Los usuarios de las versiones afectadas se ven afectados si son usuarios de `oras` CLI que ejecutan `oras pull`, o si son programas Go, que invocan `github.com/deislabs/oras/pkg/content.FileStore`. El problema ha sido corregido en la versión 0.9.0. Para los usuarios de la CLI de `oras`, no hay ninguna solución que no sea la de extraer de un proveedor de artefactos de confianza. Para los usuarios del paquete `oras`, la solución es no utilizar `github.com/deislabs/oras/pkg/content.FileStore`, y utilizar otros almacenes de contenido en su lugar, o tirar de un proveedor de artefactos de confianza"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deislabs:oras:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.0",
            "versionEndExcluding" : "0.9.0",
            "matchCriteriaId" : "93510360-3674-4A55-9BB0-5FA39B53B970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/deislabs/oras/commit/96cd90423303f1bb42bd043cb4c36085e6e91e8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/deislabs/oras/releases/tag/v0.9.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/deislabs/oras/security/advisories/GHSA-g5v4-5x39-vwhx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/deislabs/oras/pkg/oras",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/deislabs/oras/commit/96cd90423303f1bb42bd043cb4c36085e6e91e8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/deislabs/oras/releases/tag/v0.9.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/deislabs/oras/security/advisories/GHSA-g5v4-5x39-vwhx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/deislabs/oras/pkg/oras",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21275",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-25T23:15:11.887",
      "lastModified" : "2024-11-21T05:47:54.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MediaWiki \"Report\" extension has a Cross-Site Request Forgery (CSRF) vulnerability. Before fixed version, there was no protection against CSRF checks on Special:Report, so requests to report a revision could be forged. The problem has been fixed in commit f828dc6 by making use of MediaWiki edit tokens."
      }, {
        "lang" : "es",
        "value" : "La extensión \"Report\" de MediaWiki presenta una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF). Antes de la versión corregida, no había protección contra las comprobaciones de CSRF en Special:Report, por lo que las peticiones para reportar una revisión podrían ser falsificadas. El problema ha sido corregido en el commit f828dc6 al hacer uso de los tokens de edición de MediaWiki"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:report_project:report:*:*:*:*:*:mediawiki:*:*",
            "versionEndExcluding" : "2021-01-21",
            "matchCriteriaId" : "E3403B6D-74B4-4DCB-ACE0-11BE197602A4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE6EF8F-1F05-429B-A916-76FDB20CEB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28F42F0-FBDA-4574-AD30-7A04F27FEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CA55C-C770-4D42-BD17-9011F3AC93C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kenny2github/Report/commit/f828dc6f73cdfaea5639edbf8ac7b326eeefb117",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kenny2github/Report/security/advisories/GHSA-9f3w-c334-jm2h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kenny2github/Report/commit/f828dc6f73cdfaea5639edbf8ac7b326eeefb117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Kenny2github/Report/security/advisories/GHSA-9f3w-c334-jm2h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21615",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-01-26T18:16:18.693",
      "lastModified" : "2024-11-21T05:48:42.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use (TOCTOU) race condition."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.275 y LTS 2.263.2, permiten leer archivos arbitrarios usando el explorador de archivos para espacios de trabajo y artefactos archivados debido a una condición de carrera de tipo time-of-check a time-of-use (TOCTOU)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.263.3",
            "matchCriteriaId" : "4578E2F0-6569-4454-8B83-2474D19D4B3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.276",
            "matchCriteriaId" : "41CEBC65-D8D3-433F-A6FE-97102FB5E328"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/26/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-26/#SECURITY-2197",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-01-26/#SECURITY-2197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21723",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-01-26T18:16:18.803",
      "lastModified" : "2024-11-21T05:48:52.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some ZTE products have a DoS vulnerability. Due to the improper handling of memory release in some specific scenarios, a remote attacker can trigger the vulnerability by performing a series of operations, resulting in memory leak, which may eventually lead to device denial of service. This affects: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S; all versions up to V1.01.10.B12."
      }, {
        "lang" : "es",
        "value" : "Algunos productos ZTE presentan una vulnerabilidad de DoS.&#xa0;Debido al manejo inapropiado de la liberación de la memoria en algunos escenarios específicos, un atacante remoto puede desencadenar la vulnerabilidad al llevar a cabo una serie de operaciones, resultando en una pérdida de memoria, que eventualmente puede conllevar a una denegación de servicio del dispositivo.&#xa0;Esto afecta a: ZXR10 9904, ZXR10 9908, ZXR10 9916, ZXR10 9904-S, ZXR10 9908-S;&#xa0;todas las versiones hasta V1.01.10.B12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_9904_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v1.01.10.b12",
            "matchCriteriaId" : "4944E354-3041-46F1-A74B-82CC750273D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_9904:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1747E7A-AB46-4D3C-BD82-659DAA58C43A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_9908_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v1.01.10.b12",
            "matchCriteriaId" : "722F3591-8D28-4D42-BF33-C67169F21BC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_9908:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83A1243-E923-4735-AC8D-875605530747"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_9916_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v1.01.10.b12",
            "matchCriteriaId" : "2F35755D-7919-4CC5-B9CA-E88FD4483D4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_9916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DE8F4A-8A42-4C1C-82EA-85543F5E805D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_9904-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v1.01.10.b12",
            "matchCriteriaId" : "85884147-B665-404A-8117-4519732F7C1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_9904-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78D0B84F-0C58-41C3-8083-BD74E9D0118D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_9908-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "v1.01.10.b12",
            "matchCriteriaId" : "0602358F-5958-4172-AB42-8C77853A5347"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_9908-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813FBCBD-4900-49C7-B0E2-C75DD3788694"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22697",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-01-26T18:16:18.867",
      "lastModified" : "2024-11-21T05:50:29.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a use-after-free condition which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed."
      }, {
        "lang" : "es",
        "value" : "CWE-434: Se presenta una vulnerabilidad de Carga Sin Restricciones de Archivo con Tipo Peligroso en el software EcoStruxure Power Build - Rapsody (versiones V2.1.13 y anteriores) que podría permitir una condición de uso de la memoria previamente liberada que podría resultar en una ejecución de código remota cuando un archivo SSD malicioso es cargado y analizado inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.13",
            "matchCriteriaId" : "E458DE1E-6488-4F4A-BD96-7E46DA716BC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-012-02/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-186/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-012-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-186/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22698",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-01-26T18:16:18.927",
      "lastModified" : "2024-11-21T05:50:29.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists in the EcoStruxure Power Build - Rapsody software (V2.1.13 and prior) that could allow a stack-based buffer overflow to occur which could result in remote code execution when a malicious SSD file is uploaded and improperly parsed."
      }, {
        "lang" : "es",
        "value" : "CWE-434: Se presenta una vulnerabilidad de Carga Sin Restricciones de Archivo con Tipo Peligroso en el software EcoStruxure Power Build - Rapsody (versiones V2.1.13 y anteriores) que podría permitir que ocurra un desbordamiento del búfer en la región stack de la memoria que podría resultar en una ejecución de código remota cuando un archivo SSD es cargado y analizado inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:ecostruxure_power_build_-_rapsody:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.13",
            "matchCriteriaId" : "E458DE1E-6488-4F4A-BD96-7E46DA716BC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-012-02/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-187/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-012-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-012-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-187/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22871",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-01-26T18:16:19.020",
      "lastModified" : "2024-11-21T05:50:48.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before 5.1.0 permits any user with a manager account to store possibly malicious content in the URL website property, which is then displayed unsanitized in the affiliate-preview.php tag generation screen, leading to a persistent cross-site scripting (XSS) vulnerability."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver versiones anteriores a 5.1.0, permite a cualquier usuario con una cuenta de administrador almacenar contenido posiblemente malicioso en la propiedad del sitio web URL, que luego es mostrada sin saneamiento en la pantalla de generación de etiquetas affiliate-preview.php, conllevando a una vulnerabilidad de tipo cross-site scripting (XSS ) persistente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.0",
            "matchCriteriaId" : "FA528298-DAAD-4C82-A08C-9F916F5A86BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/60",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/62a2a0439",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/89b88ce26",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/819362",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-001/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/62a2a0439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/89b88ce26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/819362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22872",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-01-26T18:16:19.100",
      "lastModified" : "2024-11-21T05:50:48.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before 5.1.0 is vulnerable to a reflected cross-site scripting (XSS) vulnerability via the publicly accessible afr.php delivery script. While this issue was previously addressed in modern browsers as CVE-2020-8115, some older browsers (e.g., IE10) that do not automatically URL encode parameters were still vulnerable."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver anterior a la versión 5.1.0 es vulnerable a una vulnerabilidad de scripting cruzado (XSS) reflejada a través del script de entrega afr.php de acceso público. Si bien este problema se abordó anteriormente en los navegadores modernos como CVE-2020-8115, algunos navegadores antiguos (por ejemplo, IE10) que no codifican automáticamente los parámetros de la URL seguían siendo vulnerables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.0",
            "matchCriteriaId" : "FA528298-DAAD-4C82-A08C-9F916F5A86BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/60",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/00fdb8d0e",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/1dbcf7d50",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/986365",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-001/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/00fdb8d0e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/1dbcf7d50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/986365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22873",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-01-26T18:16:19.163",
      "lastModified" : "2024-11-21T05:50:48.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before 5.1.0 is vulnerable to open redirects via the `dest`, `oadest`, and/or `ct0` parameters of the lg.php and ck.php delivery scripts. Such open redirects had previously been available by design to allow third party ad servers to track such metrics when delivering ads. However, third party click tracking via redirects is not a viable option anymore, leading to such open redirect functionality being removed and reclassified as a vulnerability."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver versiones anteriores a 5.1.0 es vulnerable a redireccionamientos abiertos por medio de los parámetros \"dest\",\"oadest\" y/o \"ct0\" de los scripts de entrega de los archivos lg.php y ck.php.&#xa0;Estos redireccionamientos abiertos habían estado disponibles anteriormente por diseño para permitir a unos servidores de anuncios de terceros rastrear tales métricas al entregar anuncios.&#xa0;Sin embargo, el seguimiento de clics de terceros por medio de los redireccionamientos ya no es una opción viable, conllevando a que dicha funcionalidad de redireccionamiento abierto sea eliminada y reclasificada como una vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.0",
            "matchCriteriaId" : "FA528298-DAAD-4C82-A08C-9F916F5A86BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/60",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/issues/1068",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1081406",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-001/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161070/Revive-Adserver-5.0.5-Cross-Site-Scripting-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/issues/1068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1081406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:21.850",
      "lastModified" : "2024-11-21T05:55:32.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open5GS 2.1.3 listens on 0.0.0.0:3000 and has a default password of 1423 for the admin account."
      }, {
        "lang" : "es",
        "value" : "Open5GS versión 2.1.3 escucha sobre 0.0.0.0:3000 y presenta una contraseña predeterminada de 1423 para la cuenta de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF29C51-0BC2-4C66-9AF7-E22CD138D6FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/issues/764",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:21.897",
      "lastModified" : "2024-11-21T05:55:32.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file."
      }, {
        "lang" : "es",
        "value" : "node-red-contrib-huemagic versión 3.0.0, está afectado por un Salto de Directorio de hue/assets/..%2F en la API res.sendFile, usada en el archivo hue-magic.js, para recuperar un archivo arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dgtl:huemagic:3.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "34B7DCCF-571F-4971-B41A-7B83E207C803"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Foddy/node-red-contrib-huemagic/issues/217",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Foddy/node-red-contrib-huemagic/issues/217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.270",
      "lastModified" : "2024-11-21T05:55:33.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the smallvec crate before 0.6.14 and 1.x before 1.6.1 for Rust. There is a heap-based buffer overflow in SmallVec::insert_many."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate smallvec versiones anteriores a 0.6.14 y versiones 1.x anteriores a 1.6.1 para Rust.&#xa0;Se presenta un desbordamiento del búfer en la región heap de la memoria en la función SmallVec::insert_many"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:servo:smallvec:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.6.3",
            "versionEndExcluding" : "0.6.14",
            "matchCriteriaId" : "2393A957-50EE-46E7-8837-15AA1ABFEBAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:servo:smallvec:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.6.1",
            "matchCriteriaId" : "16134513-0D9E-4F61-9DAC-6D430AC167B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.333",
      "lastModified" : "2024-11-21T05:55:34.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the lazy-init crate through 2021-01-17 for Rust. Lazy lacks a Send bound, leading to a data race."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate lazy-init versiones hasta el 17-01-2021 para Rust.&#xa0;Lazy carece de un límite de Send, conllevando a una carrera de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lazy-init_project:lazy-init:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "123B2E70-03C4-4765-B124-8638777FA9DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25902",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.380",
      "lastModified" : "2024-11-21T05:55:34.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the glsl-layout crate before 0.4.0 for Rust. When a panic occurs, map_array can perform a double drop."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate glsl-layout versiones anteriores a 0.4.0 para Rust.&#xa0;Cuando ocurre un pánico, map_array puede llevar a cabo una doble caída"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glsl-layout_project:glsl-layout:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "73958609-6AF3-4CB6-8281-AC914892DAA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.443",
      "lastModified" : "2024-11-21T05:55:34.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the cache crate through 2021-01-01 for Rust. A raw pointer is dereferenced."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate cache versiones hasta el 01-01-2021 para Rust.&#xa0;Un puntero sin procesar es desreferenciado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cache_project:cache:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "0.2.0",
            "matchCriteriaId" : "49F4C456-D8D8-46B7-B5E8-9390231427E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.507",
      "lastModified" : "2024-11-21T05:55:34.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the av-data crate before 0.3.0 for Rust. A raw pointer is dereferenced, leading to a read of an arbitrary memory address, sometimes causing a segfault."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate av-data versiones anteriores a 0.3.0 para Rust.&#xa0;Un puntero sin procesar es desreferenciado, conllevando a la lectura de una dirección de memoria arbitraria, lo que a veces causa un fallo de segmentación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:av-data_project:av-data:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "E5DE33E4-6006-4430-B91A-2375FDFC52AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0007.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.553",
      "lastModified" : "2024-11-21T05:55:34.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the bra crate before 0.1.1 for Rust. It lacks soundness because it can read uninitialized memory."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate bra versiones anteriores a 0.1.1 para Rust.&#xa0;Carece de solidez porque puede leer la memoria no inicializada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bra_project:bra:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.1.1",
            "matchCriteriaId" : "18781FF7-0306-4DFA-951F-A116E63EE63E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.617",
      "lastModified" : "2024-11-21T05:55:34.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the basic_dsp_matrix crate before 0.9.2 for Rust. When a TransformContent panic occurs, a double drop can be performed."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate basic_dsp_matrix versiones anteriores a 0.9.2 para Rust.&#xa0;Cuando ocurre un pánico de TransformContent, se puede llevar a cabo una doble caída"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basic_dsp_matrix_project:basic_dsp_matrix:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.9.2",
            "matchCriteriaId" : "C181477A-5031-40D5-9F29-60548E355569"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25907",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.677",
      "lastModified" : "2024-11-21T05:55:34.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the containers crate before 0.9.11 for Rust. When a panic occurs, a util::{mutate,mutate2} double drop can be performed."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate containers versiones anteriores a 0.9.11 para Rust.&#xa0;Cuando ocurre un pánico, una doble caída util::{mutate, mutate2}  puede ser llevada a cabo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:containers_project:containers:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.9.11",
            "matchCriteriaId" : "7DA4B70C-0069-4641-A45D-45BA975C29AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25908",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:22.723",
      "lastModified" : "2024-11-21T05:55:35.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the fil-ocl crate through 2021-01-04 for Rust. From<EventList> can lead to a double free."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate fil-ocl versiones hasta el 04-01-2021 para Rust.&#xa0;From(EventList) puede conllevar a una doble liberación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fil-ocl_project:fil-ocl:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.12.0",
            "versionEndIncluding" : "0.19.4",
            "matchCriteriaId" : "0017B47D-956F-47C9-ADA7-916A74F1B751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:23.850",
      "lastModified" : "2024-11-21T05:55:45.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlugIns\\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!zlibVersion+0x0000000000004e5e via a crafted BMP image."
      }, {
        "lang" : "es",
        "value" : "El archivo PlugIns\\IDE_ACDStd.apl en ACDSee Professional 2021 versión 14.0 1721, presenta un User Mode Write Access Violation que inicia en IDE_ACDStd!zlibVersion+0x0000000000004e5e por medio de una imagen BMP diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acdsee:photo_studio_2021:14.0:build_1721:*:*:professional:*:*:*",
            "matchCriteriaId" : "E2837928-BAC4-4D91-98D6-BE53FDD98B97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/secluck/pentest/blob/main/000022.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/secluck/pentest/blob/main/000022.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:23.913",
      "lastModified" : "2024-11-21T05:55:46.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PlugIns\\IDE_ACDStd.apl in ACDSee Professional 2021 14.0 1721 has a User Mode Write Access Violation starting at IDE_ACDStd!JPEGTransW+0x000000000000c7f4 via a crafted BMP image."
      }, {
        "lang" : "es",
        "value" : "El archivo PlugIns\\IDE_ACDStd.apl en ACDSee Professional 2021 versión 14.0 1721, presenta un User Mode Write Access Violation que inicia en IDE_ACDStd!JPEGTransW+0x000000000000c7f4 por medio de una imagen BMP diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acdsee:photo_studio_2021:14.0:build_1721:*:*:professional:*:*:*",
            "matchCriteriaId" : "E2837928-BAC4-4D91-98D6-BE53FDD98B97"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/secluck/pentest/blob/main/000033.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/secluck/pentest/blob/main/000033.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:25.880",
      "lastModified" : "2024-11-21T05:56:00.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 92.0.9 allows a Reseller to bypass the suspension lock (SEC-578)."
      }, {
        "lang" : "es",
        "value" : "cPanel versiones anteriores a 92.0.9, permite a un Revendedor omitir el bloqueo de suspensión (SEC-578)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "92.0.9",
            "matchCriteriaId" : "93A76F3F-4B0C-4F13-94D7-98F70BBAE205"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cpanel.net/changelogs/92-change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cpanel.net/changelogs/92-change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:25.943",
      "lastModified" : "2024-11-21T05:56:00.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 92.0.9 allows a MySQL user (who has an old-style password hash) to bypass suspension (SEC-579)."
      }, {
        "lang" : "es",
        "value" : "cPanel versiones anteriores a 92.0.9,  permite a un usuario de MySQL (que presenta un hash de contraseña antiguo) omitir una suspensión (SEC-579)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "92.0.9",
            "matchCriteriaId" : "93A76F3F-4B0C-4F13-94D7-98F70BBAE205"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cpanel.net/changelogs/92-change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cpanel.net/changelogs/92-change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:27.567",
      "lastModified" : "2024-11-21T06:20:54.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Go before 1.14.14 and 1.15.x before 1.15.7, crypto/elliptic/p224.go can generate incorrect outputs, related to an underflow of the lowest limb during the final complete reduction in the P-224 field."
      }, {
        "lang" : "es",
        "value" : "En Go versiones anteriores a 1.14.14 y versiones 1.15.x anteriores a 1.15.7, en el archivo crypto/elliptic/p224.go puede generar salidas incorrectas, relacionadas con un subdesbordamiento de la extremidad más baja durante la reducción completa final en el campo P-224"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-682"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.14",
            "matchCriteriaId" : "70690A8F-9E7C-4208-9550-254B1000BF93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.15",
            "versionEndExcluding" : "1.15.7",
            "matchCriteriaId" : "4C90339E-4E95-4FCE-BCFE-6DD9FB4F9255"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_telegraf_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAE7369-EEC5-405E-9D13-858335FDA647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/golang/go/commit/d95ca9138026cbe40e0857d76a81a16d03230871",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/mperVMGa98w",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4848",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/golang/go/commit/d95ca9138026cbe40e0857d76a81a16d03230871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/mperVMGa98w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4848",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:27.630",
      "lastModified" : "2024-11-21T06:20:54.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Go before 1.14.14 and 1.15.x before 1.15.7 on Windows is vulnerable to Command Injection and remote code execution when using the \"go get\" command to fetch modules that make use of cgo (for example, cgo can execute a gcc program from an untrusted download)."
      }, {
        "lang" : "es",
        "value" : "Go versiones anteriores a 1.14.14 y versiones 1.15. x anteriores a 1.15.7 en Windows, es vulnerable a una inyección de comandos y una ejecución de código remota cuando es usado el comando \"go get\" para buscar módulos que hacen uso de cgo (por ejemplo, cgo puede ejecutar un programa gcc desde una descarga que no es confiable)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.14",
            "matchCriteriaId" : "70690A8F-9E7C-4208-9550-254B1000BF93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.15",
            "versionEndExcluding" : "1.15.7",
            "matchCriteriaId" : "4C90339E-4E95-4FCE-BCFE-6DD9FB4F9255"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_insights_telegraf_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAE7369-EEC5-405E-9D13-858335FDA647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.golang.org/path-security",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/mperVMGa98w",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.golang.org/path-security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/mperVMGa98w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YWAYJGXWC232SG3UR3TR574E6BP3OSQQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:27.770",
      "lastModified" : "2024-11-21T06:21:00.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations. NOTE: the vendor's perspective is that the vulnerability itself is in custom integrations written by third parties, not in Home Assistant; however, Home Assistant does have a security update that is worthwhile in addressing this situation"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTADA ** Home Assistant versiones anteriores a 2021.1.3, no presenta una capa de protección que pueda ayudar a impedir ataques de saltos de directorio contra integraciones personalizadas.&#xa0;NOTA: la perspectiva del proveedor es que la vulnerabilidad en sí está en integraciones personalizadas escritas por terceros, no en Home Assistant;&#xa0;sin embargo, Home Assistant presenta una actualización de seguridad que vale la pena para abordar esta situación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:home-assistant:home-assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.1.3",
            "matchCriteriaId" : "C9157025-FDCD-4C09-865C-B29917A3E236"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.home-assistant.io/blog/2021/01/14/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.home-assistant.io/blog/2021/01/22/security-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.home-assistant.io/blog/2021/01/14/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.home-assistant.io/blog/2021/01/22/security-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:27.817",
      "lastModified" : "2024-11-21T06:21:02.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permission in order to upload and execute an arbitrary file via a POST request to resources.php."
      }, {
        "lang" : "es",
        "value" : "ChurchRota versión 2.6.4, es vulnerable a una ejecución de código remota autenticada.&#xa0;El usuario no necesita tener permiso de carga de archivos para cargar y ejecutar un archivo arbitrario por medio de una petición POST hacia el archivo resources.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:churchdesk:churchrota:2.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1C80B6-ACAF-4C8B-8A45-F937D8AF1107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Little-Ben/ChurchRota",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rmccarth/cve-2021-3164",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Little-Ben/ChurchRota",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rmccarth/cve-2021-3164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3185",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-26T18:16:28.067",
      "lastModified" : "2024-11-21T06:21:05.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the gstreamer h264 component of gst-plugins-bad before v1.18.1 where when parsing a h264 header, an attacker could cause the stack to be smashed, memory corruption and possibly code execution."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en el componente gstreamer h264 de gst-plugins-bad versiones anteriores a v1.18.1, donde al analizar un encabezado h264, un atacante podría causar que la pila manipulada, una corrupción de la memoria y posiblemente se ejecuta el código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:freedesktop:gst-plugins-bad:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.18.1",
            "matchCriteriaId" : "AE103459-5464-4333-B50B-97B692A8BF0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1917192",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-31",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1917192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.147",
      "lastModified" : "2025-07-07T17:21:17.707",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stored Cross-site scripting (XSS) vulnerability in /main.html Wifi Settings in Tenda AC5 AC1200 version V15.03.06.47_multi allows remote attackers to inject arbitrary web script or HTML via the Wifi Name parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting (XSS) almacenado en Wifi Settings de /main.html en Tenda AC5 AC1200 versión V15.03.06.47_multi, permite a atacantes remotos inyectar script web o HTML arbitrario por medio del parámetro Wifi Name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:ac5_firmware:15.03.06.47:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D94CA12-3FED-4730-B1B4-4F6AAA3AB17E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:ac5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A74C4FD-76A0-4E7C-94E0-EC293F379DD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161119/Tenda-AC5-AC1200-Wireless-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.hackingarticles.in/exploiting-stored-cross-site-scripting-at-tenda-ac5-ac1200/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161119/Tenda-AC5-AC1200-Wireless-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.hackingarticles.in/exploiting-stored-cross-site-scripting-at-tenda-ac5-ac1200/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.210",
      "lastModified" : "2024-11-21T06:21:06.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpList 3.6.0 allows CSV injection, related to the email parameter, and /lists/admin/ exports."
      }, {
        "lang" : "es",
        "value" : "phpList versión 3.6.0, permite una inyección CSV, relacionada con el parámetro email, y las exportaciones de /lists/admin/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phplist:phplist:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D666866-896A-4431-AE31-FD6798369C3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wehackmx.com/security-research/WeHackMX-2021-001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wehackmx.com/security-research/WeHackMX-2021-001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.287",
      "lastModified" : "2024-11-21T06:21:06.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The async-git package before 1.13.2 for Node.js allows OS Command Injection via shell metacharacters, as demonstrated by git.reset and git.tag."
      }, {
        "lang" : "es",
        "value" : "El paquete async-git versiones anteriores a 1.13.2 para Node.js, permite una Inyección de Comandos del Sistema Operativo por medio de metacaracteres de shell, como es demostrado por git.reset y git.tag"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:async-git_project:async-git:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.13.2",
            "matchCriteriaId" : "324D086D-034F-4CA0-89D9-15F0CEE4714A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4772",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/13/commits/611823bd97dd41e9e8127c38066868ff9dcfa57a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/13/commits/a5f45f58941006c4cc1699609383b533d9b92c6a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4772",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/13/commits/611823bd97dd41e9e8127c38066868ff9dcfa57a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/13/commits/a5f45f58941006c4cc1699609383b533d9b92c6a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/omrilotan/async-git/pull/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.367",
      "lastModified" : "2024-11-21T06:21:06.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access and command validation in the Nagios Docker Config Wizard before 1.1.2, as used in Nagios XI through 5.7, allows an unauthenticated attacker to execute remote code as the apache user."
      }, {
        "lang" : "es",
        "value" : "Un acceso inapropiado y una comprobación de comandos en el asistente de configuración de Docker de Nagios XI versiones anteriores a 5.8.0, permiten a un atacante autenticado ejecutar código remoto como el usuario de Apache"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.0",
            "matchCriteriaId" : "1DE732D1-D8A7-4FF5-8B0E-AAE2CCF4546D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/products/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.nagios.com/products/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.427",
      "lastModified" : "2024-11-21T06:21:07.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bitcoind in Bitcoin Core through 0.21.0 can create a new file in an arbitrary directory (e.g., outside the ~/.bitcoin directory) via a dumpwallet RPC call. NOTE: this reportedly does not violate the security model of Bitcoin Core, but can violate the security model of a fork that has implemented dumpwallet restrictions"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** bitcoind en Bitcoin Core versiones hasta 0.21.0, puede crear un nuevo archivo en un directorio arbitrario (por ejemplo, fuera del directorio ~/.bitcoin) por medio de una llamada RPC dumpwallet NOTA: según se informa, esto no viola el modelo de seguridad de Bitcoin Core, pero puede violar el modelo de seguridad de un fork que haya implementado restricciones de dumpwallet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitcoin:bitcoin_core:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.21.0",
            "matchCriteriaId" : "1F64E80F-21E7-4CCB-B18C-439B8864BAE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bitcoin/bitcoin/issues/20866",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitcoin/bitcoin/issues/20866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.507",
      "lastModified" : "2024-11-21T06:21:07.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an image upload parameter."
      }, {
        "lang" : "es",
        "value" : "Un salto de directorio con ejecución de código remota puede ocurrir en /upload en ONLYOFFICE Document Server versiones anteriores a 5.6.3, cuando es usado JWT, por medio de una secuencia /.. en un parámetro de carga de imagen"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.3",
            "matchCriteriaId" : "226FAC46-5D2C-4685-AA75-0EEB5BA85178"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moehw/poc_exploits/tree/master/CVE-2021-3199/poc_uploadImageFile.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nola-milkin/poc_exploits/blob/master/CVE-2021-3199/poc_uploadImageFile.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3223",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:28.757",
      "lastModified" : "2024-11-21T06:21:08.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node-RED-Dashboard before 2.26.2 allows ui_base/js/..%2f directory traversal to read files."
      }, {
        "lang" : "es",
        "value" : "Node-RED-Dashboard versiones anteriores a 2.26.2, permite un salto del directorio de ui_base/js/..%2f para leer archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodered:node-red-dashboard:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.26.2",
            "matchCriteriaId" : "F56DC439-AA58-48A1-9FE7-33422246B5DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-red/node-red-dashboard/issues/669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red-dashboard/releases/tag/2.26.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red-dashboard/issues/669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red-dashboard/releases/tag/2.26.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:29.367",
      "lastModified" : "2024-11-21T06:21:12.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local Service Search Engine Management System 1.0 has a vulnerability through authentication bypass using SQL injection . Using this vulnerability, an attacker can bypass the login page."
      }, {
        "lang" : "es",
        "value" : "Local Service Search Engine Management System versión 1.0, presenta una vulnerabilidad debido a una omisión de autenticación usando una inyección SQL.&#xa0;Con esta vulnerabilidad, un atacante puede omitir la página de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:local_services_search_engine_management_system_project:local_services_search_engine_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE21FE3-89D8-4993-8734-362C6B478622"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49163",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162919/Local-Service-Search-Engine-Management-System-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14607/local-service-search-engine-management-system-using-phpmysqli-source-code.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3285",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:29.473",
      "lastModified" : "2024-11-21T06:21:13.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jxbrowser in TI Code Composer Studio IDE 8.x through 10.x before 10.1.1 does not verify X.509 certificates for HTTPS."
      }, {
        "lang" : "es",
        "value" : "jxbrowser en TI Code Composer Studio IDE versiones 8.x hasta versiones 10.x anteriores a 10.1.1, no comprueba los certificados X.509 para HTTPS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ti:code_composer_studio_intgrated_development_environment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "10.1.1",
            "matchCriteriaId" : "E694B4E9-B5A4-4B76-8577-0E4A05011E79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sir.ext.ti.com/jira/browse/EXT_EP-10212",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://sir.ext.ti.com/jira/browse/EXT_EP-10212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3286",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:29.567",
      "lastModified" : "2024-11-21T06:21:13.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection exists in Spotweb 1.4.9 because the notAllowedCommands protection mechanism is inadequate, e.g., a variation of the payload may be used. NOTE: this issue exists because of an incomplete fix for CVE-2020-35545."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL se presenta en Spotweb versión 1.4.9, porque el mecanismo de protección notAllowedCommands es inadecuado, por ejemplo, puede ser usada una variación de la carga útil.&#xa0;NOTA: este problema se presenta debido a una corrección incompleta para CVE-2020-35545"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spotweb_project:spotweb:1.4.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CE0FCC-C8CF-4C39-A8D7-C0799862E585"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spotweb/spotweb/issues/653",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spotweb/spotweb/issues/653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:29.677",
      "lastModified" : "2024-11-21T06:21:13.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zen Cart 1.5.7b allows admins to execute arbitrary OS commands by inspecting an HTML radio input element (within the modules edit page) and inserting a command."
      }, {
        "lang" : "es",
        "value" : "Zen Cart versión 1.5.7b, permite a administradores ejecutar comandos arbitrarios del Sistema Operativo inspeccionando un elemento de entrada de radio HTML (dentro de la página de edición de módulos) e insertando un comando"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zen-cart:zen_cart:1.5.7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEA2200-EBF5-4051-BBDE-A623FE4C1F76"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MucahitSaratar/zencart_auth_rce_poc",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161613/Zen-Cart-1.5.7b-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/MucahitSaratar/zencart_auth_rce_poc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:29.770",
      "lastModified" : "2025-11-25T18:15:48.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Zyxel NBG2105 V1.00(AAGU.2)C0 devices, setting the login cookie to 1 provides administrator access."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Zyxel NBG2105 versión V1.00 (AAGU.2)CO, al establecer la cookie de inicio de sesión en 1 proporciona acceso de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zyxel:nbg2105_firmware:v1.00\\(aagu.2\\)c0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4D6339-4E7F-4743-8AC5-E9325A5C0A73"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zyxel:nbg2105:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0477B359-971A-457D-876F-283FA36BF114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codeberg.org/nieldk/vulnerabilities/src/branch/main/zyxel%20nbg2105/Admin%20bypass",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/us/en/support/security_advisories.shtml",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nieldk/vulnerabilities/blob/main/zyxel%20nbg2105/Admin%20bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/support/SupportLandingSR.shtml?c=gb&l=en&kbid=M-01490&md=NBG2105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zyxel.com/us/en/support/security_advisories.shtml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T18:16:29.880",
      "lastModified" : "2024-11-21T06:21:14.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sagemcom F@ST 3686 v2 3.495 devices have a buffer overflow via a long sessionKey to the goform/login URI."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Sagemcom F@ST 3686 versión v2 3.495, presentan un desbordamiento del búfer por medio de una clave de sesión larga para el URI goform/login"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sagemcom:f\\@st_3686_firmware:3.495:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577790CF-28A3-4D32-A81B-B265736FE75D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sagemcom:f\\@st_3686:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15D79402-E870-47BD-BFA1-8E954CFFC066"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://twitter.com/j0nh4t/status/1349649975479840769",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/j0nh4t/status/1349649975479840769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23272",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-01-26T19:15:13.080",
      "lastModified" : "2024-11-21T05:51:28.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Application Development Clients component of TIBCO Software Inc.'s TIBCO BPM Enterprise and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO BPM Enterprise: versions 4.3.0 and below and TIBCO BPM Enterprise Distribution for TIBCO Silver Fabric: versions 4.3.0 and below."
      }, {
        "lang" : "es",
        "value" : "El componente Application Development Clients de TIBCO BPM Enterprise y TIBCO BPM Enterprise Distribution de TIBCO Software Inc. para TIBCO Silver Fabric contiene una vulnerabilidad que teóricamente permite a un atacante con poco privilegiado con acceso a la red ejecutar un ataque de tipo Cross Site Scripting (XSS) en el sistema afectado.&#xa0;Las versiones afectadas son TIBCO BPM Enterprise de TIBCO Software Inc.: versiones 4.3.0 y anteriores y TIBCO BPM Enterprise Distribution para TIBCO Silver Fabric: versiones 4.3.0 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:bpm_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "9FB8FF05-E2A5-4E52-929A-75DD7D447741"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:bpm_enterprise_distribution_for_silver_fabric:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3.0",
            "matchCriteriaId" : "D32DBEE5-D35B-42FD-8820-EFDA3DE77346"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T20:15:12.227",
      "lastModified" : "2024-11-21T05:49:37.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insider Threat Management Windows Agent Local Privilege Escalation Vulnerability The Proofpoint Insider Threat Management (formerly ObserveIT) Agent for Windows before 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, and 7.11.0.25 as well as versions 7.3 and earlier is missing authentication for a critical function, which allows a local authenticated Windows user to run arbitrary commands with the privileges of the Windows SYSTEM user. Agents for MacOS, Linux, and ITM Cloud are not affected."
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Escalada de Privilegios Local en Insider Threat Management Windows Agent. El Proofpoint Insider Threat Management (anteriormente ObserveIT) Agent para Windows versiones anteriores a 7.4.3, 7.5.4, 7.6.5, 7.7.5, 7.8.4, 7.9.3, 7.10.2, y 7.11.0.25, así como las versiones 7.3 y anteriores, carecen de autenticación para una función crítica, que permite a un usuario de Windows autenticado local ejecutar comandos arbitrarios con los privilegios del usuario SYSTEM de Windows. Los agentes para MacOS, Linux e ITM Cloud no están afectados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.4.3",
            "matchCriteriaId" : "0B28F338-096B-42ED-B7A1-EC3E44733C09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.5.0",
            "versionEndExcluding" : "7.5.4",
            "matchCriteriaId" : "7A40882D-ED7A-4419-8DBB-86C6F7A84DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndExcluding" : "7.6.5",
            "matchCriteriaId" : "7DFB8D36-8033-4306-833F-11634625B299"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.7.0",
            "versionEndExcluding" : "7.7.5",
            "matchCriteriaId" : "596F7C55-1D35-485F-8D6C-7CC5A3997642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.8.0",
            "versionEndExcluding" : "7.8.4",
            "matchCriteriaId" : "AAAF300F-5A44-4A13-92D5-7E3239C57EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.3",
            "matchCriteriaId" : "33E3D2DA-E75E-4BFD-B134-13461B155923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.2",
            "matchCriteriaId" : "11A5CB12-9609-42A2-A364-CEF6A5240A6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.11.0.0",
            "versionEndExcluding" : "7.11.0.25",
            "matchCriteriaId" : "16E37E0B-34BD-4C92-9D16-60B401179554"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/us/security/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T20:15:12.303",
      "lastModified" : "2024-11-21T06:21:15.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Xen versiones 4.12.3 hasta 4.12.4 y versiones 4.13.1 hasta 4.14.x. Un invitado HVM x86 con PCI pasando a través de los dispositivos puede forzar la asignación de todos los vectores IDT en el sistema al reiniciarse con las capacidades MSI o MSI-X habilitadas y la configuración de entradas. Dichos reinicios filtrarán todos los vectores usados por las entradas MSI(-X) que el invitado podría haber habilitado y, por lo tanto, conllevarán al agotamiento del vector en el sistema, lo que no permitirá que otros dispositivos PCI pasen a funcionar correctamente. Los invitados HVM con PCI pasando a través de los dispositivos pueden montar un ataque de denegación de servicio (DoS) que afecta el paso de dispositivos PCI para otros invitados o al dominio del hardware. En el último caso, esto afectaría a todo el host"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13.1",
            "versionEndIncluding" : "4.14.1",
            "matchCriteriaId" : "E098391E-2E24-44B7-8F28-7343DF9E58E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050028D1-C44E-4101-8FBA-9822AF11BCC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:4.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFFC008-78C6-4256-8B78-AB9E1D374D93"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/26/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-360.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-30",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/26/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-360.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21271",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-26T21:15:12.503",
      "lastModified" : "2024-11-21T05:47:54.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tendermint Core is an open source Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine - written in any programming language - and securely replicates it on many machines. Tendermint Core v0.34.0 introduced a new way of handling evidence of misbehavior. As part of this, we added a new Timestamp field to Evidence structs. This timestamp would be calculated using the same algorithm that is used when a block is created and proposed. (This algorithm relies on the timestamp of the last commit from this specific block.) In Tendermint Core v0.34.0-v0.34.2, the consensus reactor is responsible for forming DuplicateVoteEvidence whenever double signs are observed. However, the current block is still “in flight” when it is being formed by the consensus reactor. It hasn’t been finalized through network consensus yet. This means that different nodes in the network may observe different “last commits” when assigning a timestamp to DuplicateVoteEvidence. In turn, different nodes could form DuplicateVoteEvidence objects at the same height but with different timestamps. One DuplicateVoteEvidence object (with one timestamp) will then eventually get finalized in the block, but this means that any DuplicateVoteEvidence with a different timestamp is considered invalid. Any node that formed invalid DuplicateVoteEvidence will continue to propose invalid evidence; its peers may see this, and choose to disconnect from this node. This bug means that double signs are DoS vectors in Tendermint Core v0.34.0-v0.34.2. Tendermint Core v0.34.3 is a security release which fixes this bug. As of v0.34.3, DuplicateVoteEvidence is no longer formed by the consensus reactor; rather, the consensus reactor passes the Votes themselves into the EvidencePool, which is now responsible for forming DuplicateVoteEvidence. The EvidencePool has timestamp info that should be consistent across the network, which means that DuplicateVoteEvidence formed in this reactor should have consistent timestamps. This release changes the API between the consensus and evidence reactors."
      }, {
        "lang" : "es",
        "value" : "Tendermint Core es un middleware Byzantine Fault Tolerant (BFT) de código abierto que toma una máquina de transición de estado, escrita en cualquier lenguaje de programación, y la replica de forma segura en muchas máquinas. Tendermint Core versión v0.34.0 introdujo una nueva forma de manejar la evidencia de mal comportamiento. Como parte de esto, agregamos un nuevo campo Timestamp a las estructuras Evidence. Esta marca de tiempo se calcularía usando el mismo algoritmo que se utiliza cuando un bloque sea creado y propuesto. (Este algoritmo se basa en la marca de tiempo del último commit de este bloque específico). En Tendermint Core versiones v0.34.0-v0.34.2, el reactor de consenso es responsable de formar un DuplicateVoteEvidence siempre que se observen signos dobles. Sin embargo, el bloque actual todavía está \"in flight\" cuando lo está formando el reactor de consenso. Aún no se ha finalizado mediante el consenso de la red. Esto significa que diferentes nodos en la red pueden observar diferentes \"last commits\" al asignar una marca de tiempo a DuplicateVoteEvidence. A su vez, diferentes nodos podrían formar objetos DuplicateVoteEvidence a la misma altura pero con diferentes marcas de tiempo. Un objeto DuplicateVoteEvidence (con una marca de tiempo) finalmente se finalizará en el bloque, pero esto significa que cualquier DuplicateVoteEvidence con una marca de tiempo diferente se considera inválido. Cualquier nodo que formó un DuplicateVoteEvidence inválido continuará proponiendo evidencia inválida; sus peers pueden visualizar esto y optar por desconectarse de este nodo. Este error significa que los signos dobles son vectores de DoS en Tendermint Core versiones v0.34.0-v0.34.2. Tendermint Core versión v0.34.3 es una versión de seguridad que corrige este error. A partir de la versión 0.34.3, DuplicateVoteEvidence ya no está formado por el reactor de consenso; más bien, el reactor de consenso pasa los Votos mismos al EvidencePool, que ahora es responsable de formar un DuplicateVoteEvidence. EvidencePool posee información de marca de tiempo que debe ser consistente en toda la red, lo que significa que un DuplicateVoteEvidence formado en este reactor debe tener marcas de tiempo consistentes. Esta versión cambia la API entre los reactores de consenso y evidencia"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tendermint:tendermint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.34.0",
            "versionEndIncluding" : "0.34.2",
            "matchCriteriaId" : "E506A553-4EE9-4251-8C60-DF2EA5EB2E98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tendermint/tendermint/blob/v0.34.3/CHANGELOG.md#v0.34.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tendermint/tendermint/commit/a2a6852ab99e4a0f9e79f0ea8c1726e262e25c76",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tendermint/tendermint/security/advisories/GHSA-p658-8693-mhvg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tendermint/tendermint/blob/v0.34.3/CHANGELOG.md#v0.34.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tendermint/tendermint/commit/a2a6852ab99e4a0f9e79f0ea8c1726e262e25c76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tendermint/tendermint/security/advisories/GHSA-p658-8693-mhvg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21278",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-26T21:15:12.673",
      "lastModified" : "2024-11-21T05:47:55.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RSSHub is an open source, easy to use, and extensible RSS feed generator. In RSSHub before version 7f1c430 (non-semantic versioning) there is a risk of code injection. Some routes use `eval` or `Function constructor`, which may be injected by the target site with unsafe code, causing server-side security issues The fix in version 7f1c430 is to temporarily remove the problematic route and added a `no-new-func` rule to eslint."
      }, {
        "lang" : "es",
        "value" : "RSSHub es un generador de fuentes RSS extensible, fácil de usar y de código abierto. En RSSHub versiones anteriores a 7f1c430 (versionado no semántico) se presenta el riesgo de inyección de código. Algunas rutas usan \"eval\" o \"Function constructor\", que pueden ser inyectadas por el sitio objetivo con código no seguro, causando problemas de seguridad en el lado del servidor. La corrección en la versión 7f1c430 es eliminar temporalmente la ruta problemática y agregar una regla \"no-new-func\" para eslint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rsshub:rsshub:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2021-01-25",
            "matchCriteriaId" : "96307B03-5B1C-4DDC-8E20-E299DE0697A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DIYgod/RSSHub/commit/7f1c43094e8a82e4d8f036ff7d42568fed00699d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-pgjj-866w-fc5c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/rsshub",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/commit/7f1c43094e8a82e4d8f036ff7d42568fed00699d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DIYgod/RSSHub/security/advisories/GHSA-pgjj-866w-fc5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/rsshub",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21283",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-26T21:15:12.767",
      "lastModified" : "2024-11-21T05:47:55.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flarum is an open source discussion platform for websites. The \"Flarum Sticky\" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to be injected as HTML on the discussion list. The issue was discovered following an internal audit. Any HTML would be injected through the m.trust() helper. This resulted in an HTML injection where <script> tags would not be executed. However it was possible to run javascript from other HTML attributes, enabling a cross-site scripting (XSS) attack to be performed. Since the exploit only happens with the first post of a pinned discussion, an attacker would need the ability to pin their own discussion, or be able to edit a discussion that was previously pinned. On forums where all pinned posts are authored by your staff, you can be relatively certain the vulnerability has not been exploited. Forums where some user-created discussions were pinned can look at the first post edit date to find whether the vulnerability might have been exploited. Because Flarum doesn't store the post content history, you cannot be certain if a malicious edit was reverted. The fix will be available in version v0.1.0-beta.16 with Flarum beta 16. The fix has already been back-ported to Flarum beta 15 as version v0.1.0-beta.15.1 of the Sticky extension. Forum administrators can disable the Sticky extension until they are able to apply the update. The vulnerability cannot be exploited while the extension is disabled."
      }, {
        "lang" : "es",
        "value" : "Flarum es una plataforma de discusión de código abierto para sitios web. Las versiones 0.1.0-beta.14 y 0.1.0-beta.15 de la extensión \"Flarum Sticky\" tienen una vulnerabilidad de tipo cross-site scripting. Un cambio en la versión beta 14 de la extensión Sticky causó que el contenido de texto plano de la primera publicación de una discusión fijada se inyectara como HTML en la lista de discusión. El problema se detectó tras una auditoría interna. Cualquier HTML se inyectaría por medio del asistente m.trust(). Esto resultó en una inyección de HTML donde las etiquetas (script) no se ejecutarían. Sin embargo, era posible ejecutar javascript desde otros atributos HTML, lo que permitía realizar un ataque de tipo cross-site scripting (XSS). Dado que la explotación solo ocurre con la primera publicación de una discusión fijada, un atacante necesitaría la capacidad de fijar su propia discusión o poder editar una discusión que haya sido fijada previamente. En los foros donde todas las publicaciones fijadas son creadas por su personal, puede estar relativamente seguro de que la vulnerabilidad no ha sido explotada. Los foros en los que se fijaron algunas discusiones creadas por usuarios pueden consultar la fecha de edición de la primera publicación para averiguar si la vulnerabilidad podría haberse explotado. Debido a que Flarum no almacena el historial de contenido de la publicación, no puede estar seguro de si se revertió una edición maliciosa. La corrección estará disponible en la versión v0.1.0-beta.16 con Flarum beta 16. La corrección ya se ha actualizado a Flarum beta 15 como la versión v0.1.0-beta.15.1 de la extensión Sticky. Los administradores del foro pueden deshabilitar la extensión Sticky hasta que puedan aplicar la actualización. La vulnerabilidad no puede ser explotada mientras la extensión esté desactivada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flarum:sticky:0.1.0:beta14:*:*:*:*:*:*",
            "matchCriteriaId" : "39236B26-127F-4C5C-A5D5-9E1730245739"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flarum:sticky:0.1.0:beta15:*:*:*:*:*:*",
            "matchCriteriaId" : "9D6DFA2A-DE79-40DF-8276-AA4F19D511B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.flarum.org/d/26042-security-update-to-flarum-sticky-010-beta151%29",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/flarum/sticky/commit/7ebd30462bd405c4c0570b93a6d48710e6c3db19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/sticky/pull/24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/sticky/security/advisories/GHSA-h3gg-7wx2-cq3h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.flarum.org/d/26042-security-update-to-flarum-sticky-010-beta151%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/flarum/sticky/commit/7ebd30462bd405c4c0570b93a6d48710e6c3db19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/sticky/pull/24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flarum/sticky/security/advisories/GHSA-h3gg-7wx2-cq3h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T21:15:12.860",
      "lastModified" : "2024-11-21T05:56:00.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin)."
      }, {
        "lang" : "es",
        "value" : "Era posible ejecutar un ataque de tipo ReDoS dentro de CKEditor 4 versiones anteriores a 4.16, al persuadir a una víctima para pegar un texto diseñado en la entrada Styles de cuadros de diálogo específicos (en la pestaña Advanced para el plugin Dialogs)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.16",
            "matchCriteriaId" : "4C5F969A-06A2-4D84-B7DF-1CE68E285C0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED43772F-D280-42F6-A292-7198284D6FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.0",
            "matchCriteriaId" : "6B4D758F-EABD-498C-9C9E-C3F35927F7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.6",
            "versionEndIncluding" : "8.0.9",
            "matchCriteriaId" : "40F940AA-05BE-426C-89A3-4098E107D9A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB8AE1F-FA6B-4A5E-AA5B-D0B7C78FE886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C2C67B-BF55-4B48-A94D-1F37A4FAC68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.9",
            "matchCriteriaId" : "D2B15024-E757-443B-8424-BBF0A28C3753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D551CAB1-4312-44AA-BDA8-A030817E153A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174A6D2E-E42E-4C92-A194-C6A820CD7EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T21:15:12.923",
      "lastModified" : "2024-11-21T05:56:00.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin)."
      }, {
        "lang" : "es",
        "value" : "Era posible ejecutar un ataque de tipo ReDoS dentro de CKEditor 4 versiones anteriores a 4.16, al persuadir a una víctima para pegar un texto similar a una URL en el editor y luego presionar Enter o Space  (en el plugin Autolink)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.16",
            "matchCriteriaId" : "4C5F969A-06A2-4D84-B7DF-1CE68E285C0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED43772F-D280-42F6-A292-7198284D6FE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.0",
            "matchCriteriaId" : "6B4D758F-EABD-498C-9C9E-C3F35927F7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C542DC5E-6657-4178-9C69-46FD3C187D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_merchandising:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.3.0",
            "versionEndIncluding" : "11.3.2",
            "matchCriteriaId" : "E10F540D-8AAF-42D4-B06A-573C5DC3CC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_merchandising:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B7F80B8-08DC-4263-AB44-1653ED1FEFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_merchandising:11.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C65F9D9-AD7B-47B8-8943-79CEA6A95AD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.6",
            "versionEndIncluding" : "8.0.9",
            "matchCriteriaId" : "40F940AA-05BE-426C-89A3-4098E107D9A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FB8AE1F-FA6B-4A5E-AA5B-D0B7C78FE886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C2C67B-BF55-4B48-A94D-1F37A4FAC68C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_model_management_and_governance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.8.0.0",
            "versionEndIncluding" : "8.1.0.0.0",
            "matchCriteriaId" : "2D0E8BB8-DB96-48F2-833A-D246193EEDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.9",
            "matchCriteriaId" : "90605BF7-9C9B-4AC2-83B6-3666C5A15D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D551CAB1-4312-44AA-BDA8-A030817E153A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174A6D2E-E42E-4C92-A194-C6A820CD7EF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://ckeditor.com/blog/CKEditor-4.16-with-improved-image-pasting-High-Contrast-support-and-a-new-color-API/#security-comes-first",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor4/blob/major/CHANGES.md#ckeditor-416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T21:15:12.987",
      "lastModified" : "2025-11-10T14:41:45.053",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character."
      }, {
        "lang" : "es",
        "value" : "Sudo versiones anteriores a 1.9.5p2 contiene un error de desbordamiento que puede resultar en un desbordamiento de búfer basado en la pila, lo que permite la escalada de privilegios a root a través de \"sudoedit -s\" y un argumento de línea de comandos que termina con un solo carácter de barra invertida"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-04-06",
      "cisaActionDue" : "2022-04-27",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Sudo Heap-Based Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.2",
            "versionEndExcluding" : "1.8.32",
            "matchCriteriaId" : "ED707F57-531B-4066-AFF0-7239F87B6BF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.5",
            "matchCriteriaId" : "38FC37F7-DE89-4078-BB55-EBFBF3A2D780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.9.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "436F3F62-FBA8-44CB-A5A9-AA4D7E0F9A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sudo_project:sudo:1.9.5:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "3C21138F-EB70-4AAE-9F45-C75CCE59BA89"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_unified_manager_core_package:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4D418D-B526-46B9-B439-E1963BF88C0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_tools:9:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "C2D814BE-93EC-42EF-88C5-EA7E7DF07BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:8.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2039589-B543-49B6-AC5F-74C4253B416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:9.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E014E1E-0013-434F-9C59-178DAC089687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:10.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE836FD-3453-4277-BC18-A4868C183F42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA272C48-259B-4402-BB75-552B6983CD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9685B12-824F-42AD-B87C-6E7A78BB7FA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:privilege_management_for_mac:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.1",
            "matchCriteriaId" : "38A18800-4BB0-46A1-BD9D-78EC7A07E7B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:beyondtrust:privilege_management_for_unix\\/linux:*:*:*:*:basic:*:*:*",
            "versionEndExcluding" : "10.3.2-10",
            "matchCriteriaId" : "48DC5B58-0E31-480E-BF05-787287DFF42B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:micros_compact_workstation_3_firmware:310:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE3FF32-E472-4E90-9DE5-803AD6FD9E27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oracle:micros_compact_workstation_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA4F0AD-B8A4-4EB9-A220-FEEC9B147D3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:micros_es400_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "400",
            "versionEndIncluding" : "410",
            "matchCriteriaId" : "9AA5297B-05DF-4A23-B684-60F2107339B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oracle:micros_es400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BBD07A-4731-41D1-AB66-77082951D99C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:micros_kitchen_display_system_firmware:210:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E6A365-F04F-4991-888F-D8E9391A9857"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oracle:micros_kitchen_display_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1424AF8-9337-427B-B6FA-C5EB8B201FB7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:micros_workstation_5a_firmware:5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78FDD3A-F241-4172-8725-7D51D8E705E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oracle:micros_workstation_5a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F607BA3F-246F-42BE-9EBD-A2CAE098C0C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:micros_workstation_6_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "610",
            "versionEndIncluding" : "655",
            "matchCriteriaId" : "D59535D6-8D64-4B8F-BC1B-5846600C9F81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:oracle:micros_workstation_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82A66154-5DF0-43FF-9F70-1221D3E6F919"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0.0.0",
            "versionEndIncluding" : "10.3.0.2.1",
            "matchCriteriaId" : "977CA754-6CE0-4FCB-9683-D81B7A15449D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_performance_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0.1.0",
            "versionEndIncluding" : "10.4.0.3.1",
            "matchCriteriaId" : "29A3F7EF-2A69-427F-9F75-DDDBEE34BA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "26F05F85-7458-4C8F-B93F-93C92E506A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/42",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/79",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Feb/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/26/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/27/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/27/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/15/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/09/14/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/01/30/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/01/30/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10348",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210128-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210128-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212177",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4839",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/794544",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/26/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/stable.html#1.9.5p2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_21_02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.vicarius.io/vsociety/posts/sudoedit-pwned-cve-2021-3156",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161160/Sudo-Heap-Based-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161230/Sudo-Buffer-Overflow-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161270/Sudo-1.9.5p1-Buffer-Overflow-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161293/Sudo-1.8.31p2-1.9.5p1-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jan/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Feb/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/26/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/09/14/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/01/30/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2024/01/30/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/01/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CALA5FTXIQBRRYUA2ZQNJXB6OQMAXEII/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LHXK6ICO5AYLGFK2TAX5MZKUXTUKWOJY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202101-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210128-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210128-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sudo-privesc-jan2021-qnYQfcM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.beyondtrust.com/blog/entry/security-advisory-privilege-management-for-unix-linux-pmul-basic-and-privilege-management-for-mac-pmm-affected-by-sudo-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/794544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/26/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sudo.ws/stable.html#1.9.5p2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_21_02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3156",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T21:15:13.063",
      "lastModified" : "2024-11-21T06:21:15.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "packages/wekan-ldap/server/ldap.js in Wekan before 4.87 can process connections even though they are not authorized by the Certification Authority trust store,"
      }, {
        "lang" : "es",
        "value" : "El archivo packages/wekan-ldap/server/ldap.js en Wekan versiones anteriores a 4.87, pueden procesar conexiones aunque no estén autorizadas por el almacén confiable de Certification Authority"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.87",
            "matchCriteriaId" : "FD5D1800-99E6-4E68-B5B9-B22CF9E6CCE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wekan/wekan/issues/3482",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wekan/wekan/pull/3483/commits/31f89121fecca5a761b05cc3a26d4f237e90b484",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v4.87",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wekan/wekan/issues/3482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wekan/wekan/pull/3483/commits/31f89121fecca5a761b05cc3a26d4f237e90b484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wekan/wekan/releases/tag/v4.87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1070",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-26T22:15:12.043",
      "lastModified" : "2024-11-21T05:43:32.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, L4T versions prior to 32.5, contains a vulnerability in the apply_binaries.sh script used to install NVIDIA components into the root file system image, in which improper access control is applied, which may lead to an unprivileged user being able to modify system device tree files, leading to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano y Nano 2GB, versiones L4T anteriores a 32.5, contiene una vulnerabilidad en el script apply_binaries.sh usado para instalar componentes de NVIDIA en la imagen del sistema de archivos root, en la cual un control de acceso inapropiado es aplicado, lo que puede conllevar a que un usuario no privilegiado pueda ser capaz de modificar los archivos del árbol de dispositivos del sistema, conllevando a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r32.5",
            "matchCriteriaId" : "B53AC0D9-2453-4E98-BA1D-029C04EB720A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD3D2AA-2A9F-470D-BB0F-A7B7C2EC2490"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2B041F-21A8-4F0B-BBAF-7CDD8B911547"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E153CA-BE89-4C66-8B72-8901BF592423"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1FDAD-C594-43D9-9BF6-F7461177AB91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9D4A55-A232-4AF2-B7E9-CD58D7D17479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AA5976-FD71-4A53-BD4F-D342E871FEB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5147",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1071",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-01-26T22:15:12.107",
      "lastModified" : "2024-11-21T05:43:32.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Tegra kernel in Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano and Nano 2GB, all L4T versions prior to r32.5, contains a vulnerability in the INA3221 driver in which improper access control may lead to unauthorized users gaining access to system power usage data, which may lead to information disclosure."
      }, {
        "lang" : "es",
        "value" : "El kernel de NVIDIA Tegra en Jetson AGX Xavier Series, Jetson Xavier NX, TX1, TX2, Nano y Nano 2GB, todas las versiones L4T anteriores a r32.5, contiene una vulnerabilidad en el controlador INA3221 en la que un control de acceso inapropiado puede conllevar a usuarios no autorizados a conseguir acceso a los datos de uso de energía del sistema, lo que puede conllevar a una divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nvidia:linux_for_tegra:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r32.5",
            "matchCriteriaId" : "B53AC0D9-2453-4E98-BA1D-029C04EB720A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_agx_xavier:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD3D2AA-2A9F-470D-BB0F-A7B7C2EC2490"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_nano:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B2B041F-21A8-4F0B-BBAF-7CDD8B911547"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_nano_2gb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E153CA-BE89-4C66-8B72-8901BF592423"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86D1FDAD-C594-43D9-9BF6-F7461177AB91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_tx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE9D4A55-A232-4AF2-B7E9-CD58D7D17479"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nvidia:jetson_xavier_nx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0AA5976-FD71-4A53-BD4F-D342E871FEB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5147",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T23:15:12.890",
      "lastModified" : "2024-11-21T06:21:02.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SmartAgent 3.1.0 allows a ViewOnly attacker to create a SuperUser account via the /#/CampaignManager/users URI."
      }, {
        "lang" : "es",
        "value" : "SmartAgent versión 3.1.0, permite a un atacante ViewOnly crear una cuenta de SuperUser por medio del URI /#/CampaignManager/users"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:missionlabs:smartagent:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC4A041-3C3F-4481-BA14-83E82C777FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://orionhridoy.me",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160906/SmartAgent-3.1.0-Privilege-Escalation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smtagent.com/support",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://orionhridoy.me",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160906/SmartAgent-3.1.0-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smtagent.com/support",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-26T23:15:13.047",
      "lastModified" : "2024-11-21T06:21:16.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KLog Server through 2.4.1 allows authenticated command injection. async.php calls shell_exec() on the original value of the source parameter."
      }, {
        "lang" : "es",
        "value" : "KLog Server versiones hasta 2.4.1, permite una inyección de comandos autenticada.&#xa0;El archivo async.php llama a la función shell_exec() en el valor original del parámetro source"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klogserver:klog_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "9DF21B2F-E9C3-417D-83D8-6581A39CEC8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161208/Klog-Server-2.4.1-Command-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161208/Klog-Server-2.4.1-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.unsafe-inline.com/0day/klog-server-authenticated-command-injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T08:15:10.483",
      "lastModified" : "2024-11-21T06:21:11.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jp2_decode in jp2/jp2_dec.c in libjasper in JasPer 2.0.24 has a heap-based buffer over-read when there is an invalid relationship between the number of channels and the number of image components."
      }, {
        "lang" : "es",
        "value" : "En la función jp2_decode en el archivo jp2/jp2_dec.c en libjasper en JasPer versión 2.0.24, presenta una lectura excesiva del búfer en la región heap de la memoria cuando existe una relación no válida entre el número de canales y el número de componentes de la imagen"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:2.0.24:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E84A82E5-EB56-4E02-9880-D1FC90E9DB9A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jasper-software/jasper/issues/259",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BZFU2F6UW4L2FJE65WJLWGUIELDWCL7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD2Y2LT4N5ZWCMKYCUIKB3XODNJLOW3J/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jasper-software/jasper/issues/259",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BZFU2F6UW4L2FJE65WJLWGUIELDWCL7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HD2Y2LT4N5ZWCMKYCUIKB3XODNJLOW3J/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T16:15:13.200",
      "lastModified" : "2024-11-21T05:54:43.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory, as demonstrated by creating a file under /etc that will later be executed by root."
      }, {
        "lang" : "es",
        "value" : "La función condor_credd en HTCondor versiones anteriores a 8.9.11, permite el Salto de Directorio fuera del directorio SEC_CREDENTIAL_DIRECTORY_OAUTH, como es demostrado mediante la creación de un archivo bajo /etc que luego será ejecutado por root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.9.7",
            "versionEndExcluding" : "8.9.11",
            "matchCriteriaId" : "4875C821-91AB-4DB6-92F5-CB57546302E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25312",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T16:15:13.263",
      "lastModified" : "2024-11-21T05:54:43.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HTCondor before 8.9.11 allows a user to submit a job as another user on the system, because of a flaw in the IDTOKENS authentication method."
      }, {
        "lang" : "es",
        "value" : "HTCondor versiones anteriores a 8.9.11, permite a un usuario enviar un trabajo como otro usuario en el sistema, debido a un fallo en el método de autenticación IDTOKENS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wisc:htcondor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.9.2",
            "versionEndExcluding" : "8.9.11",
            "matchCriteriaId" : "B8BB1F66-36CF-45A1-8958-9FBCF5FB6970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://research.cs.wisc.edu/htcondor/security/vulnerabilities/HTCONDOR-2021-0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20357",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-01-27T17:15:14.400",
      "lastModified" : "2024-11-21T05:46:27.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963."
      }, {
        "lang" : "es",
        "value" : "Los productos de IBM Jazz Foundation, son vulnerables a ataques de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 194963"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D8E27B-1B01-4EBE-A28B-31CFB5CB3D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC9B60C-F4C7-40EB-AF44-28ABE46157D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06699AD1-2DB4-4A97-B02B-79BA3DE0AEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7A8206-BB16-4559-A672-54C80FE1F32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC36ADE-3058-4210-8C8D-5B4E458FAB8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3093272-25CB-4478-9729-CD2E4710361A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79FE328F-EAED-41C4-B0E1-B1B824CE4D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E72DED9-4D72-4AC9-962A-BC73A324A9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3C3F43-9613-42DC-B20F-C136C70A98D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA5B410-20C9-4B68-87C1-C0ECA72041E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA73A7F-6455-40C1-BF2E-EA4832D788AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C61454F-7B98-4A67-B2E2-E0146F1F43D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:global_configuration_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1498109-7634-4258-B0EE-CA8A97334441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E17CB-517F-4976-BBBC-3CD0188710E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E698C1B9-529C-42A1-9C8D-8088A2C1FC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "838DE085-54BB-4726-9E6F-FAF26EDFE539"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F487060D-11AE-4048-B26F-F35320646340"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B7ED890-DF29-4351-9569-C85482D079AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_design_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E773AC51-4CE1-4040-B568-EF17B025C4AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854EB28F-E803-4FBF-86A0-3D9B59B21E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30966CBA-B11A-446A-81C4-D382BC130CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EAF6B9-0892-4B1B-A424-6E2C2C1D0142"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D59FAE57-7A98-4C2E-8C15-66D71631A523"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194963",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6408694",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6408694",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T18:15:14.150",
      "lastModified" : "2024-11-21T06:21:16.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter."
      }, {
        "lang" : "es",
        "value" : "El archivo attach/ajax.php en DzzOffice versiones hasta 2.02.1, permite un ataque de tipo XSS por medio del parámetro editorid"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dzzoffice:dzzoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.02.1",
            "matchCriteriaId" : "A7BB379C-21F1-4859-9305-6C3C0686CA07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zyx0814/dzzoffice/issues/173",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162314/DzzOffice-2.02.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zyx0814/dzzoffice/issues/173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25224",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-01-27T19:15:13.437",
      "lastModified" : "2024-11-21T05:54:34.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de agotamiento de la memoria en Trend Micro ServerProtect para Linux versión 3.0, podría permitir a un atacante local diseñar archivos específicos que pueden causar una denegación de servicio en el producto afectado.&#xa0;El fallo específico se presenta dentro de un componente de escaneo manual.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo a fin de explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284207",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-085/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-085/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25225",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-01-27T19:15:13.547",
      "lastModified" : "2024-11-21T05:54:34.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de agotamiento de la memoria en Trend Micro ServerProtect para Linux versión 3.0, podría permitir a un atacante local diseñar archivos específicos que pueden causar una denegación de servicio en el producto afectado.&#xa0;El fallo específico se presenta dentro de un componente de escaneo programado.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo a fin de explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284207",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-086/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-086/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25226",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-01-27T19:15:13.610",
      "lastModified" : "2024-11-21T05:54:35.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de agotamiento de la memoria en Trend Micro ServerProtect para Linux versión 3.0, podría permitir a un atacante local diseñar archivos específicos que pueden causar una denegación de servicio en el producto afectado.&#xa0;El fallo específico se presenta dentro de un componente de motor de escaneo.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo a fin de explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:3.0:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "D0E9F49F-7151-4150-A31D-CA68D0D4C268"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284207",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-087/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-087/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25247",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-01-27T19:15:13.673",
      "lastModified" : "2024-11-21T05:54:37.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DLL hijacking vulnerability Trend Micro HouseCall for Home Networks version 5.3.1063 and below could allow an attacker to use a malicious DLL to escalate privileges and perform arbitrary code execution. An attacker must already have user privileges on the machine to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro de DLL de Trend Micro HouseCall for Home Networks versiones 5.3.1063 y anteriores, podría permitir a un atacante utilizar una DLL maliciosa para escalar privilegios y llevar a cabo una ejecución de código arbitraria.&#xa0;Un atacante ya debe tener privilegios de usuario en la máquina para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:housecall_for_home_networks:5.3.0.1063:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15611BB0-3FD7-40C2-8284-813822D30062"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10180",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26117",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-01-27T19:15:13.720",
      "lastModified" : "2024-11-21T05:55:53.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users password in error, resulting in no check on the password."
      }, {
        "lang" : "es",
        "value" : "El módulo de inicio de sesión LDAP de ActiveMQ opcional puede ser configurado para usar el acceso anónimo al servidor LDAP.&#xa0;En este caso, para Apache ActiveMQ Artemis anterior a versión 2.16.0 y Apache ActiveMQ anterior a versiones 5.16.1 y 5.15.14, el contexto anónimo es usado para verificar una contraseña de usuario válida por error, resultando en una comprobación de la contraseña"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.15.0",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "9EEB8CE4-89D2-4D1B-BCB7-E236991EBE7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.16.0",
            "versionEndExcluding" : "5.16.1",
            "matchCriteriaId" : "A64C2811-88CE-4A83-943C-A71EDD536E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq_artemis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.16.0",
            "matchCriteriaId" : "EFC99E51-1E24-4DD8-BC3E-271133CF074C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "0331877D-D5DB-4EE8-8220-C1CDC3F90CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndIncluding" : "8.2.2",
            "matchCriteriaId" : "3E5416A1-EE58-415D-9645-B6A875EBAED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.2",
            "matchCriteriaId" : "5A528287-BF09-4E87-8192-81DBFB57A100"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6762F207-93C7-4363-B2F9-7A7C6F8AF993"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B74B912-152D-4F38-9FC1-741D6D0B27FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r110cacfa754471361234965ffe851a046e302ff2693b055f49f47b02%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22cdc0fb45e223ac92bc2ceff7af92f1193dfc614c8b248534456229%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3341d96d8f956e878fb7b463b08d57ca1d58fec9c970aee929b58e0d%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r519bfafd67091d0b91243efcb1c49b1eea27321355ba5594f679277d%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5899ece90bcae5805ad6142fdb05c58595cff19cb2e98cc58a91f55b%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r70389648227317bdadcdecbd9f238571a6047469d156bd72bb0ca2f7%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra255ddfc8b613b80e9fa22ff3e106168b245f38a22316bfb54d21159%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raea451de09baed76950d6a60cc4bb1b74476c505e03205a3c68c9808%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd05b1c9d61dbd220664d559aa0e2b55e5830f006a09e82057f3f7863%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd75600cee29cb248d548edcf6338fe296466d63a69e2ed0afc439ec7%40%3Cissues.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1b98da90a5f2e1c2e2d50e31c12e2578d61fe01c0737f9d0bd8de99%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec93794f8aeddf8a5f1a643d264b4e66b933f06fd72a38f31448f0ac%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rffa5cd05d01c4c9853b17f3004d80ea6eb8856c422a8545c5f79b1a6%40%3Ccommits.activemq.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3cCAH+vQmMeUEiKN4wYX9nLBbqmFZFPXqajNvBKmzb2V8QZANcSTA%40mail.gmail.com%3e",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210304-0008/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r110cacfa754471361234965ffe851a046e302ff2693b055f49f47b02%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22cdc0fb45e223ac92bc2ceff7af92f1193dfc614c8b248534456229%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3341d96d8f956e878fb7b463b08d57ca1d58fec9c970aee929b58e0d%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r519bfafd67091d0b91243efcb1c49b1eea27321355ba5594f679277d%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5899ece90bcae5805ad6142fdb05c58595cff19cb2e98cc58a91f55b%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r70389648227317bdadcdecbd9f238571a6047469d156bd72bb0ca2f7%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r946488fb942fd35c6a6e0359f52504a558ed438574a8f14d36d7dcd7%40%3Ccommits.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra255ddfc8b613b80e9fa22ff3e106168b245f38a22316bfb54d21159%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raea451de09baed76950d6a60cc4bb1b74476c505e03205a3c68c9808%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd05b1c9d61dbd220664d559aa0e2b55e5830f006a09e82057f3f7863%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd75600cee29cb248d548edcf6338fe296466d63a69e2ed0afc439ec7%40%3Cissues.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1b98da90a5f2e1c2e2d50e31c12e2578d61fe01c0737f9d0bd8de99%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec93794f8aeddf8a5f1a643d264b4e66b933f06fd72a38f31448f0ac%40%3Cgitbox.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rffa5cd05d01c4c9853b17f3004d80ea6eb8856c422a8545c5f79b1a6%40%3Ccommits.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/11/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3cCAH+vQmMeUEiKN4wYX9nLBbqmFZFPXqajNvBKmzb2V8QZANcSTA%40mail.gmail.com%3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210304-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26118",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-01-27T19:15:13.780",
      "lastModified" : "2024-11-21T05:55:54.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "While investigating ARTEMIS-2964 it was found that the creation of advisory messages in the OpenWire protocol head of Apache ActiveMQ Artemis 2.15.0 bypassed policy based access control for the entire session. Production of advisory messages was not subject to access control in error."
      }, {
        "lang" : "es",
        "value" : "Al investigar ARTEMIS-2964, se detectó que la creación de mensajes de aviso en el encabezado del protocolo OpenWire de Apache ActiveMQ Artemis versión 2.15.0, omitió el control de acceso basado en políticas para toda la sesión.&#xa0;La producción de mensajes de aviso no estuvo sujeta al control de acceso por error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq_artemis:2.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB11579-9019-4496-9845-508690C14608"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/rafd5d7cf303772a0118865262946586921a65ebd98fc24f56c812574%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3CCAH%2BvQmMUNnkiXv2-d3ucdErWOsdnLi6CgnK%2BVfixyJvTgTuYig%40mail.gmail.com%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210827-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rafd5d7cf303772a0118865262946586921a65ebd98fc24f56c812574%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mail-archives.apache.org/mod_mbox/activemq-users/202101.mbox/%3CCAH%2BvQmMUNnkiXv2-d3ucdErWOsdnLi6CgnK%2BVfixyJvTgTuYig%40mail.gmail.com%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210827-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3325",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T19:15:13.983",
      "lastModified" : "2024-11-21T06:21:17.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Monitorix 3.13.0 allows remote attackers to bypass Basic Authentication in a default installation (i.e., an installation without a hosts_deny option). This issue occurred because a new access-control feature was introduced without considering that some exiting installations became unsafe, upon an update to 3.13.0, unless the new feature was immediately configured."
      }, {
        "lang" : "es",
        "value" : "Monitorix versión 3.13.0, permite a atacantes remotos omitir la Autenticación Básica en una instalación predeterminada (es decir, una instalación sin la opción hosts_deny).&#xa0;Este problema ocurrió porque una nueva funcionalidad de control de acceso fue introducida sin considerar que algunas instalaciones existentes se volvieron no seguras, tras una actualización a la versión 3.13.0, a menos que la nueva funcionalidad fue configurada inmediatamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fibranet:monitorix:3.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE46B7E-5768-4477-82FB-255DD5D6DD16"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mikaku/Monitorix/commit/d6816e20da1a98bcdc6372d9c36a093df5238f4a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mikaku/Monitorix/compare/v3.13.0...v3.13.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mikaku/Monitorix/issues/309",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67DDUU56LP76AJ2K7WJ733QPL2FHKKNG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGG6WK44CYY6GEFRTCUEDANVNSX5NDH7/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.monitorix.org/news.html?n=20210127",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mikaku/Monitorix/commit/d6816e20da1a98bcdc6372d9c36a093df5238f4a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mikaku/Monitorix/compare/v3.13.0...v3.13.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mikaku/Monitorix/issues/309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/67DDUU56LP76AJ2K7WJ733QPL2FHKKNG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGG6WK44CYY6GEFRTCUEDANVNSX5NDH7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.monitorix.org/news.html?n=20210127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22637",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-01-27T20:15:12.770",
      "lastModified" : "2024-11-21T05:50:21.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stack-based buffer overflow issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)."
      }, {
        "lang" : "es",
        "value" : "Se han identificado múltiples problemas de desbordamiento del búfer en la región stack de la memoria en la manera en que la aplicación procesa archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria en el Tellus Lite V-Simulator y V-Server Lite (versiones anteriores a 4.0.10.0)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-server:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "3D8B4395-7ADA-4752-9DFF-B83E054596E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-simulator:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "B5EB143F-D650-45F2-9948-B1C2246E56A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-097/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-097/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22639",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-01-27T20:15:12.847",
      "lastModified" : "2024-11-21T05:50:21.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uninitialized pointer issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado un problema de puntero no inicializado en la manera en que la aplicación procesa archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria en el Tellus Lite V-Simulator y V-Server Lite (versiones anteriores a 4.0.10.0)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-server:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "3D8B4395-7ADA-4752-9DFF-B83E054596E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-simulator:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "B5EB143F-D650-45F2-9948-B1C2246E56A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-098/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-098/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22641",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-01-27T20:15:13.207",
      "lastModified" : "2024-11-21T05:50:22.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow issue has been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado un problema de desbordamiento del búfer en la región heap de la memoria en la manera en que la aplicación procesa archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria en el Tellus Lite V-Simulator y V-Server Lite (versiones anteriores a 4.0.10.0)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-server:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "3D8B4395-7ADA-4752-9DFF-B83E054596E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-simulator:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "B5EB143F-D650-45F2-9948-B1C2246E56A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-099/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-099/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22653",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-01-27T20:15:13.317",
      "lastModified" : "2024-11-21T05:50:24.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple out-of-bounds write issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)."
      }, {
        "lang" : "es",
        "value" : "Se han identificado múltiples problemas de escritura fuera de límites en la manera en que la aplicación procesa archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria en el Tellus Lite V-Simulator y V-Server Lite (versiones anteriores a 4.0.10.0)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-server:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "3D8B4395-7ADA-4752-9DFF-B83E054596E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-simulator:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "B5EB143F-D650-45F2-9948-B1C2246E56A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22655",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-01-27T20:15:13.397",
      "lastModified" : "2024-11-21T05:50:24.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple out-of-bounds read issues have been identified in the way the application processes project files, allowing an attacker to craft a special project file that may allow arbitrary code execution on the Tellus Lite V-Simulator and V-Server Lite (versions prior to 4.0.10.0)."
      }, {
        "lang" : "es",
        "value" : "Se han identificado múltiples problemas de lectura fuera de límites en la manera en que la aplicación procesa archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria en el Tellus Lite V-Simulator y V-Server Lite (versiones anteriores a 4.0.10.0)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-server:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "3D8B4395-7ADA-4752-9DFF-B83E054596E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fujielectric:v-simulator:*:*:*:*:lite:*:*:*",
            "versionEndExcluding" : "4.0.10.0",
            "matchCriteriaId" : "B5EB143F-D650-45F2-9948-B1C2246E56A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-026-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T20:15:13.863",
      "lastModified" : "2024-11-21T05:56:01.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data"
      }, {
        "lang" : "es",
        "value" : "**EN DISPUTA ** El archivo scripts/cli.js en el paquete Node.js de GoDaddy node-config-shield (también se conoce como Config Shield) versiones anteriores a 0.2.2 para llamadas eval de Node.js al procesar un comando set.&#xa0;NOTA: el proveedor afirma que esto no es una vulnerabilidad.&#xa0;El comando set no fue diseñado para usarse con datos no confiables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:godaddy:node-config-shield:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.2.3",
            "matchCriteriaId" : "4883EEF7-4E8B-4F9B-BC2B-B65D38298989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4773",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godaddy/node-config-shield/commit/cdba5d3a7accd661ffbc52e208153464bd0d9da6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godaddy/node-config-shield/commit/cdba5d3a7accd661ffbc52e208153464bd0d9da6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T20:15:14.020",
      "lastModified" : "2025-06-09T16:15:32.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iconv function in the GNU C Library (aka glibc or libc6) 2.32 and earlier, when processing invalid input sequences in the ISO-2022-JP-3 encoding, fails an assertion in the code path and aborts the program, potentially resulting in a denial of service."
      }, {
        "lang" : "es",
        "value" : "La función iconv en la biblioteca GNU C (también se conoce como glibc o libc6) versiones 2.32 y anteriores, cuando procesa secuencias de entrada no válidas en la codificación ISO-2022-JP-3, se produce un fallo una aserción en la ruta del código y aborta el programa, potencialmente resultando en una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.32.0",
            "matchCriteriaId" : "290E9831-5E7A-4EE8-9496-FF8C590038F2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.60.3",
            "matchCriteriaId" : "7402489D-85E5-4662-BF87-259740DC72F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAEB09CA-9352-43CD-AF66-92BE416E039C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "5E63B7B2-409A-476E-BA12-2A2D2F3B85DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983D27DE-BC89-454E-AE47-95A26A3651E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "ADB5D4C9-DA14-4188-9181-17336F9445F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5825AEE1-B668-40BD-86A9-2799430C742C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "0B65E2F3-57EC-46C0-BB4A-0A0F3F8D387E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "90B7CFBF-761C-4EAA-A322-EF5E294AADED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0CF40B-E5BD-4558-9321-184D58EF621D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "E74AAF52-1388-4BD9-B17B-3A6A32CA3608"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95503CE5-1D06-4092-A60D-D310AADCAFB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "A107698C-9C63-44A9-8A2B-81EDD5702B4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983D27DE-BC89-454E-AE47-95A26A3651E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "0FC0460E-4695-44FB-99EE-28B2C957B760"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5825AEE1-B668-40BD-86A9-2799430C742C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "BD54A092-85A7-4459-9C69-19E6E24AC24B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "5F813DBC-BA1E-4C73-AA11-1BD3F9508372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0CF40B-E5BD-4558-9321-184D58EF621D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "416B805F-799A-4466-AC5A-93D083A2ABBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95503CE5-1D06-4092-A60D-D310AADCAFB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/28/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210304-0007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27256",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210304-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/?p=glibc.git%3Ba=commit%3Bh=7d88c6142c6efc160c0ee5e4f85cde382c072888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3331",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-27T21:15:16.840",
      "lastModified" : "2024-11-21T06:21:18.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings. (For example, this is exploitable in a default installation in which WinSCP is the handler for sftp:// URLs.)"
      }, {
        "lang" : "es",
        "value" : "WinSCP anterior a la versión 5.17.10 permite a los atacantes remotos ejecutar programas arbitrarios cuando el manejador de URLs encuentra una URL manipulada que carga la configuración de la sesión. (Por ejemplo, esto es explotable en una instalación por defecto en la que WinSCP es el manejador de URLs sftp://)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:winscp:winscp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.17.10",
            "matchCriteriaId" : "C081564B-8EF8-4C8A-9EB0-1C50D5A8F18B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/winscp/winscp/commit/faa96e8144e6925a380f94a97aa382c9427f688d",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://winscp.net/eng/docs/history#5.17.10",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://winscp.net/eng/docs/rawsettings",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://winscp.net/tracker/1943",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/winscp/winscp/commit/faa96e8144e6925a380f94a97aa382c9427f688d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://winscp.net/eng/docs/history#5.17.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://winscp.net/eng/docs/rawsettings",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://winscp.net/tracker/1943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26067",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-01-28T02:15:12.557",
      "lastModified" : "2024-11-21T05:55:48.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affected versions of Atlassian Bamboo allow an unauthenticated remote attacker to view a stack trace that may reveal the path for the home directory in disk and if certain files exists on the tmp directory, via a Sensitive Data Exposure vulnerability in the /chart endpoint. The affected versions are before version 7.2.2."
      }, {
        "lang" : "es",
        "value" : "Las versiones afectadas de Atlassian Bamboo permiten a un atacante remoto no autenticado visualizar un seguimiento de la pila que puede revelar la ruta del directorio de inicio en el disco y si determinados archivos existen en el directorio tmp, por medio de una vulnerabilidad de Exposición de Datos Confidenciales en el endpoint /chart.&#xa0;Las versiones afectadas son las anteriores a la versión 7.2.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "FC678268-C957-400D-A333-180253DD2FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/BAM-21215",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/BAM-21215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-28T06:15:14.277",
      "lastModified" : "2023-11-07T03:37:55.953",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-35128. Reason: This candidate is a reservation duplicate of CVE-2020-35128. Notes: All CVE users should reference CVE-2020-35128 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20620",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-28T11:15:13.730",
      "lastModified" : "2024-11-21T05:46:53.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Aterm WF800HP firmware Ver1.0.9 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en el firmware Aterm WF800HP versiones 1.0.9 y anteriores permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.9",
            "matchCriteriaId" : "C5C6EFCD-1F27-4B37-977D-138AF917001F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004958D-AEE0-4F45-BE7D-1B23012BB165"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-005.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aterm.jp/support/tech/2019/0328.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aterm.jp/support/tech/2019/0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20621",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-28T11:15:13.793",
      "lastModified" : "2024-11-21T05:46:53.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de tipo Cross-site request forgery (CSRF) en Aterm WG2600HP firmware versiones 1.0.2 y anteriores, y Aterm WG2600HP2 firmware versiones 1.0.2 y anteriores, permite a atacantes remotos secuestrar la autenticación de administradores por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "28520885-3EFD-483A-9304-7C6654DAE4D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004958D-AEE0-4F45-BE7D-1B23012BB165"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hp2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "A025B5DB-64C5-4DF3-9C29-898E5039A642"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hp2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261CC711-5970-41E2-89C9-A964453ABECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-005.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aterm.jp/support/tech/2019/0328.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aterm.jp/support/tech/2019/0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20622",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-01-28T11:15:13.857",
      "lastModified" : "2024-11-21T05:46:53.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Aterm WG2600HP firmware Ver1.0.2 and earlier, and Aterm WG2600HP2 firmware Ver1.0.2 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de tipo Cross-site scripting en Aterm WG2600HP firmware versiones 1.0.2 y anteriores, y Aterm WG2600HP2 firmware versiones 1.0.2 y anteriores, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "28520885-3EFD-483A-9304-7C6654DAE4D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F004958D-AEE0-4F45-BE7D-1B23012BB165"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hp2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "A025B5DB-64C5-4DF3-9C29-898E5039A642"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hp2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261CC711-5970-41E2-89C9-A964453ABECD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-005.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aterm.jp/support/tech/2019/0328.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN38248512/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aterm.jp/support/tech/2019/0328.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22874",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-01-28T17:15:12.103",
      "lastModified" : "2024-11-21T05:50:48.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in userlog-index.php via the `period_preset` parameter."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver versiones anteriores a 5.1.1, es susceptible a una vulnerabilidad de tipo XSS reflejado en el archivo userlog-index.php por medio del parámetro \"period_preset\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.1",
            "matchCriteriaId" : "28E0FFA4-CC9A-400E-90FE-8811056DB8E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/e2a67ce8",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1083231",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-002/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/e2a67ce8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1083231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22875",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-01-28T17:15:12.243",
      "lastModified" : "2024-11-21T05:50:48.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before 5.1.1 is vulnerable to a reflected XSS vulnerability in stats.php via the `setPerPage` parameter."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver versiones anteriores a 5.1.1, es susceptible a una vulnerabilidad de tipo XSS reflejado en el archivo stats.php por medio del parámetro \"setPerPage\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.1",
            "matchCriteriaId" : "28E0FFA4-CC9A-400E-90FE-8811056DB8E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/6f46076a",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1083376",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-002/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/6f46076a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1083376",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20183",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-28T19:15:13.160",
      "lastModified" : "2024-11-21T05:46:05.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in Moodle before version 3.10.1 that some search inputs were vulnerable to reflected XSS due to insufficient escaping of search queries."
      }, {
        "lang" : "es",
        "value" : "Se encontró en Moodle versiones anteriores a 3.10.1, que algunas entradas de búsqueda eran vulnerables a XSS reflejado debido a un escape insuficiente de las consultas de búsqueda"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.1",
            "matchCriteriaId" : "FB62E8D8-E225-49F0-99A2-54C98AB483D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417166",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20184",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-28T19:15:13.237",
      "lastModified" : "2024-11-21T05:46:05.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in Moodle before version 3.10.1, 3.9.4 and 3.8.7 that a insufficient capability checks in some grade related web services meant students were able to view other students grades."
      }, {
        "lang" : "es",
        "value" : "Se encontró en Moodle versiones anteriores a 3.10.1, 3.9.4 y 3.8.7, que unas comprobaciones de capacidad insuficiente en algunos servicios web relacionados con las calificaciones significaba que los estudiantes podían visualizar las calificaciones de otros estudiantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.7",
            "matchCriteriaId" : "AE54C8A0-31C9-4370-AC33-7C928CDA820C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "47B9548F-912D-4D36-BE31-566EF2812EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.1",
            "matchCriteriaId" : "4812BB5A-37AE-4A51-8A3D-C3F214FE0B4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417167",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20186",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-28T19:15:13.300",
      "lastModified" : "2024-11-21T05:46:05.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that if the TeX notation filter was enabled, additional sanitizing of TeX content was required to prevent the risk of stored XSS."
      }, {
        "lang" : "es",
        "value" : "Se encontró en Moodle versiones anteriores a 3.10.1, 3.9.4, 3.8.7 y 3.5.16, que si el filtro de notación TeX estaba habilitado, se requería una desinfección adicional del contenido TeX para prevenir el riesgo de un XSS almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.16",
            "matchCriteriaId" : "0B9E3D3B-E8BB-458B-B7FC-D490CAFEEA1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.7",
            "matchCriteriaId" : "4C0C5BDE-B2B5-4DE7-BDE0-831F3B56A9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "47B9548F-912D-4D36-BE31-566EF2812EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.1",
            "matchCriteriaId" : "4812BB5A-37AE-4A51-8A3D-C3F214FE0B4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417170",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20187",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-28T19:15:13.377",
      "lastModified" : "2024-11-21T05:46:05.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that it was possible for site administrators to execute arbitrary PHP scripts via a PHP include used during Shibboleth authentication."
      }, {
        "lang" : "es",
        "value" : "Se encontró en Moodle versiones anteriores a 3.10.1, 3.9.4, 3.8.7 y 3.5.16, que era posible para los administradores del sitio ejecutar scripts PHP arbitrarios por medio de una inclusión PHP usada durante la autenticación Shibboleth"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.16",
            "matchCriteriaId" : "0B9E3D3B-E8BB-458B-B7FC-D490CAFEEA1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.7",
            "matchCriteriaId" : "4C0C5BDE-B2B5-4DE7-BDE0-831F3B56A9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "47B9548F-912D-4D36-BE31-566EF2812EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9E83AE-D857-4F96-9466-1361E116D160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417171",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-28T19:15:13.473",
      "lastModified" : "2024-11-21T05:55:12.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mobile application \"Testes de Codigo\" v11.3 and prior allows stored XSS by injecting a payload in the \"feedback\" message field causing it to be stored in the remote database and leading to its execution on client devices when loading the \"feedback list\", either by accessing the website directly or using the mobile application."
      }, {
        "lang" : "es",
        "value" : "La aplicación móvil \"Testes de Codigo\" versión v11.3 y anteriores, permite almacenar XSS inyectando una carga útil en el campo de mensaje \"feedback\", causando que se almacene en la base de datos remota y conlleve a su ejecución en los dispositivos cliente cuando se carga la \"feedback list\" , ya sea accediendo directamente al sitio web o usando la aplicación móvil"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:testes-codigo:testes_de_codigo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.3",
            "matchCriteriaId" : "0C09968A-EFD6-4B7F-8E03-A080D4ECCF1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vrls.ws/posts/2021/01/cve-2021-25647-mobile-application-testes-de-codigo-stored-xss/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vrls.ws/posts/2021/01/cve-2021-25647-mobile-application-testes-de-codigo-stored-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20185",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-01-28T20:15:13.133",
      "lastModified" : "2024-11-21T05:46:05.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was found in Moodle before version 3.10.1, 3.9.4, 3.8.7 and 3.5.16 that messaging did not impose a character limit when sending messages, which could result in client-side (browser) denial of service for users receiving very large messages."
      }, {
        "lang" : "es",
        "value" : "Se encontró en Moodle versiones anteriores a 3.10.1, 3.9.4, 3.8.7 y 3.5.16, que la mensajería no imponía un límite de caracteres al enviar mensajes, lo que podría resultar en la denegación de servicio del lado del cliente (navegador) para los usuarios que recibían mensajes muy grandes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.16",
            "matchCriteriaId" : "23C5022F-A799-4279-8E31-BDAE6C98F87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.7",
            "matchCriteriaId" : "4C0C5BDE-B2B5-4DE7-BDE0-831F3B56A9CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "47B9548F-912D-4D36-BE31-566EF2812EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:3.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9E83AE-D857-4F96-9466-1361E116D160"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417168",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=417168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-28T20:15:13.227",
      "lastModified" : "2024-11-21T06:21:01.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deserialization of untrusted data in the login page of ASSUWEB 359.3 build 1 subcomponent of ACA ASSUREX RENTES product allows a remote attacker to inject unsecure serialized Java object using a specially crafted HTTP request, resulting in an unauthenticated remote code execution on the server."
      }, {
        "lang" : "es",
        "value" : "La deserialización de datos no confiables en la página de inicio de sesión del subcomponente ASSUWEB versión 359.3 build 1 del producto ACA ASSUREX RENTES, permite a un atacante remoto inyectar un objeto Java serializado no seguro mediante una petición HTTP especialmente diseñada, resultando en una ejecución de código remota no autenticada en el servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aca:assuweb:359.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3E5F63C-F3ED-4E06-A070-1839E08E6F5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.aca.fr/solution/assurex-solution-gestion-des-contrats-assurance/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.digital.security/fr/sites/default/files/advisories/cert-ds_advisory_cve-2021-3160.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.aca.fr/solution/assurex-solution-gestion-des-contrats-assurance/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.digital.security/fr/sites/default/files/advisories/cert-ds_advisory_cve-2021-3160.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3337",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-28T20:15:13.307",
      "lastModified" : "2024-11-21T06:21:19.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit."
      }, {
        "lang" : "es",
        "value" : "El plugin Hide-Thread-Content hasta el 27-01-2021 para MyBB, permite a atacantes remotos omitir las restricciones de lectura de contenido previstas haciendo clic en responder o citar en el postbit"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hide_thread_content_project:hide_thread_content:1.0:*:*:*:*:mybb:*:*",
            "matchCriteriaId" : "A378E2BC-F30C-4F34-BD60-B26EF403A1F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161185/MyBB-Hide-Thread-Content-1.0-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/snlbaral/Hide-Thread-Content/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161185/MyBB-Hide-Thread-Content-1.0-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/snlbaral/Hide-Thread-Content/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3341",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T01:15:14.610",
      "lastModified" : "2024-11-21T06:21:20.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability in the DxWebEngine component of DH2i DxEnterprise and DxOdyssey for Windows, version 19.5 through 20.x before 20.0.219.0, allows an attacker to read any file on the host file system via an HTTP request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta en el componente DxWebEngine de DH2i DxEnterprise y DxOdyssey para Windows, versiones 19.5 hasta 20.x anteriores a 20.0.219.0, permite a un atacante leer cualquier archivo en el sistema de archivos del host por medio de una petición HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dh2i:dxenterprise:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "19.5",
            "versionEndIncluding" : "20.0.218",
            "matchCriteriaId" : "CCFBC472-0753-4028-88ED-CB11A23DC445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dh2i:dxodyssey:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "19.5",
            "versionEndIncluding" : "20.0.219",
            "matchCriteriaId" : "4B226A19-4E7D-4E63-B600-48719B7DD06D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://clients.dh2i.com/Support/Article.aspx?ID=2963454",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://clients.dh2i.com/Support/Article.aspx?ID=2963454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26303",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T02:15:13.453",
      "lastModified" : "2024-11-21T05:56:02.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the user-profile.php Full Name field."
      }, {
        "lang" : "es",
        "value" : "PHPGurukul Daily Expense Tracker System versión 1.0, es vulnerable a un ataque de tipo XSS almacenado por medio del campo Full Name en el archivo user-profile.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:daily_expense_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77389FB0-8FE7-497A-A94D-1F191C82C3B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26304",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T02:15:13.517",
      "lastModified" : "2024-11-21T05:56:02.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPGurukul Daily Expense Tracker System 1.0 is vulnerable to stored XSS via the add-expense.php Item parameter."
      }, {
        "lang" : "es",
        "value" : "PHPGurukul Daily Expense Tracker System versión 1.0, es vulnerable a un ataque de tipo XSS almacenado por medio del parámetro Item en el archivo add-experiment.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:daily_expense_tracker_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77389FB0-8FE7-497A-A94D-1F191C82C3B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161114/Daily-Expense-Tracker-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T03:15:12.363",
      "lastModified" : "2024-11-21T05:56:03.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Deserializer::read_vec in the cdr crate before 0.2.4 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated heap memory, violating soundness."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la función Deserializer::read_vec en la crate cdr versiones anteriores a 0.2.4 para Rust.&#xa0;Una implementación de Lectura proporcionada por el usuario puede conseguir acceso a los contenidos antiguos de la memoria de pila recién asignada, violando la solidez"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cdr_project:cdr:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.2.4",
            "matchCriteriaId" : "EDCC330D-F564-4399-9856-704C5C8181B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T03:15:12.427",
      "lastModified" : "2024-11-21T05:56:03.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It has unsound transmute calls within as_string() methods."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate raw-cpuid versiones anteriores a 9.0.0 para Rust.&#xa0;presenta llamadas de transmutación poco sólidas dentro de los métodos as_string()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raw-cpuid_project:raw-cpuid:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "9.0.0",
            "matchCriteriaId" : "0ED13A9F-3AED-4AA3-A04B-E3A29908075E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T03:15:12.490",
      "lastModified" : "2024-11-21T05:56:03.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the raw-cpuid crate before 9.0.0 for Rust. It allows __cpuid_count() calls even if the processor does not support the CPUID instruction, which is unsound and causes a deterministic crash."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate raw-cpuid versiones anteriores a 9.0.0 para Rust.&#xa0;Permite llamadas a la función __cpuid_count() inclusive si el procesador no admite la instrucción CPUID, lo cual no es sólido y causa un bloqueo determinista"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:raw-cpuid_project:raw-cpuid:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "9.0.0",
            "matchCriteriaId" : "0ED13A9F-3AED-4AA3-A04B-E3A29908075E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T03:15:12.550",
      "lastModified" : "2024-11-21T05:56:03.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the marc crate before 2.0.0 for Rust. A user-provided Read implementation can gain access to the old contents of newly allocated memory, violating soundness."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate marc versiones anteriores a  la 2.0.0 para Rust.&#xa0;Una implementación de Lectura proporcionada por el usuario puede conseguir acceso al contenido antiguo de la memoria recientemente asignada, violando la solidez"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marc_project:marc:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "8E06BC03-36D1-433F-B0EE-9A71F5CFAE6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3336",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T05:15:12.197",
      "lastModified" : "2024-11-21T06:21:19.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DoTls13CertificateVerify in tls13.c in wolfSSL before 4.7.0 does not cease processing for certain anomalous peer behavior (sending an ED22519, ED448, ECC, or RSA signature without the corresponding certificate). The client side is affected because man-in-the-middle attackers can impersonate TLS 1.3 servers."
      }, {
        "lang" : "es",
        "value" : "La función DoTls13CertificateVerify en el archivo tls13.c en wolfSSL versiones hasta 4.7.0, no detiene el procesamiento para determinados comportamientos anómalos de peers (mediante el envío de una firma ED22519, ED448, ECC o RSA sin el certificado correspondiente) El lado del cliente se ve afectado porque los atacantes \"man-in-the-middle\" pueden hacerse pasar por servidores TLS 1.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wolfssl:wolfssl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.0",
            "matchCriteriaId" : "9CD8E675-17D8-4AB2-80BB-444CE6D42A5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wolfSSL/wolfssl/pull/3676",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wolfssl.com/docs/security-vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wolfSSL/wolfssl/pull/3676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wolfssl.com/docs/security-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T06:15:13.977",
      "lastModified" : "2024-11-21T06:21:14.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter."
      }, {
        "lang" : "es",
        "value" : "Collabtive versión 3.1, permite un ataque de tipo XSS cuando un usuario autenticado ingresa una carga útil de tipo XSS en la sección de dirección de la página de edición de perfil, también se conoce como el parámetro address1 de manageuser.php?action=edit"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:o-dyn:collabtive:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D24F-7012-45F6-8B04-BF11495B9114"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://collabtive.o-dyn.de/forum/viewforum.php?f=6",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49468",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://collabtive.o-dyn.de/forum/viewforum.php?f=6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T07:15:18.810",
      "lastModified" : "2024-11-21T06:21:03.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The chat window of the Mitel BusinessCTI Enterprise (MBC-E) Client for Windows before 6.4.15 and 7.x before 7.1.2 could allow an attacker to gain access to user information by sending certain code, due to improper input validation of http links. A successful exploit could allow an attacker to view user information and application data."
      }, {
        "lang" : "es",
        "value" : "La ventana de chat de Mitel BusinessCTI Enterprise (MBC-E) Client para Windows versiones anteriores a  6.4.15 y versiones 7.x  anteriores a 7.1.2, podría permitir a un atacante conseguir acceso a la información del usuario mediante el envío de determinado código, debido a una comprobación inapropiada de la entrada de enlaces http.&#xa0;Un explotación con éxito podría permitir a un atacante visualizar la información del usuario y los datos de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:businesscti_enterprise:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "6.4.15",
            "matchCriteriaId" : "40E2A7CF-E26A-414F-8AAF-B63ACC283CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:businesscti_enterprise:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "0C2684E9-3D2A-4622-95DA-DA67E23D7DFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitel.com/support/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25123",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T13:15:12.480",
      "lastModified" : "2024-11-21T05:54:23.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice addlicense_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función addlicense_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25909",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2021-01-29T14:15:12.277",
      "lastModified" : "2024-11-21T05:55:35.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZIV Automation 4CCT-EA6-334126BF firmware version 3.23.80.27.36371, allows an unauthenticated, remote attacker to cause a denial of service condition on the device. An attacker could exploit this vulnerability by sending specific packets to the port 7919."
      }, {
        "lang" : "es",
        "value" : "ZIV Automation 4CCT-EA6-334126BF, versión de firmware 3.23.80.27.36371, permite a un atacante remoto no autenticado causar una condición de denegación de servicio en el dispositivo.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes específicos hacia el puerto 7919"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zivautomation:4cct-ea6-334126bf_firmware:3.23.80.27.36371:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE6D5EE0-2721-4314-8D7E-25327DBB15BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zivautomation:4cct-ea6-334126bf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132A81F8-0124-4ECA-B927-AD55C9FC6D0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-denial-service-attack",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-denial-service-attack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25910",
      "sourceIdentifier" : "cve-coordination@incibe.es",
      "published" : "2021-01-29T14:15:12.467",
      "lastModified" : "2024-11-21T05:55:35.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authentication vulnerability in the cookie parameter of ZIV AUTOMATION 4CCT-EA6-334126BF allows a local attacker to perform modifications in several parameters of the affected device as an authenticated user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Autenticación Inapropiada en el parámetro de cookie de ZIV AUTOMATION 4CCT-EA6-334126BF permite a un atacante local llevar a cabo modificaciones en varios parámetros del dispositivo afectado como un usuario autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@incibe.es",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@incibe.es",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zivautomation:4cct-ea6-334126bf_firmware:3.23.77.8.33251:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C79F52B0-7DD1-4411-A521-5600D1C07AF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zivautomation:4cct-ea6-334126bf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132A81F8-0124-4ECA-B927-AD55C9FC6D0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-improper-authentication",
        "source" : "cve-coordination@incibe.es",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.incibe-cert.es/en/early-warning/ics-advisories/4cct-vulnerable-improper-authentication",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20586",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2021-01-29T15:15:12.833",
      "lastModified" : "2024-11-21T05:46:49.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Resource management errors vulnerability in a robot controller of MELFA FR Series(controller \"CR800-*V*D\" of RV-*FR***-D-* all versions, controller \"CR800-*HD\" of RH-*FRH***-D-* all versions, controller \"CR800-*HRD\" of RH-*FRHR***-D-* all versions, controller \"CR800-*V*R with R16RTCPU\" of RV-*FR***-R-* all versions, controller \"CR800-*HR with R16RTCPU\" of RH-*FRH***-R-* all versions, controller \"CR800-*HRR with R16RTCPU\" of RH-*FRHR***-R-* all versions, controller \"CR800-*V*Q with Q172DSRCPU\" of RV-*FR***-Q-* all versions, controller \"CR800-*HQ with Q172DSRCPU\" of RH-*FRH***-Q-* all versions, controller \"CR800-*HRQ with Q172DSRCPU\" of RH-*FRHR***-Q-* all versions) and a robot controller of MELFA CR Series(controller \"CR800-CVD\" of RV-8CRL-D-* all versions, controller \"CR800-CHD\" of RH-*CRH**-D-* all versions) as well as a cooperative robot ASSISTA(controller \"CR800-05VD\" of RV-5AS-D-* all versions) allows a remote unauthenticated attacker to cause a DoS of the execution of the robot program and the Ethernet communication by sending a large amount of packets in burst over a short period of time. As a result of DoS, an error may occur. A reset is required to recover it if the error occurs."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de errores de administración de recursos en un controlador de robot de la serie MELFA FR (controller \"CR800-*V*D\" de RV-*FR***-D-* todas las versiones, controller \"CR800-*HD\" de RH-*FRH***-D-* todas las versiones, controller \"CR800-*HRD\" de RH-*FRHR***-D-* todas las versiones, controller \"CR800-*V*R with R16RTCPU\" de RV-*FR***-R-* todas las versiones, controller \"CR800-*HR with R16RTCPU\" de RH-*FRH***-R-* todas las versiones, controller \"CR800-*HRR with R16RTCPU\" de RH-*FRHR***-R-* todas las versiones, controller \"CR800-*V*Q with Q172DSRCPU\" de RV-*FR***-Q-* todas las versiones, controller \"CR800-*HQ with Q172DSRCPU\" de RH-*FRH***-Q-* todas las versiones, controller \"CR800-*HRQ with Q172DSRCPU\" de RH-*FRHR***-Q-* todas las versiones) y un controlador de robot de MELFA CR Series (controller \"CR800-CVD\" de RV-8CRL-D-* todas las versiones, controller \"CR800-CHD\" de RH-*CRH**-D-* todas las versiones) así como también un robot cooperativo ASSISTA (controller \"CR800-05VD\" de RV-5AS-D-* todas las versiones), permite a un atacante remoto no autenticado causar una DoS de la ejecución del programa del robot y la comunicación Ethernet mediante el envío de una gran cantidad de paquetes en ráfaga durante un corto período de tiempo. Como un resultado de la DoS, puede ocurrir un error. Se requiere un reinicio para recuperarlo si ocurre el error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv2fr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED2659E-37EA-4A43-ACD8-CD187A3DB0C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv2fr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDBE38D2-1C5F-4DE3-A37A-EC5D994378C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv2frl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9FE269E-9485-4593-827D-F02B7D19EA98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv2frl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8BAA12-F436-4461-8E8D-3BF296047963"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv4fr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EDF52A-4A86-441D-A949-2E25F909FDE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv4fr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11ED50E5-E3D3-4C75-A229-6A281B022B41"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv4frl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D945FC0-7DEE-4B9F-91C1-1D3821D5D55C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv4frl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E562C893-EF4E-4931-AADB-ED9DDEC3E936"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv7fr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E7B42D-FEFB-45C8-BA5A-1FC512BB048D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv7fr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA20E1F7-6D74-4DAB-B1C9-696402B0B08B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv7frl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D52C03D3-9DB9-45E6-BAC1-DF65F814DE5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv7frl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9ED5672-19F4-4720-B88C-7E7572BECACA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv7frll_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16F6B852-62B2-42BD-B23D-9395781BADD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv7frll:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1E757C-6864-406E-B7AE-C8821CBBE3DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv13fr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A48236-3901-45D0-81D0-376101BA55F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv13fr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "996F97DB-468B-4DDA-B6D6-6188523B3AE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv13frl_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F705AF6C-8D3B-43E1-84BF-C1D4F41EE899"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv13frl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07A0912-C49C-4189-97CE-08F4CD6B0795"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv20fr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D300E2B1-9FCD-4CC1-9AEE-82DD5A523B09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv20fr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E13145-F5C8-4610-868E-6C2FF1408D5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh1frhr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF674A4-7A81-4B35-AB9C-B15151636D10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh1frhr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06E6207-F445-4A18-A194-4A93EA3499B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh3frhr_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FCC676-674A-4D39-AEFC-37F59B767283"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh3frhr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFCDB894-FF33-4181-802C-18389851A1A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh3frh35_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81AEF80-FAED-40E9-97D8-163A2D4F1616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh3frh35:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04FA012-F45B-4867-A185-2E78397427C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh3frh45_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8D7D40D-910B-486F-9939-D651AFC878B5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh3frh45:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70A7828-9612-4DC5-AB39-CD83BBEA6C6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh3frh55_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAEF2E33-82EC-4767-8B47-F236A9B78FB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh3frh55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57EC6CE0-0648-48DB-B6CC-B663DC5017B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh6frh35_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D92395-E0CC-42BD-B3DE-6785CDC8EF60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh6frh35:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2971743D-D90A-48BD-A8FF-1B93896EA543"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh6frh45_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0515995-B582-4078-885A-2D20DF3AE1C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh6frh45:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88CAEB5F-92FD-46A3-9D05-90D008CD4722"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh6frh55_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E1BC0D-2F39-4B70-8655-17310E8C9882"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh6frh55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2DEA47-C1F0-4008-B0D2-88FE66009946"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh12frh55_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D00F084-F3EF-4728-A2E7-4D65B0F34904"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh12frh55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69CC027E-067C-48DB-9C25-4F4F4CBAAB9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh12rfh70_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7437B148-1E66-4702-BB62-B238994F98F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh12rfh70:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D675F1-F6DA-4523-8EDA-8F923C43F5C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh12frh85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87B0DAF-AB54-48CB-ADA1-90143CF831E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh12frh85:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "020DBFD1-F8BA-4373-B23B-10A2BA3873BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh20frh85_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "920C6A58-B35B-4477-8361-45D1EE563139"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh20frh85:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C805695-DEDE-4B6A-A2F1-AB131597D13B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rh20frh100_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "894A7C37-2231-4B80-B1F3-0CA9D9326ED4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rh20frh100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891B42B4-6F40-40DF-8DAF-3D90FDDC5CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv2fr\\(b\\)_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4635A6F-989A-482E-B00D-4E5FD044A6CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv2fr\\(b\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0A0584-6C8C-45AD-A7E3-3ABD8FF6C704"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv2frl\\(b\\)_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29216998-0473-4FCB-9AD8-75D534BB0FAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv2frl\\(b\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C596E45C-3E05-4719-B2DB-095F93DFD2C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv4frm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4B5DD5-8986-4694-92B5-DB611A05AC40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv4frm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DC2226F-39D6-43D6-9A92-3D3C3F39AD9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv4frlm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5008956D-C871-4371-A9F8-91883EB275FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv4frlm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4094949F-6BE2-45E1-9EED-7016E0C63D6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv7frm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3482F014-8AE3-4719-B23C-32FCA32C1E4A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv7frm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B125ED-9055-4B16-B005-7448CEC564E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv7frlm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80BCE0FF-E79D-4052-9665-2A0D6B97CEFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv7frlm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DBB5A2-AF4E-4104-9151-192A3BE0A79D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv7frllm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A0F6D44-950A-4380-BC64-282EEEC2CFDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv7frllm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08D4F3EB-94A0-48DE-9896-14DBB4A4DAF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv13frm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8191FB-ECD8-4BD2-B5B3-598511AE2EF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv13frm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DA2DEE-B3CA-461A-BC00-21EEF0D33B1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv13frlm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F06AEE6-BE64-4764-90F0-4B415E1702BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv13frlm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529A9159-E52B-459B-8E99-77E1A6DB5BDC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:rv20frm\\/c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23FD2E7-EE67-4188-A3D8-CB69F2800F0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:rv20frm\\/c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8776BC1C-3FC5-4CCA-8346-BE34B1DA79EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-019_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3345",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T15:15:13.083",
      "lastModified" : "2024-11-21T06:21:20.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "_gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value. It is recommended to upgrade to 1.9.1 or later."
      }, {
        "lang" : "es",
        "value" : "La función _gcry_md_block_write en el archivo cipher/hash-common.c en la versión 1.9.0 de Libgcrypt tiene un desbordamiento de búfer basado en la pila cuando la función final del resumen establece un valor de recuento grande. Se recomienda actualizar a la versión 1.9.1 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnupg:libgcrypt:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C089126-C397-4D68-A2E5-AC0F4973AC1A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39D442D-1997-49AF-8B02-5640BE2A26CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=767814",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=512c0c75276949f13b6373b5c04f7065af750b08",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://gnupg.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000455.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.gentoo.org/show_bug.cgi?id=767814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://git.gnupg.org/cgi-bin/gitweb.cgi?p=libgcrypt.git%3Ba=commit%3Bh=512c0c75276949f13b6373b5c04f7065af750b08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://gnupg.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000455.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnupg.org/pipermail/gnupg-announce/2021q1/000456.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23328",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-01-29T17:15:12.810",
      "lastModified" : "2024-11-21T05:51:30.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package iniparserjs. This vulnerability relates when ini_parser.js is concentrating arrays. Depending on if user input is provided, an attacker can overwrite and pollute the object prototype of a program."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete iniparserjs.&#xa0;Esta vulnerabilidad se relaciona cuando ini_parser.js está concentrando matrices.&#xa0;Dependiendo en si una entrada del usuario es proporcionada, un atacante puede sobrescribir y contaminar el prototipo del objeto de un programa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:iniparserjs_project:iniparserjs:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "23D77ED9-0F98-41CC-B1FB-1F6C98E85C43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/iniparserjs",
        "source" : "report@snyk.io",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-INIPARSERJS-1065989",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/iniparserjs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3346",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T17:15:12.887",
      "lastModified" : "2024-11-21T06:21:20.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Foris before 101.1.1, as used in Turris OS, lacks certain HTML escaping in the login template."
      }, {
        "lang" : "es",
        "value" : "Foris versiones anteriores a 101.1.1, como es usado en el Sistema Operativo Turris, carece de determinado escape HTML en la plantilla de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nic:foris:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "101.1",
            "matchCriteriaId" : "3841A52F-0E87-4434-B77A-455325226690"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.nic.cz/turris/foris/foris/-/issues/201",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.turris.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitlab.nic.cz/turris/foris/foris/-/blob/master/CHANGELOG.rst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.nic.cz/turris/foris/foris/-/issues/201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.turris.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-01-29T17:15:12.950",
      "lastModified" : "2026-02-25T18:16:53.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.10.11. PI futexes have a kernel stack use-after-free during fault handling, allowing local users to execute code in the kernel, aka CID-34b1a1ce1458."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.10.11.&#xa0;Los futexes de PI presentan un uso de la memoria previamente liberada de la pila del kernel durante el manejo de fallos, permitiendo a usuarios locales ejecutar código en el kernel, también se conoce como CID-34b1a1ce1458"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10.11",
            "matchCriteriaId" : "F3799B16-F59A-4B31-AD7E-2A0D899DBC1C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/29/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/29/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/01/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201f02ffd675e1231d731365e335c307",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b1947012907a",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d33312eb2846bd7b567639f585ad6d",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d93987f7de1e20b3988c8685523247ae2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXAVDAK4RLAHBHHGEPL73UFXSI6BXQ7Q/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOBMXDJABYE76RKNBAWA2E4TSSBX7CSJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210304-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4843",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/29/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/29/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/29/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/01/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04b79c55201f02ffd675e1231d731365e335c307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=12bb3f7f1b03d5913b3f9d4236a488aa7774dfe9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=2156ac1934166d6deb6cd0f6ffc4c1076ec63697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=34b1a1ce1458f50ef27c54e28eb9b1947012907a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=6ccc84f917d33312eb2846bd7b567639f585ad6d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c5cade200ab9a2a3be9e7f32a752c8d86b502ec7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c64396cc36c6e60704ab06c1fb1c4a46179c9120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f2dac39d93987f7de1e20b3988c8685523247ae2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CXAVDAK4RLAHBHHGEPL73UFXSI6BXQ7Q/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QOBMXDJABYE76RKNBAWA2E4TSSBX7CSJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210304-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4843",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25124",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.427",
      "lastModified" : "2024-11-21T05:54:24.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func function path traversal vulnerability."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta una vulnerabilidad de salto de ruta local en la función deletevideo_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25125",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.490",
      "lastModified" : "2024-11-21T05:54:24.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice delsolrecordedvideo_func function path traversal vulnerability."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta una vulnerabilidad de salto de ruta local en la función delsolrecordedvideo_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25126",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.553",
      "lastModified" : "2024-11-21T05:54:24.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice downloadkvmjnlp_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función downloadkvmjnlp_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25127",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.630",
      "lastModified" : "2024-11-21T05:54:24.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice generatesslcertificate_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función generaslcertificate_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25128",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.697",
      "lastModified" : "2024-11-21T05:54:24.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice gethelpdata_func function path traversal vulnerability."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server, el firmware HPE Cloudline CL5800 Gen10 Server BMC, presenta una vulnerabilidad de salto de ruta local en la función gethelpdata_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25129",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.757",
      "lastModified" : "2024-11-21T05:54:24.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice getvideodata_func function path traversal vulnerability."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta una vulnerabilidad de salto de ruta local en la función getvideodata_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25130",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.817",
      "lastModified" : "2024-11-21T05:54:24.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setactdir_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setactdir_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25131",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.880",
      "lastModified" : "2024-11-21T05:54:24.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setfwimagelocation_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setfwimagelocation_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25132",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:13.960",
      "lastModified" : "2024-11-21T05:54:24.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setmediaconfig_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setmediaconfig_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25133",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:14.020",
      "lastModified" : "2024-11-21T05:54:25.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setradiusconfig_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setradiusconfig_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25134",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:14.100",
      "lastModified" : "2024-11-21T05:54:25.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setremoteimageinfo_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setremoteimageinfo_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25135",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:14.163",
      "lastModified" : "2024-11-21T05:54:25.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setsmtp_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setsmtp_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25136",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:14.223",
      "lastModified" : "2024-11-21T05:54:25.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice setsolvideoremotestorage_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función setsolvideoremotestorage_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25137",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:14.287",
      "lastModified" : "2024-11-21T05:54:25.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice startflash_func function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función startflash_func de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25138",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-01-29T19:15:14.350",
      "lastModified" : "2024-11-21T05:54:25.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice uploadsshkey function."
      }, {
        "lang" : "es",
        "value" : "El Baseboard Management Controller (BMC) en HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server, el firmware de BMC presenta un desbordamiento del búfer local en la función uploadsshkey de spx_restservice"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662D4441-34A1-4BBF-9EB4-1FC94D1736F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl3100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D130324-445C-47F1-993E-387399A9AEB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl3100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB48BA1-2048-42F4-A195-F910B875196B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81ACE979-5E08-40CC-A33B-F602FE14CCE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl4100_gen10_server_firmware:1.10.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C211F7F-A1E9-4851-A26F-B83B57C32133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl4100_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD84248-F258-4F3A-BD05-E474FE7D6697"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5200_gen9_server_firmware:1.07.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "190FEC40-B9DA-48D6-8DB2-9D524A8FD088"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5200_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BB0745-54DA-4792-B570-AE037E7C38D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen10_server_firmware:1.08.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91102-123F-4009-AB13-BE897220BACE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen10_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5410F9D6-9040-4155-A499-30B1814BF36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:cloudline_cl5800_gen9_server_firmware:1.09.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C359672-5A70-4D99-972D-9A84A518B8AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:cloudline_cl5800_gen9_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "149886B8-4820-4D7F-ACA6-68FE3DE32D18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04073en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25646",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-01-29T20:15:12.997",
      "lastModified" : "2024-11-21T05:55:12.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an authenticated user to send a specially-crafted request that forces Druid to run user-provided JavaScript code for that request, regardless of server configuration. This can be leveraged to execute code on the target machine with the privileges of the Druid server process."
      }, {
        "lang" : "es",
        "value" : "Apache Druid incluye la capacidad de ejecutar código JavaScript proporcionado por el usuario insertado en varios tipos de peticiones.&#xa0;Esta funcionalidad está pensada para su uso en entornos de alta confianza y está deshabilitada por defecto.&#xa0;Sin embargo, en Druid versiones 0.20.0 y anteriores, es posible para un usuario autenticado enviar una petición especialmente diseñada para obligar a Druid a ejecutar código JavaScript proporcionado por el usuario para esa petición, independientemente de la configuración del servidor.&#xa0;Esto puede ser aprovechado para ejecutar código en la máquina objetivo con los privilegios del proceso del servidor Druid"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:druid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.20.0",
            "matchCriteriaId" : "94B16329-4DFA-4081-86E3-7434D7BB2B46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162345/Apache-Druid-0.20.0-Remote-Command-Execution.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/29/6",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r04fa1ba93599487c95a8497044d37f8c02a439bfcf92b4567bfb7c8f%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r121abe8014d381943b63c60615149d40bde9dc1c868bcee90d0d0848%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r20e0c3b10ae2c05a3aad40f1476713c45bdefc32c920b9986b941d8f%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r443e2916c612fbd119839c0fc0729327d6031913a75081adac5b43ad%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4f84b542417ea46202867c0a8b3eaf3b4cfed30e09174a52122ba210%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5ef625076982aee7d23c23f07717e626b73f421fba5154d1e4de15e1%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r64431c2b97209f566b5dff92415e7afba0ed3bfab4695ebaa8a62e5d%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dff4790e7a5c697fc0360adf11f5aeb31cd6ad80644fffee690673c%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r87aa94e28dd21ee2252d30c63f01ab9cb5474ee5bdd98dd8d7d734aa%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra4225912f501016bc5e0ac44e14b8d6779173a3a1dc7baacaabcc9ba%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc167d5e57f3120578718a7a458ce3e73b3830ac4efbb1b085bd06b92%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rea9436a4063927a567d698431ddae55e760c3f876c22ac5b9813685f%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfda8a3aa6ac06a80c5cbfdeae0fc85f88a5984e32ea05e6dda46f866%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfeb775822cd3baef1595b60f6860f5ca849eb1903236483f3297bd5c%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/162345/Apache-Druid-0.20.0-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/01/29/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r04fa1ba93599487c95a8497044d37f8c02a439bfcf92b4567bfb7c8f%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r121abe8014d381943b63c60615149d40bde9dc1c868bcee90d0d0848%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r20e0c3b10ae2c05a3aad40f1476713c45bdefc32c920b9986b941d8f%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r443e2916c612fbd119839c0fc0729327d6031913a75081adac5b43ad%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4f84b542417ea46202867c0a8b3eaf3b4cfed30e09174a52122ba210%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5ef625076982aee7d23c23f07717e626b73f421fba5154d1e4de15e1%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r64431c2b97209f566b5dff92415e7afba0ed3bfab4695ebaa8a62e5d%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dff4790e7a5c697fc0360adf11f5aeb31cd6ad80644fffee690673c%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r87aa94e28dd21ee2252d30c63f01ab9cb5474ee5bdd98dd8d7d734aa%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra4225912f501016bc5e0ac44e14b8d6779173a3a1dc7baacaabcc9ba%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc167d5e57f3120578718a7a458ce3e73b3830ac4efbb1b085bd06b92%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rea9436a4063927a567d698431ddae55e760c3f876c22ac5b9813685f%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfda8a3aa6ac06a80c5cbfdeae0fc85f88a5984e32ea05e6dda46f866%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfeb775822cd3baef1595b60f6860f5ca849eb1903236483f3297bd5c%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21254",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-01-29T22:15:14.797",
      "lastModified" : "2024-11-21T05:47:52.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin (@ckeditor/ckeditor5-markdown-gfm) before version 25.0.0 has a regex denial of service (ReDoS) vulnerability. The vulnerability allowed to abuse link recognition regular expression, which could cause a significant performance drop resulting in browser tab freeze. It affects all users using CKEditor 5 Markdown plugin at version <= 24.0.0. The problem has been recognized and patched. The fix will be available in version 25.0.0."
      }, {
        "lang" : "es",
        "value" : "CKEditor 5 es un framework de edición de texto enriquecido de código abierto con una arquitectura modular.&#xa0;El plugin CKEditor 5 Markdown (@ckeditor/ckeditor5-markdown-gfm) anterior a versión 25.0.0, presenta una vulnerabilidad de denegación de servicio de expresiones regulares  (ReDoS).&#xa0;La vulnerabilidad permitió abusar de la expresión regular de reconocimiento de enlace, lo que podría causar una caída significativa en el rendimiento resultando en la congelación de la pestaña del navegador.&#xa0;Afecta a todos los usuarios que usan el plugin CKEditor 5 Markdown en la versión anterior a 24.0.0 e incluyéndola.&#xa0;El problema ha sido reconocido y parcheado.&#xa0;La corrección estará disponible en la versión 25.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "25.0.0",
            "matchCriteriaId" : "8B47943C-76FE-4852-86F0-14CA6F0BD30D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ckeditor/ckeditor5/releases/tag/v25.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-hgmg-hhc8-g5wr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-markdown-gfm",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/ckeditor/ckeditor5/releases/tag/v25.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-hgmg-hhc8-g5wr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-markdown-gfm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23329",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-01-31T16:15:12.377",
      "lastModified" : "2024-11-21T05:51:30.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below."
      }, {
        "lang" : "es",
        "value" : "El paquete nested-object-assign versiones anteriores a 1.0.4, es vulnerable a una Contaminación de Prototipo mediante la función predeterminada, como es demostrado al ejecutar la PoC a continuación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getadigital:nested-object-assign:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "6729F49E-8C69-4078-80D4-D193645C5C3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Geta/NestedObjectAssign/pull/11",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-NESTEDOBJECTASSIGN-1065977",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Geta/NestedObjectAssign/pull/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-NESTEDOBJECTASSIGN-1065977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T04:15:14.430",
      "lastModified" : "2024-11-21T06:21:21.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71."
      }, {
        "lang" : "es",
        "value" : "En la función nbd_add_socket en el archivo drivers/block/nbd.c en el kernel de Linux versiones hasta 5.10.12, presenta un uso de la memoria previamente liberada de ndb_queue_rq que podría ser desencadenado por atacantes locales (con acceso al dispositivo nbd) por medio de una petición de E/S en un punto determinado durante la configuración del dispositivo, también se conoce como CID-b98e762e3d71"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10.12",
            "matchCriteriaId" : "8A8E7F05-FF68-4B1A-BE6E-F802E06C69FC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/01/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b98e762e3d71e893b221f871825dc64694cfb258",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/28/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b98e762e3d71e893b221f871825dc64694cfb258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T05:15:11.880",
      "lastModified" : "2024-11-21T06:21:21.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNOME Evolution through 3.38.3 produces a \"Valid signature\" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether Evolution is the best place to change this behavior"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** GNOME Evolution versiones hasta 3.38.3, produce un mensaje \"Valid signature\" para un identificador desconocido en una clave previamente confiable porque Evolution no recupera suficiente información de la API de GnuPG.&#xa0;NOTA: terceros disputan la importancia de este problema y disputan si Evolution es el mejor lugar para cambiar este comportamiento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:evolution:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.38.3",
            "matchCriteriaId" : "50CECDB2-1979-42E6-AA09-EE275F573202"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.gnupg.org/T4735",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/evolution/-/issues/299",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mgorny.pl/articles/evolution-uid-trust-extrapolation.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.gnupg.org/T4735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/evolution/-/issues/299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mgorny.pl/articles/evolution-uid-trust-extrapolation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T05:15:12.003",
      "lastModified" : "2024-11-21T06:21:21.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter."
      }, {
        "lang" : "es",
        "value" : "En el archivo deleteaccount.php en el plugin Delete Account versión 1.4 para MyBB, permite un ataque de tipo XSS por medio del parámetro deletereason"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:delete_account_project:delete_account:1.4:*:*:*:*:mybb:*:*",
            "matchCriteriaId" : "75263FD1-30CF-45E6-94FF-31F9384A712C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/pull/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vintagedaddyo/MyBB_Plugin-Delete_Account/pull/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21266",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-01T15:15:13.057",
      "lastModified" : "2024-11-21T05:47:53.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity (XXE) attack allows attackers in the same network as the openHAB instance to retrieve internal information like the content of files from the file system. Responses to SSDP requests can be especially malicious. All add-ons that use SAX or JAXB parsing of externally received XML are potentially subject to this kind of attack. In openHAB, the following add-ons are potentially impacted: AvmFritz, BoseSoundtouch, DenonMarantz, DLinkSmarthome, Enigma2, FmiWeather, FSInternetRadio, Gce, Homematic, HPPrinter, IHC, Insteon, Onkyo, Roku, SamsungTV, Sonos, Roku, Tellstick, TR064, UPnPControl, Vitotronic, Wemo, YamahaReceiver and XPath Tranformation. The vulnerabilities have been fixed in versions 2.5.12 and 3.0.1 by a more strict configuration of the used XML parser."
      }, {
        "lang" : "es",
        "value" : "openHAB es un proveedor y software de automatización de código abierto de tecnología agnóstica para su hogar. &#xa0;En openHAB anterior a las versiones 2.5.12 y 3.0.1, el ataque de tipo XML external entity (XXE) permite a atacantes en la misma red que la instancia de openHAB recupere información interna como el contenido de archivos del sistema de archivos.&#xa0;Las respuestas a las peticiones SSDP pueden ser especialmente maliciosas.&#xa0;Todos los add-ons que usan el análisis SAX o JAXB de XML recibido externamente están potencialmente sujetos a este tipo de ataque.&#xa0;En openHAB, los siguientes add-ons pueden estar afectados: AvmFritz, BoseSoundtouch, DenonMarantz, DLinkSmarthome, Enigma2, FmiWeather, FSInternetRadio, Gce, Homematic, HPPrinter, IHC, Insteon, Onkyo, Roku, SamsungTV, Sonos, Roku, TR064 UPnPControl, Vitotronic, Wemo, YamahaReceiver y XPath Tranformation.&#xa0;Las vulnerabilidades han sido corregidas en las versiones 2.5.12 y 3.0.1 mediante una configuración más estricta del analizador XML utilizado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openhab:openhab:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.12",
            "matchCriteriaId" : "02B987FD-0707-4B06-9D05-2C4327E8042A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openhab:openhab:3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758998FA-F160-461B-8549-457F7CBC06A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.to/brianverm/configure-your-java-xml-parsers-to-prevent-xxe-213c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openhab/openhab-addons/security/advisories/GHSA-r2hc-pmr7-4c9r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.contrastsecurity.com/security-influencers/xml-xxe-pitfalls-with-jaxb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.to/brianverm/configure-your-java-xml-parsers-to-prevent-xxe-213c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openhab/openhab-addons/commit/81935b0ab126e6d9aebd2f6c3fc67d82bb7e8b86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openhab/openhab-addons/security/advisories/GHSA-r2hc-pmr7-4c9r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.contrastsecurity.com/security-influencers/xml-xxe-pitfalls-with-jaxb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21276",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-01T15:15:13.260",
      "lastModified" : "2024-11-21T05:47:54.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an attacker crafts a request with specific cookie headers to the /setup/finish endpoint, they may be able to obtain admin privileges on the instance. This is caused by a loose comparison (==) in SetupController that is susceptible to attack. The project has been patched to ensure that a strict comparison (===) is used to verify the setup key, and that /setup/finish verifies that no users table exists before performing any migrations or provisioning any new accounts. This is fixed in version 2.3.0. Users can patch this vulnerability without upgrading by adding abort(404) to the very first line of finishSetup in SetupController.php."
      }, {
        "lang" : "es",
        "value" : "Polr es un acortador de URL de código abierto.&#xa0;en Polr anterior a la versión 2.3.0, una vulnerabilidad en el proceso de configuración permite a atacantes obtener acceso de administrador a las instancias del sitio, incluso si no poseen una cuenta existente.&#xa0;Esta vulnerabilidad existe independientemente de la configuración de los usuarios.&#xa0;Si un atacante crea una petición con encabezados de cookies específicas para el endpoint /setup/finish, es posible que pueda obtener privilegios de administrador en la instancia.&#xa0;Esto es causado por una comparación imprecisa (==) en SetupController que es susceptible de ataque.&#xa0;El proyecto ha sido parcheado para garantizar que se utilice una comparación estricta (===) para verificar la clave de configuración, y que /setup/finish verifique que no exista ninguna tabla de usuarios antes de realizar algunas migraciones o aprovisionar cuentas nuevas.&#xa0;Esto se corrige en la versión 2.3.0. Los usuarios pueden parchear esta vulnerabilidad sin actualizar agregando abort (404) a la primera línea de finishSetup en SetupController.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polrproject:polr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "B8A352CC-B030-4010-B3AC-C2D7A584B038"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171743/POLR-URL-2.3.0-Shortener-Admin-Takeover.html",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/cydrobolt/polr/commit/b1981709908caf6069b4a29dad3b6739c322c675",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cydrobolt/polr/releases/tag/2.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cydrobolt/polr/security/advisories/GHSA-vg6w-8w9v-xxqc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171743/POLR-URL-2.3.0-Shortener-Admin-Takeover.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/cydrobolt/polr/commit/b1981709908caf6069b4a29dad3b6739c322c675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cydrobolt/polr/releases/tag/2.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cydrobolt/polr/security/advisories/GHSA-vg6w-8w9v-xxqc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21277",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-01T15:15:13.340",
      "lastModified" : "2024-11-21T05:47:54.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "angular-expressions is \"angular's nicest part extracted as a standalone module for the browser and node\". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call \"expressions.compile(userControlledInput)\" where \"userControlledInput\" is text that comes from user input. The security of the package could be bypassed by using a more complex payload, using a \".constructor.constructor\" technique. In terms of impact: If running angular-expressions in the browser, an attacker could run any browser script when the application code calls expressions.compile(userControlledInput). If running angular-expressions on the server, an attacker could run any Javascript expression, thus gaining Remote Code Execution. This is fixed in version 1.1.2 of angular-expressions A temporary workaround might be either to disable user-controlled input that will be fed into angular-expressions in your application or allow only following characters in the userControlledInput."
      }, {
        "lang" : "es",
        "value" : "angular-expressions son \"angular's nicest part extracted as a standalone module for the browser and node\".&#xa0;En angular-expressions anteriores a la versión 1.1.2, existe una vulnerabilidad que permite una Ejecución de Código Remota si llama a \"expression.compile(userControlledInput)\" donde \"userControlledInput\" es texto que proviene de la entrada del usuario.&#xa0;La seguridad del paquete podría omitirse usando una carga útil más compleja, utilizando una técnica \".constructor.constructor\".&#xa0;En términos de impacto: si ejecuta angular-expressions en el navegador, un atacante podría ejecutar cualquier script del navegador cuando el código de la aplicación llame a expression.compile(userControlledInput).&#xa0;Si ejecuta angular-expressions en el servidor, un atacante podría ejecutar cualquier expresión de Javascript, obteniendo así una ejecución de código remota.&#xa0;Esto se corrigió en la versión 1.1.2 de angular-expressions. Una solución temporal podría ser deshabilitar la entrada controlada por el usuario que se alimentará en angular-expressions en su aplicación o permitir solo seguir caracteres en el userControlledInput"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peerigon:angular-expressions:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "EF59E19D-CD5E-4B96-8445-154B8B913012"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.angularjs.org/2016/09/angular-16-expression-sandbox-removal.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/peerigon/angular-expressions/commit/07edb62902b1f6127b3dcc013da61c6316dd0bf1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/peerigon/angular-expressions/security/advisories/GHSA-j6px-jwvv-vpwq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/angular-expressions",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://blog.angularjs.org/2016/09/angular-16-expression-sandbox-removal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/peerigon/angular-expressions/commit/07edb62902b1f6127b3dcc013da61c6316dd0bf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/peerigon/angular-expressions/security/advisories/GHSA-j6px-jwvv-vpwq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/angular-expressions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23330",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-01T15:15:13.450",
      "lastModified" : "2024-11-21T05:51:31.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of package launchpad are vulnerable to Command Injection via stop."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete launchpad son vulnerables a una inyección de comandos por medio de stop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.1.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "9D41E148-9F2D-4718-A249-7FD69F0F9C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.2.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1648F050-8CA9-4902-A8B6-D6E96C8082A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.2.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DFED6EFE-7032-4619-A48F-AD7BA6F6B87F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.3.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "43959509-EFF6-4B9E-A615-8CD40D5D838E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "1043FA54-6DA7-4999-8CAE-6834535F669A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "233A9C39-014C-42CD-9E9C-D52CBD56AFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5301F938-99A5-40CA-B092-CBB2C1F797AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8464C5C9-AAF7-4D4F-9BD0-20B125BCD35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "17D47575-2BB4-4B5D-93CC-DA4E6EE73A12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A62F8200-D82A-4D12-B893-D3FE7B32B383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.6:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AE67165E-40B3-484F-8305-F82835144722"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.7:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C649304E-1BC5-48DA-BCAA-4E76BD78C151"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.8:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AF4D75CF-DB33-4DCB-A726-4339A58ED663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.4.9:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7151CE31-B776-4285-A252-9FA55DB1133C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.5.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "62AE1AEA-FE5A-4DA6-A178-B26A269DECBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.5.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "D3F95C1C-2EA1-405C-A5AC-6D2E4FFA31FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.5.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B5979021-0EF1-48D7-B947-3C7586E8BFE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.5.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "7239DD77-A670-4BF7-A8D8-D2CAF75E57EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.5.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A0F77D58-23BC-4E3E-B140-40732E09732B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.6.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "161CBCE2-A330-4E7B-83FB-CEDE15125BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.7.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "218E2FA3-9339-45D0-A3FF-7B466EC3DA68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.7.1:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4F5402FC-4BA2-43F6-99ED-F8AF23C2B1BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.7.2:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "BB4299AF-5100-4CE1-B519-D26C5EAEBE09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.7.3:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "6328BD26-3C5E-4D14-AB19-39DFF93A5B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.7.4:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "A1E894E5-5260-4815-9BC4-6A831F1B5A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitovi:launchpad:0.7.5:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "4CAB370C-A97F-45D7-9493-0D164CDD37FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bitovi/launchpad/issues/123%23issuecomment-732188118",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitovi/launchpad/pull/124",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-LAUNCHPAD-1044065",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitovi/launchpad/issues/123%23issuecomment-732188118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitovi/launchpad/pull/124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-LAUNCHPAD-1044065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21286",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-01T16:15:13.047",
      "lastModified" : "2024-11-21T05:47:56.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in version 10.2. All queries now remove the pass hash and the recoverPass hash."
      }, {
        "lang" : "es",
        "value" : "AVideo Platform es una plataforma de Audio y Video de código abierto.&#xa0;Es similar a un YouTube auto-hosteado.&#xa0;En AVideo Platform versiones anteriores a 10.2, se presenta una vulnerabilidad de omisión de autorización que permite a un usuario común obtener el control de administrador.&#xa0;Esto es corregido en la versión 10.2.&#xa0;Todas las consultas ahora eliminan el hash pass y el hash recoveryPass"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "33E0747B-5CF8-4AAD-A73E-54908A8DA7EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://avideo.tube/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-xq8j-fhg5-hr39",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://avideo.tube/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/WWBN/AVideo/security/advisories/GHSA-xq8j-fhg5-hr39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T16:15:13.217",
      "lastModified" : "2024-11-21T06:20:46.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault and Vault Enterprise disclosed the internal IP address of the Vault node when responding to some invalid, unauthenticated HTTP requests. Fixed in 1.6.2 & 1.5.7."
      }, {
        "lang" : "es",
        "value" : "HashiCorp Vault y Vault Enterprise revelaron la dirección IP interna del nodo de Vault al responder a algunas peticiones HTTP no válidas y no autenticadas.&#xa0;Corregido en las versiones 1.6.2 y 1.5.7"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "32DD844D-4C10-450D-9017-D5870DF07738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "11FF3556-E92E-423B-86E5-175BD43F9192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "6FA59962-1063-4AA3-8B24-C8C6FD2C7341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "4F85653B-E5DE-4654-A520-1573CD4F46DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-02-vault-api-endpoint-exposed-internal-ip-address-without-authentication/20334",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202207-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-02-vault-api-endpoint-exposed-internal-ip-address-without-authentication/20334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202207-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T16:15:13.280",
      "lastModified" : "2024-11-21T06:21:12.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authentication. Fixed in 1.6.2."
      }, {
        "lang" : "es",
        "value" : "HashiCorp Vault Enterprise versiones 1.6.0 y 1.6.1, permitieron que el comando del operador raft \"remove-peer\" sea ejecutado contra los secundarios de DR sin autenticación.&#xa0;Corregido en la versión 1.6.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A127E5E5-AD2A-4911-8A87-0951B7A4A249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB42CDF-DDC0-4575-8516-CE3B42FECB98"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-04-vault-enterprise-s-dr-secondaries-allowed-raft-peer-removal-without-authentication/20337",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202207-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-04-vault-enterprise-s-dr-secondaries-allowed-raft-peer-removal-without-authentication/20337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202207-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T16:15:13.357",
      "lastModified" : "2024-11-21T06:21:13.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Nomad and Nomad Enterprise up to 0.12.9 exec and java task drivers can access processes associated with other tasks on the same node. Fixed in 0.12.10, and 1.0.3."
      }, {
        "lang" : "es",
        "value" : "HashiCorp Nomad y Nomad Enterprise versiones hasta 0.12.9, exec y los controladores de tareas de Java pueden acceder a los procesos asociados con otras tareas en el mismo nodo.&#xa0;Corregido en las versiones 0.12.10 y 1.0.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "0.12.10",
            "matchCriteriaId" : "CB5C7CAA-8217-471E-BBDF-44975F4858C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "0.12.10",
            "matchCriteriaId" : "48EE9A97-976D-4CD4-B842-825E839468ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "131F81E0-339A-4FF6-A669-35DD28C458E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:nomad:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "CE0FD80B-EE02-478D-BA51-174EF9C1FD5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-01-nomad-s-exec-and-java-task-drivers-did-not-isolate-processes/20332",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-01-nomad-s-exec-and-java-task-drivers-did-not-isolate-processes/20332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21287",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-01T18:15:13.890",
      "lastModified" : "2024-11-21T05:47:56.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MinIO is a High Performance Object Storage released under Apache License v2.0. In MinIO before version RELEASE.2021-01-30T00-20-58Z there is a server-side request forgery vulnerability. The target application may have functionality for importing data from a URL, publishing data to a URL, or otherwise reading data from a URL that can be tampered with. The attacker modifies the calls to this functionality by supplying a completely different URL or by manipulating how URLs are built (path traversal etc.). In a Server-Side Request Forgery (SSRF) attack, the attacker can abuse functionality on the server to read or update internal resources. The attacker can supply or modify a URL which the code running on the server will read or submit data, and by carefully selecting the URLs, the attacker may be able to read server configuration such as AWS metadata, connect to internal services like HTTP enabled databases, or perform post requests towards internal services which are not intended to be exposed. This is fixed in version RELEASE.2021-01-30T00-20-58Z, all users are advised to upgrade. As a workaround you can disable the browser front-end with \"MINIO_BROWSER=off\" environment variable."
      }, {
        "lang" : "es",
        "value" : "MinIO es un Almacenamiento de Objetos de Alto Rendimiento publicado bajo la licencia Apache versión v2.0.&#xa0;En MinIO anterior a la versión RELEASE.2021-01-30T00-20-58Z, se presenta una vulnerabilidad de tipo server-side request forgery.&#xa0;La aplicación objetivo puede tener una funcionalidad para importar datos de una URL, publicar datos en una URL o leer datos de una URL con que puedan ser alterada. El atacante modifica las llamadas a esta funcionalidad proporcionando una URL completamente diferente o al manipular cómo se construyen las URL (salto de ruta, etc.).&#xa0;En un ataque de tipo Server-Side Request Forgery (SSRF), el atacante puede abusar de la funcionalidad en el servidor para leer o actualizar recursos internos.&#xa0;El atacante puede proporcionar o modificar una URL que el código que se ejecuta en el servidor leerá o enviará datos, y al seleccionar cuidadosamente las URL, el atacante puede leer la configuración del servidor, como los metadatos de AWS,&#xa0;conectarse a servicios internos como bases de datos habilitadas para HTTP, o realizar peticiones posteriores a servicios internos que no estén destinados a ser expuestos.&#xa0;Esto es corregido en la versión RELEASE.2021-01-30T00-20-58Z, se recomienda a todos los usuarios que actualicen.&#xa0;Como solución alternativa, puede desactivar la interfaz del navegador con la variable de entorno \"MINIO_BROWSER = off\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-01-30t00-20-58z",
            "matchCriteriaId" : "D3A143A4-A6FC-4BF5-B572-C66FF7D566FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/commit/eb6871ecd960d570f70698877209e6db181bf276",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/11337",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2021-01-30T00-20-58Z",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-m4qq-5f7c-693q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/eb6871ecd960d570f70698877209e6db181bf276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/11337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2021-01-30T00-20-58Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-m4qq-5f7c-693q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3340",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T22:15:14.067",
      "lastModified" : "2024-11-21T06:21:19.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in many forms of Wikindx before 5.7.0 and 6.x through 6.4.0 allows remote attackers to inject arbitrary web script or HTML via the message parameter to index.php?action=initLogon or modules/admin/DELETEIMAGES.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en muchas formas de Wikindx versiones anteriores a 5.7.0 y versiones 6.x hasta 6.4.0, permite a atacantes remotos inyectar un script web o HTML arbitrario por medio del parámetro message en index.php?action=initLogon o el archivo modules/admin/DELETEIMAGES.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikindx_project:wikindx:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.0",
            "matchCriteriaId" : "BC127208-56D6-4731-BC70-64A7445B9CA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikindx_project:wikindx:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "FBCFB2D7-3D4E-47E4-9A90-CA88420FFEA6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/wikindx/news/2021/01/wikindx-v641-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/wikindx/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/wikindx/news/2021/01/wikindx-v641-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/wikindx/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-01T23:15:12.797",
      "lastModified" : "2024-11-21T06:21:23.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a \"Content-Type: image/png\" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp."
      }, {
        "lang" : "es",
        "value" : "FortiLogger versión 4.4.2.2, está afectado por una carga arbitraria de archivos mediante el envío de un encabezado \"Content-Type:image/png\" hacia Config/SaveUploadedHotspotLogoFile y luego al visitar el archivo Assets/temp/hotspot/img/logohotspot.asp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortilogger:fortilogger:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "DE49DCAC-6778-45B9-A8CB-A8D82DEB4F6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161601/FortiLogger-4.4.2.2-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161974/FortiLogger-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/erberkan/fortilogger_arbitrary_fileupload",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161601/FortiLogger-4.4.2.2-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161974/FortiLogger-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/erberkan/fortilogger_arbitrary_fileupload",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20207",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-02T07:15:13.910",
      "lastModified" : "2023-11-07T03:29:00.300",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs:CVE-2021-3348. Reason: This candidate is a reservation duplicate of CVE-2021-3348. Notes: All CVE users should reference CVE-2021-3348 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-02T07:15:14.020",
      "lastModified" : "2024-11-21T06:21:12.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by \"startapp --template\" and \"startproject --template\") allows directory traversal via an archive with absolute paths or relative paths with dot segments."
      }, {
        "lang" : "es",
        "value" : "En Django versiones 2.2 anteriores a 2.2.18, versiones 3.0 anteriores a 3.0.12 y versiones 3.1 anteriores a 3.1.6, el método django.utils.archive.extract (usado por \"startapp --template\" y \"startproject --template\") permite un salto de directorios por medio de un archivo con rutas absolutas o rutas relativas con segmentos de puntos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "2.2.18",
            "matchCriteriaId" : "46A5C187-6988-47C2-9557-51DA3B5A5E43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.12",
            "matchCriteriaId" : "BC2B0286-FDDA-45E1-9996-FA5B8C53F0B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.6",
            "matchCriteriaId" : "6A6BDD7A-AB21-442B-8137-7508B7E72ACC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/3.1/releases/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YF52FKEH5S2P5CM4X7IXSYG67YY2CDOO/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/feb/01/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/3.1/releases/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YF52FKEH5S2P5CM4X7IXSYG67YY2CDOO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/feb/01/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-02T15:15:16.840",
      "lastModified" : "2024-11-21T05:54:43.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges via shell metacharacters in the ui_language POST parameter to the apply.cgi form endpoint. This occurs in do_upgrade_post in mini_httpd. NOTE: This vulnerability only affects products that are no longer supported by the maintaine"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** La interfaz web de administración en los dispositivos Belkin Linksys WRT160NL versión 1.0.04.002_US_20130619, permite a atacantes autenticados remotos ejecutar comandos del sistema con privilegios de root por medio de metacaracteres de shell en el parámetro POST ui_language en el endpoint del formulario apply.cgi.&#xa0;Esto ocurre en do_upgrade_post en mini_httpd.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-150"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:belkin:linksys_wrt160nl_firmware:1.0.04.002_us_20130619:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBC15B2-F457-4092-8FDD-C54132DD7B5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:belkin:linksys_wrt160nl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9976136E-FFCF-4DA1-8A6F-8496EDEDEF71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2021/01/28/technical-advisory-linksys-wrt160nl-authenticated-command-injection-cve-2021-25310/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/?research=Technical%20advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2021/01/28/technical-advisory-linksys-wrt160nl-authenticated-command-injection-cve-2021-25310/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/?research=Technical%20advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21284",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T18:15:11.827",
      "lastModified" : "2024-11-21T05:47:55.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access to remapped root allows privilege escalation to real root. When using \"--userns-remap\", if the root user in the remapped namespace has access to the host filesystem they can modify files under \"/var/lib/docker/<remapping>\" that cause writing files with extended privileges. Versions 20.10.3 and 19.03.15 contain patches that prevent privilege escalation from remapped user."
      }, {
        "lang" : "es",
        "value" : "En Docker versiones anteriores a 9.03.15, 20.10.3, se presenta una vulnerabilidad que involucra la opción --userns-remap en la que un acceso a una root reasignada permite una escalada de privilegios a la root actual.&#xa0;Cuando se usa \"--userns-remap\", si el usuario root en el espacio de nombres reasignado tiene acceso al sistema de archivos del host, puede modificar archivos en \"/var/lib/docker/(remapping)\" que causa la escritura de archivos con privilegios extendidos.&#xa0;Las versiones 20.10.3 y 19.03.15 contienen parches que evitan una escalada de privilegios del usuario reasignado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.03.15",
            "matchCriteriaId" : "C6B22016-AB78-4E82-9F65-AEC2526F3EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.10.3",
            "matchCriteriaId" : "B4427D14-D219-490B-8467-40FE253775A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.60.3",
            "matchCriteriaId" : "BD1E9594-C46F-40D1-8BC2-6B16635B55C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/engine/release-notes/#20103",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/commit/64bd4485b3a66a597c02c95f5776395e540b2c7c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v19.03.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v20.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0005/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4865",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.docker.com/engine/release-notes/#20103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/commit/64bd4485b3a66a597c02c95f5776395e540b2c7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v19.03.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v20.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-7452-xqpj-6rpc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21285",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T18:15:12.203",
      "lastModified" : "2024-11-21T05:47:56.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Docker before versions 9.03.15, 20.10.3 there is a vulnerability in which pulling an intentionally malformed Docker image manifest crashes the dockerd daemon. Versions 20.10.3 and 19.03.15 contain patches that prevent the daemon from crashing."
      }, {
        "lang" : "es",
        "value" : "En Docker versiones anteriores a 9.03.15, 20.10.3, se presenta una vulnerabilidad en la que al extraer un manifiesto de imagen de Docker malformado intencionalmente, bloquea al demonio dockerd.&#xa0;Las versiones 20.10.3 y 19.03.15 contienen parches que impiden al demonio bloquearse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.03.15",
            "matchCriteriaId" : "C6B22016-AB78-4E82-9F65-AEC2526F3EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker:docker:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.10.3",
            "matchCriteriaId" : "B4427D14-D219-490B-8467-40FE253775A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.60.3",
            "matchCriteriaId" : "7402489D-85E5-4662-BF87-259740DC72F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.docker.com/engine/release-notes/#20103",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/commit/8d3179546e79065adefa67cc697c09d0ab137d30",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v19.03.15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v20.10.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0005/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4865",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.docker.com/engine/release-notes/#20103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/commit/8d3179546e79065adefa67cc697c09d0ab137d30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v19.03.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/releases/tag/v20.10.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/moby/moby/security/advisories/GHSA-6fj5-m822-rqx8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210226-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20199",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-02T19:15:14.000",
      "lastModified" : "2024-11-21T05:46:07.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 (including from remote hosts). This impacts containerized applications that trust localhost (127.0.01) connections by default and do not require authentication. This issue affects Podman 1.8.0 onwards."
      }, {
        "lang" : "es",
        "value" : "Los contenedores Rootless se ejecutan con Podman, reciben todo el tráfico con una dirección IP de origen 127.0.0.1 (incluyendo desde hosts remotos).&#xa0;Esto afecta a las aplicaciones en contenedores que confían en las conexiones localhost (127.0.01) por defecto y no requieren autenticación.&#xa0;Este problema afecta a Podman versión 1.8.0 en adelante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podman_project:podman:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "3720247B-439B-4853-9312-87AFBB4B763D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1919050",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containers/podman/issues/5138",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containers/podman/pull/9052",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rootless-containers/rootlesskit/pull/206",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1919050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containers/podman/issues/5138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containers/podman/pull/9052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rootless-containers/rootlesskit/pull/206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21289",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T19:15:14.220",
      "lastModified" : "2024-11-21T05:47:56.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mechanize is an open-source ruby library that makes automated web interaction easy. In Mechanize from version 2.0.0 and before version 2.7.7 there is a command injection vulnerability. Affected versions of mechanize allow for OS commands to be injected using several classes' methods which implicitly use Ruby's Kernel.open method. Exploitation is possible only if untrusted input is used as a local filename and passed to any of these calls: Mechanize::CookieJar#load, Mechanize::CookieJar#save_as, Mechanize#download, Mechanize::Download#save, Mechanize::File#save, and Mechanize::FileResponse#read_body. This is fixed in version 2.7.7."
      }, {
        "lang" : "es",
        "value" : "Mechanize es una biblioteca de ruby ??de código abierto que facilita la interacción web automatizada.&#xa0;En Mechanize desde versión 2.0.0 y versiones anteriores a 2.7.7, se presenta una vulnerabilidad de inyección de comandos.&#xa0;Las versiones afectadas de mechanize permiten a unos comandos del Sistema Operativo ser inyectados usando métodos de varias clases que implícitamente usan el método Kernel.open de Ruby.&#xa0;Una explotación es posible solo si es usada una entrada que no sea confiable como nombre de archivo local y sea pasada a cualquiera de estas llamadas: Mechanize::CookieJar#load, Mechanize::CookieJar#save_as, Mechanize#download, Mechanize::Download#save, Mechanize::File#save y Mechanize::FileResponse#read_body.&#xa0;Esto es corregido en versión 2.7.7"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mechanize_project:mechanize:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.7.7",
            "matchCriteriaId" : "3F476565-B5B7-4547-812E-F9428E9FA312"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sparklemotion/mechanize/commit/66a6a1bfa653a5f13274a396a5e5441238656aa0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sparklemotion/mechanize/releases/tag/v2.7.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sparklemotion/mechanize/security/advisories/GHSA-qrqm-fpv6-6r8g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBVVJUL4P4KCJH4IQTHFZ4ATXY7XXZPV/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNFZ7ROYS6V4J5L5PRAJUG2AWC7VXR2V/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://rubygems.org/gems/mechanize/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-17",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sparklemotion/mechanize/commit/66a6a1bfa653a5f13274a396a5e5441238656aa0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sparklemotion/mechanize/releases/tag/v2.7.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sparklemotion/mechanize/security/advisories/GHSA-qrqm-fpv6-6r8g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBVVJUL4P4KCJH4IQTHFZ4ATXY7XXZPV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YNFZ7ROYS6V4J5L5PRAJUG2AWC7VXR2V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://rubygems.org/gems/mechanize/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21291",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T19:15:14.330",
      "lastModified" : "2024-11-21T05:47:56.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OAuth2 Proxy is an open-source reverse proxy and static file server that provides authentication using Providers (Google, GitHub, and others) to validate accounts by email, domain or group. In OAuth2 Proxy before version 7.0.0, for users that use the whitelist domain feature, a domain that ended in a similar way to the intended domain could have been allowed as a redirect. For example, if a whitelist domain was configured for \".example.com\", the intention is that subdomains of example.com are allowed. Instead, \"example.com\" and \"badexample.com\" could also match. This is fixed in version 7.0.0 onwards. As a workaround, one can disable the whitelist domain feature and run separate OAuth2 Proxy instances for each subdomain."
      }, {
        "lang" : "es",
        "value" : "OAuth2 Proxy es un proxy inverso de código abierto y un servidor de archivos estáticos que proporciona autenticación usando Proveedores (Google, GitHub y otros) para comprobar cuentas por correo electrónico, dominio o grupo.&#xa0;En OAuth2 Proxy versiones anteriores a 7.0.0, para los usuarios que usan la funcionalidad whitelist domain, se podría haber permitido como redireccionamiento un dominio que terminara de manera similar al dominio deseado.&#xa0;Por ejemplo, si se configuró un dominio de lista blanca para \".example.com\", la intención es que se permitan los subdominios de example.com.&#xa0;En su lugar, \"example.com\" y \"badexample.com\" también podrían coincidir.&#xa0;Esto es corregido en versión 7.0.0 en adelante.&#xa0;Como solución alternativa, se puede deshabilitar la funcionalidad whitelist domain y ejecutar instancias de proxy OAuth2 separadas para cada subdominio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oauth2_proxy_project:oauth2_proxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.0",
            "matchCriteriaId" : "C5387BEC-6842-4C28-8A24-ED8A37A18BCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/commit/780ae4f3c99b579cb2ea9845121caebb6192f725",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.0.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-4mf2-f3wh-gvf2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/oauth2-proxy/oauth2-proxy/v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/commit/780ae4f3c99b579cb2ea9845121caebb6192f725",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-4mf2-f3wh-gvf2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/oauth2-proxy/oauth2-proxy/v7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23271",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-02-02T19:15:14.423",
      "lastModified" : "2024-11-21T05:51:28.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The TIBCO EBX Web Server component of TIBCO Software Inc.'s TIBCO EBX contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a Stored Cross Site Scripting (XSS) attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO EBX: versions 5.9.12 and below."
      }, {
        "lang" : "es",
        "value" : "El componente TIBCO EBX Web Server de TIBCO EBX de TIBCO Software Inc, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso a la red ejecutar un ataque de tipo Cross Site Scripting (XSS) Almacenado en el sistema afectado.&#xa0;Las versiones afectadas son TIBCO EBX de TIBCO Software Inc: versiones 5.9.12 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ebx:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.9.12",
            "matchCriteriaId" : "217E680C-CA37-41EF-9DEE-AD0F19B4EF8B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/02/tibco-security-advisory-february-2-2021-tibco-ebx",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/02/tibco-security-advisory-february-2-2021-tibco-ebx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25912",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-02-02T19:15:14.550",
      "lastModified" : "2024-11-21T05:55:35.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'dotty' versions 0.0.1 through 0.1.0 allows attackers to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contaminación del prototipo en \"dotty\" versiones 0.0.1 hasta 0.1.0, permite a atacantes causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dotty_project:dotty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.0.1",
            "versionEndIncluding" : "0.1.0",
            "matchCriteriaId" : "0C1F2C8A-268B-4318-BC9C-6B1FB62F3BAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/deoxxa/dotty/commit/cd997d37917186c131be71501a698803f2b7ebdb",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25912",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/deoxxa/dotty/commit/cd997d37917186c131be71501a698803f2b7ebdb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25912",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21292",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T20:15:12.173",
      "lastModified" : "2024-11-21T05:47:57.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traccar is an open source GPS tracking system. In Traccar before version 4.12 there is an unquoted Windows binary path vulnerability. Only Windows versions are impacted. Attacker needs write access to the filesystem on the host machine. If Java path includes a space, then attacker can lift their privilege to the same as Traccar service (system). This is fixed in version 4.12."
      }, {
        "lang" : "es",
        "value" : "Traccar es un sistema de rastreo GPS de código abierto.&#xa0;En Traccar anterior a versión 4.12, se presenta una vulnerabilidad de ruta binaria de Windows sin comillas.&#xa0;Solo las versiones de Windows están afectadas.&#xa0;El atacante necesita acceso de escritura al sistema de archivos en la máquina host.&#xa0;Si la ruta de Java incluye un espacio, entonces el atacante puede elevar su privilegio al mismo que el servicio Traccar (system).&#xa0;Esto se corregido en la versión 4.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:traccar:traccar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12",
            "matchCriteriaId" : "A40F3F41-19A1-47C2-85B5-BF4DBBFD405E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traccar/traccar/commit/cc69a9907ac9878db3750aa14ffedb28626455da",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/traccar/traccar/security/advisories/GHSA-j75r-7qm5-62q5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.traccar.org/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/traccar/traccar/commit/cc69a9907ac9878db3750aa14ffedb28626455da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/traccar/traccar/security/advisories/GHSA-j75r-7qm5-62q5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.traccar.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3395",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-02T21:15:14.193",
      "lastModified" : "2024-11-21T06:21:24.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Pryaniki 6.44.3 allows remote authenticated users to upload an arbitrary file. The JavaScript code will execute when someone visits the attachment."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Pryaniki versión 6.44.3, permite a los usuarios autenticados remotamente cargar un archivo arbitrario.&#xa0;El código JavaScript se ejecutará cuando alguien visite el archivo adjunto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pryaniki:pryaniki:6.44.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47D67CAE-E87F-4FF1-9E3F-2C99F13312AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jet-pentest/CVE-2021-3395/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pryaniky.com/en/home/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jet-pentest/CVE-2021-3395/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pryaniky.com/en/home/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21293",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T22:15:12.290",
      "lastModified" : "2024-11-21T05:47:57.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "blaze is a Scala library for building asynchronous pipelines, with a focus on network IO. All servers running blaze-core before version 0.14.15 are affected by a vulnerability in which unbounded connection acceptance leads to file handle exhaustion. Blaze, accepts connections unconditionally on a dedicated thread pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an unbounded queue. Each connection allocates a socket handle, which drains a scarce OS resource. This can also confound higher level circuit breakers which work based on detecting failed connections. The vast majority of affected users are using it as part of http4s-blaze-server <= 0.21.16. http4s provides a mechanism for limiting open connections, but is enforced inside the Blaze accept loop, after the connection is accepted and the socket opened. Thus, the limit only prevents the number of connections which can be simultaneously processed, not the number of connections which can be held open. The issue is fixed in version 0.14.15 for \"NIO1SocketServerGroup\". A \"maxConnections\" parameter is added, with a default value of 512. Concurrent connections beyond this limit are rejected. To run unbounded, which is not recommended, set a negative number. The \"NIO2SocketServerGroup\" has no such setting and is now deprecated. There are several possible workarounds described in the refrenced GitHub Advisory GHSA-xmw9-q7x9-j5qc."
      }, {
        "lang" : "es",
        "value" : "blaze es una biblioteca de Scala para construir pipelines asincrónicos, con un enfoque en la E/S de red.&#xa0;Todos los servidores que ejecutan blaze-core anterior a versión 0.14.15 están afectados por una vulnerabilidad en la que la aceptación de una conexión ilimitada conduce al agotamiento del control de archivos.&#xa0;Blaze, acepta conexiones incondicionalmente en un grupo de subprocesos dedicado.&#xa0;Esto tiene el efecto neto de amplificar la degradación en los servicios que no pueden manejar su carga de peticiones actual, ya que las conexiones entrantes aún se aceptan y agregan a una cola ilimitada.&#xa0;Cada conexión asigna un identificador de socket, lo que agota un recurso escaso del sistema operativo.&#xa0;Esto también puede confundir a los disyuntores de nivel superior que funcionan basándose en la detección de conexiones en fallo.&#xa0;La gran mayoría de los usuarios afectados lo utilizan como parte de http4s-blaze-server versiones anteriores a 0.21.16 e incluyéndola.&#xa0;http4s proporciona un mecanismo para limitar las conexiones abiertas,&#xa0;pero se aplica dentro del bucle de aceptación de Blaze, después de que se acepta la conexión y se abre el socket.&#xa0;Por lo tanto, el límite solo evita el número de conexiones que se pueden procesar simultáneamente, no el número de conexiones que se pueden mantener abiertas.&#xa0;El problema se solucionó en la versión 0.14.15 para \"NIO1SocketServerGroup\".&#xa0;Se agrega un parámetro \"maxConnections\", con un valor predeterminado de 512. Se rechazan las conexiones simultáneas más allá de este límite.&#xa0;Para ejecutar sin límites, lo cual no se recomienda, establezca un número negativo.&#xa0;El \"NIO2SocketServerGroup\" no tiene tal configuración y ahora está obsoleto.&#xa0;Existen varias posibles soluciones que se describen en el Aviso de GitHub referenciado GHSA-xmw9-q7x9-j5qc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:blaze:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.14.15",
            "matchCriteriaId" : "AE06DFF4-7550-4AC9-8645-72D090B9BFEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/blaze/commit/4f786177f9fb71ab272f3a5f6c80bca3e5662aa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21294",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-02T22:15:12.387",
      "lastModified" : "2024-11-21T05:47:57.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services. Http4s before versions 0.21.17, 0.22.0-M2, and 1.0.0-M14 have a vulnerability which can lead to a denial-of-service. Blaze-core, a library underlying http4s-blaze-server, accepts connections unboundedly on its selector pool. This has the net effect of amplifying degradation in services that are unable to handle their current request load, since incoming connections are still accepted and added to an unbounded queue. Each connection allocates a socket handle, which drains a scarce OS resource. This can also confound higher level circuit breakers which work based on detecting failed connections. http4s provides a general \"MaxActiveRequests\" middleware mechanism for limiting open connections, but it is enforced inside the Blaze accept loop, after the connection is accepted and the socket opened. Thus, the limit only prevents the number of connections which can be simultaneously processed, not the number of connections which can be held open. In 0.21.17, 0.22.0-M2, and 1.0.0-M14, a new \"maxConnections\" property, with a default value of 1024, has been added to the `BlazeServerBuilder`. Setting the value to a negative number restores unbounded behavior, but is strongly disrecommended. The NIO2 backend does not respect `maxConnections`. Its use is now deprecated in http4s-0.21, and the option is removed altogether starting in http4s-0.22. There are several possible workarounds described in the refrenced GitHub Advisory GHSA-xhv5-w9c5-2r2w."
      }, {
        "lang" : "es",
        "value" : "Http4s (http4s-blaze-server) es una interfaz Scala mínima e idiomática para servicios HTTP.&#xa0;Http4s anterior a versiones 0.21.17, 0.22.0-M2 y 1.0.0-M14, presentan una vulnerabilidad que puede conllevar a una denegación de servicio.&#xa0;Blaze-core, una biblioteca subyacente a http4s-blaze-server, acepta conexiones ilimitadas en su grupo de selectores.&#xa0;Esto tiene el efecto neto de amplificar la degradación en los servicios que no pueden manejar su carga de peticiones actual, ya que las conexiones entrantes aún se aceptan y agregan a una cola ilimitada.&#xa0;Cada conexión asigna un identificador de socket, lo que agota un recurso escaso del sistema operativo.&#xa0;Esto también puede confundir a los disyuntores de nivel superior que funcionan basándose en la detección de conexiones en fallo.&#xa0;http4s proporciona un mecanismo de middleware \"MaxActiveRequests\" general para limitar las conexiones abiertas, pero se aplica dentro del bucle de aceptación de Blaze,&#xa0;después de que se acepta la conexión y se abre el socket.&#xa0;Por lo tanto, el límite solo impide el número de conexiones que se pueden procesar simultáneamente, no el número de conexiones que se pueden mantener abiertas.&#xa0;En 0.21.17, 0.22.0-M2 y 1.0.0-M14, se agregó una nueva propiedad \"maxConnections\", con un valor predeterminado de 1024, al \"BlazeServerBuilder\".&#xa0;Establecer el valor en un número negativo restaura el comportamiento ilimitado, pero se desaconseja enérgicamente.&#xa0;El backend de NIO2 no respeta \"maxConnections\".&#xa0;Su uso ahora es obsoleto en http4s-0.21, y la opción se elimina por completo a partir de http4s-0.22.&#xa0;Existen varias posibles soluciones que se describen en el Aviso de GitHub referenciado GHSA-xhv5-w9c5-2r2w"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typelevel:http4s:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.21.17",
            "matchCriteriaId" : "BB30E912-7ACF-41DA-A730-CEBAE7F25E21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/commit/987d6589ef79545b9bb2324ac4bdebf82d9a0171",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/blaze/security/advisories/GHSA-xmw9-q7x9-j5qc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/commit/987d6589ef79545b9bb2324ac4bdebf82d9a0171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/http4s/http4s/security/advisories/GHSA-xhv5-w9c5-2r2w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21043",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-02T23:15:12.813",
      "lastModified" : "2024-11-21T05:47:27.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ACS Commons version 4.9.2 (and earlier) suffers from a Reflected Cross-site Scripting (XSS) vulnerability in version-compare and page-compare due to invalid JCR characters that are not handled correctly. An attacker could potentially exploit this vulnerability to inject malicious JavaScript content into vulnerable form fields and execute it within the context of the victim's browser. Exploitation of this issue requires user interaction in order to be successful."
      }, {
        "lang" : "es",
        "value" : "La versión 4.9.2 de ACS Commons (y anteriores) sufre una vulnerabilidad de secuencias de comandos cruzadas (XSS) reflejadas en version-compare y page-compare debido a caracteres JCR no válidos que no se manejan correctamente. Un atacante podría explotar esta vulnerabilidad para inyectar contenido JavaScript malicioso en los campos de formulario vulnerables y ejecutarlo dentro del contexto del navegador de la víctima. La explotación de este problema requiere la interacción del usuario para tener éxito"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:adobe_consulting_services_commons:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.9.2",
            "matchCriteriaId" : "E4B7343B-0A3E-49E7-B85D-88B4A4EBA4EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Adobe-Consulting-Services/acs-aem-commons/security/advisories/GHSA-f92j-qf46-p6vm",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Adobe-Consulting-Services/acs-aem-commons/security/advisories/GHSA-f92j-qf46-p6vm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0352",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:14.780",
      "lastModified" : "2024-11-21T05:42:33.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In RT regmap driver, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05453809."
      }, {
        "lang" : "es",
        "value" : "En el controlador RT regmap, se presenta una posible corrupción de la memoria debido a la confusión de tipoEsto podría conducir a una denegación de servicio local con privilegios de ejecución System necesariosUna interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05453809"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0353",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:15.017",
      "lastModified" : "2024-11-21T05:42:34.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In kisd, there is a possible memory corruption due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425247."
      }, {
        "lang" : "es",
        "value" : "En kisd, se presenta una posible corrupción de la memoria debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios.&#xa0;Una interacción del usuario no es requerida para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05425247"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0354",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:15.157",
      "lastModified" : "2024-11-21T05:42:34.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ged, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05431161."
      }, {
        "lang" : "es",
        "value" : "En ged, se presenta una posible escritura fuera de límites debido a un desbordamiento de enteros. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-8.1, Android-9, Android-10, Android-11; ID del parche: ALPS05431161"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0355",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:15.343",
      "lastModified" : "2024-11-21T05:42:34.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In kisd, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05425581."
      }, {
        "lang" : "es",
        "value" : "En kisd, se presenta una posible escritura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios.&#xa0;Una interacción del usuario no es requerida para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05425581"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0356",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:15.610",
      "lastModified" : "2024-11-21T05:42:34.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442014."
      }, {
        "lang" : "es",
        "value" : "En netdiag, se presenta una posible inyección de comando debido a una comprobación de entrada inapropiada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05442014."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0357",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:15.767",
      "lastModified" : "2024-11-21T05:42:34.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442002."
      }, {
        "lang" : "es",
        "value" : "En netdiag, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05442002"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0358",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:15.920",
      "lastModified" : "2024-11-21T05:42:34.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In netdiag, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442022."
      }, {
        "lang" : "es",
        "value" : "En netdiag, se presenta una posible inyección de comando debido a una comprobación de entrada inapropiada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05442022"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0359",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:16.110",
      "lastModified" : "2024-11-21T05:42:34.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In netdiag, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442011."
      }, {
        "lang" : "es",
        "value" : "En netdiag, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05442011"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0360",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:16.297",
      "lastModified" : "2024-11-21T05:42:34.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In netdiag, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05442006."
      }, {
        "lang" : "es",
        "value" : "En netdiag, se presenta una posible escritura fuera de límites debido a una comprobación de límites incorrecta. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05442006."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0361",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:16.420",
      "lastModified" : "2024-11-21T05:42:34.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In kisd, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449968."
      }, {
        "lang" : "es",
        "value" : "En kisd, se presenta una posible lectura fuera de límites debido a una comprobación de entrada inapropiada.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios.&#xa0;Una interacción del usuario no es requerida para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05449968"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0362",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:16.657",
      "lastModified" : "2024-11-21T05:42:35.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070."
      }, {
        "lang" : "es",
        "value" : "En aee, se presenta una posible corrupción de la memoria debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios.&#xa0;Una interacción del usuario no es requerida para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05457070"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0363",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:16.717",
      "lastModified" : "2024-11-21T05:42:35.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mobile_log_d, there is a possible command injection due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478."
      }, {
        "lang" : "es",
        "value" : "En mobile_log_d, se presenta una posible inyección de comando debido a una falta de comprobación de límites. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05458478"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0364",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:16.827",
      "lastModified" : "2024-11-21T05:42:35.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mobile_log_d, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05458478; Issue ID: ALPS05458503."
      }, {
        "lang" : "es",
        "value" : "En mobile_log_d, se presenta una posible inyección de comando debido a una comprobación de entrada inapropiada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; ID del parche: ALPS05458478; ID del problema: ALPS05458503"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0365",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-03T00:15:17.063",
      "lastModified" : "2024-11-21T05:42:35.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05454782."
      }, {
        "lang" : "es",
        "value" : "En el controlador de pantalla, se presenta una posible corrupción de la memoria debido a un uso de la memoria previamente liberada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. Una interacción del usuario no es requerida para su explotación. Producto: Android; Versiones: Android-10, Android-11; Patch ID: ALPS05454782"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25755",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.227",
      "lastModified" : "2024-11-21T05:55:20.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Code With Me before 2020.3, an attacker on the local network, knowing a session ID, could get access to the encrypted traffic."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Code With Me versiones anteriores a 2020.3, un atacante en la red local, conociendo un ID de sesión, podría conseguir acceso al tráfico cifrado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:code_with_me:*:*:*:*:*:jetbrains:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "5B5BA056-5891-4314-82E6-03F497275B86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jay-from-future.github.io/cve/2021/04/02/code-with-me-cve.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jay-from-future.github.io/cve/2021/04/02/code-with-me-cve.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25756",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.307",
      "lastModified" : "2024-11-21T05:55:20.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains IntelliJ IDEA before 2020.2, HTTP links were used for several remote repositories instead of HTTPS."
      }, {
        "lang" : "es",
        "value" : "En JetBrains IntelliJ IDEA versiones anteriores a 2020.2, fueron usados enlaces HTTP para varios repositorios remotos en lugar de HTTPS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2",
            "matchCriteriaId" : "7406920D-402E-420F-9EE0-6C2729A7DBB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25757",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.367",
      "lastModified" : "2024-11-21T05:55:20.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Hub before 2020.1.12629, an open redirect was possible."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Hub versiones anteriores a 2020.1.12629, fue posible un redireccionamiento abierto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.1.12629",
            "matchCriteriaId" : "208EA3C3-F1F0-4D3E-808B-CB8ABE465D4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.430",
      "lastModified" : "2024-11-21T05:55:21.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains IntelliJ IDEA before 2020.3, potentially insecure deserialization of the workspace model could lead to local code execution."
      }, {
        "lang" : "es",
        "value" : "En JetBrains IntelliJ IDEA versiones anteriores a 2020.3, una deserialización potencialmente no segura del modelo de espacio de trabajo podría conllevar a una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:intellij_idea:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "9AD5D449-F6E1-4E40-BC87-DD6C2247E6D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25759",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.493",
      "lastModified" : "2024-11-21T05:55:21.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Hub before 2020.1.12629, an authenticated user can delete 2FA settings of any other user."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Hub versiones anteriores a 2020.1.12629, un usuario autenticado puede eliminar una configuración 2FA de cualquier otro usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.1.12629",
            "matchCriteriaId" : "208EA3C3-F1F0-4D3E-808B-CB8ABE465D4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.570",
      "lastModified" : "2024-11-21T05:55:21.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Hub before 2020.1.12669, information disclosure via the public API was possible."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Hub versiones anteriores a 2020.1.12669, era posible una divulgación de información por medio de la API pública"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:hub:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.1.12669",
            "matchCriteriaId" : "AD7365C1-C37C-4B5D-BA6F-3856A94A49BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.633",
      "lastModified" : "2024-11-21T05:55:23.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Ktor before 1.5.0, a birthday attack on SessionStorage key was possible."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Ktor versiones anteriores a 1.5.0, fue posible un ataque de tipo birthday en la clave de SessionStorage"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "D720C13F-F782-4DF8-9533-9F77FEFFF2A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.713",
      "lastModified" : "2024-11-21T05:55:23.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Ktor before 1.4.3, HTTP Request Smuggling was possible."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Ktor versiones anteriores a 1.4.3, fue posible un Trafico No Autorizado de Peticiones HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.3",
            "matchCriteriaId" : "61367BA0-C605-4AD4-824D-CF6F1EA73F2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25763",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.773",
      "lastModified" : "2024-11-21T05:55:23.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains Ktor before 1.4.2, weak cipher suites were enabled by default."
      }, {
        "lang" : "es",
        "value" : "En JetBrains Ktor versiones anteriores a 1.4.2, un conjunto de cifrado débil estaban habilitados por defecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:ktor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "9D602BE0-2F35-4F01-85B1-FA954D995BFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25765",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.883",
      "lastModified" : "2024-11-21T05:55:23.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.4.4701, CSRF via attachment upload was possible."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.4.4701, fue posible un ataque de tipo CSRF por medio de una carga de archivos adjuntos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.4.4701",
            "matchCriteriaId" : "9F387F7F-913E-45A3-B443-C3FF4EE224BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25766",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:14.947",
      "lastModified" : "2024-11-21T05:55:24.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.4.4701, improper resource access checks were made."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.4.4701, se hicieron unas comprobaciones de acceso a recursos inapropiados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.4.4701",
            "matchCriteriaId" : "9F387F7F-913E-45A3-B443-C3FF4EE224BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25767",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.023",
      "lastModified" : "2024-11-21T05:55:24.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.6.1767, an issue's existence could be disclosed via YouTrack command execution."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.6.1767, una existencia de un problema podría ser divulgada por medio de una ejecución de comando de YouTrack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.6.1767",
            "matchCriteriaId" : "09FA92CB-8DF3-472B-858D-4B23843F41DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25768",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.103",
      "lastModified" : "2024-11-21T05:55:24.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.4.4701, permissions for attachments actions were checked improperly."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.4.4701, los permisos para las acciones de archivos adjuntos fueron comprobados inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.4.4701",
            "matchCriteriaId" : "9F387F7F-913E-45A3-B443-C3FF4EE224BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25769",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.167",
      "lastModified" : "2024-11-21T05:55:24.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.4.6808, the YouTrack administrator wasn't able to access attachments."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.4.6808, el administrador de YouTrack no sería capaz de acceder a unos archivos adjuntos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.4.6808",
            "matchCriteriaId" : "0892BBEC-54F8-4549-90FC-BFF714C9F045"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25770",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.243",
      "lastModified" : "2024-11-21T05:55:24.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.5.3123, server-side template injection (SSTI) was possible, which could lead to code execution."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.5.3123, era posible una server-side template injection (SSTI), lo que podría conllevar a una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.5.3123",
            "matchCriteriaId" : "C4EFEEC8-E93B-4D1D-988A-945B32C85588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25771",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.307",
      "lastModified" : "2024-11-21T05:55:24.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains YouTrack before 2020.6.1099, project information could be potentially disclosed."
      }, {
        "lang" : "es",
        "value" : "En JetBrains YouTrack versiones anteriores a 2020.6.1099, una información del proyecto podría ser divulgada potencialmente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:youtrack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.6.1099",
            "matchCriteriaId" : "A69168AB-00F0-43BD-ACDD-D44E5B4BB017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25772",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.367",
      "lastModified" : "2024-11-21T05:55:24.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2020.2.2, TeamCity server DoS was possible via server integration."
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity versiones anteriores a 2020.2.2, una DoS del servidor de TeamCity fue posible por medio de una integración del servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.2",
            "matchCriteriaId" : "06EB4146-44DD-4069-AF68-B1B2EF719FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25773",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.430",
      "lastModified" : "2024-11-21T05:55:25.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JetBrains TeamCity before 2020.2 was vulnerable to reflected XSS on several pages."
      }, {
        "lang" : "es",
        "value" : "JetBrains TeamCity versiones anteriores a 2020.2, era vulnerable a un ataque de tipo XSS reflejado en varias páginas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2",
            "matchCriteriaId" : "73A966BD-DDF0-4A4E-BD54-B28BD4EABD70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25774",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.493",
      "lastModified" : "2024-11-21T05:55:25.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2020.2.1, a user could get access to the GitHub access token of another user."
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity versiones anteriores a 2020.2.1, un usuario podía conseguir acceso a un token de acceso de GitHub de otro usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.1",
            "matchCriteriaId" : "36FD8706-CBBA-4BFA-9F2A-4726C8CD9658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25775",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.570",
      "lastModified" : "2024-11-21T05:55:25.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2020.2.1, the server admin could create and see access tokens for any other users."
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity versiones anteriores a 2020.2.1, el administrador del servidor podía crear y visualizar tokens de acceso para cualquier otro usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.1",
            "matchCriteriaId" : "36FD8706-CBBA-4BFA-9F2A-4726C8CD9658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.633",
      "lastModified" : "2024-11-21T05:55:25.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2020.2, an ECR token could be exposed in a build's parameters."
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity versiones anteriores a 2020.2, un token ECR podría estar expuesto en unos parámetros de compilación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2",
            "matchCriteriaId" : "73A966BD-DDF0-4A4E-BD54-B28BD4EABD70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.697",
      "lastModified" : "2024-11-21T05:55:25.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2020.2.1, permissions during token removal were checked improperly."
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity versiones anteriores a 2020.2.1, los permisos durante la eliminación del token fueron comprobados inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.1",
            "matchCriteriaId" : "36FD8706-CBBA-4BFA-9F2A-4726C8CD9658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T16:15:15.760",
      "lastModified" : "2024-11-21T05:55:25.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains TeamCity before 2020.2.1, permissions during user deletion were checked improperly."
      }, {
        "lang" : "es",
        "value" : "En JetBrains TeamCity versiones anteriores a 2020.2.1, los permisos durante la eliminación del usuario fueron comprobados inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:teamcity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.1",
            "matchCriteriaId" : "36FD8706-CBBA-4BFA-9F2A-4726C8CD9658"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T17:15:16.467",
      "lastModified" : "2024-11-21T05:54:39.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon processing of such messages, the service deserializes them in insecure manner, allowing remote arbitrary code execution as LocalSystem."
      }, {
        "lang" : "es",
        "value" : "El Collector Service en SolarWinds Orion Platform versiones anteriores a 2020.2.4 usa MSMQ (Microsoft Message Queue) y no establece permisos en sus queues privadas.&#xa0;Como resultado, unos clientes no autenticados remotos pueden enviar mensajes hacia el puerto TCP 1801 que el Collector Service procesará.&#xa0;Adicionalmente, al procesar dichos mensajes, el servicio los deserializa de una manera no segura, permitiendo una ejecución de código remota arbitraria como LocalSystem"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.4",
            "matchCriteriaId" : "72CB9F7C-C224-4D39-A33B-08D6BEF97D2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T17:15:16.513",
      "lastModified" : "2024-11-21T05:54:39.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds Orion Platform before 2020.2.4, as used by various SolarWinds products, installs and uses a SQL Server backend, and stores database credentials to access this backend in a file readable by unprivileged users. As a result, any user having access to the filesystem can read database login details from that file, including the login name and its associated password. Then, the credentials can be used to get database owner access to the SWNetPerfMon.DB database. This gives access to the data collected by SolarWinds applications, and leads to admin access to the applications by inserting or changing authentication data stored in the Accounts table of the database."
      }, {
        "lang" : "es",
        "value" : "SolarWinds Orion Platform versiones anteriores a 2020.2.4, tal como la utilizan varios productos SolarWinds, instala y usa un servidor SQL Server y almacena las credenciales de la base de datos para acceder a este servidor en un archivo que pueden leer los usuarios sin privilegios.&#xa0;Como resultado, cualquier usuario que tenga acceso al sistema de archivos puede leer los detalles de inicio de sesión de la base de datos de ese archivo, incluyendo el nombre de inicio de sesión y su contraseña asociada.&#xa0;Luego, las credenciales pueden ser usadas para conseguir acceso del propietario de la base de datos a la base de datos SWNetPerfMon.DB.&#xa0;Esto otorga acceso a los datos recopilados por las aplicaciones de SolarWinds y conlleva a un acceso de administrador a las aplicaciones al insertar o cambiar los datos de autenticación almacenados en la tabla de Cuentas de la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.4",
            "matchCriteriaId" : "72CB9F7C-C224-4D39-A33B-08D6BEF97D2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25276",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T17:15:16.637",
      "lastModified" : "2024-11-21T05:54:39.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files (that include users' password hashes) that is world readable and writable. An unprivileged Windows user (having access to the server's filesystem) can add an FTP user by copying a valid profile file to this directory. For example, if this profile sets up a user with a C:\\ home directory, then the attacker obtains access to read or replace arbitrary files with LocalSystem privileges."
      }, {
        "lang" : "es",
        "value" : "En SolarWinds Serv-U versiones anteriores a 15.2.2 Hotfix 1, se presenta un directorio que contiene archivos de perfil de usuario (que incluyen hash de contraseña de usuario) que se puede leer y escribir por todo el mundo.&#xa0;Un usuario no privilegiado de Windows (que tenga acceso al sistema de archivos del servidor) puede agregar un usuario FTP al copiar un archivo de perfil válido en este directorio.&#xa0;Por ejemplo, si este perfil configura a un usuario con un directorio C:\\ home, el atacante obtiene acceso para leer o reemplazar archivos arbitrarios con privilegios LocalSystem"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.2.2",
            "matchCriteriaId" : "B87891C6-CFA7-42B6-9EB8-B313B08D6266"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u:15.2.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0B8AD1-FE25-4C0D-B75C-4DE0EC276DC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23331",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-03T18:15:16.430",
      "lastModified" : "2024-11-21T05:51:31.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file downloaded by downloadFileFromResponse will be visible to all other users on the local system. A workaround fix for this issue is to set the system property java.io.tmpdir to a safe directory as remediation. Note: This version of the SDK is end of life and no longer maintained, please upgrade to the latest version."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete com.squareup:connect.&#xa0;El método prepareDownloadFilecreates crea un archivo temporal con los bits de permisos de -rw-r--r-- en sistemas tipo Unix.&#xa0;En sistemas tipo Unix, el directorio temporal del sistema se comparte entre usuarios.&#xa0;Como tal, el contenido del archivo descargado por downloadFileFromResponse será visible para todos los demás usuarios en el sistema local.&#xa0;Una solución alternativa para este problema es establecer la propiedad del sistema java.io.tmpdir en un directorio seguro como remediación.&#xa0;Nota: Esta versión del SDK está al final de su vida útil y ya no se mantiene; por favor actualizar a la última versión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squareup:connect_java_software_development_kit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECBAE5DB-BB7E-4FCA-BEAF-F9F4EA32E42F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/square/connect-java-sdk/blob/master/src/main/java/com/squareup/connect/ApiClient.java%23L613",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUP-1065988",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/square/connect-java-sdk/blob/master/src/main/java/com/squareup/connect/ApiClient.java%23L613",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-COMSQUAREUP-1065988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26023",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T22:15:11.987",
      "lastModified" : "2024-11-21T05:55:45.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to XSS."
      }, {
        "lang" : "es",
        "value" : "El plugin Favorites versiones anteriores a 1.0.2 para Nagios XI versión 5.8.0, es vulnerable a un ataque de tipo XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:favorites:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "D0063006-21AA-4EDD-9399-DA60EF5A0E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC26E3B-E4CC-4555-AD86-BEE0837DBB63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/products/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.nagios.com/products/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26024",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-03T22:15:12.063",
      "lastModified" : "2024-11-21T05:55:45.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Favorites component before 1.0.2 for Nagios XI 5.8.0 is vulnerable to Insecure Direct Object Reference: it is possible to create favorites for any other user account."
      }, {
        "lang" : "es",
        "value" : "El plugin Favorites versiones anteriores a 1.0.2 para Nagios XI versión 5.8.0, es vulnerable a una Referencia Directa a Objetos No Segura: es posible crear favoritos para cualquier otra cuenta de usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:favorites:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "D0063006-21AA-4EDD-9399-DA60EF5A0E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:5.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC26E3B-E4CC-4555-AD86-BEE0837DBB63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.nagios.com/products/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.nagios.com/products/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3401",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-04T05:15:13.037",
      "lastModified" : "2024-11-21T06:21:25.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer states \"I believe that this vulnerability cannot actually be exploited.\""
      }, {
        "lang" : "es",
        "value" : "Bitcoin Core versiones anteriores a 0.19.0, podría permitir a atacantes remotos ejecutar código arbitrario cuando otra aplicación pasa de manera no segura el argumento -platformpluginpath al programa bitcoin-qt, como es demostrado por un manejador de esquema x/controlador de bitcoin para un archivo de escritorio o navegador web.&#xa0;NOTA: el descubridor afirma \"Creo que esta vulnerabilidad no se puede explotar\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitcoin:bitcoin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.19.0",
            "matchCriteriaId" : "F3486D33-9697-49A9-9C51-B0B75B8AFD8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://achow101.com/2021/02/0.18-uri-vuln",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitcoin/bitcoin/pull/16578",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://achow101.com/2021/02/0.18-uri-vuln",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitcoin/bitcoin/pull/16578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20016",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-02-04T06:15:13.817",
      "lastModified" : "2025-10-31T15:56:14.870",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de SQL en el producto SonicWall SSLVPN SMA100, permite a un atacante remoto no autenticado llevar a cabo una consulta SQL para acceder a la contraseña del nombre de usuario y otra información relacionada con la sesión.&#xa0;Esta vulnerabilidad afecta a la versión 10.x de la compilación SMA100"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "SonicWall SSLVPN SMA100 SQL Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0.0",
            "versionEndExcluding" : "10.2.0.5-d-29sv",
            "matchCriteriaId" : "5ED4CBFD-C82D-4CA3-8A15-4A461A432A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B164EB6-4CA0-46EF-986D-270968E87C5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma_200_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B74D223-A74B-42EE-A005-C07CC2A1F92C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma_200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B190266-AD6F-401B-9B2E-061CDD539236"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma_210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69495233-D283-414C-A32C-9FBAF726CF1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma_210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51587338-4A5F-41FC-9497-743F061947C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma_400_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E791012D-4096-4978-950A-5B482F714A47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D728332-10C9-4508-B720-569D44E99543"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma_410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "852AF172-A8E4-463B-8503-F31DD0E62BC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma_410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFB8FBC-FFA4-4526-B306-D5692A43DC9E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:sma_500v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75DB297F-6686-46CD-83D4-608013568D81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20016",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26687",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-04T06:15:14.177",
      "lastModified" : "2024-11-21T05:56:40.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. In preloaded applications, the HostnameVerified default is mishandled. The LG ID is LVE-SMP-200029 (February 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versiones 8.0, 8.1, 9.0 y 10.&#xa0;En aplicaciones precargadas, el HostnameVerified es manejado inapropiadamente.&#xa0;El ID de LG es LVE-SMP-200029 (Febrero de 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26688",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-04T06:15:14.257",
      "lastModified" : "2024-11-21T05:56:40.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG Wing mobile devices with Android OS 10 software. The biometric sensor has weak security properties. The LG ID is LVE-SMP-200030 (February 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles LG Wing con software de Sistema Operativo Android versión 10.&#xa0;El sensor biométrico contiene propiedades de seguridad débiles.&#xa0;El ID de LG es LVE-SMP-200030 (Febrero de 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lg:wing:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7E70C0E-3248-470E-AA04-77723695FF65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26689",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-04T06:15:14.317",
      "lastModified" : "2024-11-21T05:56:40.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG mobile devices with Android OS 8.0, 8.1, 9.0, and 10 software. The USB laf gadget has a use-after-free. The LG ID is LVE-SMP-200031 (February 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles LG con software de Sistema Operativo Android versiones 8.0, 8.1, 9.0 y 10.&#xa0;El gadget laf USB presenta un uso de la memoria previamente liberada.&#xa0;El ID de LG es LVE-SMP-200031 (Febrero de 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1128",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.310",
      "lastModified" : "2024-11-21T05:43:39.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI parser of Cisco IOS XR Software could allow an authenticated, local attacker to view more information than their privileges allow. The vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit this vulnerability by using a specific command at the command line. A successful exploit could allow the attacker to obtain sensitive information within the configuration that otherwise might not have been accessible beyond the privileges of the invoking user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el analizador de la CLI del Software Cisco IOS XR,  podría permitir a un atacante autenticado local visualizar más información de la que sus privilegios permiten.&#xa0;La vulnerabilidad es debido a una aplicación insuficiente de restricciones durante la ejecución de un comando específico.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el uso de un comando específico en la línea de comandos.&#xa0;Una explotación con éxito podría permitir al atacante obtener información confidencial dentro de la configuración que de otro modo no habría sido accesible más allá de los privilegios del usuario que lo invoca"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "9A42D395-5212-4A00-BE32-6D806D032E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BABFE7-1350-4FB0-B9ED-5F08E386BC40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323C8DEE-3009-4D8D-A63F-873D2432F3A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-infodisc-4mtm9Gyt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-infodisc-4mtm9Gyt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1136",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.467",
      "lastModified" : "2024-11-21T05:43:40.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los Enrutadores Cisco Network Convergence System (NCS) 540 Series, solo cuando ejecutan imágenes de software de NCS540L de Cisco IOS XR y el Software Cisco IOS XR para los Enrutadores Cisco 8000 Series podrían permitir a un atacante autenticado local ejecutar código sin firmar durante el proceso de arranque en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.12",
            "matchCriteriaId" : "9CED0163-5695-4267-8677-1E2C42D73FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "DDFFC1A3-D76E-4CF9-97F8-D45493CFF949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "9EEE27AF-9402-4DFA-B1CF-E51972485918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1221",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.560",
      "lastModified" : "2024-11-21T05:43:51.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the user interface of Cisco Webex Meetings and Cisco Webex Meetings Server Software could allow an authenticated, remote attacker to inject a hyperlink into a meeting invitation email. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by entering a URL into a field in the user interface. A successful exploit could allow the attacker to generate a Webex Meetings invitation email that contains a link to a destination of their choosing. Because this email is sent from a trusted source, the recipient may be more likely to click the link."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de usuario de Cisco Webex Meetings y el software Cisco Webex Meetings Server, podría permitir a un atacante autenticado remoto inyectar un hipervínculo en un correo electrónico de invitación para una reunión.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de la entrada.&#xa0;Un atacante podría explotar esta vulnerabilidad al introducir una URL en un campo en la interfaz de usuario.&#xa0;Una explotación con éxito podría permitir al atacante generar un correo electrónico de invitación de Webex Meetings que contenga un enlace a un destino de su elección.&#xa0;Debido a que este correo electrónico se envía desde una fuente confiable, es más probable que el destinatario haga clic en el enlace"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "41.1.0",
            "matchCriteriaId" : "264B9E30-8AB4-454F-BF92-018FF6719BF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "DE22BE9B-374E-43DC-BA91-E3B9699A4C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "61D1081F-87E8-4E8B-BEBD-0F239E745586"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_security_patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "D36FE453-C43F-448B-8A59-668DE95468C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CF856-093A-4E89-A71D-50A2887C265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3_security_patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "EA561408-D53D-43B9-A464-A413EC2E083E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-linkinj-WWZpVqu9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wbx-linkinj-WWZpVqu9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1243",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.700",
      "lastModified" : "2024-11-21T05:43:54.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Local Packet Transport Services (LPTS) programming of the SNMP with the management plane protection feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to allow connections despite the management plane protection that is configured to deny access to the SNMP server of an affected device. This vulnerability is due to incorrect LPTS programming when using SNMP with management plane protection. An attacker could exploit this vulnerability by connecting to an affected device using SNMP. A successful exploit could allow the attacker to connect to the device on the configured SNMP ports. Valid credentials are required to execute any of the SNMP requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la programación Local Packet Transport Services (LPTS) del SNMP con la funcionalidad de protección del plano de administración del Software Cisco IOS XR, podría permitir a un atacante remoto no autenticado habilitar conexiones a pesar de la protección del plano de administración que está configurada para denegar el acceso al servidor SNMP de un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una programación LPTS incorrecta cuando se usa SNMP con protección del plano de administración.&#xa0;Un atacante podría explotar esta vulnerabilidad al conectar a un dispositivo afectado usando SNMP.&#xa0;Una explotación con éxito podría permitir al atacante conectarse al dispositivo en los puertos SNMP configurados.&#xa0;Las credenciales válidas son requeridas para ejecutar cualquiera de las peticiones SNMP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "6.1.1",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "430CEC0C-7611-4B21-8143-74180775FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.2",
            "matchCriteriaId" : "00AFC058-2750-4A6F-B321-DF159214FCA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:6.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB06AB15-7F91-4B17-BBBD-AC4E4D1EBF9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.0.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "921B3622-76A3-4D9F-936C-25A965CE1A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF4040-86A9-46CA-8BAB-04D6016751D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BABFE7-1350-4FB0-B9ED-5F08E386BC40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-7MKrW7Nq",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-snmp-7MKrW7Nq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1244",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.777",
      "lastModified" : "2024-11-21T05:43:54.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Network Convergence System (NCS) 540 Series Routers, only when running Cisco IOS XR NCS540L software images, and Cisco IOS XR Software for the Cisco 8000 Series Routers could allow an authenticated, local attacker to execute unsigned code during the boot process on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los Enrutadores Cisco Network Convergence System (NCS) 540 Series, solo cuando ejecutan imágenes de Software de NCS540L de Cisco IOS XR, y el Software Cisco IOS XR para los Enrutadores Cisco 8000 Series, podrían permitir a un atacante autenticado local ejecutar código sin firmar durante el proceso de arranque en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.12",
            "matchCriteriaId" : "9CED0163-5695-4267-8677-1E2C42D73FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "DDFFC1A3-D76E-4CF9-97F8-D45493CFF949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "9EEE27AF-9402-4DFA-B1CF-E51972485918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ioxr-l-zNhcGCBt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1266",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.857",
      "lastModified" : "2024-11-21T05:43:57.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the REST API of Cisco Managed Services Accelerator (MSX) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to the way that the affected software logs certain API requests. An attacker could exploit this vulnerability by sending a flood of crafted API requests to an affected device. A successful exploit could allow the attacker to cause a DoS condition on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API REST de Cisco Managed Services Accelerator (MSX), podría permitir a un atacante autenticado remoto causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a la forma en que el software afectado registra determinadas peticiones de la API.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una avalancha de peticiones de API diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar una condición DoS en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:managed_services_accelerator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.10.0",
            "matchCriteriaId" : "D9898415-21FD-496B-A5F7-149A7D652B84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-msx-dos-4j7sytvU",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-msx-dos-4j7sytvU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1268",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:14.967",
      "lastModified" : "2024-11-21T05:43:58.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv6 protocol handling of the management interfaces of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause an IPv6 flood on the management interface network of an affected device. The vulnerability exists because the software incorrectly forwards IPv6 packets that have an IPv6 node-local multicast group address destination and are received on the management interfaces. An attacker could exploit this vulnerability by connecting to the same network as the management interfaces and injecting IPv6 packets that have an IPv6 node-local multicast group address destination. A successful exploit could allow the attacker to cause an IPv6 flood on the corresponding network. Depending on the number of Cisco IOS XR Software nodes on that network segment, exploitation could cause excessive network traffic, resulting in network degradation or a denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo del protocolo IPv6 de las interfaces de administración del Software Cisco IOS XR, podría permitir a un atacante adyacente no autenticado causar una inundación de IPv6 en la red de la interfaz de administración de un dispositivo afectado.&#xa0;La vulnerabilidad se presenta porque el software reenvía incorrectamente paquetes IPv6 que contienen un destino de dirección de grupo de multidifusión local de nodo IPv6 y son recibidos en las interfaces de administración.&#xa0;Un atacante podría explotar esta vulnerabilidad al conectarse a la misma red que las interfaces de administración e inyectando paquetes IPv6 que contienen un destino de dirección de grupo de multidifusión local de nodo IPv6.&#xa0;Una explotación con éxito podría permitir al atacante causar una inundación de IPv6 en la red correspondiente.&#xa0;Dependiendo de la cantidad de nodos del Software Cisco IOS XR,  en ese segmento de red, la explotación podría causar un tráfico de red excesivo, resultando en una degradación de la red o una condición de denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1076"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.3",
            "matchCriteriaId" : "51C3061D-B020-4F38-A0DE-67DDAAFC269E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.3",
            "matchCriteriaId" : "010C84AB-7633-4A88-8938-7158EFC1E01C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.2.2",
            "matchCriteriaId" : "2EA0CDB4-13C5-48BC-B3F5-36F8E2BD8DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323C8DEE-3009-4D8D-A63F-873D2432F3A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_1001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F6E0FBE-70B7-413C-8943-39BEFE050298"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_1002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37AE5FB0-D9A6-4EBE-9F7F-243299AE918B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xripv6-spJem78K",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xripv6-spJem78K",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1288",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.077",
      "lastModified" : "2024-11-21T05:44:00.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la función de procesamiento de paquetes de entrada del Software Cisco IOS XR, podrían permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.6",
            "matchCriteriaId" : "E3DE37AB-3C40-44C4-9209-FB02FC3C0AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "B8CA2C12-106C-4F08-A1FF-DC05C373CD7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "11E4CECC-BBDF-40B3-A6E9-D55C38A6DF37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dos-WwDdghs2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dos-WwDdghs2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1289",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.170",
      "lastModified" : "2024-11-21T05:44:00.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario remotamente en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1290",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.277",
      "lastModified" : "2024-11-21T05:44:00.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar remotamente código arbitrario en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1291",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.340",
      "lastModified" : "2024-11-21T05:44:01.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario remotamente en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1292",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.420",
      "lastModified" : "2024-11-21T05:44:01.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario remotamente en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1293",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.483",
      "lastModified" : "2024-11-21T05:44:01.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario remotamente en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1294",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.560",
      "lastModified" : "2024-11-21T05:44:01.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario remotamente en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1295",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.637",
      "lastModified" : "2024-11-21T05:44:01.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to execute arbitrary code as the root user on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario como usuario root en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario remotamente en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-472"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-rce-XZeFkNHf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1296",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.700",
      "lastModified" : "2024-11-21T05:44:01.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to conduct directory traversal attacks and overwrite certain files that should be restricted on an affected system. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by using the web-based management interface to upload a file to location on an affected device that they should not have access to. A successful exploit could allow the attacker to overwrite files on the file system of the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado llevar a cabo ataques de salto de directorio y sobrescriba ciertos archivos que deben restringirse en un sistema afectado.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de la entrada.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el uso de la interfaz de administración basada en web para cargar un archivo en la ubicación de un dispositivo afectado al que no debería tener acceso.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir archivos en el sistema de archivos del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-filewrite-7x9mnKjn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-filewrite-7x9mnKjn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1297",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.777",
      "lastModified" : "2024-11-21T05:44:01.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers could allow an unauthenticated, remote attacker to conduct directory traversal attacks and overwrite certain files that should be restricted on an affected system. These vulnerabilities are due to insufficient input validation. An attacker could exploit these vulnerabilities by using the web-based management interface to upload a file to location on an affected device that they should not have access to. A successful exploit could allow the attacker to overwrite files on the file system of the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores VPN Cisco Small Business RV160, RV160W, RV260, RV260P y RV260W, podrían permitir a un atacante remoto no autenticado llevar a cabo ataques de salto de directorio y sobrescribir ciertos archivos que deben ser restringido en un sistema afectado.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de la entrada.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el uso de la interfaz de administración basada en web para cargar un archivo en la ubicación de un dispositivo afectado al que no debería tener acceso.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir archivos en el sistema de archivos del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-36"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "FC3486B1-44A9-4DCD-B8F4-58FD110C4AA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FA810D-A396-4844-85E7-9293B0559269"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "5D913D1B-9600-440A-AF22-AC862331EFB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2374731-08B0-47A4-BD8F-DB6C67ECF785"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_vpn_router_with_poe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "01A1C982-8295-4266-BFDB-7ADA9EF1A28F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p_vpn_router_with_poe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A695DCE-ACFE-4437-BA0E-FBF6E379FF91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_wireless-ac_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "95BDC2EA-251E-4A33-9409-3D838C7C135F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w_wireless-ac_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F17A5C-FFA3-4E87-9015-FA90ED6E2C71"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.02",
            "matchCriteriaId" : "C37623FE-BDD5-42D9-A520-456020A8DCA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD7FED8-F2E5-449F-98C8-E629B0174A8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-filewrite-7x9mnKjn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv160-260-filewrite-7x9mnKjn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1313",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.857",
      "lastModified" : "2024-11-21T05:44:04.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the ingress packet processing function of Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la función de procesamiento de paquetes de entrada de Cisco IOS XR Software, podrían permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.6",
            "matchCriteriaId" : "E3DE37AB-3C40-44C4-9209-FB02FC3C0AF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.4",
            "matchCriteriaId" : "B8CA2C12-106C-4F08-A1FF-DC05C373CD7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dos-WwDdghs2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-dos-WwDdghs2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1314",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:15.937",
      "lastModified" : "2024-11-21T05:44:04.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto inyecte comandos arbitrarios que se ejecutan con privilegios de root.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas a un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1315",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.027",
      "lastModified" : "2024-11-21T05:44:04.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto inyecte comandos arbitrarios que se ejecutan con privilegios de root.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas a un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1316",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.090",
      "lastModified" : "2024-11-21T05:44:04.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto inyecte comandos arbitrarios que se ejecutan con privilegios de root.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas a un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1317",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.170",
      "lastModified" : "2024-11-21T05:44:04.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto inyecte comandos arbitrarios que se ejecutan con privilegios de root.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas a un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1318",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.247",
      "lastModified" : "2024-11-21T05:44:04.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to inject arbitrary commands that are executed with root privileges. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on an affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto inyecte comandos arbitrarios que se ejecutan con privilegios de root.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas a un dispositivo apuntado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente.&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en un dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-command-inject-BY4c5zd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1319",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.310",
      "lastModified" : "2024-11-21T05:44:05.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1320",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.437",
      "lastModified" : "2024-11-21T05:44:05.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1321",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.513",
      "lastModified" : "2024-11-21T05:44:05.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1322",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.590",
      "lastModified" : "2024-11-21T05:44:05.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1323",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.687",
      "lastModified" : "2024-11-21T05:44:05.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1324",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.763",
      "lastModified" : "2024-11-21T05:44:05.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1325",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.840",
      "lastModified" : "2024-11-21T05:44:05.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1326",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.920",
      "lastModified" : "2024-11-21T05:44:06.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1327",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:16.997",
      "lastModified" : "2024-11-21T05:44:06.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1328",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.077",
      "lastModified" : "2024-11-21T05:44:06.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1329",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.153",
      "lastModified" : "2024-11-21T05:44:06.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1330",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.247",
      "lastModified" : "2024-11-21T05:44:06.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1331",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.327",
      "lastModified" : "2024-11-21T05:44:06.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1332",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.403",
      "lastModified" : "2024-11-21T05:44:06.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1333",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.483",
      "lastModified" : "2024-11-21T05:44:07.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1334",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.560",
      "lastModified" : "2024-11-21T05:44:07.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1335",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.637",
      "lastModified" : "2024-11-21T05:44:07.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1336",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.717",
      "lastModified" : "2024-11-21T05:44:07.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1337",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.793",
      "lastModified" : "2024-11-21T05:44:07.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1338",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.873",
      "lastModified" : "2024-11-21T05:44:07.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1339",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:17.937",
      "lastModified" : "2024-11-21T05:44:07.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1340",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.013",
      "lastModified" : "2024-11-21T05:44:08.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1341",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.077",
      "lastModified" : "2024-11-21T05:44:08.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1342",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.187",
      "lastModified" : "2024-11-21T05:44:08.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1343",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.293",
      "lastModified" : "2024-11-21T05:44:08.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1344",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.357",
      "lastModified" : "2024-11-21T05:44:08.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1345",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.437",
      "lastModified" : "2024-11-21T05:44:08.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1346",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.527",
      "lastModified" : "2024-11-21T05:44:08.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1347",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.607",
      "lastModified" : "2024-11-21T05:44:08.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar a un dispositivo afectado se reiniciar inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1348",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.687",
      "lastModified" : "2024-11-21T05:44:09.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. These vulnerabilities are due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit these vulnerabilities by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition. To exploit these vulnerabilities, an attacker would need to have valid administrator credentials on the affected device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de los Enrutadores Cisco Small Business RV016, RV042, RV042G, RV082, RV320 y RV325, podrían permitir a un atacante autenticado remoto ejecutar código arbitrario o causar que un dispositivo afectado se reinicie inesperadamente.&#xa0;Estas vulnerabilidades son debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS).&#xa0;Para explotar estas vulnerabilidades, un atacante necesitaría tener credenciales de administrador válidas en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv016_multi-wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "F8055BE8-27DC-4CE1-969F-1D0326C9EE53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv016_multi-wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD3A05DC-73A0-4D10-AFA3-9854E5BDAED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "0D4DD445-8884-4BBB-A011-B0E74DD14CFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DA24161-1876-4ABB-9E59-58481A209C74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv042g_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "6058E39A-C999-4696-88C7-FC385B70D62A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv042g_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538E52FC-C111-41D3-B964-68F96B1568C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv082_dual_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.3.14",
            "matchCriteriaId" : "A43019F1-F77B-4D7E-942B-6E6B983BA52B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv082_dual_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3591314E-434D-47C6-9BD1-B66C666A18D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv320_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "1C7A72C8-3A94-4332-A53D-2129D862FBF4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv320_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A4073CB-F6EB-41BA-B1B7-ABCAF5F1BEF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv325_dual_gigabit_wan_vpn_router_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1.11",
            "matchCriteriaId" : "D84282B7-45EE-44DF-AC87-74EFA127992C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv325_dual_gigabit_wan_vpn_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E13B567-A64D-46E3-A740-427A5C783B51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-overflow-ghZP68yj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1354",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.763",
      "lastModified" : "2024-11-21T05:44:09.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the certificate registration process of Cisco Unified Computing System (UCS) Central Software could allow an authenticated, adjacent attacker to register a rogue Cisco Unified Computing System Manager (UCSM). This vulnerability is due to improper certificate validation. An attacker could exploit this vulnerability by sending a crafted HTTP request to the registration API. A successful exploit could allow the attacker to register a rogue Cisco UCSM and gain access to Cisco UCS Central Software data and Cisco UCSM inventory data."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de registro de certificados del Software Cisco Unified Computing System (UCS) Central, podría permitir a un atacante adyacente autenticado registrar un Cisco Unified Computing System Manager (UCSM) malicioso.&#xa0;Esta vulnerabilidad es debido a una comprobación inapropiada del certificado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada hacia la API de registro.&#xa0;Una explotación con éxito podría permitir al atacante registrar un Cisco UCSM malicioso y conseguir acceso a los datos del Software Cisco UCS Central y los datos del inventario de Cisco UCSM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system_central_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0\\(1m\\)",
            "matchCriteriaId" : "F1170ACD-B57A-4522-BC6F-0AAF00746E70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-invcert-eOpRvCKH",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucs-invcert-eOpRvCKH",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1370",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.857",
      "lastModified" : "2024-11-21T05:44:11.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images could allow an authenticated, local attacker to elevate their privilege to root. To exploit this vulnerability, an attacker would need to have a valid account on an affected device. The vulnerability is due to insufficient validation of command line arguments. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the prompt. A successful exploit could allow an attacker with low-level privileges to escalate their privilege level to root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un comando de CLI de Cisco IOS XR Software, para los Enrutadores Cisco 8000 Series y los Enrutadores Network Convergence System 540 Series que ejecutan imágenes de software de NCS540L, podría permitir a un atacante local autenticado elevar su privilegio a root.&#xa0;Para explotar esta vulnerabilidad, un atacante necesitaría tener una cuenta válida en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de los argumentos de la línea de comandos.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en el dispositivo e ingresar un comando diseñado en el indicador.&#xa0;Una explotación con éxito podría permitir a un atacante con privilegios de bajo nivel escalar su nivel de privilegio a root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.12",
            "matchCriteriaId" : "9CED0163-5695-4267-8677-1E2C42D73FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "DDFFC1A3-D76E-4CF9-97F8-D45493CFF949"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8201:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E7FFF-82A8-4ECB-BA0C-CBF0C2FDA3A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8202:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DC4C2F-01C5-4D89-8D79-E5D28EDAD0F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8808:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E2AE67-DED3-4414-A194-386ADB2C8DC7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8812:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3920133A-684D-4A9F-B65A-FF4EAE5052E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:8818:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED06361-5A68-4656-AEA5-240C290594CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "9EEE27AF-9402-4DFA-B1CF-E51972485918"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pe-QpzCAePe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxr-pe-QpzCAePe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1389",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-04T17:15:18.937",
      "lastModified" : "2024-11-21T05:44:14.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the IPv6 traffic processing of Cisco IOS XR Software and Cisco NX-OS Software for certain Cisco devices could allow an unauthenticated, remote attacker to bypass an IPv6 access control list (ACL) that is configured for an interface of an affected device. The vulnerability is due to improper processing of IPv6 traffic that is sent through an affected device. An attacker could exploit this vulnerability by sending crafted IPv6 packets that traverse the affected device. A successful exploit could allow the attacker to access resources that would typically be protected by the interface ACL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento del tráfico IPv6 del Software Cisco IOS XR,  y el Software Cisco NX-OS para determinados dispositivos Cisco, podría permitir a un atacante remoto no autenticado omitir una lista de control de acceso (ACL) IPv6 configurada para una interfaz de un dispositivo afectado.&#xa0;La vulnerabilidad es debido al procesamiento inapropiado del tráfico IPv6 que se envía por medio de un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes IPv6 diseñados que atraviesan el dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante acceder a recursos que normalmente estarían protegidos por la interfaz ACL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "3B76CC85-2825-44F1-BE8A-3F01573BC199"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24DF4040-86A9-46CA-8BAB-04D6016751D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:7.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BABFE7-1350-4FB0-B9ED-5F08E386BC40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC7AE6C1-B7C6-4056-9719-B5CFF71970AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A972EFE-4F7E-4BFC-8631-66A2D16B74A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5501-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B254955-C485-45D7-A19B-E78CE1D997AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F72AEF0-EE70-40F8-B52B-1390820B87BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5502-se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C7B71A-2559-4E90-BAAA-C6FAAFE35FC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43D21B01-A754-474F-8E46-14D733AB307E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_5516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D6424C-972F-459C-B8F7-04FFD9F541BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ncs_560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CC8256-E4F8-4DCB-B69A-40A7C5AA41E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA35D4AA-24B3-428E-84ED-804EF941E9A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97217080-455C-48E4-8CE1-6D5B9485864F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9500_r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE07E8D4-376D-4341-A656-F8440368A8A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-acl-CHgdYk8j",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipv6-acl-CHgdYk8j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0343",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.373",
      "lastModified" : "2024-11-21T05:42:32.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In kisd, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05449962."
      }, {
        "lang" : "es",
        "value" : "En kisd, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites .&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05449962"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0344",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.467",
      "lastModified" : "2024-11-21T05:42:33.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mtkpower, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05437558."
      }, {
        "lang" : "es",
        "value" : "En mtkpower, se presenta una posible corrupción de la memoria debido a una falta de comprobación de límites. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. No es requerida una interacción del usuario para su explotación. Producto: Android; Versioness: Android-10, Android-11; Patch ID: ALPS05437558"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0345",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.530",
      "lastModified" : "2024-11-21T05:42:33.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mobile_log_d, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05432974."
      }, {
        "lang" : "es",
        "value" : "En mobile_log_d, se presenta una posible escalada de privilegios debido a una comprobación inapropiada de la entrada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. No es requerida una interacción del usuario para su explotación. Producto: Android; Versiones: Android-10, Android-11; Patch ID: ALPS05432974"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0346",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.593",
      "lastModified" : "2024-11-21T05:42:33.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vpu, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580."
      }, {
        "lang" : "es",
        "value" : "En vpu, se presenta una posible escritura fuera de límites debido a una comprobación de límites inapropiada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. No es requerida una interacción del usuario para su explotación. Producto: Android; Versiones: Android-10, Android-11; Patch ID: ALPS05371580"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0347",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.657",
      "lastModified" : "2024-11-21T05:42:33.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ccu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05377188."
      }, {
        "lang" : "es",
        "value" : "En ccu, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites. Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios. Es requerida una interacción del usuario para su explotación. Product: Android; Versiones: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05377188."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0348",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.717",
      "lastModified" : "2024-11-21T05:42:33.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vpu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05349201."
      }, {
        "lang" : "es",
        "value" : "En vpu, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. No es requerida una interacción del usuario para su explotación. Producto: Android; Versiones: Android-9, Android-10, Android-11; Patch ID: ALPS05349201"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0349",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.780",
      "lastModified" : "2024-11-21T05:42:33.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In display driver, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-9, Android-10, Android-11; Patch ID: ALPS05362646."
      }, {
        "lang" : "es",
        "value" : "En el controlador de pantalla, se presenta una posible corrupción de la memoria debido a un uso de la memoria previamente liberada. Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System necesarios. No es requerida una interacción del usuario para su explotación. Producto: Android; Versiones: Android-9, Android-10, Android-11; Patch ID: ALPS05362646"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0350",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.843",
      "lastModified" : "2024-11-21T05:42:33.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ged, there is a possible system crash due to an improper input validation. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05342338."
      }, {
        "lang" : "es",
        "value" : "En ged, se presenta un posible bloqueo del sistema debido a una comprobación inapropiada de la entrada. Esto podría conllevar a una denegación de servicio local con los privilegios de ejecución System necesarios. No es requerida una interacción del usuario para su explotación. Producto: Android; Versiones: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05342338"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0351",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-04T19:15:13.907",
      "lastModified" : "2024-11-21T05:42:33.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wlan driver, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05412917."
      }, {
        "lang" : "es",
        "value" : "En el controlador wlan, se presenta un posible bloqueo del sistema debido a una falta de comprobación de límites. Esto podría conllevar a una denegación de servicio remota sin ser necesarios privilegios de ejecución adicionales. No es requerida una interacción del usuario para su explotación. Producto: Android; Versiones: Android-8.1, Android-9, Android-10, Android-11; Patch ID: ALPS05412917"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25227",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:12.920",
      "lastModified" : "2024-11-21T05:54:35.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Antivirus for Mac 2021 (Consumer) is vulnerable to a memory exhaustion vulnerability that could lead to disabling all the scanning functionality within the application. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability - i.e. the attacker must already have access to the target system (either legitimately or via another exploit)."
      }, {
        "lang" : "es",
        "value" : "Trend Micro Antivirus para Mac 2021 (Consumer) es susceptible a una vulnerabilidad de agotamiento de la memoria que podría conllevar a deshabilitar todas las funciones de escaneo dentro de la aplicación. Tenga en cuenta: un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo a los fines de explotar esta vulnerabilidad, es decir, el atacante ya debe tener acceso al sistema objetivo (ya sea legítimamente o mediante otro explotación)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus:9.0:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "87824E93-BF46-445B-B7C0-3F4269CADD68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus:10.0:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "431A3FDA-0AAA-4C9A-8752-CB7471854583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus:10.5:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "88E599CE-DC0B-4D65-976F-F24ECA53FD19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus:11.0:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "22653B03-9852-4402-BBCB-9DE72090DE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10191",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-102/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-102/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25228",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.030",
      "lastModified" : "2024-11-21T05:54:35.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about hotfix history."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (local y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información sobre el historial de revisiones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-103/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-103/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25229",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.093",
      "lastModified" : "2024-11-21T05:54:35.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the database server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS) y OfficeScan XG SP1, podría permitir a un usuario no autenticado obtener información sobre el servidor de base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-104/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-104/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25230",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.140",
      "lastModified" : "2024-11-21T05:54:35.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the contents of a scan connection exception file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS) y OfficeScan XG SP1, podría permitir a un usuario no autenticado obtener información sobre el contenido de un archivo de excepción de conexión de escaneo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-105/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-105/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25231",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.217",
      "lastModified" : "2024-11-21T05:54:35.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific hotfix history file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información sobre un archivo del histórico de revisiones específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-106/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-106/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25232",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.280",
      "lastModified" : "2024-11-21T05:54:35.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about the SQL database."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS) y OfficeScan XG SP1, podría permitir a un usuario no autenticado obtener información sobre la base de datos SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-107/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-107/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25233",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.343",
      "lastModified" : "2024-11-21T05:54:35.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific configuration download file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información sobre un archivo de descarga de configuración específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-108/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-108/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25234",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.420",
      "lastModified" : "2024-11-21T05:54:35.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about a specific notification configuration file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información sobre un archivo de configuración de notificación específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-109/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-109/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25235",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.483",
      "lastModified" : "2024-11-21T05:54:36.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS) and OfficeScan XG SP1 could allow an unauthenticated user to obtain information about a content inspection configuration file."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS) y OfficeScan XG SP1, podría permitir a un usuario no autenticado obtener información sobre un archivo de configuración de inspección de contenido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-110/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-110/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25236",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.547",
      "lastModified" : "2024-11-21T05:54:36.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información de falsificación de petición del lado del servidor (SSRF) en Trend Micro OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado localizar agentes en línea mediante un barrido específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-120/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-120/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25237",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.640",
      "lastModified" : "2024-11-21T05:54:36.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem) could allow an unauthenticated user to obtain information about the managing port used by agents."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises), podría permitir a un usuario no autenticado obtener información sobre el puerto de administración usado por los agentes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-111/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-111/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25238",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.797",
      "lastModified" : "2024-11-21T05:54:36.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about an agent's managing port."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información del control de acceso incorrecta en Trend Micro OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información sobre el puerto de administración de un agente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-121/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-121/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25239",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.857",
      "lastModified" : "2024-11-21T05:54:36.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain information about x86 agent hotfixes."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información sobre las revisiones de agentes x86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-112/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-112/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25240",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:13.920",
      "lastModified" : "2024-11-21T05:54:36.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain x64 agent hofitx information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información de las revisiones de agentes x86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-113/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-113/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25241",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.000",
      "lastModified" : "2024-11-21T05:54:36.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a sweep."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información de tipo server-side request forgery (SSRF) en Trend Micro Apex One y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado localizar agentes en línea mediante un barrido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-114/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-114/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25242",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.060",
      "lastModified" : "2024-11-21T05:54:36.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain version and build information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información de la versión y compilación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-115/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-115/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25243",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.107",
      "lastModified" : "2024-11-21T05:54:37.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain patch level information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security versión 10.0 SP1, podría permitir a un usuario no autenticado obtener información a nivel de parche"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-116/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-116/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25244",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.170",
      "lastModified" : "2024-11-21T05:54:37.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of configuration informaiton."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inadecuada en Worry-Free Business Security versión 10.0 SP1 podría permitir a un usuario no autenticado obtener varios elementos de información de configuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-123/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-123/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25245",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.250",
      "lastModified" : "2024-11-21T05:54:37.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to obtain various pieces of settings informaiton."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inadecuada en Worry-Free Business Security versión 10.0 SP1 podría permitir a un usuario no autenticado obtener varios datos de configuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-122/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-122/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25246",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.297",
      "lastModified" : "2024-11-21T05:54:37.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control information disclosure vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1, and Worry-Free Business Security could allow an unauthenticated user to create a bogus agent on an affected server that could be used then make valid configuration queries."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información del control de acceso inapropiado en Trend Micro Apex One, Apex One as a Service, OfficeScan XG SP1 y Worry-Free Business Security, podría permitir que un usuario no autenticado cree un agente falso en un servidor afectado que podría ser usado luego para hacer consultas de configuración válidas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-117/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-117/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25248",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.373",
      "lastModified" : "2024-11-21T05:54:37.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow an attacker to disclose sensitive information about a named pipe. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información de lectura fuera de límites en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security (versión 10.0 SP1 y Servicios), podría permitir a un atacante divulgar información confidencial sobre una tubería nombrada. Tome en cuenta: un atacante debe primero obtener la capacidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-118/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-118/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25249",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-04T20:15:14.437",
      "lastModified" : "2024-11-21T05:54:37.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write information disclosure vulnerability in Trend Micro Apex One (on-prem and SaaS), OfficeScan XG SP1, and Worry-Free Business Security (10.0 SP1 and Services) could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información de escritura fuera de límites en Trend Micro Apex One (on premises y SaaS), OfficeScan XG SP1 y Worry-Free Business Security (versión 10.0 SP1 y servicios) podría permitir a un atacante local escalar privilegios en las instalaciones afectadas. Tenga en cuenta: un atacante debe primero obtener la capacidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCE8717-85D2-4F4F-91DF-C6DA341C4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-119/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000284206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-119/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20623",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-05T14:15:17.590",
      "lastModified" : "2024-11-21T05:46:53.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Video Insight VMS versions prior to 7.8 allows a remote attacker to execute arbitrary code with the system user privilege by sending a specially crafted request."
      }, {
        "lang" : "es",
        "value" : "Video Insight VMS versiones anteriores a 7.8, permiten a un atacante remoto ejecutar código arbitrario con privilegios del usuario system mediante el envío de una petición especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:panasonic:video_insight_vms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.8",
            "matchCriteriaId" : "C54AA40F-EE38-4A76-802A-66B5E25CCFFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://downloadvi.com/downloads/IPServer/v7.8/780182/v780182RN.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42252698/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://downloadvi.com/downloads/IPServer/v7.8/780182/v780182RN.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42252698/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20652",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-05T14:15:17.700",
      "lastModified" : "2024-11-21T05:46:56.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site request forgery (CSRF) en Name Directory versiones 1.17.4 y anteriores, permite a atacantes remotos secuestrar la autenticación de los administradores por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:name_directory_project:name_directory:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.17.4",
            "matchCriteriaId" : "AA4C3015-7A08-4335-B85B-D8727FA48CFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN50470170/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/name-directory/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN50470170/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/name-directory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T14:15:18.780",
      "lastModified" : "2024-11-21T05:56:42.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation was discovered in the Linux kernel before 5.10.13. Multiple race conditions in the AF_VSOCK implementation are caused by wrong locking in net/vmw_vsock/af_vsock.c. The race conditions were implicitly introduced in the commits that added VSOCK multi-transport support."
      }, {
        "lang" : "es",
        "value" : "Se detectó una escalada de privilegios local en el kernel de Linux versiones anteriores a 5.10.13.&#xa0;Múltiples condiciones de carrera en la implementación de AF_VSOCK son causadas mediante un bloqueo incorrecto en el archivo net/vmw_vsock / af_vsock.c.&#xa0;Las condiciones de carrera se introdujeron implícitamente en las commits que agregaron soporte de transporte múltiple de VSOCK"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.13",
            "matchCriteriaId" : "3BAC0A75-D645-4EBB-AACE-66F1241386BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:aff_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C0ADE5D-F91D-4E0D-B6C5-3511B19665F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:fas_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD5AF44-1C16-4F25-84C1-8AE3CD89B7B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83FAD281-BF77-4A8A-8F29-B557A6903BE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:baseboard_management_controller_500f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.3",
            "matchCriteriaId" : "C89007F1-A34D-4C65-B563-22A34440B9F0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21DE67F-CDFD-4D36-9967-633CD0240C6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:baseboard_management_controller_a250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.3",
            "matchCriteriaId" : "3E596F9C-2F51-4D38-82B5-A934A482D58D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DFC67-46BB-4FC2-BE03-3C65C9311F65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:hci_h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C564D8-E21F-403C-B4BB-7B14B7FB5DAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:hci_h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8532F5F0-00A1-4FA9-A80B-09E46D03F74F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/05/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/09/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/01/25/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/04/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/05/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/09/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/01/25/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.10.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=c518adafa39f37858697ac9309c6cf1805581446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/04/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T14:15:18.840",
      "lastModified" : "2024-11-21T05:56:43.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript via the signIn.do urll parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en el panel de inicio de sesión en Redwood Report2Web versión 4.3.4.5, y 4.5.3, permite a atacantes remotos inyectar JavaScript por medio del parámetro urll signIn.do"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redwood:report2web:4.3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB46A11-E014-45AB-9628-D744A385E7FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redwood:report2web:4.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA1FB3A7-D2CB-44AB-975F-EBB294608934"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vict0ni.me/redwood-report2web-xss-and-frame-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vict0ni.me/report2web-xss-frame-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vict0ni.me/redwood-report2web-xss-and-frame-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vict0ni.me/report2web-xss-frame-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26711",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T14:15:18.903",
      "lastModified" : "2024-11-21T05:56:43.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A frame-injection issue in the online help in Redwood Report2Web 4.3.4.5 allows remote attackers to render an external resource inside a frame via the help/Online_Help/NetHelp/default.htm turl parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección de trama en la ayuda en línea en Redwood Report2Web versión 4.3.4.5, permite a atacantes remotos representar un recurso externo dentro de un frame por medio del parámetro turl del archivo help/Online_Help/NetHelp/default.htm"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redwood:report2web:4.3.4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB46A11-E014-45AB-9628-D744A385E7FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vict0ni.me/redwood-report2web-xss-and-frame-injection/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vict0ni.me/report2web-xss-frame-injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://vict0ni.me/redwood-report2web-xss-and-frame-injection/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://vict0ni.me/report2web-xss-frame-injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3311",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T14:15:19.153",
      "lastModified" : "2024-11-21T06:21:15.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in October through build 471. It reactivates an old session ID (which had been invalid after a logout) once a new login occurs. NOTE: this violates the intended Auth/Manager.php authentication behavior but, admittedly, is only relevant if an old session ID is known to an attacker."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en October hasta el build 471. Reactiva una ID de una sesión anterior (que había sido no válida después de cerrar la sesión) una vez que se produce un nuevo inicio de sesión.&#xa0;NOTA: esto viola el comportamiento de autenticación del archivo Auth/Manager.php previsto pero, cierto es que, solo es relevante si un ID de sesión antiguo es conocido por el atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.471",
            "matchCriteriaId" : "C6BF448C-7017-428E-B9BF-40069ACD3990"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://anisiosantos.me/october-cms-token-reactivation",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/library/commit/642f597489e6f644d4bd9a0c267e864cabead024",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://octobercms.com/forum/chan/announcements",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://anisiosantos.me/october-cms-token-reactivation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/library/commit/642f597489e6f644d4bd9a0c267e864cabead024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://octobercms.com/forum/chan/announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3333",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T14:15:19.310",
      "lastModified" : "2024-11-21T06:21:19.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opmantek Open-AudIT 4.0.1 is affected by cross-site scripting (XSS). When outputting SQL statements for debugging, a maliciously crafted query can trigger an XSS attack. This attack only succeeds if the user is already logged in to Open-AudIT before they click the malicious link."
      }, {
        "lang" : "es",
        "value" : "Opmantek Open-AudIT versión 4.0.1, está afectado por una vulnerabilidad de tipo cross-site scripting.&#xa0;Al generar sentencias SQL para depuración, una consulta diseñada con fines maliciosos puede desencadenar un ataque de tipo XSS.&#xa0;Este ataque solo tiene éxito si el usuario ya había iniciado sesión en Open-AudIT antes de hacer clic en el enlace malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opmantek:open-audit:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EB5AED4-3D7E-4F43-965B-A172340A956A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.opmantek.com/display/OA/Errata+-+4.0.1+XSS+in+SQL+debugging+output",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://community.opmantek.com/display/OA/Errata+-+4.0.1+XSS+in+SQL+debugging+output",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T16:15:12.757",
      "lastModified" : "2024-11-21T06:21:10.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Question2Answer Q2A Ultimate SEO Version 1.3 is affected by cross-site scripting (XSS), which may lead to arbitrary remote code execution."
      }, {
        "lang" : "es",
        "value" : "Question2Answer Q2A Ultimate SEO Version 1.3, está afectada por una vulnerabilidad de tipo cross-site scripting (XSS), que puede conllevar a una ejecución de código remota arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qa-themes:q2a_ultimate_seo:1.3:*:*:*:*:question2answer:*:*",
            "matchCriteriaId" : "59B8670C-DA96-4018-9001-78929478BC1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/q2a-projects/Q2A-Ultimate-SEO/commit/20069f28147c6f2c3acca4e3f6f5154537c5d536",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nirmaldahal.com.np/sxss-to-defacement-and-account-takeover/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.question2answer.org/qa/58520/important-q2a-ultimate-seo-important-update",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/q2a-projects/Q2A-Ultimate-SEO/commit/20069f28147c6f2c3acca4e3f6f5154537c5d536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://nirmaldahal.com.np/sxss-to-defacement-and-account-takeover/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.question2answer.org/qa/58520/important-q2a-ultimate-seo-important-update",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3382",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T16:15:12.820",
      "lastModified" : "2024-11-21T06:21:23.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow vulnerability in gitea 1.9.0 through 1.13.1 allows remote attackers to cause a denial of service (crash) via vectors related to a file path."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento del búfer de la pila en gitea versiones 1.9.0 hasta 1.13.1, permite a atacantes remotos causar una denegación de servicio (bloqueo) por medio de vectores relacionados con una ruta de archivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndIncluding" : "1.13.1",
            "matchCriteriaId" : "F2081EC6-EBD1-4509-BF9B-3B165DD1A251"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-gitea/gitea/pull/14390",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/14390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26722",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T18:15:12.690",
      "lastModified" : "2024-11-21T05:56:44.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LinkedIn Oncall through 1.4.0 allows reflected XSS via /query because of mishandling of the \"No results found for\" message in the search bar."
      }, {
        "lang" : "es",
        "value" : "LinkedIn Oncall versiones hasta 1.4.0, permite un ataque de tipo XSS reflejado por medio de /query debido al manejo inapropiado del mensaje \"No results found for\" en la barra de búsqueda"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linkedin:oncall:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.4.0",
            "matchCriteriaId" : "DCD66815-E6CB-43FE-8F10-F1F1ABEADCEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/linkedin/oncall/issues/341",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/linkedin/oncall/issues/341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1072",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-02-05T20:15:13.293",
      "lastModified" : "2024-11-21T05:43:32.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream (rxdiag.dll) where an arbitrary file deletion due to improper handling of log files may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GeForce Experience, en todas las versiones anteriores a 3.21, contiene una vulnerabilidad en GameStream (la biblioteca rxdiag.dll) en la que un borrado arbitrario de archivos debido a una gestión inapropiada de los archivos de registro puede conllevar a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.21",
            "matchCriteriaId" : "91402050-426D-45B6-9A40-A4ABBD3B66EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5155",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21303",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-05T22:15:12.640",
      "lastModified" : "2024-11-21T05:47:58.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Helm is open-source software which is essentially \"The Kubernetes Package Manager\". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted sources was not properly sanitized. When a SemVer in the `version` field of a chart is invalid, in some cases Helm allows the string to be used \"as is\" without sanitizing. Helm fails to properly sanitized some fields present on Helm repository `index.yaml` files. Helm does not properly sanitized some fields in the `plugin.yaml` file for plugins In some cases, Helm does not properly sanitize the fields in the `Chart.yaml` file. By exploiting these attack vectors, core maintainers were able to send deceptive information to a terminal screen running the `helm` command, as well as obscure or alter information on the screen. In some cases, we could send codes that terminals used to execute higher-order logic, like clearing a terminal screen. Further, during evaluation, the Helm maintainers discovered a few other fields that were not properly sanitized when read out of repository index files. This fix remedies all such cases, and once again enforces SemVer2 policies on version fields. All users of the Helm 3 should upgrade to the fixed version 3.5.2 or later. Those who use Helm as a library should verify that they either sanitize this data on their own, or use the proper Helm API calls to sanitize the data."
      }, {
        "lang" : "es",
        "value" : "\"Helm es un software de código abierto que es esencialmente \"\"The Kubernetes Package Manager\"\". Helm es una herramienta para gestionar Gráficos. Los Gráficos son paquetes de recursos Kubernetes preconfigurados. En Helm versiones desde 3.0 y anteriores a 3.5.2, había algunos casos en los que los datos cargados desde fuentes potencialmente no confiables no eran saneados apropiadamente. Cuando un SemVer en el campo \"\"version\"\" de un gráfico no es válido, en algunos casos Helm permite que la cadena sea usada \"\"as is\"\" sin sanearla. Helm no sanea apropiadamente algunos campos presentes en los archivos \"\"index.yaml\"\" del repositorio Helm. Helm no sanea correctamente algunos campos del fichero \"\"plugin.yaml\"\" para los plugins En algunos casos, Helm no sanea apropiadamente los campos del fichero \"\"Chart.yaml\"\". Al explotar estos vectores de ataque, los mantenedores principales fueron capaces de enviar información engañosa a una pantalla de terminal que ejecutaba el comando \"\"helm\"\", así como oscurecer o alterar la información en la pantalla. En algunos casos, podíamos enviar códigos que los terminales usaban para ejecutar lógica de orden superior, como borrar la pantalla de un terminal. Además, durante la evaluación, los mantenedores de Helm detectaron algunos otros campos que no estaban apropiadamente saneados cuando se leían desde los archivos de índice del repositorio. Esta corrección remedia todos estos casos, y una vez más aplica las políticas de SemVer2 en los campos version. Todos los usuarios de Helm 3 deberían actualizar a la versión corregida 3.5.2 o posterior. Aquellos que usen Helm como una biblioteca deberían verificar que sanean estos datos por su cuenta, o que usan las llamadas apropiadas a la API de Helm para sanear los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:helm:helm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.5.2",
            "matchCriteriaId" : "643A27EB-FF84-4B1D-8FD1-A6CFA877D23C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/helm/helm/commit/6ce9ba60b73013857e2e7c73d3f86ed70bc1ac9a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helm/helm/releases/tag/v3.5.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helm/helm/commit/6ce9ba60b73013857e2e7c73d3f86ed70bc1ac9a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helm/helm/releases/tag/v3.5.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/helm/helm/security/advisories/GHSA-c38g-469g-cmgx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-05T22:15:13.830",
      "lastModified" : "2024-11-21T06:21:08.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use of device setup services via continuous login error."
      }, {
        "lang" : "es",
        "value" : "Una denegación de servicio en ASUSWRT ASUS RT-AX3000 versiones de firmware 3.0.0.4.384_10177 y anteriores, permiten a un atacante interrumpir el uso de los servicios de configuración del dispositivo por medio de un error de inicio de sesión continuo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax3000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0.4.384_10177",
            "matchCriteriaId" : "8862D392-7AF1-4F4F-B217-54F98E131C4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1515AF83-732F-489B-A25C-5D67A03A3B25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dlcdnimgs.asus.com/websites/global/productcustomizedTab/562/ASUSWRT%20portal%20feature.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fullbbadda1208/CVE-2021-3229",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/us/ASUSWRT/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://dlcdnimgs.asus.com/websites/global/productcustomizedTab/562/ASUSWRT%20portal%20feature.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fullbbadda1208/CVE-2021-3229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/us/ASUSWRT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20176",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-06T00:15:12.920",
      "lastModified" : "2024-11-21T05:46:04.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A divide-by-zero flaw was found in ImageMagick 6.9.11-57 and 7.0.10-57 in gem.c. This flaw allows an attacker who submits a crafted file that is processed by ImageMagick to trigger undefined behavior through a division by zero. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ImageMagick en el archivo MagickCore/gem.c. Un atacante que envía un archivo diseñado que es procesado por ImageMagick podría desencadenar un comportamiento indefinido en la forma de una división matemática por cero. Esto probablemente conllevaría a un impacto en la disponibilidad de la aplicación, pero podría causar potencialmente otros problemas relacionados con un comportamiento indefinido. Este fallo afecta a ImageMagick versiones anteriores a 7.0.10-56"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.11-57",
            "matchCriteriaId" : "7C873805-B51C-4D74-86D1-78B609ADFE21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0-0",
            "versionEndExcluding" : "7.0.10-56",
            "matchCriteriaId" : "006A861C-2D85-45B8-9E73-67FC2416AA86"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1916610",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1916610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22301",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T00:15:13.043",
      "lastModified" : "2024-11-21T05:49:52.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Mate 30 versión 10.0.0.203(C00E201R7P2), presenta una vulnerabilidad de desbordamiento del búfer.&#xa0;Después de obtener el permiso de root, un atacante puede explotar la vulnerabilidad para causar un desbordamiento del búfer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_30_firmware:10.0.0.203\\(c00e201r7p2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84605BC6-A8E9-42B1-BAFE-7D34A1743A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B08C1D-444B-4C8B-B7F9-60CA9B2A8D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-buffer-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-buffer-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22307",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T00:15:13.327",
      "lastModified" : "2024-11-21T05:49:52.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de algoritmo débil en Mate 30 versión 10.0.0.203(C00E201R7P2). La protección es insuficiente para los módulos que deberían estar protegidos. Unos atacantes locales pueden explotar esta vulnerabilidad para afectar la integridad de determinado módulo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_30_firmware:10.0.0.203\\(c00e201r7p2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84605BC6-A8E9-42B1-BAFE-7D34A1743A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B08C1D-444B-4C8B-B7F9-60CA9B2A8D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-06-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-06-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22300",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T01:15:13.747",
      "lastModified" : "2024-11-21T05:49:52.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de filtrado de información en eCNS280_TD versiones V100R005C00 y V100R005C10. Un comando no presenta mecanismo de salida por tiempo de espera. El archivo temporal contiene información confidencial. Esto permite a atacantes conseguir información mediante el acceso entre procesos que requieren otros métodos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns280_td_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18C1EB72-9E1B-4ECD-9FEF-9B4AC5625E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns280_td_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B5F31C0-805E-4AB7-9BC6-EEB6FE5275F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ecns280_td:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900FA565-05B8-41E9-BE02-9BC4E14A28F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-cgp-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22303",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T01:15:13.810",
      "lastModified" : "2024-11-21T05:49:52.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de doble liberación de puntero en Taurus-AL00A versión 10.0.0.1(C00E1R1P1).&#xa0;Se presenta una falta de protección entre múltiples subprocesos cuando es llamada una función.&#xa0;Unos atacantes pueden explotar esta vulnerabilidad al llevar a cabo una operación maliciosa para causar una doble liberación de puntero.&#xa0;Esto puede causar un bloqueo del módulo, comprometiendo el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:taurus-al00a_firmware:10.0.0.1\\(c00e1r1p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1110292D-92A1-4B57-BFE6-042389ED1C2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:taurus-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369D8168-4BFA-4003-A332-3E6876459623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-02-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-02-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22306",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T01:15:13.870",
      "lastModified" : "2024-11-21T05:49:52.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de lectura fuera de límites en Mate 30 versión 10.0.0.182(C00E180R6P2). Un módulo no comprueba algunas entradas cuando se trata de mensajes. Los atacantes pueden explotar esta vulnerabilidad mediante el envió de entradas maliciosas por medio de un módulo específico. Esto podría causar una salida de servicio, comprometiendo el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_30_firmware:10.0.0.182\\(c00e180r6p2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "082E82E6-9018-4A0B-9C78-4B1FE663E5EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B08C1D-444B-4C8B-B7F9-60CA9B2A8D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-05-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22499",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-02-06T01:15:13.917",
      "lastModified" : "2024-11-21T05:50:13.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Persistent Cross-Site scripting vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow persistent XSS attack."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site scripting persistente en el producto Micro Focus Application Performance Management, afecta a versiones 9.40, 9.50 y 9.51.&#xa0;La vulnerabilidad podría permitir un ataque de tipo XSS persistente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C520D74-D011-4C1E-9429-BA0A38BC0D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3938F6-E50A-480B-8219-0B210983525E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C419162B-A41C-49D0-9293-5F10B8A911EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03775253",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03775253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22298",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T02:15:12.603",
      "lastModified" : "2024-11-21T05:49:51.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de lógica en el producto Huawei Gauss100 OLTP. Un atacante con determinados permisos podría llevar a cabo una sentencia SQL específica para explotar esta vulnerabilidad. Debido a un diseño de seguridad insuficiente, una explotación con éxito puede causar un servicio anormal. Las versiones del producto afectadas incluyen: ManageOne versiones 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5 .1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200 .B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*",
            "matchCriteriaId" : "4042FC49-4FC7-46B4-8D14-ECACF22A9860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D8799F-9ADD-442F-BC39-4BCAFBFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*",
            "matchCriteriaId" : "535597A4-29C8-44A8-9008-4F4E10030531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b070:*:*:*:*:*:*",
            "matchCriteriaId" : "43839F73-570C-47F7-863C-1648884423FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc1.b080:*:*:*:*:*:*",
            "matchCriteriaId" : "186BE073-131F-4B46-BD3D-A2BFEE1B8B2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b040:*:*:*:*:*:*",
            "matchCriteriaId" : "22A7E167-9739-49D4-9A77-AF1AF9A078E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BC229B-6867-4FEA-925B-6B01AFC0301F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b060:*:*:*:*:*:*",
            "matchCriteriaId" : "D1B4DD08-EF8C-4E20-9940-13A7F2E33405"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b070:*:*:*:*:*:*",
            "matchCriteriaId" : "74918254-E81D-4F4A-AB43-6A47B04D9670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b080:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC764B8-9EDA-44B8-9879-125FB2CBAAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2.b090:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E37AAA-C721-4BE9-9BF3-26D6ECC2EE6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc100.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "C59C64B0-D42D-4515-BD2B-4FE5C7F48BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b010:*:*:*:*:*:*",
            "matchCriteriaId" : "698B071C-FC52-40CD-BBA7-53426051F504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc101.b040:*:*:*:*:*:*",
            "matchCriteriaId" : "F6461FE1-99CC-48E4-8134-F17D895511F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5AE38A-627F-4337-949D-A5811D6859EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b010:*:*:*:*:*:*",
            "matchCriteriaId" : "29FEC933-0E52-496B-A2B3-C84E65E5B430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b030:*:*:*:*:*:*",
            "matchCriteriaId" : "16F30BF5-4510-4AC7-8B12-6D4126C2DC60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b040:*:*:*:*:*:*",
            "matchCriteriaId" : "37090D37-0CDF-464B-9509-4F465D20C8C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "83B2B033-F12C-487E-8245-3F5BBF59BBC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b060:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADF4433-A950-4A00-A4F7-12F766B4C947"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200.b070:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF3EB4D-6892-4572-B1D6-6183FE8B8D66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C07C03B-18BA-4EA3-A73F-3E6E839252F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "psirt@huawei.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-01-gauss-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22299",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T02:15:12.680",
      "lastModified" : "2024-11-21T05:49:52.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne versions 6.5.0,6.5.0.SPC100.B210,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100; NFV_FusionSphere versions 6.5.1.SPC23,8.0.0.SPC12; SMC2.0 versions V600R019C00,V600R019C10; iMaster MAE-M versions MAE-TOOL(FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escalada de privilegios local en algunos productos Huawei. Un atacante autentificado local podría diseñar comandos específicos para explotar esta vulnerabilidad. Una explotación con éxito puede hacer que un atacante obtenga un mayor privilegio. Las versiones de producto afectadas incluyen:  ManageOne versiones 6.5.0, 6.5.0.SPC100.B210, 6.5.1.1.B010, 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1 .SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B060, 6.5.1RC2.B020, 6.5.1RC2.B030, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090, 6.5.RC2.B050, 8.0.0, 8.0.0-LCND81, 8.0.0.SPC100, 8.0.1, 8.0.RC2, 8.0.RC3, 8.0.RC3.B041, 8.0.RC3.SPC100;&#xa0;NFV_FusionSphere versiones 6.5.1.SPC23, 8.0.0.SPC12; SMC2.0 versiones V600R019C00,&#xa0;V600R019C10;&#xa0;iMaster MAE-M versiones MAE-TOOL (FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:imaster_mae-m:v100r020c10spc220:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F67A4BC-9424-458A-A24B-2AFF301329C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F14B3716-7A94-42C5-AE2C-9F64C15A43EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.0:rc2.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "E514234B-1DB4-4170-BC73-510058ED5788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.0:spc100.b210:*:*:*:*:*:*",
            "matchCriteriaId" : "1F587216-1355-4DD6-83E2-27CCE4ACC2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CAE8F0E3-8BCA-4059-9BE1-A7BDFD18531A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:*",
            "matchCriteriaId" : "24872541-A493-48BD-AA2C-7A976FF75F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC963F-1160-43D4-B4E4-2CC2B209B4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7820BE-0307-40F3-A7BD-66D5B8C7A0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b040:*:*:*:*:*:*",
            "matchCriteriaId" : "AD086E38-D1F5-4160-A7A2-12E681F686CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "035E4DF1-4B17-448B-8A78-CD81F68D38CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b060:*:*:*:*:*:*",
            "matchCriteriaId" : "DDDB5BDF-9760-4EE6-947D-A633B9CC0D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b070:*:*:*:*:*:*",
            "matchCriteriaId" : "31787857-76F6-4E80-82B7-56B1C12B6628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b080:*:*:*:*:*:*",
            "matchCriteriaId" : "3495FF32-2906-4064-A636-64EB3A06421D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b090:*:*:*:*:*:*",
            "matchCriteriaId" : "73901E08-8C24-46FB-A42D-6457630AA6DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc100.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "A472E9AA-784F-4AE2-B1D8-6C77EA1664B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc101.b010:*:*:*:*:*:*",
            "matchCriteriaId" : "F7CC07B4-FBF6-4AC9-8C54-B7845A068BBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc101.b040:*:*:*:*:*:*",
            "matchCriteriaId" : "36904A81-9DCD-4E65-ADC1-A5A96FA0D939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200:*:*:*:*:*:*",
            "matchCriteriaId" : "481FA740-3E71-443D-99DF-89CA198951A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b010:*:*:*:*:*:*",
            "matchCriteriaId" : "37636652-DC9E-4310-AB33-1C67B85A7BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b030:*:*:*:*:*:*",
            "matchCriteriaId" : "C462984C-407A-4D52-BEDD-7E300482E2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b040:*:*:*:*:*:*",
            "matchCriteriaId" : "154A70F1-C15A-41B1-97B8-89550595BF44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b050:*:*:*:*:*:*",
            "matchCriteriaId" : "B58D9F18-F7B5-4514-978D-EC419614F521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b060:*:*:*:*:*:*",
            "matchCriteriaId" : "BD51B07E-213B-4D32-A121-E2FD124EA1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:spc200.b070:*:*:*:*:*:*",
            "matchCriteriaId" : "7926B343-242E-414B-B573-84DB16A2FCBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:*",
            "matchCriteriaId" : "463A4059-55EF-4862-B8AD-90DCAC0CC871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b020:*:*:*:*:*:*",
            "matchCriteriaId" : "4042FC49-4FC7-46B4-8D14-ECACF22A9860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b030:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D8799F-9ADD-442F-BC39-4BCAFBFFBE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b040:*:*:*:*:*:*",
            "matchCriteriaId" : "535597A4-29C8-44A8-9008-4F4E10030531"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "EFA5EBB8-C174-4CF0-ADE6-15B62C10DD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:lcnd81:*:*:*:*:*:*",
            "matchCriteriaId" : "E9090F1E-EF60-4E54-9885-7F6B1681DE9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "51E51969-9D4D-4A58-BEBD-19F4BD64BC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A1E9FF8-C0A4-47A5-9738-4D0ADB35DAF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:rc3.b041:*:*:*:*:*:*",
            "matchCriteriaId" : "1B552573-DB7A-4454-A832-AE1811A9577C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:rc3.spc100:*:*:*:*:*:*",
            "matchCriteriaId" : "5D17BA55-6032-4BC4-BEB3-4FB27BA81777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:spc100:*:*:*:*:*:*",
            "matchCriteriaId" : "7EDE7C94-7E89-45E6-8A79-32E53D9139DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A8E919-FAC0-4011-927F-599AA7688A32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:network_functions_virtualization_fusionsphere:6.5.1:spc12:*:*:*:*:*:*",
            "matchCriteriaId" : "BD187FC7-B1BE-4BF1-BB6E-AA05CEFE4910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:network_functions_virtualization_fusionsphere:6.5.1:spc23:*:*:*:*:*:*",
            "matchCriteriaId" : "1FBB7636-4E6E-4621-9F42-9CDC8EB472F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r019c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC0656-EE97-43AF-9499-7ED8E31D6458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:smc2.0_firmware:v600r019c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C32980F5-E091-4B2F-A8D3-F30367C8B9C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:smc2.0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDBEFFB4-9742-48CC-BBA6-E5DCA281B343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-02-privilege-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-02-privilege-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22500",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-02-06T02:15:12.743",
      "lastModified" : "2024-11-21T05:50:14.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Request Forgery en el producto Micro Focus Application Performance Management, afectando a versiones 9.40, 9.50 y 9.51.&#xa0;La vulnerabilidad podría ser explotada por un atacante para engañar a usuarios a que ejecuten acciones de su elección"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C520D74-D011-4C1E-9429-BA0A38BC0D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3938F6-E50A-480B-8219-0B210983525E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C419162B-A41C-49D0-9293-5F10B8A911EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03775253",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03775253",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22292",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T03:15:12.720",
      "lastModified" : "2024-11-21T05:49:51.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de denegación de servicio (DoS) en eCNS280 versiones V100R005C00, V100R005C10.&#xa0;Debido a un defecto de diseño, atacantes remotos no autorizados envían una gran cantidad de mensajes específicos a unos dispositivos afectados, causando un agotamiento de los recursos del sistema y una denegación de servicio de la aplicación web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns280_firmware:v100r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "576F98F8-B0AB-4D3F-B1EC-65FD12C91A79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ecns280_firmware:v100r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "375D7506-5F13-4CAA-800F-6C73ADEBF2E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ecns280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35F2A8E0-6BF8-4F16-9E44-B05B8FE72FDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-02-dos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210113-02-dos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22293",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T03:15:12.767",
      "lastModified" : "2024-11-21T05:49:51.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1)."
      }, {
        "lang" : "es",
        "value" : "Algunos productos de Huawei presentan una vulnerabilidad de interpretación inconsistente de peticiones HTTP. Los atacantes pueden explotar esta vulnerabilidad para causar un filtrado de información. Las versiones de producto afectadas son: CampusInsight versiones V100R019C10; ManageOne versiones 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Las versiones de producto afectadas incluyen: Taurus-AL00A versión 10.0.0.1(C00E1R1P1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:campusinsight:v100r019c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "704AA007-5ADB-4376-BF2A-9F2B8D8E2DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "24620D00-5935-4C33-B9E9-474353958727"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "46A79DF7-123C-4AA9-B334-2F38FA663BED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEB49EA-8556-49C8-80F9-682209E12D35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc100:*:*:*:*:*:*",
            "matchCriteriaId" : "290026C4-4A41-42E1-8729-6D682CD98E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:spc200:*:*:*:*:*:*",
            "matchCriteriaId" : "FE5AE38A-627F-4337-949D-A5811D6859EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "51E51969-9D4D-4A58-BEBD-19F4BD64BC7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:taurus-al00a_firmware:10.0.0.1\\(c00e1r1p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1110292D-92A1-4B57-BFE6-042389ED1C2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:taurus-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369D8168-4BFA-4003-A332-3E6876459623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210120-01-http-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22302",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T03:15:12.827",
      "lastModified" : "2024-11-21T05:49:52.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de lectura fuera de límites en Taurus-AL00A versión 10.0.0.1(C00E1R1P1).&#xa0;Un módulo no verifica las entradas. Los atacantes pueden explotar esta vulnerabilidad mediante el envío de entradas maliciosas por medio de una aplicación específica. Esto podría causar una lectura fuera de límites, comprometiendo el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:taurus-al00a_firmware:10.0.0.1\\(c00e1r1p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1110292D-92A1-4B57-BFE6-042389ED1C2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:taurus-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369D8168-4BFA-4003-A332-3E6876459623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22304",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T03:15:12.890",
      "lastModified" : "2024-11-21T05:49:52.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash, compromising normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de uso de la memoria previamente liberada en Taurus-AL00A versión 10.0.0.1(C00E1R1P1).&#xa0;Un módulo puede hacer referencia a alguna memoria después de haberla liberado mientras se ocupa de algunos mensajes. Los atacantes pueden explotar esta vulnerabilidad mediante el envío de un mensaje específico al módulo afectado. Esto puede conllevar a un bloqueo del módulo, comprometiendo el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:taurus-al00a_firmware:10.0.0.1\\(c00e1r1p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1110292D-92A1-4B57-BFE6-042389ED1C2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:taurus-al00a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369D8168-4BFA-4003-A332-3E6876459623"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-03-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-03-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22305",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-02-06T03:15:12.953",
      "lastModified" : "2024-11-21T05:49:52.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de desbordamiento del búfer en Mate 30 versión 10.1.0.126(C00E125R5P3).&#xa0;Un módulo no comprueba alguna entrada cuando se trata de mensajes.&#xa0;Unos atacantes pueden explotar esta vulnerabilidad mediante el envío de  información maliciosa por medio de un módulo específico.&#xa0;Esto podría causar un desbordamiento del búfer, comprometiendo el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:mate_30_firmware:10.1.0.126\\(c00e125r5p3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E7B8BE-4BCC-4556-8A08-B5A55752905F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:mate_30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B08C1D-444B-4C8B-B7F9-60CA9B2A8D50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-04-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210127-04-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26723",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-06T06:15:12.287",
      "lastModified" : "2024-11-21T05:56:45.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS."
      }, {
        "lang" : "es",
        "value" : "Jenzabar versiones 9.2.x hasta 9.2.2, permite un ataque de tipo XSS de /ics?tool=search&amp;query="
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenzabar:jenzabar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndIncluding" : "9.2.2",
            "matchCriteriaId" : "1005D328-E401-4D7A-B717-4F2BD76ECAB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161303/Jenzabar-9.2.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/Y0ung-DST/d1b6b65be6248b0ffc2b2f2120deb205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jenzabar.com/blog",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://y0ungdst.medium.com/xss-in-jenzabar-cve-2021-26723-a0749231328",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161303/Jenzabar-9.2.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/Y0ung-DST/d1b6b65be6248b0ffc2b2f2120deb205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jenzabar.com/blog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://y0ungdst.medium.com/xss-in-jenzabar-cve-2021-26723-a0749231328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-07T20:15:12.543",
      "lastModified" : "2024-11-21T06:20:56.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021. NOTE: the vendor's position is that exploitation occurs only on devices with a certain \"misconfiguration.\""
      }, {
        "lang" : "es",
        "value" : "CMCAgent en el NCR Command Center Agent versión 16.3, en los servidores Aloha POS/BOH permite el envío de un parámetro runCommand (dentro de un documento XML enviado al puerto 8089) que permite una ejecución no autenticada remota de un comando arbitrario como SYSTEM, como se explotó \"in the wild\" en 2020 y/o 2021. NOTA: la posición del proveedor es que la explotación se produce solo en dispositivos con un determinada \"misconfiguration\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ncr:command_center_agent:16.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F18EA2ED-B893-4365-99C4-E177D650BFF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/roughb8722/CVE-2021-3122-Details/blob/main/CVE-2021-3122",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rdf2.alohaenterprise.com/client/CMCInst.zip",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tetradefense.com/incident-response-services/active-exploit-a-remote-code-execution-rce-vulnerability-for-ncr-aloha-point-of-sale/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roughb8722/CVE-2021-3122-Details/blob/main/CVE-2021-3122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rdf2.alohaenterprise.com/client/CMCInst.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tetradefense.com/incident-response-services/active-exploit-a-remote-code-execution-rce-vulnerability-for-ncr-aloha-point-of-sale/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26843",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-07T21:15:11.790",
      "lastModified" : "2024-11-21T05:56:53.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in sthttpd through 2.27.1. On systems where the strcpy function is implemented with memcpy, the de_dotdot function may cause a Denial-of-Service (daemon crash) due to overlapping memory ranges being passed to memcpy. This can triggered with an HTTP GET request for a crafted filename. NOTE: this is similar to CVE-2017-10671, but occurs in a different part of the de_dotdot function."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en sthttpd versiones hasta 2.27.1. En los sistemas en los que la función strcpy es implementada con memcpy, la función de_dotdot puede causar una denegación de servicio (bloqueo del demonio) debido a la superposición de rangos de memoria que se pasan a memcpy. Esto puede desencadenar con una petición HTTP GET para un nombre de archivo diseñado. NOTA: esto es similar a CVE-2017-10671, pero ocurre en una parte diferente de la función de_dotdot"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sthttpd_project:sthttpd:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.27.1",
            "matchCriteriaId" : "A20AC738-9C0B-480E-8C76-37DB8BC6A098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/blueness/sthttpd/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/blueness/sthttpd/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-07T23:15:12.273",
      "lastModified" : "2024-11-21T05:49:37.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenWrt 19.07.x before 19.07.7, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set. This affects the netifd and odhcp6c packages."
      }, {
        "lang" : "es",
        "value" : "En OpenWrt versiones 19.07.x anteriores a 19.07.7, cuando es usado IPv6, puede ocurrir un bucle de enrutamiento que genere un tráfico de red excesivo entre un dispositivo afectado y el enrutador de su ISP ascendente. Esto ocurre cuando una ruta de prefijo de enlace apunta a un enlace de punto a punto, una dirección IPv6 de destino pertenece al prefijo y no es una dirección IPv6 local, y se recibe un anuncio de enrutamiento con al menos un prefijo IPv6 único global para el que es ajustado el flag on-link. Esto afecta a los paquetes netifd y odhcp6c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.07.0",
            "versionEndIncluding" : "19.07.6",
            "matchCriteriaId" : "B9B137F0-E0CB-426E-AB76-3B1FC53097DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://openwrt.org/advisory/2021-02-02-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://openwrt.org/advisory/2021-02-02-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26754",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T00:15:12.337",
      "lastModified" : "2024-11-21T05:56:48.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wpDataTables before 3.4.1 mishandles order direction for server-side tables, aka admin-ajax.php?action=get_wdtable order[0][dir] SQL injection."
      }, {
        "lang" : "es",
        "value" : "wpDataTables versiones anteriores a 3.4.1, maneja inapropiadamente una dirección de pedido para las tablas del lado del servidor, también se conoce como inyección SQL order[0][dir] de admin-ajax.php?action=get_wdtable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdatatables:wpdatatables:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.1",
            "matchCriteriaId" : "8B0C0236-887C-44A8-8CDD-0C5ED0E577DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-i/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpdatatables/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-i/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wpdatatables/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21434",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2021-02-08T11:15:14.080",
      "lastModified" : "2024-11-21T05:48:21.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Survey administrator can craft a survey in such way that malicious code can be executed in the agent interface (i.e. another agent who wants to make changes in the survey). This issue affects: OTRS AG Survey 6.0.x version 6.0.20 and prior versions; 7.0.x version 7.0.19 and prior versions."
      }, {
        "lang" : "es",
        "value" : "El administrador de la encuesta puede diseñar una encuesta tal que pueda ser ejecutado un código malicioso en la interfaz del agente (es decir, otro agente que quiera hacer cambios en la encuesta). Este problema afecta: OTRS AG Survey versiones 6.0.x versión 6.0.20 y versiones anteriores; versiones 7.0.x versión 7.0.19 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:survey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.20",
            "matchCriteriaId" : "B75C7F34-1D0F-479C-B23A-376A390D5BE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:survey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.19",
            "matchCriteriaId" : "FD8886D6-BF8D-465B-848A-059BAEC3875E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-01/",
        "source" : "security@otrs.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21435",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2021-02-08T11:15:14.177",
      "lastModified" : "2024-11-21T05:48:21.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Article Bcc fields and agent personal information are shown when customer prints the ticket (PDF) via external interface. This issue affects: OTRS AG OTRS 7.0.x version 7.0.23 and prior versions; 8.0.x version 8.0.10 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Los campos del Article Bcc y la información personal del agente son mostradas cuando el cliente imprime el ticket (PDF) por medio de una interfaz externa.&#xa0;Este problema afecta a: OTRS AG OTRS versiones 7.0.x versión 7.0.23 y versiones anteriores;&#xa0;versiones 8.0.x versión 8.0.10 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.30",
            "matchCriteriaId" : "EF384B2C-4D2C-48F9-B87F-5C908913624A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.23",
            "matchCriteriaId" : "2D9EF42E-697F-43B8-81B0-81A667782728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.10",
            "matchCriteriaId" : "1457040A-8ECF-4A96-9D65-97FFB4DD9F63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-02/",
        "source" : "security@otrs.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21436",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2021-02-08T11:15:14.237",
      "lastModified" : "2024-11-21T05:48:21.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Unos agentes son capaces de visualizar y vincular elementos de configuración sin permisos, que son definidos en el catálogo general.&#xa0;Este problema afecta a: OTRSCIsInCustomerFrontend de OTRS AG versiones 7.0.x versión 7.0.14 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:cis_in_customer_frontend:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.14",
            "matchCriteriaId" : "2BDAE8C2-7A9A-49D3-9AC3-BFE08E66C116"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-04/",
        "source" : "security@otrs.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20358",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-08T15:15:12.113",
      "lastModified" : "2024-11-21T05:46:27.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965."
      }, {
        "lang" : "es",
        "value" : "IBM Cloud Pak for Automation versiones 20.0.3, 20.0.2-IF002, almacena información potencialmente confidencial en texto sin cifrar en archivos de registro de conexión de la API.&#xa0;Esta información puede ser obtenida por un usuario con permisos para leer archivos de registro.&#xa0;IBM X-Force ID: 194965"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.2:interim_fix002:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6ABD56-851E-4991-BF08-067400784E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F582B55-7409-4F52-8740-3A2BF6BBB7C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194965",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6412345",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6412345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20359",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-08T15:15:12.257",
      "lastModified" : "2024-11-21T05:46:27.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component stores potentially sensitive information in log files that could be obtained by an unauthorized user. IBM X-Force ID: 194966."
      }, {
        "lang" : "es",
        "value" : "IBM Cloud Pak for Automation versiones 20.0.3, 20.0.2-IF002 - Business Automation Application Designer Component, almacena información potencialmente confidencial en archivos de registro que podría obtener un usuario no autorizado.&#xa0;IBM X-Force ID: 194966"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.2:interim_fix002:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6ABD56-851E-4991-BF08-067400784E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F582B55-7409-4F52-8740-3A2BF6BBB7C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194966",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6412345",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194966",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6412345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26825",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T15:15:12.333",
      "lastModified" : "2024-11-21T05:56:51.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow issue exists in Godot Engine up to v3.2 that can be triggered when loading specially crafted.TGA image files. The vulnerability exists in ImageLoaderTGA::load_image() function at line: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size; The bug leads to Dynamic stack buffer overflow. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema de desbordamiento de enteros en Godot Engine versiones hasta v3.2, que puede ser desencadenado al cargar archivos de imagen .TGA especialmente diseñados.&#xa0;La vulnerabilidad se presenta en la función ImageLoaderTGA::load_image() en la línea: const size_t buffer_size = (tga_header.image_width * tga_header.image_height) * pixel_size;&#xa0;El bug conlleva a un desbordamiento del búfer de la pila Dinámica.&#xa0;Dependiendo del contexto de la aplicación, el vector de ataque puede ser local o remoto y puede conllevar a una ejecución del código y/o al bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:godotengine:godot_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "056206AF-90B9-41B1-8AF7-41C28D4AF794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/godotengine/godot/pull/45702",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godotengine/godot/pull/45702/files",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godotengine/godot/pull/45702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godotengine/godot/pull/45702/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T15:15:12.397",
      "lastModified" : "2024-11-21T05:56:52.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow issue exists in Godot Engine up to v3.2 and is caused by improper boundary checks when loading .TGA image files. Depending on the context of the application, attack vector can be local or remote, and can lead to code execution and/or system crash."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema de desbordamiento de la pila en Godot Engine versiones hasta v3.2 y es causado por unas comprobaciones de límites inapropiadas cuando se cargan archivos de imagen .TGA.&#xa0;Dependiendo del contexto de la aplicación, el vector de ataque puede ser local o remoto y puede conllevar a una ejecución del código y/o al bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:godotengine:godot_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2",
            "matchCriteriaId" : "056206AF-90B9-41B1-8AF7-41C28D4AF794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/godotengine/godot/pull/45701",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godotengine/godot/pull/45701/commits/403e4fd08b0b212e96f53d926e6273e0745eaa5a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godotengine/godot/pull/45701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/godotengine/godot/pull/45701/commits/403e4fd08b0b212e96f53d926e6273e0745eaa5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T15:15:12.457",
      "lastModified" : "2024-11-21T06:21:13.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file."
      }, {
        "lang" : "es",
        "value" : "emlog versión v5.3.1, presenta una vulnerabilidad de divulgación de ruta completa en el archivo t/index.php, que permite a un atacante visualizar la ruta para el webroot/file"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAD61B2-B213-4344-A22A-D75CBD810FF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/issues/62",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkgad/Bugs/blob/main/emlog%20v5.3.1%20has%20Full%20Path%20Disclosure%20vulnerability.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/emlog/emlog/issues/62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thinkgad/Bugs/blob/main/emlog%20v5.3.1%20has%20Full%20Path%20Disclosure%20vulnerability.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22122",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2021-02-08T16:15:12.080",
      "lastModified" : "2024-11-21T05:49:32.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by injecting malicious payload in different vulnerable API end-points."
      }, {
        "lang" : "es",
        "value" : "Una neutralización inapropiada de la entrada durante la generación de la página web en la interfaz GUI de FortiWeb versiones 6.3.0 hasta 6.3.7 y la versiones anteriores a 6.2.4, puede permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross site scripting (XSS) reflejado al inyectar una carga útil maliciosa en diferentes endpoints de  la API vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.2.3",
            "matchCriteriaId" : "536B766C-A599-460F-811D-911D8B929BEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndIncluding" : "6.3.7",
            "matchCriteriaId" : "1007BA52-D565-4ACC-A6D5-EC559316A679"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/advisory/FG-IR-20-122",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-20-122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T17:15:13.673",
      "lastModified" : "2024-11-21T05:56:26.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apostrophe Technologies sanitize-html before 2.3.1 does not properly handle internationalized domain name (IDN) which could allow an attacker to bypass hostname whitelist validation set by the \"allowedIframeHostnames\" option."
      }, {
        "lang" : "es",
        "value" : "Apostrophe Technologies sanitize-html antes de 2.3.1, no maneja apropiadamente los nombres de dominio internacionalizados (IDN), lo que podría permitir a un atacante omitir la validación de la lista blanca de nombres de host establecida por la opción \"allowedIframeHostnames\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apostrophecms:sanitize-html:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "6A1A1822-184A-4E07-AB5C-C15089BD3EED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4308",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#231-2021-01-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/pull/458",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#231-2021-01-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/pull/458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T17:15:13.737",
      "lastModified" : "2024-11-21T05:56:26.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apostrophe Technologies sanitize-html before 2.3.2 does not properly validate the hostnames set by the \"allowedIframeHostnames\" option when the \"allowIframeRelativeUrls\" is set to true, which allows attackers to bypass hostname whitelist for iframe element, related using an src value that starts with \"/\\\\example.com\"."
      }, {
        "lang" : "es",
        "value" : "Apostrophe Technologies sanitize-html versiones anteriores a 2.3.2 no comprueba correctamente los nombres de host establecidos por la opción \"allowedIframeHostnames\" cuando \"allowIframeRelativeUrls\" se establece en true, lo que permite a atacantes omitir la lista blanca de nombres de host para el elemento iframe, relacionado con un valor src que comienza con \"/\\\\example.com\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apostrophecms:sanitize-html:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "1366C9FC-2776-4497-90A4-4B117CB54561"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4309",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#232-2021-01-26",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/pull/460",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/blob/main/CHANGELOG.md#232-2021-01-26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apostrophecms/sanitize-html/pull/460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26541",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T17:15:13.800",
      "lastModified" : "2024-11-21T05:56:26.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "La función gitlog en el archivo src/ index.ts en gitlog anterior a versión 4.0.4, presenta una vulnerabilidad de inyección de comandos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlog_project:gitlog:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "BFC0144B-9C3D-42EB-A1E8-AEC123CC9FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4301",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/domharrington/node-gitlog/pull/65",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/gitlog",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4301",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/domharrington/node-gitlog/pull/65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/gitlog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21304",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-08T18:15:13.537",
      "lastModified" : "2024-11-21T05:47:58.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dynamoose is an open-source modeling tool for Amazon's DynamoDB. In Dynamoose from version 2.0.0 and before version 2.7.0 there was a prototype pollution vulnerability in the internal utility method \"lib/utils/object/set.ts\". This method is used throughout the codebase for various operations throughout Dynamoose. We have not seen any evidence of this vulnerability being exploited. There is no evidence this vulnerability impacts versions 1.x.x since the vulnerable method was added as part of the v2 rewrite. This vulnerability also impacts v2.x.x beta/alpha versions. Version 2.7.0 includes a patch for this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Dynamoose es una herramienta de modelado de código abierto para DynamoDB de Amazon.&#xa0;En Dynamoose desde la versión 2.0.0 y anterior a la versión 2.7.0 había una vulnerabilidad de contaminación de prototipo en el método de utilidad interno \"lib/utils/object/set.ts\".&#xa0;Este método es usado en toda la base de código para varias operaciones en Dynamoose.&#xa0;No hemos visto ninguna evidencia de que haya sido explotada esta vulnerabilidad.&#xa0;No hay evidencia de que esta vulnerabilidad afecte a las versiones 1.xx ya que el método vulnerable se agregó como parte de la reescritura de v2.&#xa0;Esta vulnerabilidad también afecta a las versiones v2.xx beta/alpha.&#xa0;La versión 2.7.0 incluye un parche para esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        }, {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynamoosejs:dynamoose:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.7.0",
            "matchCriteriaId" : "48C7EF97-C20A-4C52-9651-A4D0F38AB9CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dynamoose/dynamoose/commit/324c62b4709204955931a187362f8999805b1d8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dynamoose/dynamoose/releases/tag/v2.7.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dynamoose/dynamoose/security/advisories/GHSA-rrqm-p222-8ph2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/dynamoose",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dynamoose/dynamoose/commit/324c62b4709204955931a187362f8999805b1d8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dynamoose/dynamoose/releases/tag/v2.7.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dynamoose/dynamoose/security/advisories/GHSA-rrqm-p222-8ph2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/dynamoose",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25142",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T18:15:13.660",
      "lastModified" : "2024-11-21T05:54:26.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webstartflash function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función webstartflash de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T18:15:13.740",
      "lastModified" : "2024-11-21T05:55:30.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application."
      }, {
        "lang" : "es",
        "value" : "Cosmos Network Ethermint  versiones anteriores e incluyendo a v0.4.0 está afectado por una vulnerabilidad de reproducción de transacciones en el módulo EVM.&#xa0;Si la víctima envía una transacción nonce muy grande, el atacante puede reproducir la transacción por medio de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainsafe:ethermint:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "A35C91FB-4A33-4A25-8406-5F9143CF0828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cosmos/ethermint/issues/686",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cosmos/ethermint/issues/686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25835",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T18:15:13.803",
      "lastModified" : "2024-11-21T05:55:30.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with the same msg content and chainIDEpoch, which enables \"cross-chain transaction replay\" attack."
      }, {
        "lang" : "es",
        "value" : "Cosmos Network Ethermint  versiones anteriores e incluyendo a v0.4.0 está afectado por una vulnerabilidad de reproducción de transacciones entre cadenas en el módulo EVM.&#xa0;Dado que ethermint usa los mismos esquemas de chainIDEpoch y firma con ethereum para la compatibilidad, una firma verificada en ethereum sigue siendo válida en ethermint con el mismo contenido de msg y chainIDEpoch, que permite el ataque de \"cross-chain transaction replay\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainsafe:ethermint:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "A35C91FB-4A33-4A25-8406-5F9143CF0828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cosmos/ethermint/issues/687",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cosmos/ethermint/pull/692",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cosmos/ethermint/issues/687",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cosmos/ethermint/pull/692",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25836",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T18:15:13.863",
      "lastModified" : "2024-11-21T05:55:30.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts."
      }, {
        "lang" : "es",
        "value" : "Cosmos Network Ethermint  versiones anteriores e incluyendo a v0.4.0 está afectado por la inconsistencia del ciclo de vida de la caché en el módulo EVM.&#xa0;El bytecode establecido en una transacción FAILED permanece erróneamente en la memoria (stateObject.code) y se escribe posteriormente en el almacén persistente en la etapa Endblock, que puede ser usado para construir contratos de honeypot"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainsafe:ethermint:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "A35C91FB-4A33-4A25-8406-5F9143CF0828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cosmos/ethermint/issues/667#issuecomment-759284303",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cosmos/ethermint/issues/667#issuecomment-759284303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25837",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T18:15:13.927",
      "lastModified" : "2024-11-21T05:55:30.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache data will be discarded at EndBlock, it is still valid in the current block, which enables many possible attacks such as an \"arbitrary mint token\"."
      }, {
        "lang" : "es",
        "value" : "Cosmos Network Ethermint versiones anteriores e incluyendo a v0.4.0, está afectado por la inconsistencia del ciclo de vida de la caché en el módulo EVM.&#xa0;Debido a la inconsistencia entre el ciclo de almacenamiento en caché y el ciclo de procesamiento de Tx, los cambios de almacenamiento causados ??por una transacción fallida se reservan incorrectamente en la memoria.&#xa0;Aunque los datos de caché de almacenamiento incorrecto se descartarán en EndBlock, aún son válidos en el bloque actual, lo que permite muchos ataques posibles, como un \"arbitrary mint token\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chainsafe:ethermint:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.4.0",
            "matchCriteriaId" : "A35C91FB-4A33-4A25-8406-5F9143CF0828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cosmos/ethermint/issues/667#issuecomment-759284107",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cosmos/ethermint/issues/667#issuecomment-759284107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25168",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.173",
      "lastModified" : "2024-11-21T05:54:29.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webupdatecomponent function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función webupdatecomponent de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25169",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.250",
      "lastModified" : "2024-11-21T05:54:29.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetservicecfg function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función websetservicecfg de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25170",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.313",
      "lastModified" : "2024-11-21T05:54:29.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetremoteimageinfo function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función websetremoteimageinfo de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25171",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.377",
      "lastModified" : "2024-11-21T05:54:29.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so websetlicensecfg function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función websetlicensecfg de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26570",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.437",
      "lastModified" : "2024-11-21T05:56:30.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webifc_setadconfig function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función webifc_setadconfig de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-340/",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-340/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26571",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.500",
      "lastModified" : "2024-11-21T05:56:30.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función webgetactivexcfg de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26572",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T19:15:14.563",
      "lastModified" : "2024-11-21T05:56:30.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgetactivexcfg function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System anterior a la versión 3.0.14.0, presenta un desbordamiento del búfer local en la función webgetactivexcfg de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21240",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-08T20:15:12.197",
      "lastModified" : "2024-11-21T05:47:50.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "httplib2 is a comprehensive HTTP client library for Python. In httplib2 before version 0.19.0, a malicious server which responds with long series of \"\\xa0\" characters in the \"www-authenticate\" header may cause Denial of Service (CPU burn while parsing header) of the httplib2 client accessing said server. This is fixed in version 0.19.0 which contains a new implementation of auth headers parsing using the pyparsing library."
      }, {
        "lang" : "es",
        "value" : "httplib2 es una biblioteca cliente HTTP completa para Python.&#xa0;En httplib2 anterior a la versión 0.19.0, un servidor malicioso que responde con una larga serie de caracteres \"\\xa0\" en el encabezado \"www-authenticate\" puede causar una Denegación de Servicio (CPU quemada mientras analiza el encabezado) del cliente httplib2 que accede a dicho servidor.&#xa0;Esto se corrigió en la versión 0.19.0, que contiene una nueva implementación de análisis de encabezados de autenticación usando la biblioteca pyparsing"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:httplib2_project:httplib2:*:*:*:*:*:python:*:*",
            "versionEndExcluding" : "0.19.0",
            "matchCriteriaId" : "D5BA135E-6889-4A5D-88F6-1AD4DBC498BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/httplib2/httplib2/commit/bd9ee252c8f099608019709e22c0d705e98d26bc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/httplib2/httplib2/pull/182",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/httplib2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/httplib2/httplib2/commit/bd9ee252c8f099608019709e22c0d705e98d26bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/httplib2/httplib2/pull/182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/httplib2/httplib2/security/advisories/GHSA-93xj-8mrv-444m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/httplib2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21288",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-08T20:15:12.277",
      "lastModified" : "2024-11-21T05:47:56.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1 the download feature has an SSRF vulnerability, allowing attacks to provide DNS entries or IP addresses that are intended for internal use and gather information about the Intranet infrastructure of the platform. This is fixed in versions 1.3.2 and 2.1.1."
      }, {
        "lang" : "es",
        "value" : "CarrierWave es un RubyGem de código abierto que proporciona una forma simple y flexible de cargar archivos desde aplicaciones Ruby.&#xa0;En CarrierWave versiones anteriores a 1.3.2 y 2.1.1, la funcionalidad de descarga tiene una vulnerabilidad SSRF, permitiendo ataques para proporcionar entradas DNS o direcciones IP que están destinadas a uso interno y recopilen información sobre la infraestructura de Intranet de la plataforma.&#xa0;Esto se corrigió en las versiones 1.3.2 y 2.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrierwave_project:carrierwave:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "68FBD42F-C60B-4C66-B772-C35F4AED519C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrierwave_project:carrierwave:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "2.0.1",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "B9D2FEB0-C576-4E14-A2F6-7642E83CC6F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#132---2021-02-08",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#211---2021-02-08",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/commit/012702eb3ba1663452aa025831caa304d1a665c0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-fwcm-636p-68r5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/carrierwave/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#132---2021-02-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#211---2021-02-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/commit/012702eb3ba1663452aa025831caa304d1a665c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-fwcm-636p-68r5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/carrierwave/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21290",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-08T20:15:12.433",
      "lastModified" : "2024-11-21T05:47:56.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the temporary directory is shared between all user. As such, writing to this directory using APIs that do not explicitly set the file/directory permissions can lead to information disclosure. Of note, this does not impact modern MacOS Operating Systems. The method \"File.createTempFile\" on unix-like systems creates a random file, but, by default will create this file with the permissions \"-rw-r--r--\". Thus, if sensitive information is written to this file, other local users can read this information. This is the case in netty's \"AbstractDiskHttpData\" is vulnerable. This has been fixed in version 4.1.59.Final. As a workaround, one may specify your own \"java.io.tmpdir\" when you start the JVM or use \"DefaultHttpDataFactory.setBaseDir(...)\" to set the directory to something that is only readable by the current user."
      }, {
        "lang" : "es",
        "value" : "Netty es un framework de aplicación de red de código abierto y asíncrono controlado por eventos para el desarrollo rápido de servidores y clientes de protocolo de alto rendimiento mantenibles.&#xa0;En Netty anterior a la versión 4.1.59.Final, se presenta una vulnerabilidad en sistemas similares a Unix que involucra un archivo temporal no seguro.&#xa0;Cuando se usan los decodificadores multiparte de netty, la divulgación de información local puede ocurrir por medio del directorio temporal del sistema local si el almacenamiento temporal de cargas en el disco está habilitado.&#xa0;En sistemas tipo Unix, el directorio temporal se comparte entre todos los usuarios.&#xa0;Tal y como, escribir en este directorio utilizando las API que no establezcan explícitamente los permisos de archivo/directorio puede conducir a una divulgación de información.&#xa0;Cabe señalar que esto no afecta a los sistemas operativos MacOS modernos.&#xa0;El método \"File.createTempFile\" en sistemas similares a Unix crea un archivo aleatorio, pero,&#xa0;por defecto creará este archivo con los permisos \"-rw-r - r--\".&#xa0;Por lo tanto, si se escribe información confidencial en este archivo, otros usuarios locales pueden leer esta información.&#xa0;Este es el caso en el que \"AbstractDiskHttpData\" de netty es vulnerable.&#xa0;Esto ha sido corregido en la versión 4.1.59.Final.&#xa0;Como solución alternativa, se puede especificar su propio \"java.io.tmpdir\" al iniciar la JVM o utilizar \"DefaultHttpDataFactory.setBaseDir(...)\" para establecer el directorio en algo que solo el usuario actual pueda leer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.59",
            "matchCriteriaId" : "5E687331-EF1E-42A3-8CCD-8F231E48F79C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.7",
            "matchCriteriaId" : "64839EBF-078E-492A-897C-9AFFB7678ED8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9A061-2421-426D-9854-0A4E55B2961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95EDC3D-54BB-48F9-82F2-7CCF335FCA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72B735F-4E52-484A-9C2C-23E6E2070385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B36A1D4-F391-4EE3-9A65-0A10568795BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55116032-AAD1-4FEA-9DA8-2C4CBD3D3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0275F820-40BE-47B8-B167-815A55DF578E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E14324D-B9EE-4C06-ACC7-255189ED6300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBB60F-6EAB-4AE5-B777-5044C657FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185C1EA-71E6-4972-8637-08A33CC00841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06594847-96ED-4541-B2F4-C7331B603603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67AA54B-258D-4D09-9ACB-4085E0B3E585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1214FDF-357A-4BB9-BADE-50FB2BD16D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3",
            "matchCriteriaId" : "D04565AE-D092-4AE0-8FEE-0E8114662A1B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_secure_agent:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F202E8-97E6-4BBB-A0B6-4CA3F5803C08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0053443ce19ff125981559f8c51cf66e3ab4350f47812b8cf0733a05%40%3Cdev.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f%40%3Cdev.ranger.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0857b613604c696bf9743f0af047360baaded48b1c75cf6945a083c5%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r10308b625e49d4e9491d7e079606ca0df2f0a4d828f1ad1da64ba47b%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2748097ea4b774292539cf3de6e3b267fc7a88d6c8ec40f4e2e87bd4%40%3Cdev.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r326ec431f06eab7cb7113a7a338e59731b8d556d05258457f12bac1b%40%3Cdev.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4efed2c501681cb2e8d629da16e48d9eac429624fd4c9a8c6b8e7020%40%3Cdev.tinkerpop.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5bf303d7c04da78f276765da08559fdc62420f1df539b277ca31f63b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5c701840aa2845191721e39821445e1e8c59711e71942b7796a6ec29%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e4a540089760c8ecc2c411309d74264f1dad634ad93ad583ca16214%40%3Ccommits.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r71dbb66747ff537640bb91eb0b2b24edef21ac07728097016f58b01f%40%3Ccommits.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r743149dcc8db1de473e6bff0b3ddf10140a7357bc2add75f7d1fbb12%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5%40%3Cdev.ranger.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra0fc2b4553dd7aaf75febb61052b7f1243ac3a180a71c01f29093013%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra503756ced78fdc2136bd33e87cb7553028645b261b1f5c6186a121e%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4%40%3Cdev.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc488f80094872ad925f0c73d283d4c00d32def81977438e27a3dc2bb%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdba4f78ac55f803893a1a2265181595e79e3aa027e2e651dfba98c18%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00016.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220210-0011/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4885",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/commit/c735357bf29d07856ad171c6611a2e1a0e0000ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-5mcr-gq6c-3hq2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0053443ce19ff125981559f8c51cf66e3ab4350f47812b8cf0733a05%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f%40%3Cdev.ranger.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0857b613604c696bf9743f0af047360baaded48b1c75cf6945a083c5%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r10308b625e49d4e9491d7e079606ca0df2f0a4d828f1ad1da64ba47b%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2748097ea4b774292539cf3de6e3b267fc7a88d6c8ec40f4e2e87bd4%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2fda4dab73097051977f2ab818f75e04fbcb15bb1003c8530eac1059%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r326ec431f06eab7cb7113a7a338e59731b8d556d05258457f12bac1b%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4efed2c501681cb2e8d629da16e48d9eac429624fd4c9a8c6b8e7020%40%3Cdev.tinkerpop.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5bf303d7c04da78f276765da08559fdc62420f1df539b277ca31f63b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5c701840aa2845191721e39821445e1e8c59711e71942b7796a6ec29%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e4a540089760c8ecc2c411309d74264f1dad634ad93ad583ca16214%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r71dbb66747ff537640bb91eb0b2b24edef21ac07728097016f58b01f%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r743149dcc8db1de473e6bff0b3ddf10140a7357bc2add75f7d1fbb12%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5%40%3Cdev.ranger.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra0fc2b4553dd7aaf75febb61052b7f1243ac3a180a71c01f29093013%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra503756ced78fdc2136bd33e87cb7553028645b261b1f5c6186a121e%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc488f80094872ad925f0c73d283d4c00d32def81977438e27a3dc2bb%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdba4f78ac55f803893a1a2265181595e79e3aa027e2e651dfba98c18%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220210-0011/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21305",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-08T20:15:12.527",
      "lastModified" : "2024-11-21T05:47:59.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CarrierWave is an open-source RubyGem which provides a simple and flexible way to upload files from Ruby applications. In CarrierWave before versions 1.3.2 and 2.1.1, there is a code injection vulnerability. The \"#manipulate!\" method inappropriately evals the content of mutation option(:read/:write), allowing attackers to craft a string that can be executed as a Ruby code. If an application developer supplies untrusted inputs to the option, it will lead to remote code execution(RCE). This is fixed in versions 1.3.2 and 2.1.1."
      }, {
        "lang" : "es",
        "value" : "CarrierWave es un RubyGem de código abierto que proporciona una forma simple y flexible de cargar archivos desde aplicaciones de Ruby.&#xa0;En CarrierWave versiones anteriores a 1.3.2 y 2.1.1, se presenta una vulnerabilidad de inyección de código.&#xa0;El método \"#manipulate!\" evalúa inapropiadamente el contenido de la opción de mutación option(:read/:write), lo que permite a atacantes crear una cadena que se pueda ejecutar como código de Ruby.&#xa0;Si un desarrollador de aplicaciones proporciona entradas que no son de confianza para la opción, conllevará a una ejecución de código remota (RCE).&#xa0;Esto se corrigió en las versiones 1.3.2 y 2.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrierwave_project:carrierwave:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "68FBD42F-C60B-4C66-B772-C35F4AED519C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:carrierwave_project:carrierwave:*:*:*:*:*:ruby:*:*",
            "versionStartIncluding" : "2.0.1",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "B9D2FEB0-C576-4E14-A2F6-7642E83CC6F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#132---2021-02-08",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#211---2021-02-08",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/commit/387116f5c72efa42bc3938d946b4c8d2f22181b7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-cf3w-g86h-35x4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/carrierwave",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#132---2021-02-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/blob/master/CHANGELOG.md#211---2021-02-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/commit/387116f5c72efa42bc3938d946b4c8d2f22181b7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-cf3w-g86h-35x4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/carrierwave",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25172",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T20:15:12.637",
      "lastModified" : "2024-11-21T05:54:29.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so websetdefaultlangcfg function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System versiones anteriores a 3.0.14.0, presenta una vulnerabilidad de inyección de comandos en la función websetdefaultlangcfg de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26573",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T20:15:12.697",
      "lastModified" : "2024-11-21T05:56:30.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so webgeneratesslcfg function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System versiones anteriores a 3.0.14.0, presenta un desbordamiento de búfer local en la función webgeneratesslcfg de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26574",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T20:15:12.760",
      "lastModified" : "2024-11-21T05:56:30.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletevideofile function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System versiones anteriores a 3.0.14.0, presenta una vulnerabilidad de salto de ruta en la función webdeletevideofile de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26575",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T20:15:12.823",
      "lastModified" : "2024-11-21T05:56:30.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversal vulnerability in libifc.so webdeletesolvideofile function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System versiones anteriores a 3.0.14.0, presenta una vulnerabilidad de salto de ruta en la función webdeletesolvideofile de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26577",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T20:15:12.887",
      "lastModified" : "2024-11-21T05:56:31.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a local buffer overflow in libifc.so uploadsshkey function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System versiones anteriores a 3.0.14.0, presenta un desbordamiento de búfer local en la función uploadsshkey de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26905",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T20:15:12.963",
      "lastModified" : "2024-11-21T05:57:00.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "1Password SCIM Bridge before 1.6.2 mishandles validation of authenticated requests for log files, leading to disclosure of a TLS private key."
      }, {
        "lang" : "es",
        "value" : "1Password SCIM Bridge versiones anteriores a 1.6.2, maneja inapropiadamente la comprobación de las solicitudes autenticadas de archivos de registro, lo que lleva a la divulgación de una clave privada TLS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:1password:scim_bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.6.2",
            "matchCriteriaId" : "6037B3C9-BCA4-45DA-9E45-ED2F182EB2B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://app-updates.agilebits.com/product_history/SCIM",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://support.1password.com/kb/202102/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://app-updates.agilebits.com/product_history/SCIM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://support.1password.com/kb/202102/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26910",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T20:15:13.090",
      "lastModified" : "2024-11-21T05:57:01.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firejail before 0.9.64.4 allows attackers to bypass intended access restrictions because there is a TOCTOU race condition between a stat operation and an OverlayFS mount operation."
      }, {
        "lang" : "es",
        "value" : "Firejail versiones anteriores a 0.9.64.4, permite a atacantes omitir las restricciones de acceso previstas porque se presenta una condición de carrera TOCTOU entre una operación de estadística y una operación de montaje OverlayFS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:firejail_project:firejail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.64.4",
            "matchCriteriaId" : "4457E838-C33E-4AEA-842B-8A155CC63213"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/09/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/releases/tag/0.9.64.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-19",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4849",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/commit/97d8a03cad19501f017587cc4e47d8418273834b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netblue30/firejail/releases/tag/0.9.64.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://unparalleled.eu/blog/2021/20210208-rigged-race-against-firejail-for-local-root/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://unparalleled.eu/publications/2021/advisory-unpar-2021-0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4849",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T21:15:13.460",
      "lastModified" : "2024-11-21T05:55:56.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ezxml_toxml function in ezxml 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool."
      }, {
        "lang" : "es",
        "value" : "La función ezxml_toxml en ezXML versiones 0.8.6 y anteriores, es vulnerable a una escritura OOB cuando se abre un archivo XML después de agotar el grupo de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6",
            "matchCriteriaId" : "5CC9B49D-EBB9-46A6-AF98-53D347F3FF7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/ezxml/bugs/23/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/23/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T21:15:13.523",
      "lastModified" : "2024-11-21T05:55:56.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool."
      }, {
        "lang" : "es",
        "value" : "La función ezxml_new en ezXML versiones 0.8.6 y anteriores, es vulnerable a una escritura OOB cuando se abre un archivo XML después de agotar el grupo de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6",
            "matchCriteriaId" : "5CC9B49D-EBB9-46A6-AF98-53D347F3FF7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/ezxml/bugs/21/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T21:15:13.617",
      "lastModified" : "2024-11-21T05:55:56.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ezxml_new function in ezXML 0.8.6 and earlier is vulnerable to OOB write when opening XML file after exhausting the memory pool."
      }, {
        "lang" : "es",
        "value" : "La función ezxml_new en ezXML versiones 0.8.6 y anteriores es vulnerable a una escritura OOB cuando se abre un archivo XML después de agotar el grupo de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8.6",
            "matchCriteriaId" : "5CC9B49D-EBB9-46A6-AF98-53D347F3FF7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sourceforge.net/p/ezxml/bugs/22/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/22/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T21:15:13.680",
      "lastModified" : "2024-11-21T05:56:26.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting memory pool."
      }, {
        "lang" : "es",
        "value" : "La función mg_http_serve_file en el servidor Cesanta Mongoose HTTP versión 7.0,  es vulnerable  a un ataque de escritura OOB remota por medio de una petición de conexión después de agotar el grupo de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B6E6E9-893D-4993-B8E4-906343FF7837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cesanta/mongoose/issues/1201",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose/issues/1201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T21:15:13.740",
      "lastModified" : "2024-11-21T05:56:26.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool."
      }, {
        "lang" : "es",
        "value" : "La función mg_tls_init en el servidor Cesanta Mongoose HTTPS versión 7.0 y 6.7-6.18 (compilado con soporte mbedTLS) es vulnerable  a un ataque de escritura OOB remota por medio de una petición de conexión después de agotar el grupo de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7",
            "versionEndIncluding" : "6.18",
            "matchCriteriaId" : "7B840E82-6F04-41CB-AF1C-50643326A123"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B6E6E9-893D-4993-B8E4-906343FF7837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cesanta/mongoose/issues/1203",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose/issues/1203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T21:15:13.803",
      "lastModified" : "2024-11-21T05:56:26.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool."
      }, {
        "lang" : "es",
        "value" : "La función mg_tls_init en el servidor Cesanta Mongoose HTTPS versión 7.0 (compilado con soporte OpenSSL) es vulnerable  a un ataque de escritura OOB remota por medio de una petición de conexión después de agotar el grupo de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongoose:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B6E6E9-893D-4993-B8E4-906343FF7837"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cesanta/mongoose/issues/1204",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mongoose/issues/1204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26576",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-08T21:15:13.867",
      "lastModified" : "2024-11-21T05:56:31.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a command injection vulnerability in libifc.so uploadsshkey function."
      }, {
        "lang" : "es",
        "value" : "El firmware de Baseboard Management Controller (BMC) en HPE Apollo 70 System, anterior a versión 3.0.14.0, presenta una vulnerabilidad de inyección de comandos en la función uploadsshkey de libifc.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:baseboard_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.14.0",
            "matchCriteriaId" : "063FC3AB-012F-41B5-9442-1FC41C89FB8C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:apollo_70_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7706B4E2-1ED1-4EDE-B134-9F5BE0B24499"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04080en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21306",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-08T22:15:12.450",
      "lastModified" : "2024-11-21T05:47:59.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Marked is an open-source markdown parser and compiler (npm package \"marked\"). In marked from version 1.1.1 and before version 2.0.0, there is a Regular expression Denial of Service vulnerability. This vulnerability can affect anyone who runs user generated code through marked. This vulnerability is fixed in version 2.0.0."
      }, {
        "lang" : "es",
        "value" : "Marked es un analizador y compilador de rebajas de código abierto (paquete npm \"marked\").&#xa0;En marked desde la versión 1.1.1 y anteriores a versión 2.0.0, se presenta una vulnerabilidad de Denegación de Servicio de expresión Regular.&#xa0;Esta vulnerabilidad puede afectar a cualquiera que ejecute código generado por el usuario mediante marked.&#xa0;Esta vulnerabilidad se corrigió en la versión 2.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marked_project:marked:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "A9E51743-C978-477B-8B63-EEFC0C7EA788"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/markedjs/marked/commit/7293251c438e3ee968970f7609f1a27f9007bccd",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/issues/1927",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/pull/1864",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/security/advisories/GHSA-4r62-v4vq-hr96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/marked",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/commit/7293251c438e3ee968970f7609f1a27f9007bccd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/issues/1927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/pull/1864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/markedjs/marked/security/advisories/GHSA-4r62-v4vq-hr96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/marked",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22502",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-02-08T22:15:12.527",
      "lastModified" : "2025-10-27T16:58:45.167",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de Código Remota en el producto Micro Focus Operation Bridge Reporter (OBR), afectando a la versión 10.40.&#xa0;La vulnerabilidad podría ser explotada para permitir una Ejecución de Código Remota en el servidor OBR"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Micro Focus Operation Bridge Report (OBR) Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operation_bridge_reporter:10.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD46887-CE63-44FC-8523-6CFE8ABB2A14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html",
        "source" : "security@opentext.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03775947",
        "source" : "security@opentext.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-153/",
        "source" : "security@opentext.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-154/",
        "source" : "security@opentext.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162408/Micro-Focus-Operations-Bridge-Reporter-Unauthenticated-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03775947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-153/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-154/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22502",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25913",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-02-08T22:15:12.607",
      "lastModified" : "2024-11-21T05:55:35.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contaminación del prototipo en \"set-or-get\" versiones 1.0.0 hasta 1.2.10, permite a un atacante causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:set-or-get_project:set-or-get:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.2.10",
            "matchCriteriaId" : "0A3D7DA6-333A-4592-B84F-4186EC581984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/IonicaBizau/set-or-get.js/commit/82ede5cccb2e8d13e4f62599203a4389f6d8e936",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25913",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/IonicaBizau/set-or-get.js/commit/82ede5cccb2e8d13e4f62599203a4389f6d8e936",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25913",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26912",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T22:15:12.653",
      "lastModified" : "2024-11-21T05:57:01.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in SupportRpcServlet."
      }, {
        "lang" : "es",
        "value" : "NetMotion Mobility versiones anteriores a 11.73 y versiones 12.x anteriores a 12.02, permite a atacantes remotos no autenticados ejecutar código arbitrario como SYSTEM debido a una deserialización Java en SupportRpcServlet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.73",
            "matchCriteriaId" : "51BC54BA-541A-4750-9CDD-4B1E0C6C4ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.02",
            "matchCriteriaId" : "2CB47E4D-60DF-4973-921C-7D5AF5E2D5DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26913",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T22:15:12.717",
      "lastModified" : "2024-11-21T05:57:01.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in RpcServlet."
      }, {
        "lang" : "es",
        "value" : "NetMotion Mobility versiones anteriores a 11.73 y versiones 12.x anteriores a 12.02, permite a atacantes remotos no autenticados ejecutar código arbitrario como SYSTEM debido a una deserialización Java en RpcServlet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.73",
            "matchCriteriaId" : "51BC54BA-541A-4750-9CDD-4B1E0C6C4ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.02",
            "matchCriteriaId" : "2CB47E4D-60DF-4973-921C-7D5AF5E2D5DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26914",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T22:15:12.763",
      "lastModified" : "2024-11-21T05:57:01.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject."
      }, {
        "lang" : "es",
        "value" : "NetMotion Mobility versiones anteriores a 11.73 y versiones 12.x anteriores a 12.02, permite a atacantes remotos no autenticados ejecutar código arbitrario como SYSTEM debido a una deserialización Java en MvcUtil valueStringToObject"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.73",
            "matchCriteriaId" : "51BC54BA-541A-4750-9CDD-4B1E0C6C4ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.02",
            "matchCriteriaId" : "2CB47E4D-60DF-4973-921C-7D5AF5E2D5DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162617/NetMotion-Mobility-Server-MvcUtil-Java-Deserialization.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162617/NetMotion-Mobility-Server-MvcUtil-Java-Deserialization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26915",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T22:15:12.827",
      "lastModified" : "2024-11-21T05:57:02.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in webrepdb StatusServlet."
      }, {
        "lang" : "es",
        "value" : "NetMotion Mobility versiones anteriores a 11.73 y versiones 12.x anteriores a 12.02, permite a atacantes remotos no autenticados ejecutar código arbitrario como SYSTEM debido a una deserialización Java en webrepdb StatusServlet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.73",
            "matchCriteriaId" : "51BC54BA-541A-4750-9CDD-4B1E0C6C4ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmotionsoftware:netmotion_mobility:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.02",
            "matchCriteriaId" : "2CB47E4D-60DF-4973-921C-7D5AF5E2D5DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/?p=4676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netmotion-mobility-server-multiple-deserialization-of-untrusted-data-lead-to-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netmotionsoftware.com/security-advisories/security-vulnerability-in-mobility-web-server-november-19-2020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26916",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T22:15:12.873",
      "lastModified" : "2024-11-21T05:57:02.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In nopCommerce 4.30, a Reflected XSS issue in the Discount Coupon component allows remote attackers to inject arbitrary web script or HTML through the Filters/CheckDiscountCouponAttribute.cs discountcode parameter."
      }, {
        "lang" : "es",
        "value" : "En nopCommerce versión 4.30, un problema de tipo XSS Reflejado en el componente Discount Coupon permite a atacantes remotos inyectar un script web o HTML arbitrario mediante el parámetro discountcode en el archivo Filters/CheckDiscountCouponAttribute.cs"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nopcommerce:nopcommerce:4.30:-:*:*:*:*:*:*",
            "matchCriteriaId" : "36397DE8-5530-44AD-94C0-926A81A5933E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nopSolutions/nopCommerce/issues/5322",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nopSolutions/nopCommerce/issues/5322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26917",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-08T23:15:11.973",
      "lastModified" : "2024-11-21T05:57:02.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states \"security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported away from the local host.\" NOTE: it is unclear whether there are any common use cases in which apinotifypath is controlled by an attacker"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** PyBitmessage versiones hasta 6.3.2, permite a atacantes escribir capturas de pantalla en Directorios Potencialmente No Deseados por medio de un valor de apinotifypath diseñado.&#xa0;NOTA: el descubridor afirma que \"Es posible que la mitigación de la seguridad no sea necesaria ya que aún no existe evidencia de que estas interceptaciones de pantalla se transporten fuera del host local\".&#xa0;NOTA: no está claro si se presentan casos de uso comunes en los que apinotifypath está controlado por un atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitmessage:pybitmessage:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.3.2",
            "matchCriteriaId" : "4F55615E-8714-458A-99A9-A4874AFD5AE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://attack.mitre.org/techniques/T1113/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bitmessage/PyBitmessage/blob/f381721bec31641002e2f240309600c4994855a7/src/api.py#L35-L37",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bitmessage/PyBitmessage/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://poal.co/s/technology/290479",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://attack.mitre.org/techniques/T1113/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bitmessage/PyBitmessage/blob/f381721bec31641002e2f240309600c4994855a7/src/api.py#L35-L37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Bitmessage/PyBitmessage/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://poal.co/s/technology/290479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T00:15:12.267",
      "lastModified" : "2024-11-21T06:21:14.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website."
      }, {
        "lang" : "es",
        "value" : "CASAP Automated Enrollment System versión 1.0, está afectado por una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo users.php.&#xa0;Un atacante puede robar una cookie para llevar a cabo un redireccionamiento del usuario hacia un sitio web malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:casap_automated_enrollment_system_project:casap_automated_enrollment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA6FCDF-214D-46B9-BDC4-32B296AC4920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://casap.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161421/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49469",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/download-code?nid=12210&title=CASAP+Automated+Enrollment+System+using+PHP%2FMySQLi+with+Source+Code",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://casap.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161421/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/download-code?nid=12210&title=CASAP+Automated+Enrollment+System+using+PHP%2FMySQLi+with+Source+Code",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T03:15:12.850",
      "lastModified" : "2024-11-21T05:57:02.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ProBot bot through 2021-02-08 for Discord might allow attackers to interfere with the intended purpose of the \"Send an image when a user joins the server\" feature (or possibly have unspecified other impact) because the uploader web service allows double extensions (such as .html.jpg) with the text/html content type. NOTE: there may not be cases in which an uploader web service is customer controlled; however, the nature of the issue has substantial interaction with customer controlled configuration. NOTE: the vendor states \"This is just an uploader (like any other one) which uploads files to cloud storage and accepts various file types. There is no kind of vulnerability and it won't compromise either the client side or the server side."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El bot ProBot versiones hasta el 08-02-2021 para Discord, podría permitir a atacantes interferir con el propósito previsto de la función \"Send an image when a user joins the server\" (o posiblemente tener otro impacto no especificado) porque el servicio web de carga permite extensiones dobles. (como .html.jpg) con el tipo de contenido text/html. NOTA: es posible que no haya casos en los que un servicio web de carga esté controlado por el cliente; sin embargo, la naturaleza del problema tiene una interacción sustancial con la configuración controlada por el cliente. NOTA: el vendedor afirma que \"esto es sólo un cargador (como cualquier otro) que sube archivos al almacenamiento en la nube y acepta varios tipos de archivos. No hay ningún tipo de vulnerabilidad y no compromete ni el lado del cliente ni el del servidor.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:probot:bot:*:*:*:*:*:discord:*:*",
            "versionEndIncluding" : "2021-02-08",
            "matchCriteriaId" : "93C26225-5C74-4413-93D2-7248A5CED470"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161347/Discord-Probot-Arbitrary-File-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://raw.githubusercontent.com/TheLastVvV/Vulnerability-Reports-and-CVE/main/Reports/Discord%20Probot%20-%20Unrestricted%20File%20Upload.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161347/Discord-Probot-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://raw.githubusercontent.com/TheLastVvV/Vulnerability-Reports-and-CVE/main/Reports/Discord%20Probot%20-%20Unrestricted%20File%20Upload.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23327",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-09T08:15:11.167",
      "lastModified" : "2024-11-21T05:51:30.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package apexcharts before 3.24.0 are vulnerable to Cross-site Scripting (XSS) via lack of sanitization of graph legend fields."
      }, {
        "lang" : "es",
        "value" : "Los paquetes apexcharts versiones anteriores a 3.24.0, son vulnerables a ataques de tipo Cross-site Scripting (XSS) debido a una falta de saneamiento de los campos de leyenda de gráficos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusioncharts:apexcharts:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.24.0",
            "matchCriteriaId" : "4E188DD9-6E42-44B9-B4AE-0F957ADAC3C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apexcharts/apexcharts.js/pull/2158",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apexcharts/apexcharts.js/commit/68f3f34d125719b4767614fe0a595cc65bde1d19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apexcharts/apexcharts.js/pull/2158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1070616",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-APEXCHARTS-1062708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T09:15:13.617",
      "lastModified" : "2024-11-21T05:57:03.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Roundcube before 1.4.11 allows XSS via crafted Cascading Style Sheets (CSS) token sequences during HTML email rendering."
      }, {
        "lang" : "es",
        "value" : "Roundcube versiones anteriores a 1.4.11, permite ataque de tipo XSS por medio de secuencias de tokens de Cascading Style Sheets (CSS) diseñadas durante el renderizado de correo electrónico HTML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.11",
            "matchCriteriaId" : "645F0117-1B83-476C-8E8A-1C51A3549B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/roundcube/roundcubemail/commit/9dc276d5f26042db02754fa1bac6fbd683c6d596",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QPAMYM2DQODSCQIAVNFJR2ETG7WMJOD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q752JPOHTR6H72FK3EIPJZ5O24Z7RGLM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://roundcube.net/news/2021/02/08/security-update-1.4.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/roundcube/roundcubemail/commit/9dc276d5f26042db02754fa1bac6fbd683c6d596",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5QPAMYM2DQODSCQIAVNFJR2ETG7WMJOD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Q752JPOHTR6H72FK3EIPJZ5O24Z7RGLM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://roundcube.net/news/2021/02/08/security-update-1.4.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21117",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.450",
      "lastModified" : "2024-11-21T05:47:36.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Cryptohome in Google Chrome prior to 88.0.4324.96 allowed a local attacker to perform OS-level privilege escalation via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en Cryptohome en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante local llevar a cabo una escalada de privilegios a nivel del Sistema Operativo por medio de un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1137179",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1137179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21118",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.513",
      "lastModified" : "2024-11-21T05:47:36.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de datos en V8 en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto llevar a cabo potencialmente un acceso a la memoria fuera de límites por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161357",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21118",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21119",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.577",
      "lastModified" : "2024-11-21T05:47:36.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Media en Google Chrome versiones anteriores a 88.0.4324.96, permitía a un atacante remoto que había comprometido el proceso del renderizador explotar potencialmente una corrupción de la memoria por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1160534",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21119",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1160534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21120",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.640",
      "lastModified" : "2024-11-21T05:47:36.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en WebSQL en Google Chrome versiones anteriores a 88.0.4324.96, permitía a un atacante remoto explotar potencialmente una corrupción de la memoria por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1160602",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21120",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1160602",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21121",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.717",
      "lastModified" : "2024-11-21T05:47:36.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Omnibox en Google Chrome en Linux versiones anteriores a 88.0.4324.96, permitía a un atacante remoto llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161143",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21121",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21122",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.780",
      "lastModified" : "2024-11-21T05:47:36.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome versiones anteriores a 88.0.4324.96, permitía a un atacante remoto explotar una corrupción de la memoria por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1162131",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21122",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1162131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21123",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.843",
      "lastModified" : "2024-11-21T05:47:36.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de datos en File System API en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir las restricciones del sistema de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1137247",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21123",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1137247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21124",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.890",
      "lastModified" : "2024-11-21T05:47:36.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un potencial uso de la memoria previamente liberada en Speech Recognizer en Google Chrome en Android versiones anteriores a 88.0.4324.96, permitió a un atacante remoto llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1131346",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21124",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1131346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21125",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:15.950",
      "lastModified" : "2024-11-21T05:47:37.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en File System API en Google Chrome en Windows versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir las restricciones del sistema de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152327",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21125",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21126",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.013",
      "lastModified" : "2024-11-21T05:47:37.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en extensions de Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir el aislamiento del sitio por medio de una Extension de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1108126",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21126",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1108126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21127",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.060",
      "lastModified" : "2024-11-21T05:47:37.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en extensions de Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir la política de seguridad de contenido por medio de una Extension de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1115590",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21127",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1115590",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21128",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.123",
      "lastModified" : "2024-11-21T05:47:37.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de pila en Blink en Google Chrome versiones anteriores a 88.0.4324.96, permitía a un atacante remoto explotar potencialmente la corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1138877",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21128",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1138877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21129",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.187",
      "lastModified" : "2024-11-21T05:47:37.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en File System API en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir las restricciones del sistema de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140403",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21129",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21130",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.263",
      "lastModified" : "2024-11-21T05:47:37.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en File System API en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir las restricciones del sistema de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140410",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21130",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21131",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.327",
      "lastModified" : "2024-11-21T05:47:37.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en File System API en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir las restricciones del sistema de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140417",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21131",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21132",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.390",
      "lastModified" : "2024-11-21T05:47:37.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en DevTools en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto llevar a cabo potencialmente un escape del sandbox por medio de una Extension de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1128206",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21132",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1128206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21133",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.467",
      "lastModified" : "2024-11-21T05:47:37.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en Downloads en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante que convenció a un usuario de descargar archivos para omitir las restricciones de navegación por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157743",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21133",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21134",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.530",
      "lastModified" : "2024-11-21T05:47:38.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Usuario de seguridad incorrecta en Page Info en Google Chrome en iOS versiones anteriores a 88.0.4324.96, permitió a un atacante remoto falsificar la Interfaz de Usuario de seguridad por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157800",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21134",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21135",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.593",
      "lastModified" : "2024-11-21T05:47:38.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Performance API en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto filtrar datos cross-origin por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157818",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21135",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1157818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21136",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.653",
      "lastModified" : "2024-11-21T05:47:38.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en WebView en Google Chrome en Android versiones anteriores a 88.0.4324.96, permitió a un atacante remoto filtrar datos cross-origin por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1038002",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21136",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1038002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21137",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.717",
      "lastModified" : "2024-11-21T05:47:38.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en DevTools en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto obtener potencialmente información confidencial del disco por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1093791",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21137",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1093791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21138",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.797",
      "lastModified" : "2024-11-21T05:47:38.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in DevTools in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform a sandbox escape via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en DevTools en Google Chrome versiones anteriores a 88.0.4324.96, permitía a un atacante local llevar a cabo potencialmente un escape del sandbox por medio de un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1122487",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1122487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21139",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.843",
      "lastModified" : "2024-11-21T05:47:38.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en iframe sandbox en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir las restricciones de navegación por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.50",
            "matchCriteriaId" : "F4045760-DF4A-4728-9B52-0280FC45C05D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/937131",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21139",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/937131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21140",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.903",
      "lastModified" : "2024-11-21T05:47:38.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device."
      }, {
        "lang" : "es",
        "value" : "Un uso no inicializado en USB en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante local llevar a cabo potencialmente un acceso a la memoria fuera de límites por medio de un dispositivo USB"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.74",
            "matchCriteriaId" : "8CB6598E-765C-44B8-B4B5-C52B45B87500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1136327",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21140",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1136327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21141",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T14:15:16.967",
      "lastModified" : "2024-11-21T05:47:38.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación insuficiente de la política en File System API en Google Chrome versiones anteriores a 88.0.4324.96, permitió a un atacante remoto omitir la política de extensión de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.96",
            "matchCriteriaId" : "565ED6B8-8F41-4E79-A280-33CB321E607F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.74",
            "matchCriteriaId" : "8CB6598E-765C-44B8-B4B5-C52B45B87500"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140435",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21141",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/01/stable-channel-update-for-desktop_19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1140435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-21141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26719",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T14:15:17.577",
      "lastModified" : "2024-11-21T05:56:44.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A directory traversal issue was discovered in Gradle gradle-enterprise-test-distribution-agent before 1.3.2, test-distribution-gradle-plugin before 1.3.2, and gradle-enterprise-maven-extension before 1.8.2. A malicious actor (with certain credentials) can perform a registration step such that crafted TAR archives lead to extraction of files into arbitrary filesystem locations."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de salto de directorio en Gradle gradle-enterprise-test-distribution-agent versiones anteriores a 1.3.2, test-distribution-gradle-plugin versiones anteriores a 1.3.2 y gradle-enterprise-maven-extension versiones anteriores a 1.8.2.&#xa0;Un actor malicioso (con determinadas credenciales) puede llevar a cabo un paso de registro de modo que los archivos TAR diseñados conlleven a una extracción de archivos en ubicaciones arbitrarias del sistema de archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:enterprise_test_distribution_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "A5B7AB20-C1EF-4EBA-871C-4F39347AB711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:maven:*:*:*:*:*:gradle:*:*",
            "versionStartIncluding" : "1.8",
            "versionEndIncluding" : "1.8.1",
            "matchCriteriaId" : "F62F0602-D474-4F2A-9CDA-9FBFF21D9F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:test_distribution:*:*:*:*:*:gradle:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "C0E4E98F-1FB1-464B-822E-46AD5306B16E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gradle.com/advisory/CVE-2021-26719",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gradle.com/advisory/CVE-2021-26719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21142",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T15:15:13.547",
      "lastModified" : "2024-11-21T05:47:38.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Payments en Google Chrome en Mac versiones anteriores a 88.0.4324.146, permitía que un atacante remoto pudiera llevar a cabo un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.146",
            "matchCriteriaId" : "5E717595-61CC-47AA-89FC-5559EFD50892"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1169317",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1169317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21143",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T15:15:13.597",
      "lastModified" : "2024-11-21T05:47:39.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en Extensions en Google Chrome versiones anteriores a 88.0.4324.146, permitía a un atacante que convenció a un usuario de instalar una extensión maliciosa explotar potencialmente una corrupción de la pila por medio de una Extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.146",
            "matchCriteriaId" : "5E717595-61CC-47AA-89FC-5559EFD50892"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1163504",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1163504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21144",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T15:15:13.643",
      "lastModified" : "2024-11-21T05:47:39.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en Tab Groups en Google Chrome versiones anteriores a 88.0.4324.146, permitía a un atacante que convenció a un usuario de instalar una extensión maliciosa para explotar potencialmente una corrupción de la pila por medio de una Extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.146",
            "matchCriteriaId" : "5E717595-61CC-47AA-89FC-5559EFD50892"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1163845",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1163845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21145",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T15:15:13.703",
      "lastModified" : "2024-11-21T05:47:39.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Fonts en Google Chrome versiones anteriores a 88.0.4324.146, permitía a un atacante remoto explotar una corrupción de la memoria por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.146",
            "matchCriteriaId" : "5E717595-61CC-47AA-89FC-5559EFD50892"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1154965",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1154965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21146",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T15:15:13.750",
      "lastModified" : "2024-11-21T05:47:39.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Navigation en Google Chrome versiones anteriores a 88.0.4324.146, permitía a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.146",
            "matchCriteriaId" : "5E717595-61CC-47AA-89FC-5559EFD50892"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161705",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21147",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T15:15:13.813",
      "lastModified" : "2024-11-21T05:47:39.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Skia in Google Chrome prior to 88.0.4324.146 allowed a local attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La implementación inapropiada en Skia en Google Chrome versiones anteriores a 88.0.4324.146, permitía a un atacante local falsificar el contenido del Omnibox (barra de URL) por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.146",
            "matchCriteriaId" : "5E717595-61CC-47AA-89FC-5559EFD50892"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1162942",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1162942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T15:15:13.877",
      "lastModified" : "2024-11-21T05:57:02.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In util/session/sessionmanager.go in Argo CD before 1.8.4, tokens continue to work even when the user account is disabled."
      }, {
        "lang" : "es",
        "value" : "En el archivo util/session/sessionmanager.go en Argo CD versiones anteriores a 1.8.4, los tokens continúan funcionando inclusive cuando la cuenta de usuario está deshabilitada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.12",
            "matchCriteriaId" : "9AEEA97A-CE3D-40E4-BD95-5C4892477940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.4",
            "matchCriteriaId" : "5695FFA1-BA9D-4165-9762-93BAC286BD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/commit/f5b0db240b4e3abf18e97f6fd99096b4f9e94dc5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-9h6w-j7w4-jr52",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/commit/f5b0db240b4e3abf18e97f6fd99096b4f9e94dc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-9h6w-j7w4-jr52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3394",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T15:15:13.953",
      "lastModified" : "2024-11-21T06:21:24.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Millennium Millewin (also known as \"Cartella clinica\") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Millennium Millewin (también se conoce como \"Cartella clinica\") versiones 13.39.028, 13.39.28.3342 y 13.39.146.1, posee permisos de carpeta no seguros que permiten a un usuario malicioso escalar privilegios locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:millewin:millewin:13.39.028:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B426D9-A357-450B-B900-0ADC2554135D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:millewin:millewin:13.39.28.3342:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B79A45-A6A0-47C3-953C-0543F2D2568B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:millewin:millewin:13.39.146.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF04D86-3777-453C-BE3F-B2CD24DC47D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161334/Millewin-13.39.028-Unquoted-Service-Path-Insecure-Permissions.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49530",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161334/Millewin-13.39.028-Unquoted-Service-Path-Insecure-Permissions.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21148",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-09T16:15:12.390",
      "lastModified" : "2025-10-24T21:02:10.520",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en V8 en Google Chrome versiones anteriores a 88.0.4324.150, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium V8 Heap Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.150",
            "matchCriteriaId" : "E80A947A-1527-42A2-99C8-9CFB95F27022"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1170176",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4858",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1170176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7ACWYJ74Z3YN2XH4QMUEGNBC3VXX464L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUQSMNV7INLDDSD3RKI5S5EAULX2QC7P/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21148",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26675",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T16:15:12.453",
      "lastModified" : "2024-11-21T05:56:39.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow in dnsproxy in ConnMan before 1.39 could be used by network adjacent attackers to execute code."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la región stack de la memoria en dnsproxy en ConnMan versiones anteriores a 1.39, podría ser usado por atacantes adyacentes a la red para ejecutar código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:connman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.39",
            "matchCriteriaId" : "3C6D54B9-DC0E-4300-B554-45AFA532C3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B009C22E-30A4-4288-BCF6-C3E81DEAF45A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1181751",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=e4079a20f617a4b076af503f6e4e8b0304c9f2cb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kunnamon.io/tbone/",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-29",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4847",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/08/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1181751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=e4079a20f617a4b076af503f6e4e8b0304c9f2cb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kunnamon.io/tbone/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26676",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T16:15:12.593",
      "lastModified" : "2024-11-21T05:56:39.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gdhcp in ConnMan before 1.39 could be used by network-adjacent attackers to leak sensitive stack information, allowing further exploitation of bugs in gdhcp."
      }, {
        "lang" : "es",
        "value" : "Los atacantes adyacentes a la red podían usar gdhcp en ConnMan versiones anteriores a 1.39, para filtrar información confidencial de la pila, lo que permitiría una mayor explotación de los errores en gdhcp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:intel:connman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.39",
            "matchCriteriaId" : "3C6D54B9-DC0E-4300-B554-45AFA532C3CB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B009C22E-30A4-4288-BCF6-C3E81DEAF45A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1181751",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=58d397ba74873384aee449690a9070bacd5676fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=a74524b3e3fad81b0fd1084ffdf9f2ea469cd9b1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kunnamon.io/tbone/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-29",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4847",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/08/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1181751",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=58d397ba74873384aee449690a9070bacd5676fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/commit/?id=a74524b3e3fad81b0fd1084ffdf9f2ea469cd9b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/network/connman/connman.git/tree/ChangeLog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kunnamon.io/tbone/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/08/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22663",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-09T17:15:14.563",
      "lastModified" : "2024-11-21T05:50:25.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cscape (All versions prior to 9.90 SP3.5) lacks proper validation of user-supplied data when parsing project files. This could lead to an out-of-bounds read. An attacker could leverage this vulnerability to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Cscape (todas las versiones anteriores a 9.90 SP3.5) carece de una comprobación apropiada de los datos suministrados por el usuario al analizar los archivos de proyecto.&#xa0;Esto podría conllevar a una lectura fuera de límites.&#xa0;Un atacante podría explotar esta vulnerabilidad para ejecutar código en el contexto del proceso actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.90",
            "matchCriteriaId" : "EE2DC26D-983D-42DF-A903-1AFC1430EB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:cscape:9.90:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A38B0797-880F-4E1C-AB4B-BFDCE94DC178"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:cscape:9.90:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC489D1-BBCE-4B6F-98CE-FD50D5EF62F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:cscape:9.90:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD1D502-B60B-4DFD-9CAB-A2AFFF6DD035"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25139",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-09T17:15:14.640",
      "lastModified" : "2024-11-21T05:54:25.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This vulnerability could be remotely exploited by an unauthenticated user to cause a stack based buffer overflow using user supplied input to the `khuploadfile.cgi` CGI ELF. The stack based buffer overflow could lead to Remote Code Execution, Denial of Service, and/or compromise system integrity. **Note:** HPE recommends that customers discontinue the use of the HPE Moonshot Provisioning Manager. The HPE Moonshot Provisioning Manager application is discontinued, no longer supported, is not available to download from the HPE Support Center, and no patch is available."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en HPE Moonshot Provisioning Manager versión v1.20.&#xa0;HPE Moonshot Provisioning Manager es una aplicación que es instalada en un entorno VMWare o Microsoft Hyper-V que es usada para instalar y configurar un chasis HPE Moonshot 1500.&#xa0;Esta vulnerabilidad podría ser explotada remotamente por un usuario no autenticado para causar un desbordamiento del búfer en la región stack de la memoria usando la entrada suministrada por el usuario al ELF CGI \"khuploadfile.cgi\".&#xa0;El desbordamiento del búfer en la región stack de la memoria podría conllevar a una Ejecución de Código Remota, una Denegación de Servicio y/o comprometer la integridad del sistema.&#xa0;**Nota:** HPE recomienda a los clientes dejar de usar HPE Moonshot Provisioning Manager.&#xa0;La aplicación HPE Moonshot Provisioning Manager está descontinuada, ya no es compatible, no está disponible para descargar desde el Centro de soporte de HPE y no existe ningún parche disponible"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:moonshot_provisioning_manager:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00EFE40-9567-4AFE-840F-5C04648E1913"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04084en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04084en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25140",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-09T17:15:14.703",
      "lastModified" : "2024-11-21T05:54:25.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot Provisioning Manager is an application that is installed in a VMWare or Microsoft Hyper-V environment that is used to setup and configure an HPE Moonshot 1500 chassis. This vulnerability could be remotely exploited by an unauthenticated user to cause a directory traversal in user supplied input to the `khuploadfile.cgi` CGI ELF. The directory traversal could lead to Remote Code Execution, Denial of Service, and/or compromise system integrity. **Note:** HPE recommends that customers discontinue the use of the HPE Moonshot Provisioning Manager. The HPE Moonshot Provisioning Manager application is discontinued, no longer supported, is not available to download from the HPE Support Center, and no patch is available."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad en determinado firmware del switch HPE y Aruba L2/L3.&#xa0;Se identificó un error de procesamiento de datos debido al manejo inapropiado de un tipo de datos inesperado en la información suministrada por el usuario a la interfaz de administración del switch.&#xa0;El error de procesamiento de datos podría ser explotado para causar un bloqueo o reinicio en la interfaz de administración del switch y/o posiblemente el propio switch, conllevando a una denegación de servicio (DoS) local.&#xa0;El usuario debe tener privilegios de administrador para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:moonshot_provisioning_manager:1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00EFE40-9567-4AFE-840F-5C04648E1913"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04085en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04085en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25141",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-09T17:15:14.780",
      "lastModified" : "2024-11-21T05:54:25.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been identified in in certain HPE and Aruba L2/L3 switch firmware. A data processing error due to improper handling of an unexpected data type in user supplied information to the switch's management interface has been identified. The data processing error could be exploited to cause a crash or reboot in the switch management interface and/or possibly the switch itself leading to local denial of service (DoS). The user must have administrator privileges to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad en determinado firmware del switch HPE y Aruba L2/L3.&#xa0;Se identificó un error de procesamiento de datos debido al manejo inapropiado de un tipo de datos inesperado en la información suministrada por el usuario a la interfaz de administración del switch.&#xa0;El error de procesamiento de datos podría ser explotado para causar un bloqueo o reinicio en la interfaz de administración del switch y/o posiblemente el propio switch, conllevando a una denegación de servicio (DoS) local.&#xa0;El usuario debe tener privilegios de administrador para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_5406r_zl2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "kb.16.10.0012",
            "matchCriteriaId" : "972DC214-38A9-4FD2-B711-F9DDEB728EDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_5406r_zl2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E982204-9ADC-4242-86C2-A407D6EA7DB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_5412r_zl2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "kb.16.10.0012",
            "matchCriteriaId" : "B97B63E2-2EB1-41FB-A4F5-50E9E9569B6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_5412r_zl2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8549CD94-50E2-4615-94C2-D76FADFBA3AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_3810m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "kb.16.10.0012",
            "matchCriteriaId" : "FA016A24-FC1F-4F47-AA50-874251107CF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_3810m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3CE933B-68BA-45BA-81BD-95D873B858B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2930m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "wc.16.10.0012",
            "matchCriteriaId" : "F800D447-86D0-4435-9337-5B0D55E96F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2930m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2561E158-FB61-4FFD-B680-DADF7BC2C6D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2930f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "wc.16.10.0012",
            "matchCriteriaId" : "48B6242A-87BC-48AA-9546-BA1FFF6E507C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2930f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97C4FCD2-BB70-4848-B08A-223B5C3467BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2920_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "wb.16.10.0011",
            "matchCriteriaId" : "84310DE6-B19A-4091-BA29-6BDF6EAE3C31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2920:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1782D4A-AD68-4BD2-8453-EE22BCF2DC99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2540_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "yc.16.10.0012",
            "matchCriteriaId" : "590322F9-884D-4598-B222-D04E13AE2350"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDEDD15E-289E-4B15-8620-547EA19CAEE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2530ya_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ya.16.10.0012",
            "matchCriteriaId" : "C1B21AAC-2F95-4EE9-9DFD-2864E0AD5172"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2530ya:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8251986-B9F2-4345-A4D7-EB3737F12AE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_3800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ka.16.04.0022",
            "matchCriteriaId" : "80404698-66D6-4649-AF49-B37EF53CC220"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50450263-8198-4A93-A317-86B8A0485328"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2620_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "ra.16.04.0022",
            "matchCriteriaId" : "EA814B89-CF8A-464F-BD47-7B18CBEA7881"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F10B7C2-A4A5-4EDC-B5CD-F645DF518125"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:8200_zl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "k.15.18.0024",
            "matchCriteriaId" : "C07219AB-7F2C-4384-A029-F7DBC6330555"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:8200_zl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A726CBA0-CA79-4903-BD50-4455B7667C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:6200_yl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "k.15.18.0024",
            "matchCriteriaId" : "A1FE2140-4A8C-4C46-A899-B023E330634F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:6200_yl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147CA290-22E2-498E-B925-6D85F44823DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:3500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "k.16.02.0032",
            "matchCriteriaId" : "12442248-51A1-40CD-A25B-DF347341B8FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28168255-648C-4D4B-A765-1F0DE777E3F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:3500_yl_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "k.16.02.0032",
            "matchCriteriaId" : "703F3FE8-21A7-4938-96B9-C4A838FCB6FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:3500_yl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91BBD047-E3C6-4AEA-B7B8-7BC4600E4E6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:aruba_2530yb_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "yb.16.10.0012",
            "matchCriteriaId" : "201787FA-8CAC-457A-B7CC-76575A0DF0F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:arubanetworks:aruba_2530yb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7A8F42-55C8-4A2B-8A34-1B1B8BE3BEDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04082en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbnw04082en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25666",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-02-09T18:15:51.573",
      "lastModified" : "2024-11-21T05:55:15.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SCALANCE W780 and W740 (IEEE 802.11n) family (All versions < V6.3). Sending specially crafted packets through the ARP protocol to an affected device could cause a partial denial-of-service, preventing the device to operate normally for a short period of time."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en la familia SCALANCE W780 y W740 (IEEE 802.11n) (todas las versiones anteriores a V6.3).&#xa0;El envío de paquetes especialmente diseñados por medio del protocolo ARP hacia un dispositivo afectado podría causar una denegación de servicio parcial, impidiendo al dispositivo funcionar normalmente durante un corto período de tiempo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w780_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "BCE9B4EC-DF55-4F8A-B130-C0F8F286441C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w780:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB406941-2C32-4551-8C1C-9E8DC4157E73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w740_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "00F55236-C25F-4F93-B74C-AE75EEDBD388"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFC9F18-3070-4F23-88D9-F40CDF884174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-07",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-686152.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T19:15:13.773",
      "lastModified" : "2024-11-21T05:49:49.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows a remote replay attack for T0320L01^ABP through T0320L01^ABZ, T0952L01^AAH through T0952L01^AAR, T0986L01 through T0986L01^AAF, T0665L01^AAP, and T0662L01^AAP (L) and T0320H01^ABO through T0320H01^ABY, T0952H01^AAG through T0952H01^AAQ, T0986H01 through T0986H01^AAE, T0665H01^AAO, and T0662H01^AAO (J and H)."
      }, {
        "lang" : "es",
        "value" : "Idelji Web ViewPoint Suite, tal como es usada en conjunto con HPE NonStop, permite un ataque de reproducción remota para T0320L01^ABP hasta T0320L01^ABZ, T0952L01^AAH hasta T0952L01^AAR, T0986L01 hasta T0986L01^AAF, T0665L01^AAP y ^AAP (L) y T0320H01^ABO hasta T0320H01^ABY, T0952H01^AAG hasta T0952H01^AAQ, T0986H01 hasta T0986H01^AAE, T0665H01^AAO y T0662H01^AAO (J y H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-294"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "06.03",
            "versionEndIncluding" : "06.23.01",
            "matchCriteriaId" : "854CE3D0-C2E9-475D-A079-C4185A2BE4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.08.00",
            "versionEndIncluding" : "19.08.00",
            "matchCriteriaId" : "E42D9831-656D-47D0-BFEA-B57E0AF445E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0320h01\\^abw",
            "versionEndIncluding" : "t0320h01\\^acc",
            "matchCriteriaId" : "204FCE16-72AA-4516-B2EB-B813A429DBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0952h01\\^aaq",
            "versionEndIncluding" : "t0952h01\\^aaw",
            "matchCriteriaId" : "A7C43A33-0CBE-473F-844D-2C18721C3555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0952l01\\^aar",
            "versionEndIncluding" : "t0952l01\\^aax",
            "matchCriteriaId" : "18AC804E-31E2-4A9E-A218-C130DB00A779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0986h01\\^aac",
            "versionEndIncluding" : "t0986h01\\^aai",
            "matchCriteriaId" : "47A9BFCE-6B14-46F0-A12B-4974D114643F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0986l01\\^aad",
            "versionEndIncluding" : "t0986l01\\^aaj",
            "matchCriteriaId" : "667CD5A6-FA80-4265-BB1C-407CAB0F4BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:15.02.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EB6DB3-9698-4B2A-ABC4-51B1BCF6A3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:15.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8608EB2-4214-425E-823A-441AA00C7A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:t0320l01\\^aby:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE0E6DB-7571-484A-A414-5A0FB41FC4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:t0320l01\\^acd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2873C5-48BB-40E5-9168-50DEE865D60C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hpe:nonstop:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55858925-B0CD-4C4D-8CAA-DFA1B36C0DE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://idelji.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04076en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://idelji.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04076en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T19:15:13.837",
      "lastModified" : "2024-11-21T06:21:06.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Idelji Web ViewPoint Suite, as used in conjunction with HPE NonStop, allows Remote Unauthorized Access for T0320L01^ABY and T0320L01^ACD, T0952L01^AAR through T0952L01^AAX, and T0986L01^AAD through T0986L01^AAJ (L) and T0320H01^ABW through T0320H01^ACC, T0952H01^AAQ through T0952H01^AAW, and T0986H01^AAC through T0986H01^AAI (J and H)."
      }, {
        "lang" : "es",
        "value" : "Idelji Web ViewPoint Suite, tal como es usada en conjunto con HPE NonStop, permite el acceso remoto no autorizado para T0320L01^ABY y T0320L01^ACD, T0952L01^AAR hasta T0952L01^AAX y T0986L01^AAD hasta T0986L01^AAJ (L) y T0320H01 T0320H01^ACC, T0952H01^AAQ hasta T0952H01^AAW y T0986H01^AAC hasta T0986H01^AAI (J y H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "06.03",
            "versionEndIncluding" : "06.23.01",
            "matchCriteriaId" : "854CE3D0-C2E9-475D-A079-C4185A2BE4C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.08.00",
            "versionEndIncluding" : "19.08.00",
            "matchCriteriaId" : "E42D9831-656D-47D0-BFEA-B57E0AF445E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0320h01\\^abw",
            "versionEndIncluding" : "t0320h01\\^acc",
            "matchCriteriaId" : "204FCE16-72AA-4516-B2EB-B813A429DBE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0952h01\\^aaq",
            "versionEndIncluding" : "t0952h01\\^aaw",
            "matchCriteriaId" : "A7C43A33-0CBE-473F-844D-2C18721C3555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0952l01\\^aar",
            "versionEndIncluding" : "t0952l01\\^aax",
            "matchCriteriaId" : "18AC804E-31E2-4A9E-A218-C130DB00A779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0986h01\\^aac",
            "versionEndIncluding" : "t0986h01\\^aai",
            "matchCriteriaId" : "47A9BFCE-6B14-46F0-A12B-4974D114643F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "t0986l01\\^aad",
            "versionEndIncluding" : "t0986l01\\^aaj",
            "matchCriteriaId" : "667CD5A6-FA80-4265-BB1C-407CAB0F4BE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:15.02.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EB6DB3-9698-4B2A-ABC4-51B1BCF6A3E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:15.02.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8608EB2-4214-425E-823A-441AA00C7A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:t0320l01\\^aby:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE0E6DB-7571-484A-A414-5A0FB41FC4DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:web_viewpoint:t0320l01\\^acd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2873C5-48BB-40E5-9168-50DEE865D60C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:hpe:nonstop:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55858925-B0CD-4C4D-8CAA-DFA1B36C0DE0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://idelji.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04081en_us",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://idelji.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbns04081en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://techpartner.ext.hpe.com/TechPartner/PartnerDetail.xhtml?Partner=Idelji",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T20:15:14.707",
      "lastModified" : "2024-11-21T05:56:27.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in SmartFoxServer 2.17.0. Input passed to the AdminTool console is not properly sanitized before being returned to the user. This can be exploited to execute arbitrary HTML code in a user's browser session in context of an affected site."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de tipo XSS en SmartFoxServer versión 2.17.0.&#xa0;Una entrada que es pasada a la consola de AdminTool no es saneado apropiadamente antes de ser devuelto al usuario.&#xa0;Esto puede ser explotado para ejecutar código HTML arbitrario en la sesión del navegador de un usuario en el contexto de un sitio afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartfoxserver:smartfoxserver:2.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3383843-109B-4271-A645-2F1D916405EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smartfoxserver.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5626.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161335/SmartFoxServer-2X-2.17.0-God-Mode-Console-WebSocket-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smartfoxserver.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5626.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T20:15:14.767",
      "lastModified" : "2024-11-21T05:56:27.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SmartFoxServer 2.17.0. Cleartext password disclosure can occur via /config/server.xml."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SmartFoxServer versión 2.17.0.&#xa0;Una divulgación de la contraseña en texto sin cifrar puede ocurrir por medio del archivo /config/server.xml"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartfoxserver:smartfoxserver:2.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3383843-109B-4271-A645-2F1D916405EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smartfoxserver.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161337/SmartFoxServer-2X-2.17.0-Credential-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smartfoxserver.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5627.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T20:15:14.847",
      "lastModified" : "2024-11-21T05:56:27.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SmartFoxServer 2.17.0. An attacker can execute arbitrary Python code, and bypass the javashell.py protection mechanism, by creating /config/ConsoleModuleUnlock.txt and editing /config/admin/admintool.xml to enable the Console module."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SmartFoxServer versión 2.17.0.&#xa0;Un atacante puede ejecutar código Python arbitrario y omitir el mecanismo de protección javashell.py, creando /config/ConsoleModuleUnlock.txt y editando /config/admin/admintool.xml para habilitar el módulo de Consola"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartfoxserver:smartfoxserver:2.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3383843-109B-4271-A645-2F1D916405EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smartfoxserver.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161340/SmartFoxServer-2X-2.17.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.smartfoxserver.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T20:15:14.910",
      "lastModified" : "2025-05-09T20:15:36.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "encoding.c in GNU Screen through 4.8.0 allows remote attackers to cause a denial of service (invalid write access and application crash) or possibly have unspecified other impact via a crafted UTF-8 character sequence."
      }, {
        "lang" : "es",
        "value" : "El archivo encoding.c en GNU Screen versiones hasta 4.8.0, permite a atacantes remotos causar una denegación de servicio (acceso de escritura no válido y bloqueo de la aplicación) o posiblemente tener otro impacto no especificado por medio de una secuencia de caracteres UTF-8 diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:screen:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.0",
            "matchCriteriaId" : "F31304B8-5E0C-4BA0-89F6-E2D0CA54A0AC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/09/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/screen/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNWBOIDEPOEQS5RMQVMFKHKXJCGNYWBL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJWLXP45POUUYBJRRWPVAWNZDJTLYWVM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-11",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4861",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/09/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/09/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ftp.gnu.org/gnu/screen/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GNWBOIDEPOEQS5RMQVMFKHKXJCGNYWBL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJWLXP45POUUYBJRRWPVAWNZDJTLYWVM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/screen-devel/2021-02/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20250509-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/09/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21444",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.083",
      "lastModified" : "2024-11-21T05:48:23.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Business Objects BI Platform, versions - 410, 420, 430, allows multiple X-Frame-Options headers entries in the response headers, which may not be predictably treated by all user agents. This could, as a result, nullify the added X-Frame-Options header leading to Clickjacking attack."
      }, {
        "lang" : "es",
        "value" : "SAP Business Objects BI Platform, versiones - 410, 420, 430, permite múltiples entradas de encabezados X-Frame-Options en los encabezados de respuesta, que pueden no ser tratados de manera predecible por todos los agentes de usuario.&#xa0;Esto podría, como resultado, anular el encabezado X-Frame-Options agregado conllevando a un ataque de Secuestro del Clic"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:410:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F721F23A-11D6-46E3-9D43-C9DB2DB28CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38BA0DF9-D893-4AF9-923E-E47EA5C02C52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CBCF48-5478-4EE5-8F69-6E59EFDB707D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2935791",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2935791",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21472",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.300",
      "lastModified" : "2024-11-21T05:48:26.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Software Provisioning Manager 1.0 (SAP NetWeaver Master Data Management Server 7.1) does not have an option to set password during its installation, this allows an authenticated attacker to perform various security attacks like Directory Traversal, Password Brute force Attack, SMB Relay attack, Security Downgrade."
      }, {
        "lang" : "es",
        "value" : "SAP Software Provisioning Manager versión 1.0 (SAP NetWeaver Master Data Management Server versión 7.1) no posee una opción para ajustar una contraseña durante su instalación, esto permite a un atacante autenticado llevar a cabo varios ataques de seguridad como Salto de Directorio, Ataque de Fuerza Bruta de Contraseña, Ataque de SMB Relay, Degradación de la Seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:software_provisioning_manager:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEC62BE-0FA5-4628-AA1A-0A844EE34229"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2998173",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2998173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21474",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.393",
      "lastModified" : "2024-11-21T05:48:26.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidating the digital signature, this allows them to impersonate as user in HANA database and be able to read the contents in the database."
      }, {
        "lang" : "es",
        "value" : "SAP HANA Database, versiones - 1.0, 2.0, acepta tokens SAML con un digest MD5, un atacante que logra obtener una afirmación SAML firmada por un digest MD5 emitida para una instancia de SAP HANA podría manipularla y alterarla de una manera que el digest sigue siendo el mismo y sin invalidar la firma digital, esto les permite hacerse pasar por usuario en la base de datos HANA y poder leer los contenidos en la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_database:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528C05CB-315F-465C-8C25-EF85AA7D19B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana_database:2.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C6CA542-7071-48B6-B135-3AE9B4BB1DC5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2992154",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2992154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21475",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.457",
      "lastModified" : "2024-11-21T05:48:26.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under specific circumstances SAP Master Data Management, versions - 710, 710.750, allows an unauthorized attacker to exploit insufficient validation of path information provided by users, thus characters representing 'traverse to parent directory' are passed through to the file APIs. Due to this Directory Traversal vulnerability the attacker could read content of arbitrary files on the remote server and expose sensitive data."
      }, {
        "lang" : "es",
        "value" : "En circunstancias específicas, SAP Master Data Management, versiones - 710, 710.750, permite a un atacante no autorizado explotar una comprobación insuficiente de la información de ruta proporcionada por los usuarios, por lo que los caracteres que representan \"traverse to parent directory\" son transferidos a las API de archivo.&#xa0;Debido a esta vulnerabilidad de Salto de Directorio, el atacante podría leer el contenido de archivos arbitrarios en el servidor remoto y exponer datos confidenciales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management_server:710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1277122-BB85-4CBA-B0DA-4654E031B08D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management_server:710.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "891D4A3C-D519-49FE-8C08-C03C20AE5433"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3000897",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3000897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21476",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.533",
      "lastModified" : "2024-11-21T05:48:26.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP UI5 versions before 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1 allows an unauthenticated attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "SAP UI5, versiones anteriores a: 1.38.49, 1.52.49, 1.60.34, 1.71.31, 1.78.18, 1.84.5, 1.85.4, 1.86.1, permite a un atacante no autenticado redireccionar a usuarios a un sitio malicioso debido a vulnerabilidades de tipo Tabnabbing Inverso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.38.49",
            "matchCriteriaId" : "A6980394-2B06-4660-B495-E81FF13058CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.50.5",
            "versionEndExcluding" : "1.52.49",
            "matchCriteriaId" : "4FE5AAFE-6AFB-4F3C-9919-650611936BD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.60.1",
            "versionEndExcluding" : "1.60.34",
            "matchCriteriaId" : "F88A1AE9-FF5E-4842-9C0E-A6C3DBB79CE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.71.0",
            "versionEndExcluding" : "1.71.31",
            "matchCriteriaId" : "1A1646B5-02CE-480C-91CC-D9F7FD48AB0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.78.0",
            "versionEndExcluding" : "1.78.18",
            "matchCriteriaId" : "53D55323-DA22-4D9A-9D9D-4372A86BEF65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.84.0",
            "versionEndExcluding" : "1.84.5",
            "matchCriteriaId" : "4BD70F05-C64D-4F82-A7AB-D512720211F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.85.0",
            "versionEndExcluding" : "1.85.4",
            "matchCriteriaId" : "06FE28A7-74C3-4976-8CA7-FE446F85CD84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:ui5:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.86.0",
            "versionEndExcluding" : "1.86.1",
            "matchCriteriaId" : "5D89B55D-5557-44B8-A80C-212135299C08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3014303",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3014303",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21477",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.613",
      "lastModified" : "2024-11-21T05:48:27.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Commerce Cloud, versions - 1808,1811,1905,2005,2011, enables certain users with required privileges to edit drools rules, an authenticated attacker with this privilege will be able to inject malicious code in the drools rules which when executed leads to Remote Code Execution vulnerability enabling the attacker to compromise the underlying host enabling him to impair confidentiality, integrity and availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP Commerce Cloud, versiones - 1808,1811,1905,2005,2011, permite a determinados usuarios con privilegios requeridos editar las reglas de drools, un atacante autenticado con este privilegio podrá inyectar código malicioso en las reglas de drools que, cuando se ejecutan, conllevan a una vulnerabilidad de ejecución de código remota permitiendo al atacante poner en peligro el host subyacente, permitiendo afectar la confidencialidad, integridad y disponibilidad de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:1808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F352D085-2B1E-44A9-81C6-2E1F5C249AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:1811:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A12336-30BA-439D-A3F2-B7D93D5B52DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:1905:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F665F648-5C35-4EC8-8064-8ED139C8813C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788164A-7724-4CB1-8ADC-B05ADE595020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE31C0C-31D7-468E-B1D4-CE522086EDD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3014121",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3014121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21478",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.783",
      "lastModified" : "2024-11-21T05:48:27.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Web Dynpro ABAP allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "SAP Web Dynpro ABAP, permite a un atacante redireccionar a usuarios a un sitio malicioso debido a vulnerabilidades de tipo Tabnabbing Inverso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:web_dynpro_abap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B331F3E-5D5C-4714-B03F-D56C03E1F7B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2974582",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2974582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=568460543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21479",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-02-09T21:15:13.863",
      "lastModified" : "2024-11-21T05:48:27.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system."
      }, {
        "lang" : "es",
        "value" : "En SCIMono versiones anteriores a 0.0.19, es posible para un atacante inyectar y ejecutar una expresión java comprometiendo la disponibilidad e integridad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:scimono:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.19",
            "matchCriteriaId" : "E20169BE-BD20-439B-B379-7A419460A453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/scimono/security/advisories/GHSA-29q4-gxjq-rx5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21502",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-02-09T22:15:13.697",
      "lastModified" : "2024-11-21T05:48:29.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a \"use of SSH key past account expiration\" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS versiones 8.1.0 - 9.1.0, contienen una vulnerabilidad de \"use of SSH key past account expiration\".&#xa0;Un usuario en la red con el privilegio ISI_PRIV_AUTH_SSH RBAC que presenta una cuenta caducada puede potencialmente explotar esta vulnerabilidad, dándole acceso a las mismas cosas que tenía antes de una caducidad de la cuenta.&#xa0;Esto puede deberse a una cuenta con muchos privilegios y, por lo tanto, Dell recomienda a los clientes que se actualicen lo antes posible"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4671F67B-730F-4FB4-A75E-0ED22501863B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E104E616-5403-40ED-BB02-185B3B872469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575793FB-6E18-4A7F-B689-EA4FB7904DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B64FFA7E-C401-4755-A269-A59E225BCB8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02079AB-D410-4CD2-8E70-BCFEAB5DEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF89B320-6D5A-4E46-A1FA-FCDB31F325C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5422D856-00B1-47FA-8D62-9B464A43BAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08AB5B6-818B-4666-8DF8-32030BBE06A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:13.663",
      "lastModified" : "2024-11-21T05:57:06.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the calamine crate before 0.17.0 for Rust. It allows attackers to overwrite heap-memory locations because Vec::set_len is used without proper memory claiming, and this uninitialized memory is used for a user-provided Read operation, as demonstrated by Sectors::get."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate calamine versiones anteriores a 0.17.0 para Rust.&#xa0;Permite a atacantes sobrescribir las ubicaciones de la memoria de la pila porque la función Vec::set_len es usada sin el requerimiento de memoria apropiado, y esta memoria no inicializada se usa para una operación de Lectura proporcionada por el usuario, como es demostrado por la función Sectors::get"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        }, {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:calamine_project:calamine:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.17.0",
            "matchCriteriaId" : "500EE3F5-0563-49E1-82A3-12995777C984"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:13.727",
      "lastModified" : "2024-11-21T05:57:06.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the ms3d crate before 0.1.3 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via IoReader::read."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate ms3d versiones anteriores a  0.1.3 para Rust.&#xa0;Podría permitir a atacantes obtener información confidencial de ubicaciones de memoria no inicializadas por medio de la función IoReader::read"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ms3d_project:ms3d:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.1.3",
            "matchCriteriaId" : "42474540-64F7-4427-9943-9A307F685817"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0016.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:13.787",
      "lastModified" : "2024-11-21T05:57:06.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the postscript crate before 0.14.0 for Rust. It might allow attackers to obtain sensitive information from uninitialized memory locations via a user-provided Read implementation."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate postscript versiones anteriores a  0.14.0 para Rust.&#xa0;Podría permitir a atacantes obtener información confidencial de ubicaciones de memoria no inicializadas por medio de una implementación de Lectura proporcionada por el usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postscript_project:postscript:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.14.0",
            "matchCriteriaId" : "1FE739BB-C016-4699-A211-4E9A34C339CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0017.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:13.850",
      "lastModified" : "2024-11-21T05:57:06.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the qwutils crate before 0.3.1 for Rust. When a Clone panic occurs, insert_slice_clone can perform a double drop."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate qwutils versiones anteriores a  0.3.1 para Rust.&#xa0;Cuando ocurre un pánico de Clone, la función  insert_slice_clone puede llevar a cabo una doble caída"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qwutils_project:qwutils:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.3.1",
            "matchCriteriaId" : "FA0034EE-5EAE-4C3E-8510-639F2E72A277"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:13.913",
      "lastModified" : "2024-11-21T05:57:07.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because xcb::xproto::GetAtomNameReply::name() calls std::str::from_utf8_unchecked() on unvalidated bytes from an X server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate xcb versiones hasta el 4 de Febrero de 2021 para Rust.&#xa0;Presenta una violación de solidez porque la función xcb::xproto::GetAtomNameReply::name() llama a la función std::str::from_utf8_unchecked() en bytes no validados de un servidor X"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xcb_project:xcb:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-04",
            "matchCriteriaId" : "1B2CB27A-1F8D-47C3-ACA1-A2DB333C16DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:13.960",
      "lastModified" : "2024-11-21T05:57:07.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because bytes from an X server can be interpreted as any data type returned by xcb::xproto::GetPropertyReply::value."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate xcb versiones hasta el 4 de Febrero de 2021 para Rust.&#xa0;Presenta una violación de solidez porque los bytes de un servidor X pueden ser interpretados como cualquier tipo de datos devuelto por la función xcb::xproto::GetPropertyReply::value"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xcb_project:xcb:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-04",
            "matchCriteriaId" : "1B2CB27A-1F8D-47C3-ACA1-A2DB333C16DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:14.023",
      "lastModified" : "2024-11-21T05:57:07.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because there is an out-of-bounds read in xcb::xproto::change_property(), as demonstrated by a format=32 T=u8 situation where out-of-bounds bytes are sent to an X server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate xcb versione hasta el 4 de Febrero de 2021 para Rust.&#xa0;Presenta una violación de solidez porque se presenta una lectura fuera de límites en la función xcb::xproto::change_property(), como es demostrado por una situación format=32 T=u8 donde los bytes fuera de límites son enviados a un servidor X"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xcb_project:xcb:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-04",
            "matchCriteriaId" : "1B2CB27A-1F8D-47C3-ACA1-A2DB333C16DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26958",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:14.383",
      "lastModified" : "2024-11-21T05:57:07.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the xcb crate through 2021-02-04 for Rust. It has a soundness violation because transmutation to the wrong type can happen after xcb::base::cast_event uses std::mem::transmute to return a reference to an arbitrary type."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate xcb versiones hasta el 4 de Febrero de 2021 para Rust.&#xa0;Presenta una violación de solidez porque la transmutación al tipo equivocado puede ocurrir después de que la función xcb::base::cast_event usa la función std::mem::transmute para devolver una referencia a un tipo arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xcb_project:xcb:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-04",
            "matchCriteriaId" : "1B2CB27A-1F8D-47C3-ACA1-A2DB333C16DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-09T23:15:14.460",
      "lastModified" : "2023-11-07T03:31:51.410",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21299. Reason: This candidate is a duplicate of CVE-2021-21299. Notes: All CVE users should reference CVE-2021-21299 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20654",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-10T09:15:12.887",
      "lastModified" : "2024-11-21T05:46:57.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wekan, open source kanban board system, between version 3.12 and 4.11, is vulnerable to multiple stored cross-site scripting. This is named 'Fieldbleed' in the vendor's site."
      }, {
        "lang" : "es",
        "value" : "Wekan, el sistema de placa kanban de código abierto, entre versiones 3.12 y 4.11, es vulnerable a múltiples ataques de tipo cross-site scripting almacenado.&#xa0;Esto es denominado \"Fieldbleed\" en el sitio del proveedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "vultures@jpcert.or.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wekan_project:wekan:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.12",
            "versionEndIncluding" : "4.11",
            "matchCriteriaId" : "D2B2CB93-E64A-4005-B5D1-2E401A39EAE6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN80785288/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wekan.github.io/hall-of-fame/fieldbleed/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN80785288/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wekan.github.io/hall-of-fame/fieldbleed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23878",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T09:15:13.090",
      "lastModified" : "2024-11-21T05:51:59.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clear text storage of sensitive Information in memory vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local user to view ENS settings and credentials via accessing process memory after the ENS administrator has performed specific actions. To exploit this, the local user has to access the relevant memory location immediately after an ENS administrator has made a configuration change through the console on their machine"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de almacenamiento en texto sin cifrar de información confidencial en la memoria en McAfee Endpoint Security (ENS) para Windows versiones anteriores a 10.7.0, la actualización de Febrero de 2021, permite a un usuario local visualizar la configuración y las credenciales de ENS por medio del acceso a la memoria del proceso después de que el administrador de ENS haya llevado a cabo acciones específicas.&#xa0;Para explotar esto, el usuario local debe acceder a la ubicación de memoria relevante inmediatamente después de a un administrador de ENS haya realizado un cambio de configuración por medio de la consola en su máquina"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "10.7.0",
            "matchCriteriaId" : "CA4CEE25-A297-4D69-8CF8-5425875B206A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23880",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T10:15:13.177",
      "lastModified" : "2024-11-21T05:51:59.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrator user to perform an uninstallation of the anti-malware engine via the running of a specific command with the correct parameters."
      }, {
        "lang" : "es",
        "value" : "Un Control de Acceso Inapropiado en attribute en McAfee Endpoint Security (ENS) para Windows versiones anteriores a 10.7.0 actualización de Febrero de 2021, permite a un usuario administrador local autenticado llevar a cabo una desinstalación del motor anti-malware por medio de la ejecución de un comando específico con los parámetros correctos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "10.7.0",
            "matchCriteriaId" : "CA4CEE25-A297-4D69-8CF8-5425875B206A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23882",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T10:15:13.363",
      "lastModified" : "2024-11-21T05:51:59.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent the installation of some ENS files by placing carefully crafted files where ENS will be installed. This is only applicable to clean installations of ENS as the Access Control rules will prevent modification prior to up an upgrade."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Control de Acceso Inapropiado en McAfee Endpoint Security (ENS) para Windows versiones anteriores a 10.7.0 actualización de Febrero de 2021, permite a administradores locales impedir la instalación de algunos archivos ENS al colocar archivos cuidadosamente diseñados donde será instalado ENS.&#xa0;Esto solo se aplica a instalaciones limpias de ENS, ya que las reglas de Control de Acceso impedirán modificaciones antes de llevar a cabo una actualización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "10.7.0",
            "matchCriteriaId" : "CA4CEE25-A297-4D69-8CF8-5425875B206A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23883",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T10:15:13.473",
      "lastModified" : "2024-11-21T05:51:59.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Null Pointer Dereference vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows a local administrator to cause Windows to crash via a specific system call which is not handled correctly. This varies by machine and had partial protection prior to this update."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Desreferencia del Puntero Null en McAfee Endpoint Security (ENS) para Windows versiones anteriores a actualización 10.7.0 de Febrero de 2021, permite a un administrador local causar a Windows bloquearse por medio de una llamada específica al sistema que no es manejada correctamente.&#xa0;Esto varía según la máquina y tenía protección parcial anterior a esta actualización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "10.7.0",
            "matchCriteriaId" : "CA4CEE25-A297-4D69-8CF8-5425875B206A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23873",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T11:15:12.817",
      "lastModified" : "2024-11-21T05:51:58.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file deletion as the SYSTEM user potentially causing Denial of Service via manipulating Junction link, after enumerating certain files, at a specific time."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios en McAfee Total Protection (MTP) versiones anteriores a 16.0.30, permite a un usuario local alcanzar privilegios elevados y llevar a cabo una eliminación arbitraria de archivos como usuario SYSTEM que podría causar una Denegación de Servicio por medio de la manipulación del enlace de Unión, después de enumerar determinados archivos, en un tiempo específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.30",
            "matchCriteriaId" : "D20C251F-8C1B-4359-A02B-7DE82615A291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?&id=TS103114",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-175/",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?&id=TS103114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-175/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23874",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T11:15:12.943",
      "lastModified" : "2025-11-03T18:58:25.010",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitrary code bypassing MTP self-defense."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución arbitraria de procesos en McAfee Total Protection (MTP) versiones anteriores a 16.0.30, permite a un usuario local alcanzar privilegios elevados y ejecutar código arbitrario omitiendo la autodefensa de MTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "McAfee Total Protection (MTP) Improper Privilege Management Vulnerability",
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.30",
            "matchCriteriaId" : "D20C251F-8C1B-4359-A02B-7DE82615A291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?&id=TS103114",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?&id=TS103114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-23874",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23876",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T11:15:13.100",
      "lastModified" : "2024-11-21T05:51:59.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modification as the SYSTEM user potentially causing Denial of Service via executing carefully constructed malware."
      }, {
        "lang" : "es",
        "value" : "Omitir la llamada de Procedimiento Remoto en McAfee Total Protection (MTP) versiones anteriores a 16.0.30, permite a un usuario local alcanzar privilegios elevados y llevar a cabo modificaciones arbitrarias de archivos como usuario SYSTEM, lo que podría causar un denegación de servicio por medio de una ejecución de malware cuidadosamente construido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:total_protection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.0.30",
            "matchCriteriaId" : "D20C251F-8C1B-4359-A02B-7DE82615A291"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?&id=TS103114",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://service.mcafee.com/FAQDocument.aspx?&id=TS103114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23881",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-10T11:15:13.177",
      "lastModified" : "2024-11-21T05:51:59.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross site scripting vulnerability in ePO extension of McAfee Endpoint Security (ENS) prior to 10.7.0 February 2021 Update allows an ENS ePO administrator to add a script to a policy event which will trigger the script to be run through a browser block page when a local non-administrator user triggers the policy."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross site scripting almacenado en la extensión ePO de McAfee Endpoint Security (ENS) versiones anteriores a 10.7.0 actualización de Febrero de 2021, permite a un administrador de ePO de ENS agregar un script a un evento de política que desencadenará el script para que sea ejecutado mediante una página de bloqueo del navegador cuando un usuario local que no es administrador activa la política"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_security:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "10.7.0",
            "matchCriteriaId" : "CA4CEE25-A297-4D69-8CF8-5425875B206A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27135",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T16:15:13.787",
      "lastModified" : "2024-11-21T05:57:23.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xterm before Patch #366 allows remote attackers to execute arbitrary code or cause a denial of service (segmentation fault) via a crafted UTF-8 combining character sequence."
      }, {
        "lang" : "es",
        "value" : "xterm antes del parche #366 permite a los atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (fallo de segmentación) a través de una secuencia de caracteres de combinación UTF-8 manipulada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:invisible-island:xterm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "366",
            "matchCriteriaId" : "06CEF6AB-8CBF-4325-8EB9-6979AEBB1F9D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/May/52",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/10/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2021-27135",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1927559",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182091",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ThomasDickey/xterm-snapshots/commit/82ba55b8f994ab30ff561a347b82ea340ba7075c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://invisible-island.net/xterm/xterm.log.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://news.ycombinator.com/item?id=26524650",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/09/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/09/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/10/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://access.redhat.com/security/cve/CVE-2021-27135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1927559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://github.com/ThomasDickey/xterm-snapshots/commit/82ba55b8f994ab30ff561a347b82ea340ba7075c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://invisible-island.net/xterm/xterm.log.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/35LK2ZXEIJUOGOA7FV2TJL3L6LFJ4X5S/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://news.ycombinator.com/item?id=26524650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/09/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/09/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0302",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:16.927",
      "lastModified" : "2024-11-21T05:42:27.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-155287782"
      }, {
        "lang" : "es",
        "value" : "En PackageInstaller, se presenta un posible ataque de tapjacking debido a un valor predeterminado no seguro.&#xa0;Esto podría conllevar a una escalada local de privilegios y permisos sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10, ID de Android: A-155287782"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0305",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:17.553",
      "lastModified" : "2024-11-21T05:42:27.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PackageInstaller, there is a possible tapjacking attack due to an insecure default value. This could lead to local escalation of privilege and permissions with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-154015447"
      }, {
        "lang" : "es",
        "value" : "En PackageInstaller, se presenta un posible ataque de tapjacking debido a un valor predeterminado no seguro.&#xa0;Esto podría conllevar a una escalada local de privilegios y permisos sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10, ID de Android: A-154015447"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0314",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:18.037",
      "lastModified" : "2024-11-21T05:42:29.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of UninstallerActivity, there is a possible way to uninstall an all without informed user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-171221302"
      }, {
        "lang" : "es",
        "value" : "En onCreate de UninstallerActivity, existe una forma posible de desinstalar todo sin el consentimiento informado del usuario debido a un ataque de tipo tapjacking/overlay.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-11 Android-8.1 Android-9, ID de Android: A-171221302"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0325",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:18.630",
      "lastModified" : "2024-11-21T05:42:30.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ih264d_parse_pslice of ih264d_parse_pslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-174238784"
      }, {
        "lang" : "es",
        "value" : "En la función ih264d_parse_pslice del archivo ih264d_parse_pslice.c, se presenta una posible escritura fuera de límites debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una ejecución de código remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-174238784"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0326",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:19.177",
      "lastModified" : "2024-11-21T05:42:31.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In p2p_copy_client_info of p2p.c, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution if the target device is performing a Wi-Fi Direct search, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172937525"
      }, {
        "lang" : "es",
        "value" : "En la función p2p_copy_client_info del archivo p2p.c, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una ejecución de código remota si el dispositivo de destino está realizando una búsqueda de Wi-Fi Direct, sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-11 Android-8.1 Android-9, ID de Android: A-172937525"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00033.html",
        "source" : "security@android.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/",
        "source" : "security@android.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/",
        "source" : "security@android.com"
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4898",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VMHPFCON6ZFCGZXSASJFKQ3UX2UIYMND/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VOSA6DZUDLVOCYJNNXD6V3MRBVLCXZFH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0327",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:19.333",
      "lastModified" : "2024-11-21T05:42:31.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-172935267"
      }, {
        "lang" : "es",
        "value" : "En la función getContentProviderImpl del archivo ActivityManagerService.java, se presenta una posible omisión de permisos debido a identidades de enlace no restauradas.&#xa0;Esto podría conllevar a una escalada local de privilegios sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11 Android-8.1, ID de Android: A-172935267"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0328",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:19.707",
      "lastModified" : "2024-11-21T05:42:31.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onBatchScanReports and deliverBatchScan of GattService.java, there is a possible way to retrieve Bluetooth scan results without permissions due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-8.1 Android-9Android ID: A-172670415"
      }, {
        "lang" : "es",
        "value" : "En las funciones onBatchScanReports y deliverBatchScan del archivo GattService.java, existe una forma posible de recuperar los resultados del escaneo de Bluetooth sin permisos debido a la falta de comprobación de permisos.&#xa0;Esto podría conllevar a una escalada local de privilegios sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-11 Android-8.1 Android-9, ID de Android: A-172670415"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0329",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:19.910",
      "lastModified" : "2024-11-21T05:42:31.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several native functions called by AdvertiseManager.java, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the Bluetooth server with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-171400004"
      }, {
        "lang" : "es",
        "value" : "En varias funciones nativas llamadas mediante el archivo AdvertiseManager.java, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada local de privilegios en el servidor Bluetooth con privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11 Android-8.1, ID de Android: A-171400004"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0330",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:19.957",
      "lastModified" : "2024-11-21T05:42:31.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In add_user_ce and remove_user_ce of storaged.cpp, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in storaged with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-170732441"
      }, {
        "lang" : "es",
        "value" : "En las funciones add_user_ce y remove_user_ce del archivo storaged.cpp, existe la posibilidad de un uso de la memoria previamente liberada debido a un bloqueo inapropiado.&#xa0;Esto podría conllevar a una escalada local de privilegios en el almacenamiento sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11, ID de Android: A-170732441"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0331",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:20.367",
      "lastModified" : "2024-11-21T05:42:31.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of NotificationAccessConfirmationActivity.java, there is a possible overlay attack due to an insecure default value. This could lead to local escalation of privilege and notification access with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-170731783"
      }, {
        "lang" : "es",
        "value" : "En la función onCreate del archivo NotificationAccessConfirmationActivity.java, se presenta un posible ataque de superposición debido a un valor predeterminado no seguro.&#xa0;Esto podría conllevar a una escalada local de privilegios y acceso a notificaciones con privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11 Android-8.1, ID de Android: A-170731783"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0332",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:20.413",
      "lastModified" : "2024-11-21T05:42:31.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bootFinished of SurfaceFlinger.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-10Android ID: A-169256435"
      }, {
        "lang" : "es",
        "value" : "En la función bootFinished del archivo SurfaceFlinger.cpp, se presenta una posible corrupción de memoria debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android Versiones: Android-11 Android-10 ID de Android: A-169256435"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0333",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:20.663",
      "lastModified" : "2024-11-21T05:42:31.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of BluetoothPermissionActivity.java, there is a possible permissions bypass due to a tapjacking overlay that obscures the phonebook permissions dialog when a Bluetooth device is connecting. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-168504491"
      }, {
        "lang" : "es",
        "value" : "En la función onCreate del archivo BluetoothPermissionActivity.java, se presenta una posible omisión de permisos debido a una superposición de tapping que oculta el cuadro de diálogo de permisos de la agenda cuando se conecta un dispositivo Bluetooth.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-168504491"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0334",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:20.833",
      "lastModified" : "2024-11-21T05:42:31.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onTargetSelected of ResolverActivity.java, there is a possible settings bypass allowing an app to become the default handler for arbitrary domains. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-163358811"
      }, {
        "lang" : "es",
        "value" : "En la función onTargetSelected del archivo ResolverActivity.java, se presenta una posible omisión de configuración que permite que una aplicación se convierta en el controlador predeterminado para dominios arbitrarios.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-163358811"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0335",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:20.880",
      "lastModified" : "2024-11-21T05:42:32.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In process of C2SoftHevcDec.cpp, there is a possible out of bounds write due to a use after free. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160346309"
      }, {
        "lang" : "es",
        "value" : "En el proceso del archivo C2SoftHevcDec.cpp, se presenta una posible escritura fuera de límites debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conducir a la divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android Versiones: Android-11 ID de Android: A-160346309"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0336",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:21.193",
      "lastModified" : "2024-11-21T05:42:32.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onReceive of BluetoothPermissionRequest.java, there is a possible permissions bypass due to a mutable PendingIntent. This could lead to local escalation of privilege that bypasses a permission check, with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-158219161"
      }, {
        "lang" : "es",
        "value" : "En la función onReceive del archivo BluetoothPermissionRequest.java, se presenta una posible omisión de permisos debido a un PendingIntent mutable.&#xa0;Esto podría conllevar a una escalada de privilegios local que omite una comprobación de permisos, con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11 Android-8.1, ID de Android: A-158219161"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0337",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:21.367",
      "lastModified" : "2024-11-21T05:42:32.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In moveInMediaStore of FileSystemProvider.java, there is a possible file exposure due to stale metadata. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-157474195"
      }, {
        "lang" : "es",
        "value" : "En la función moveInMediaStore del archivo FileSystemProvider.java, se presenta una posible exposición de archivos debido a metadatos obsoletos.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-157474195"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0338",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:21.553",
      "lastModified" : "2024-11-21T05:42:32.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SystemSettingsValidators, there is a possible permanent denial of service due to missing bounds checks on UI settings. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-156260178"
      }, {
        "lang" : "es",
        "value" : "En la función SystemSettingsValidators, se presenta una posible denegación de servicio permanente debido a una falta de comprobación de límites en la configuración de la Interfaz de Usuario.&#xa0;Esto podría conllevar a una denegación de servicio local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-11, ID de Android: A-156260178"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0339",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:21.850",
      "lastModified" : "2024-11-21T05:42:32.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In loadAnimation of WindowContainer.java, there is a possible way to keep displaying a malicious app while a target app is brought to the foreground. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-8.1 Android-9Android ID: A-145728687"
      }, {
        "lang" : "es",
        "value" : "En la función loadAnimation del archivo WindowContainer.java, existe una forma posible de seguir mostrando una aplicación maliciosa mientras una aplicación de destino pasa a primer plano.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-8.1 Android-9, ID de Android: A-145728687"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0340",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:21.897",
      "lastModified" : "2024-11-21T05:42:32.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In parseNextBox of IsoInterface.java, there is a possible leak of unredacted location information due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-134155286"
      }, {
        "lang" : "es",
        "value" : "En la función parseNextBox del archivo IsoInterface.java, se presenta un posible filtrado de información de ubicación no redactada debido a una comprobación inapropiada de la entrada.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10, ID de Android: A-134155286"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0341",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-10T17:15:22.037",
      "lastModified" : "2024-11-21T05:42:32.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In verifyHostName of OkHostnameVerifier.java, there is a possible way to accept a certificate for the wrong domain due to improperly used crypto. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171980069"
      }, {
        "lang" : "es",
        "value" : "En la función verifyHostName del archivo OkHostnameVerifier.java, existe una forma posible de aceptar un certificado para el dominio incorrecto debido a un uso de criptografía inapropiada.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-171980069"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-02-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20353",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-10T17:15:22.333",
      "lastModified" : "2024-11-21T05:46:27.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 194882."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, es vulnerable a un ataque de inyección de entidad externa XML (XXE) al procesar datos XML.&#xa0;Un atacante remoto podría explotar esta vulnerabilidad para exponer información confidencial o consumir recursos de memoria.&#xa0;IBM X-Force ID: 194882"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndExcluding" : "7.0.0.45",
            "matchCriteriaId" : "C6181AF3-5088-470D-A399-3EE9B5A1F124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndExcluding" : "8.0.0.15",
            "matchCriteriaId" : "9D0A0374-A6AD-4FF2-B612-7D859937BDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.5.20",
            "matchCriteriaId" : "F5F12667-689A-40FB-92E7-CC59811FE71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndExcluding" : "9.0.5.7",
            "matchCriteriaId" : "B8CAAC86-EA38-4C8E-BEAF-DEC2EB60E063"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194882",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6413709",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-174/",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6413709",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-174/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T18:15:13.017",
      "lastModified" : "2024-11-21T05:57:05.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileges to root by specifying video output paths in privileged locations."
      }, {
        "lang" : "es",
        "value" : "El programa replay-sorcery en ReplaySorcery versiones 0.4.0 hasta 0.5.0, cuando se usa la configuración setuid-root predeterminada, permite a un atacante local escalar privilegios a root al especificar rutas de salida de video en ubicaciones privilegiadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:replaysorcery_project:replaysorcery:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.0",
            "versionEndIncluding" : "0.5.0",
            "matchCriteriaId" : "0062FD04-44AE-4EB5-A32A-9F93F388B5A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/10/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matanui159/ReplaySorcery/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matanui159/ReplaySorcery/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T18:15:13.093",
      "lastModified" : "2024-11-21T05:57:05.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored XSS issue exists in henriquedornas 5.2.17 via online live chat. NOTE: Third parties report that no such product exists. That henriquedornas is the web design agency and 5.2.17 is simply the PHP version running on this hosts"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se presenta un problema de tipo XSS almacenado en henriquedornas versión 5.2.17, por medio del chat en vivo en línea. NOTA: Terceros informan que no existe tal producto. Que henriquedornas es la agencia de diseño web y que 5.2.17 es simplemente la versión de PHP que se ejecuta en este alojamiento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:henriquedornas:henriquedornas:5.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99885A61-99E2-441E-A723-35C9453B4417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xrayan/CVE-/discussions/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xrayan/CVE-/discussions/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T18:15:13.170",
      "lastModified" : "2024-11-21T05:57:05.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure issue exists in henriquedornas 5.2.17 because an attacker can dump phpMyAdmin SQL content. NOTE: third parties report that this is a site-specific problem"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Se presenta problema de divulgación de información en henriquedornas versión 5.2.17, porque un atacante puede volcar contenido SQL de phpMyAdmin. NOTA: terceros informan de que se trata de un problema específico del lugar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:henriquedornas:henriquedornas:5.2.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99885A61-99E2-441E-A723-35C9453B4417"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.opensuse.org/show_bug.cgi?id=1182095",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xrayan/CVE-/discussions/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.opensuse.org/show_bug.cgi?id=1182095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xrayan/CVE-/discussions/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3033",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-02-10T18:15:13.267",
      "lastModified" : "2024-11-21T06:20:48.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper verification of cryptographic signature vulnerability exists in the Palo Alto Networks Prisma Cloud Compute console. This vulnerability enables an attacker to bypass signature validation during SAML authentication by logging in to the Prisma Cloud Compute console as any authorized user. This issue impacts: All versions of Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04, and Prisma Cloud Compute 20.09; Prisma Cloud Compute 20.12 before update 1. Prisma Cloud Compute SaaS version is not impacted by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una verificación inapropiada de la vulnerabilidad de la firma criptográfica en la consola Prisma Cloud Compute de Palo Alto Networks.&#xa0;Esta vulnerabilidad permite a un atacante omitir una comprobación de firmas durante la autenticación SAML iniciando sesión en la consola de Prisma Cloud Compute como cualquier usuario autorizado.&#xa0;Este problema afecta: todas las versiones de Prisma Cloud Compute 19.11, Prisma Cloud Compute 20.04 y Prisma Cloud Compute 20.09;&#xa0;Prisma Cloud Compute 20.12 anterior del update 1. La versión de Prisma Cloud Compute SaaS no está afectada por esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:19.11:-:*:*:compute:*:*:*",
            "matchCriteriaId" : "F7302C94-F996-4511-A8A3-EA4FFA70DD26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:19.11:update_1:*:*:compute:*:*:*",
            "matchCriteriaId" : "F4A34339-4AB2-400E-A1F3-07331AD83A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:19.11:update_2:*:*:compute:*:*:*",
            "matchCriteriaId" : "5BFDDC73-738A-440B-9B2E-0A4462271B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.04:-:*:*:compute:*:*:*",
            "matchCriteriaId" : "0B676DB6-9678-41C1-9651-4CA2F046B56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.04:update_1:*:*:compute:*:*:*",
            "matchCriteriaId" : "59AAA3EF-F5E9-41D3-BD0B-9B5A95EB34B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.04:update_2:*:*:compute:*:*:*",
            "matchCriteriaId" : "87B38F1D-AD18-42D1-BD6A-7E328CCB7681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.09:-:*:*:compute:*:*:*",
            "matchCriteriaId" : "E62836C0-BEE6-487A-8735-E45C8BB66D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.09:update_1:*:*:compute:*:*:*",
            "matchCriteriaId" : "5BFD1122-6B1F-4DD4-BA69-7407C20AD777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.09:update_2:*:*:compute:*:*:*",
            "matchCriteriaId" : "1B1B1538-52D7-4B2F-AB9B-3ADA8AEAE2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:prisma_cloud:20.12:-:*:*:compute:*:*:*",
            "matchCriteriaId" : "642F1AF9-1B6A-4215-B63E-4C19921F842D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3033",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22133",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2021-02-10T19:15:12.090",
      "lastModified" : "2024-11-21T05:49:34.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Elastic APM agent for Go versions before 1.11.0 can leak sensitive HTTP header information when logging the details during an application panic. Normally, the APM agent will sanitize sensitive HTTP header details before sending the information to the APM server. During an application panic it is possible the headers will not be sanitized before being sent."
      }, {
        "lang" : "es",
        "value" : "El agente de Elastic APM para Go versiones anteriores a 1.11.0, puede filtrar información confidencial del encabezado HTTP al registrar los detalles durante un pánico en la aplicación.&#xa0;Normalmente, el agente de APM se saneará en los detalles del encabezado HTTP confidenciales antes de enviar la información al servidor de APM.&#xa0;Durante un pánico de aplicación, es posible que los encabezados no sean saneados antes de enviarse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:apm_agent:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "1.11.0",
            "matchCriteriaId" : "8220CFD2-D742-4E7B-9B2E-26A5FD413453"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-apm-agent-for-go-1-11-0-security-update/263252",
        "source" : "security@elastic.co",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-apm-agent-for-go-1-11-0-security-update/263252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:12.653",
      "lastModified" : "2024-11-21T05:57:23.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to extract information from the device without authentication by disabling JavaScript and visiting /info.asp."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Es posible extraer información del dispositivo sin autenticación al deshabilitar JavaScript y visitar el archivo /info.asp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:12.683",
      "lastModified" : "2024-11-21T05:57:23.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to find passwords and authentication cookies stored in cleartext in the web.log HTTP logs."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Es posible encontrar cookies de autenticación y contraseñas almacenadas en texto sin cifrar en los registros HTTP de web.log"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-passwords-logs",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-passwords-logs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:12.807",
      "lastModified" : "2024-11-21T05:57:23.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. Credentials in /fhconf/umconfig.txt are obfuscated via XOR with the hardcoded *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&^#@$a2s0i3g key. (The webs binary has details on how XOR is used.)"
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Las credenciales en el archivo /fhconf/umconfig.txt son ofuscados por medio de XOR con la clave embebida *j7a(L#yZ98sSd5HfSgGjMj8;Ss;d)(*&amp;^#@$a2s0i3g. (El binario webs presenta detalles sobre cómo XOR es usado)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-decryption-algorithm",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-decryption-algorithm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:12.840",
      "lastModified" : "2024-11-21T05:57:24.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web management is done over HTTPS, using a hardcoded private key that has 0777 permissions."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;La administración web está hecha a través de HTTPS, utilizando una clave privada embebida que contiene permisos 0777"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-ssl-certificates",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-ssl-certificates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:12.887",
      "lastModified" : "2024-11-21T05:57:24.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / user1234 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales user  / user1234 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.010",
      "lastModified" : "2024-11-21T05:57:24.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded f~i!b@e#r$h%o^m*esuperadmin / s(f)u_h+g|u credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales f~i!b@e#r$h%o^m*esuperadmin / s(f)u_h+g|u embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.057",
      "lastModified" : "2024-11-21T05:57:24.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / lnadmin credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / lnadmin embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.167",
      "lastModified" : "2024-11-21T05:57:24.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / CUadmin credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / CUadmin embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.213",
      "lastModified" : "2024-11-21T05:57:24.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / admin credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / admin embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.293",
      "lastModified" : "2024-11-21T05:57:24.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded telecomadmin / nE7jA%5m credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales telecomadmin / nE7jA%5m embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.387",
      "lastModified" : "2024-11-21T05:57:25.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded adminpldt / z6dUABtl270qRxt7a2uGTiw credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales adminpldt / z6dUABtl270qRxt7a2uGTiw embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.433",
      "lastModified" : "2024-11-21T05:57:25.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded gestiontelebucaramanga / t3l3buc4r4m4ng42013 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales gestiontelebucaramanga / t3l3buc4r4m4ng42013 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.557",
      "lastModified" : "2024-11-21T05:57:25.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded rootmet / m3tr0r00t credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales rootmet / m3tr0r00t embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.607",
      "lastModified" : "2024-11-21T05:57:25.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded awnfibre / fibre@dm!n credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales awnfibre / fibre@dm!n embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.730",
      "lastModified" : "2024-11-21T05:57:25.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded trueadmin / admintrue credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales trueadmin / admintrue embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.777",
      "lastModified" : "2024-11-21T05:57:25.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / G0R2U1P2ag credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / G0R2U1P2ag embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.823",
      "lastModified" : "2024-11-21T05:57:25.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 3UJUh2VemEfUtesEchEC2d2e credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales embebidas admin / 3UJUh2VemEfUtesEchEC2d2e para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.933",
      "lastModified" : "2024-11-21T05:57:26.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains credentials for an ISP that equal the last part of the MAC address of the br0 interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene credenciales para un ISP que equivalen a la última parte de la dirección MAC de la interfaz br0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:13.980",
      "lastModified" : "2024-11-21T05:57:26.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 888888 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / 888888 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.107",
      "lastModified" : "2024-11-21T05:57:26.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded L1vt1m4eng / 888888 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales L1vt1m4eng / 888888 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.153",
      "lastModified" : "2024-11-21T05:57:26.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded useradmin / 888888 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales useradmin / 888888 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.183",
      "lastModified" : "2024-11-21T05:57:26.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / 888888 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales user / 888888 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.340",
      "lastModified" : "2024-11-21T05:57:26.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / 1234 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / 1234 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.463",
      "lastModified" : "2024-11-21T05:57:26.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded user / tattoo@home credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales user / tattoo@home embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.510",
      "lastModified" : "2024-11-21T05:57:27.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / tele1234 credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / tele1234 embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.557",
      "lastModified" : "2024-11-21T05:57:27.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The web daemon contains the hardcoded admin / aisadmin credentials for an ISP."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio web contiene las credenciales admin / aisadmin embebidas para un ISP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27165",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.620",
      "lastModified" : "2024-11-21T05:57:27.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The telnet daemon on port 23/tcp can be abused with the gpon/gpon credentials."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;El demonio telnet en el puerto 23/tcp puede ser abusado con las credenciales gpon/gpon"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27166",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.683",
      "lastModified" : "2024-11-21T05:57:27.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. The password for the enable command is gpon."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;La contraseña para el comando enable es gpon"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.730",
      "lastModified" : "2024-11-21T05:57:27.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. There is a password of four hexadecimal characters for the admin account. These characters are generated in init_3bb_password in libci_adaptation_layer.so."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Se presenta una contraseña de cuatro caracteres hexadecimales para la cuenta admin.&#xa0;Estos caracteres se generan en la función init_3bb_password en el archivo libci_adaptation_layer.so"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27168",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.793",
      "lastModified" : "2024-11-21T05:57:27.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. There is a 6GFJdY4aAuUKJjdtSn7d password for the rdsadmin account."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Se presenta una contraseña 6GFJdY4aAuUKJjdtSn7d para la cuenta rdsadmin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27169",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.887",
      "lastModified" : "2024-11-21T05:57:27.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome AN5506-04-FA devices with firmware RP2631. There is a gepon password for the gepon account."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome AN5506-04-FA con firmware RP2631.&#xa0;Se presenta una contraseña de gepon para la cuenta de gepon"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:an5506-04-fa_firmware:rp2631:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDB3A9C-2EC4-4D80-8387-02A8B93E499E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:an5506-04-fa:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8318907-7BDD-470E-899E-DC80EDDF184D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27170",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:14.950",
      "lastModified" : "2024-11-21T05:57:28.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. By default, there are no firewall rules for IPv6 connectivity, exposing the internal management interfaces to the Internet."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Por defecto, no se presentan reglas de firewall para la conectividad IPv6, exponiendo las interfaces de administración interna hacia la Internet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#insecure-ipv6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#insecure-ipv6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27171",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.057",
      "lastModified" : "2024-11-21T05:57:28.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell (or tshell)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Es posible iniciar un telnetd de Linux como root en el puerto 26/tcp usando los comandos de la interfaz CLI de ddd y shell (o tshell)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-privilege-escalation",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-privilege-escalation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27172",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.120",
      "lastModified" : "2024-11-21T05:57:28.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. A hardcoded GEPON password for root is defined inside /etc/init.d/system-config.sh."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Una contraseña GEPON embebida para root es definida dentro del archivo /etc/init.d/system-config.sh"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-linux-hardcoded-credentials",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27173",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.183",
      "lastModified" : "2024-11-21T05:57:28.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. There is a telnet?enable=0&key=calculated(BR0_MAC) backdoor API, without authentication, provided by the HTTP server. This will remove firewall rules and allow an attacker to reach the telnet server (used for the CLI)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Se presenta una API backdoor de telnet?enable=0&amp;key=calculated(BR0_MAC), sin autenticación, proporcionada por el servidor HTTP.&#xa0;Esto eliminará las reglas del firewall y permitirá a un atacante llegar al servidor telnet (usado para la CLI)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#httpd-infoleak",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27174",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.247",
      "lastModified" : "2024-11-21T05:57:28.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. wifi_custom.cfg has cleartext passwords and 0644 permissions."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;En el archivo wifi_custom.cfg presenta contraseñas de texto sin cifrar y permisos 0644"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.307",
      "lastModified" : "2024-11-21T05:57:28.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_2g.cfg has cleartext passwords and 0644 permissions."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;En el archivo wifictl_2g.cfg presenta contraseñas de texto sin cifrar y permisos 0644"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.370",
      "lastModified" : "2024-11-21T05:57:28.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. wifictl_5g.cfg has cleartext passwords and 0644 permissions."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;En el archivo wifictl_5g.cfg presenta contraseñas de texto sin cifrar y permisos 0644"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.450",
      "lastModified" : "2024-11-21T05:57:29.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to bypass authentication by sending the decoded value of the GgpoZWxwCmxpc3QKd2hvCg== string to the telnet server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Es posible omitir la autenticación mediante el envío de un valor decodificado de la cadena GgpoZWxwCmxpc3QKd2hvCg== hacia el servidor telnet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-auth-bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-auth-bypass",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.510",
      "lastModified" : "2024-11-21T05:57:29.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. Some passwords are stored in cleartext in nvram."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Algunas contraseñas se almacenan en texto sin cifrar en nvram"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-nvram",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#system-credentials-clear-text-nvram",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T19:15:15.573",
      "lastModified" : "2024-11-21T05:57:30.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to crash the telnet daemon by sending a certain 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a string."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos FiberHome HG6245D versiones hasta RP2613.&#xa0;Es posible bloquear el demonio de telnet mediante el envío de una determinada cadena 0a 65 6e 61 62 6c 65 0a 02 0a 1a 0a"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fiberhome:hg6245d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "rp2613",
            "matchCriteriaId" : "584691EE-5328-499D-92DE-F79505905C9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fiberhome:hg6245d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C22EE9-62CD-4111-AD9E-84748BD774FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-dos",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pierrekim.github.io/blog/2021-01-12-fiberhome-ont-0day-vulnerabilities.html#telnet-cli-dos",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21296",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-10T20:15:15.353",
      "lastModified" : "2024-11-21T05:47:57.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fleet is an open source osquery manager. In Fleet before version 3.7.0 a malicious actor with a valid node key can send a badly formatted request that causes the Fleet server to exit, resulting in denial of service. This is possible only while a live query is currently ongoing. We believe the impact of this vulnerability to be low given the requirement that the actor has a valid node key. There is no information disclosure, privilege escalation, or code execution. The issue is fixed in Fleet 3.7.0."
      }, {
        "lang" : "es",
        "value" : "Fleet es un administrador osquery de código abierto.&#xa0;En Fleet versiones anteriores a 3.7.0, un actor malicioso con una clave de nodo válida puede enviar una petición mal formateada que hace que el servidor Fleet salga, lo que resulta en la denegación del servicio.&#xa0;Esto solo es posible mientras se presenta una consulta en vivo en curso.&#xa0;Creemos que el impacto de esta vulnerabilidad es bajo el requerimiento dado de que el actor tenga una clave de nodo válida.&#xa0;No existe una divulgación de información, escalada de privilegios ni ejecución de código.&#xa0;El problema es corregido en Fleet versión 3.7.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fleetdm:fleet:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.7.0",
            "matchCriteriaId" : "36E3F4B9-FBF0-4F41-A8A0-20F7BB120A9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-xwh8-9p3f-3x45",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/fleetctl",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fleetdm/fleet/commit/f68f4238e83b45b2164e4ed05df14af0f06eaf40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fleetdm/fleet/security/advisories/GHSA-xwh8-9p3f-3x45",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/fleetctl",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25251",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-02-10T22:15:13.703",
      "lastModified" : "2024-11-21T05:54:37.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Trend Micro Security 2020 and 2021 families of consumer products are vulnerable to a code injection vulnerability which could allow an attacker to disable the program's password protection and disable protection. An attacker must already have administrator privileges on the machine to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Las familias de productos de consumo Trend Micro Security 2020 y 2021, son vulnerables a una vulnerabilidad de inyección de código que podría permitir a un atacante desactivar la protección con contraseña del programa y desactivar la protección.&#xa0;Un atacante ya debe tener privilegios de administrador en la máquina para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus\\+_security_2020:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35B16D47-D892-4407-B413-C53604E54DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus\\+_security_2021:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB376CE-FD04-446D-BDFB-DD30C5277E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security_2020:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EC00B5-27FD-495A-A810-4B5B7B542E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:internet_security_2021:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F54EDFC-AA74-4407-92AF-BE5A2E9EB8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:maximum_security_2020:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18879524-F7E4-4FB2-83F1-9C12FC973358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:maximum_security_2021:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "769EDF57-123C-4FE7-93F3-8B773F5D17C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:premium_security_2020:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADF0773-F24D-4E70-A41F-6834F60A1282"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:premium_security_2021:17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D77BEF92-897E-4B1E-8F34-A94E238609E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10211",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T22:15:13.813",
      "lastModified" : "2024-11-21T05:57:30.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The samba-client package before 4.0.0 for Node.js allows command injection because of the use of process.exec."
      }, {
        "lang" : "es",
        "value" : "El paquete samba-client versiones anteriores a 4.0.0 para Node.js, permite una inyección de comandos debido al uso del archivo process.exec"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba-client_project:samba-client:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "8163D3D7-4BE0-4153-BE89-4891EBECAC80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eflexsystems/node-samba-client/commit/5bc3bbad9b8d02243bc861a11ec73f788fbb1235",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eflexsystems/node-samba-client/releases/tag/4.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/samba-client",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eflexsystems/node-samba-client/commit/5bc3bbad9b8d02243bc861a11ec73f788fbb1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eflexsystems/node-samba-client/releases/tag/4.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/samba-client",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27186",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-10T22:15:13.877",
      "lastModified" : "2024-11-21T05:57:31.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fluent Bit 1.6.10 has a NULL pointer dereference when an flb_malloc return value is not validated by flb_avro.c or http_server/api/v1/metrics.c."
      }, {
        "lang" : "es",
        "value" : "Fluent Bit versión 1.6.10, presenta una desreferencia del puntero NULL cuando un valor de retorno flb_malloc no es comprobado por los archivos flb_avro.c o http_server/api/v1/metrics.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:treasuredata:fluent_bit:1.6.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20744F77-02AC-4F07-A359-27275282DCE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fluent/fluent-bit/issues/3044",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluent-bit/pull/3045",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluent-bit/pull/3047",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluent-bit/issues/3044",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluent-bit/pull/3045",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fluent/fluent-bit/pull/3047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20335",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2021-02-11T10:15:12.223",
      "lastModified" : "2024-11-21T05:46:25.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "For MongoDB Ops Manager versions prior to and including 4.2.24 with multiple OM application servers, that have SSL turned on for their MongoDB processes, the upgrade to MongoDB Ops Manager versions prior to and including 4.4.12 triggers a bug where Automation thinks SSL is being turned off, and can disable SSL temporarily for members of the cluster. This issue is temporary and eventually corrects itself after MongoDB Ops Manager instances have finished upgrading to MongoDB Ops Manager 4.4. In addition, customers must be running with clientCertificateMode=OPTIONAL / allowConnectionsWithoutCertificates=true to be impacted*.* Customers upgrading from Ops Manager 4.2.X to 4.2.24 and finally to Ops Manager 4.4.13+ are unaffected by this issue."
      }, {
        "lang" : "es",
        "value" : "Para MongoDB Ops Manager anteriores o iguales a la versión 4.2.24 con varios servidores de aplicaciones OM, que tienen SSL activado para sus procesos MongoDB, la actualización a MongoDB Ops Manager anteriores o iguales a la versión 4.4.12 desencadena un error en el que Automation piensa que SSL está desactivado, y puede desactivar SSL temporalmente para los miembros del clúster. Este problema es temporal y finalmente se corrige por sí mismo después de que las instancias de MongoDB Ops Manager hayan terminado de actualizarse a MongoDB Ops Manager versión 4.4. Además, los clientes deben estar ejecutando con clientCertificateMode=OPTIONAL / allowConnectionsWithoutCertificates=true para verse afectados*.* Los clientes que actualizan de Ops Manager versión 4.2.X a la versión 4.2.24 y finalmente a Ops Manager versión 4.4.13+ no se ven afectados por este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:ops_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "4.2.24",
            "matchCriteriaId" : "E6A5A07F-3A2A-4224-A0F2-A74003A718B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.opsmanager.mongodb.com/v4.2/release-notes/application/#onprem-server-4-2-23",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.opsmanager.mongodb.com/v4.2/release-notes/application/#onprem-server-4-2-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23334",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-11T12:15:12.173",
      "lastModified" : "2023-11-07T03:30:51.900",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23335",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-11T12:15:12.437",
      "lastModified" : "2024-11-21T05:51:31.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of package is-user-valid are vulnerable to LDAP Injection which can lead to either authentication bypass or information exposure."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete is-user-valid son vulnerables a una inyección de LDAP, lo que puede conllevar a la omisión de  la autenticación o la exposición de la información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:is-user-valid_project:is-user-valid:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "998EF025-7D8C-43F5-B41E-5A31EF591D6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://snyk.io/vuln/SNYK-JS-ISUSERVALID-1056766",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-ISUSERVALID-1056766",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20402",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-11T17:15:13.123",
      "lastModified" : "2024-11-21T05:46:31.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser. This information could be used in further attacks against the system. IBM X-Force ID: 196076."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría permitir a un atacante remoto obtener información confidencial cuando se devuelve un mensaje de error técnico detallado en el navegador.&#xa0;Esta información podría ser usada en nuevos ataques contra el sistema.&#xa0;IBM X-Force ID: 196076"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196076",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414361",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414361",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20403",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-11T17:15:13.217",
      "lastModified" : "2024-11-21T05:46:31.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versión 1.0.6 y 1.0.7, es vulnerable a un ataque cross-site request forgery, lo que podría permitir a un atacante ejecutar acciones maliciosas y no autorizadas transmitidas por un usuario en el que el sitio web confía"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196077",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414365",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20404",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-11T17:15:13.327",
      "lastModified" : "2024-11-21T05:46:31.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user on the network to cause a denial of service due to an invalid cookie value that could prevent future logins. IBM X-Force ID: 196078."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría permitir a un usuario de la red causar una denegación de servicio debido a un valor de cookie no válido que podría impedir futuros inicios de sesión.&#xa0;IBM X-Force ID: 196078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196078",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414363",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414363",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20405",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-11T17:15:13.420",
      "lastModified" : "2024-11-21T05:46:31.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to perform unauthorized activities due to improper encoding of output. IBM X-Force ID: 196183."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría permitir a un usuario llevar a cabo actividades no autorizadas debido a una codificación inapropiada de la salida.&#xa0;IBM X-Force ID: 196183"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196183",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414367",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20188",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-11T18:15:16.177",
      "lastModified" : "2024-11-21T05:46:05.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in podman before 1.7.0. File permissions for non-root users running in a privileged container are not correctly checked. This flaw can be abused by a low-privileged user inside the container to access any other file in the container, even if owned by the root user inside the container. It does not allow to directly escape the container, though being a privileged container means that a lot of security features are disabled when running the container. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en podman versiones anteriores a 1.7.0.&#xa0;Los permisos de archivo para usuarios no root que se ejecutan en un contenedor con privilegios no se verifican correctamente.&#xa0;Un usuario con poco privilegiado dentro del contenedor puede abusar de este fallo para acceder a cualquier otro archivo en el contenedor, inclusive si es propiedad del usuario root dentro del contenedor.&#xa0;No permite escapar directamente del contenedor, aunque ser un contenedor privilegiado significa que muchas funciones de seguridad están deshabilitadas al ejecutar el contenedor.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:podman_project:podman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "58CA40A4-EE64-4D67-A787-B69FD1427BEC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87326E-0B56-4356-A889-73D026DB1D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1915734",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1915734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21299",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-11T18:15:16.800",
      "lastModified" : "2024-11-21T05:47:58.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "hyper is an open-source HTTP library for Rust (crates.io). In hyper from version 0.12.0 and before versions 0.13.10 and 0.14.3 there is a vulnerability that can enable a request smuggling attack. The HTTP server code had a flaw that incorrectly understands some requests with multiple transfer-encoding headers to have a chunked payload, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that understands the request payload boundary differently can result in \"request smuggling\" or \"desync attacks\". To determine if vulnerable, all these things must be true: 1) Using hyper as an HTTP server (the client is not affected), 2) Using HTTP/1.1 (HTTP/2 does not use transfer-encoding), 3) Using a vulnerable HTTP proxy upstream to hyper. If an upstream proxy correctly rejects the illegal transfer-encoding headers, the desync attack cannot succeed. If there is no proxy upstream of hyper, hyper cannot start the desync attack, as the client will repair the headers before forwarding. This is fixed in versions 0.14.3 and 0.13.10. As a workaround one can take the following options: 1) Reject requests that contain a `transfer-encoding` header, 2) Ensure any upstream proxy handles `transfer-encoding` correctly."
      }, {
        "lang" : "es",
        "value" : "hyper es una biblioteca HTTP de código abierto para Rust (crates.io).&#xa0;En Hyper desde la versión 0.12.0 y antes de las versiones 0.13.10 y 0.14.3, se presenta una vulnerabilidad que puede habilitar un ataque de trafico no autorizado de peticiones.&#xa0;El código del servidor HTTP tenía un fallo que entiende incorrectamente que algunas peticiones con múltiples encabezados transfer-encoding tienen una carga útil fragmentada, cuando debería haber sido rechazada como ilegal.&#xa0;Esto, combinado con un proxy HTTP aguas arriba que entiende el límite de carga útil de la petición de manera diferente, puede resultar en \"request smuggling\" o \"desync attacks\".&#xa0;Para determinar si es vulnerable, todas estas cosas deben ser ciertas: 1) Usar Hyper como servidor HTTP (el cliente no se ve afectado), 2) Usar HTTP/1.1 (HTTP/2 no usa transfer-encoding), 3) Usar un Proxy HTTP vulnerable aguas arriba de hiper.&#xa0;Si un proxy aguas arriba rechaza correctamente los encabezados transfer-encoding ilegales, el ataque de desincronización no puede tener éxito.&#xa0;Si no existe un proxy aguas arriba de Hyper, Hyper no puede iniciar el ataque de desincronización, ya que el cliente reparará los encabezados antes de reenviar.&#xa0;Esto se corrige en las versiones 0.14.3 y 0.13.10.&#xa0;Como solución alternativa, se pueden tomar las siguientes opciones: 1) Rechazar las peticiones que contengan un encabezado \"transfer-encoding\", 2) Asegurarse de que cualquier proxy ascendente maneje correctamente \"transfer-encoding\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper:hyper:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.12.0",
            "versionEndExcluding" : "0.13.10",
            "matchCriteriaId" : "F7FC7D00-33F1-4ACB-8092-470E14701DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hyper:hyper:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.14.0",
            "versionEndExcluding" : "0.14.3",
            "matchCriteriaId" : "E4C26856-B337-4B3F-80FA-B417727F07B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://crates.io/crates/hyper",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperium/hyper/commit/8f93123efef5c1361086688fe4f34c83c89cec02",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperium/hyper/security/advisories/GHSA-6hfq-h8hq-87mf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0020.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://crates.io/crates/hyper",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperium/hyper/commit/8f93123efef5c1361086688fe4f34c83c89cec02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperium/hyper/security/advisories/GHSA-6hfq-h8hq-87mf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/http-desync-attacks-request-smuggling-reborn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21301",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-11T18:15:16.910",
      "lastModified" : "2024-11-21T05:47:58.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wire is an open-source collaboration platform. In Wire for iOS (iPhone and iPad) before version 3.75 there is a vulnerability where the video capture isn't stopped in a scenario where a user first has their camera enabled and then disables it. It's a privacy issue because video is streamed to the call when the user believes it is disabled. It impacts all users in video calls. This is fixed in version 3.75."
      }, {
        "lang" : "es",
        "value" : "Wire es una plataforma de colaboración de código abierto.&#xa0;En Wire para iOS (iPhone y iPad) anterior a versión 3.75, se presenta una vulnerabilidad en la que la captura de video no se detiene en un escenario en el que un usuario primero tiene su cámara habilitada y luego la deshabilita.&#xa0;Es un problema de privacidad porque el video se transmite a la llamada cuando el usuario cree que está deshabilitado.&#xa0;Afecta a todos los usuarios en las videollamadas.&#xa0;Esto se corrige en la versión 3.75"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "3.75",
            "matchCriteriaId" : "9D324BAB-15A4-4787-8EC0-8AE5F18C84A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wireapp/wire-ios/commit/7e3c30120066c9b10e50cc0d20012d0849c33a40",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-ios/pull/4879",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-ios/security/advisories/GHSA-7fg4-x8vj-qvxf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-ios/commit/7e3c30120066c9b10e50cc0d20012d0849c33a40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-ios/pull/4879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-ios/security/advisories/GHSA-7fg4-x8vj-qvxf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22652",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-11T18:15:17.003",
      "lastModified" : "2024-11-21T05:50:23.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution."
      }, {
        "lang" : "es",
        "value" : "El acceso a las versiones de Advantech iView anteriores a configuración v5.7.03.6112 carece de autenticación, lo que puede permitir a un atacante no autorizado cambiar la configuración y obtener una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.03.6112",
            "matchCriteriaId" : "68503DEC-626C-4DC5-BE88-127AE71BD3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161937/Advantech-iView-Unauthenticated-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22654",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-11T18:15:17.113",
      "lastModified" : "2024-11-21T05:50:24.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an unauthorized attacker to disclose information."
      }, {
        "lang" : "es",
        "value" : "Las versiones Advantech iView anteriores a v5.7.03.6112, son vulnerables a una inyección SQL, lo que puede permitir a un atacante no autorizado revelar información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.03.6112",
            "matchCriteriaId" : "68503DEC-626C-4DC5-BE88-127AE71BD3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-188/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-190/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-188/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-190/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22656",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-11T18:15:17.190",
      "lastModified" : "2024-11-21T05:50:25.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advantech iView versions prior to v5.7.03.6112 are vulnerable to directory traversal, which may allow an attacker to read sensitive files."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Advantech iView anteriores a v5.7.03.6112, son vulnerables al salto de directorios, lo que puede permitir a un atacante leer archivos confidenciales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.03.6112",
            "matchCriteriaId" : "68503DEC-626C-4DC5-BE88-127AE71BD3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-189/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-189/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22658",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-11T18:15:17.270",
      "lastModified" : "2024-11-21T05:50:25.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advantech iView versions prior to v5.7.03.6112 are vulnerable to a SQL injection, which may allow an attacker to escalate privileges to 'Administrator'."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Advantech iView anteriores a v5.7.03.6112, son vulnerables a una inyección SQL, lo que puede permitir a un atacante escalar los privilegios a \"Administrator\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:iview:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.03.6112",
            "matchCriteriaId" : "68503DEC-626C-4DC5-BE88-127AE71BD3DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-191/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-040-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-191/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22880",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-02-11T18:15:17.333",
      "lastModified" : "2024-11-21T05:50:49.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PostgreSQL adapter in Active Record before 6.1.2.1, 6.0.3.5, 5.2.4.5 suffers from a regular expression denial of service (REDoS) vulnerability. Carefully crafted input can cause the input validation in the `money` type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting in the potential for a DoS attack. This only impacts Rails applications that are using PostgreSQL along with money type columns that take user input."
      }, {
        "lang" : "es",
        "value" : "El adaptador PostgreSQL en Active Record versiones anteriores a 6.1.2.1, 6.0.3.5, 5.2.4.5, sufre una vulnerabilidad de denegación de servicio de expresión regular (REDoS).&#xa0;Una entrada cuidadosamente diseñada puede causar que la comprobación de la entrada en el tipo \"money\" del adaptador de PostgreSQL en Active Record pase demasiado tiempo en una expresión regular, resultando en la posibilidad de un ataque DoS.&#xa0;Esto solo afecta a las aplicaciones Rails que usan PostgreSQL junto con las columnas de tipo money que toman la entrada del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "5.2.4.5",
            "matchCriteriaId" : "3AAA9CFA-AD3B-4CE9-922F-D056914CB0EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3.5",
            "matchCriteriaId" : "817BE0F5-136C-460E-816D-74B3F6663BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.2.1",
            "matchCriteriaId" : "98CE6993-089E-454B-8156-011E03FC3C94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.rubyonrails.org/t/cve-2021-22880-possible-dos-vulnerability-in-active-record-postgresql-adapter/77129",
        "source" : "support@hackerone.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1023899",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO5OJ3F4ZL3UXVLJO6ECANRVZBNRS2IH/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210805-0009/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4929",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2021-22880-possible-dos-vulnerability-in-active-record-postgresql-adapter/77129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1023899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO5OJ3F4ZL3UXVLJO6ECANRVZBNRS2IH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210805-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22881",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-02-11T18:15:17.460",
      "lastModified" : "2024-11-21T05:50:49.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain \"allowed host\" formats can cause the Host Authorization middleware in Action Pack to redirect users to a malicious website. Impacted applications will have allowed hosts with a leading dot. When an allowed host contains a leading dot, a specially crafted `Host` header can be used to redirect to a malicious website."
      }, {
        "lang" : "es",
        "value" : "El middleware de Autorización de Host en Action Pack versiones anteriores a 6.1.2.1, 6.0.3.5 sufre una vulnerabilidad de redireccionamiento abierto.&#xa0;Los encabezados \"Host\" especialmente diseñados en combinación con determinados formatos \"allowed host\" pueden causar que el middleware de Autorización del Host en Action Pack redireccione a los usuarios a un sitio web malicioso.&#xa0;Las aplicaciones afectadas habrán permitido hosts con un punto inicial.&#xa0;Cuando un host permitido contiene un punto inicial, un encabezado \"Host\" especialmente diseñado puede ser usado para redireccionar hacia un sitio web malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3.5",
            "matchCriteriaId" : "817BE0F5-136C-460E-816D-74B3F6663BA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rubyonrails:rails:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.0",
            "versionEndExcluding" : "6.1.2.1",
            "matchCriteriaId" : "98CE6993-089E-454B-8156-011E03FC3C94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/05/2",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/08/20/1",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/12/14/5",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "https://benjamin-bouchet.com/cve-2021-22881-faille-de-securite-dans-le-middleware-hostauthorization/",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2021-22881-possible-open-redirect-in-host-authorization-middleware/77130",
        "source" : "support@hackerone.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1047447",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/08/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/12/14/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch" ]
      }, {
        "url" : "https://benjamin-bouchet.com/cve-2021-22881-faille-de-securite-dans-le-middleware-hostauthorization/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.rubyonrails.org/t/cve-2021-22881-possible-open-redirect-in-host-authorization-middleware/77130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1047447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XQ3NS4IBYE2I3MVMGAHFZBZBIZGHXHT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25688",
      "sourceIdentifier" : "security@teradici.com",
      "published" : "2021-02-11T18:15:17.770",
      "lastModified" : "2024-11-21T05:55:17.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain conditions, Teradici PCoIP Agents for Windows prior to version 20.10.0 and Teradici PCoIP Agents for Linux prior to version 21.01.0 may log parts of a user's password in the application logs."
      }, {
        "lang" : "es",
        "value" : "En determinadas condiciones, los agentes de PCoIP de Teradici para Windows anteriores a versión 20.10.0 y los agentes de PCoIP de Teradici para Linux anteriores a versión 21.01.0, pueden registrar partes de la contraseña de un usuario en los registros de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "20.10.0",
            "matchCriteriaId" : "36262339-579B-437B-8F99-DCAF43905548"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_graphics_agent:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "21.01.0",
            "matchCriteriaId" : "802B9A39-3B87-41A7-9D8C-26241AC95951"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "20.10.0",
            "matchCriteriaId" : "8D9DEE4F-C980-4ED7-99DF-5E78325CE079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_standard_agent:*:*:*:*:*:linux:*:*",
            "versionEndExcluding" : "21.01.0",
            "matchCriteriaId" : "424A0CD0-B03E-4D00-B6E4-B8BBC9359734"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.teradici.com/security-advisories/73/",
        "source" : "security@teradici.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.teradici.com/security-advisories/73/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25689",
      "sourceIdentifier" : "security@teradici.com",
      "published" : "2021-02-11T18:15:17.817",
      "lastModified" : "2024-11-21T05:55:18.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out of bounds write in Teradici PCoIP soft client versions prior to version 20.10.1 could allow an attacker to remotely execute code."
      }, {
        "lang" : "es",
        "value" : "Una escritura fuera de límites en las versiones del cliente ligero PCoIP de Teradici anteriores a versión 20.10.1, podría permitir a un atacante ejecutar código remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_soft_client:*:*:*:*:*:linux:*:*",
            "versionEndIncluding" : "20.10.0",
            "matchCriteriaId" : "87AA20CD-0A37-435B-AFEB-925CC281F9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_soft_client:*:*:*:*:*:macos:*:*",
            "versionEndIncluding" : "20.10.0",
            "matchCriteriaId" : "69F9C67A-1131-41F2-BF55-AD4F9536D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_soft_client:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "20.10.0",
            "matchCriteriaId" : "4E492067-037B-4907-A8AD-83B099ACE0D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.teradici.com/security-advisories/75/",
        "source" : "security@teradici.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.teradici.com/security-advisories/75/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25690",
      "sourceIdentifier" : "security@teradici.com",
      "published" : "2021-02-11T18:15:17.877",
      "lastModified" : "2024-11-21T05:55:18.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null pointer dereference in Teradici PCoIP Soft Client versions prior to 20.07.3 could allow an attacker to crash the software."
      }, {
        "lang" : "es",
        "value" : "Una desreferencia del puntero null en las versiones de Teradici PCoIP Soft Client versiones anteriores a 20.07.3, podría permitir a un atacante bloquear el software"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_soft_client:*:*:*:*:*:linux:*:*",
            "versionEndIncluding" : "20.07.2",
            "matchCriteriaId" : "2ECE59B0-D8DB-439C-A788-7973043BA857"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_soft_client:*:*:*:*:*:macos:*:*",
            "versionEndIncluding" : "20.07.2",
            "matchCriteriaId" : "717E3CB8-DFCD-4C51-8E9C-4E036FE41430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_soft_client:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "20.07.2",
            "matchCriteriaId" : "3EA30CDD-C694-4CE7-94B8-F3BF02C34CBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.teradici.com/security-advisories/74/",
        "source" : "security@teradici.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.teradici.com/security-advisories/74/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-11T18:15:18.177",
      "lastModified" : "2024-11-21T05:57:30.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pelco Digital Sentry Server 7.18.72.11464 has an XML External Entity vulnerability (exploitable via the DTD parameter entities technique), resulting in disclosure and retrieval of arbitrary data on the affected node via an out-of-band (OOB) attack. The vulnerability is triggered when input passed to the XML parser is not sanitized while parsing the ControlPointCacheShare.xml file (in a %APPDATA%\\Pelco directory) when DSControlPoint.exe is executed."
      }, {
        "lang" : "es",
        "value" : "Pelco Digital Sentry Server versión 7.18.72.11464, presenta una vulnerabilidad de XML External Entity (explotable por medio de la técnica de entidades de parámetros DTD), resultando en la divulgación y recuperación de datos arbitrarios en el nodo afectado por medio de un ataque fuera de banda (OOB).&#xa0;La vulnerabilidad es activada cuando la entrada que se pasa al analizador XML no es saneada mientras se analiza el archivo ControlPointCacheShare.xml (en un directorio %APPDATA%\\Pelco) cuando se ejecuta DSControlPoint.exe"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pelco:digital_sentry_server:7.18.72.11464:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84039097-D4AD-40FC-B43A-17CEC8286EE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27191",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-11T18:15:18.347",
      "lastModified" : "2024-11-21T05:57:31.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input. An attacker could send a large range (such as 128.0.0.0/1) that causes resource exhaustion."
      }, {
        "lang" : "es",
        "value" : "El paquete get-ip-range versiones anteriores a 4.0.0 para Node.js, es vulnerable a una denegación de servicio (DoS) si el rango es una entrada no confiable.&#xa0;Un atacante podría enviar un rango grande (tal y como 128.0.0.0/1) que cause el agotamiento de los recursos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:get-ip-range_project:get-ip-range:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "C8EA0B74-91C3-46C5-8FF7-985B08966C02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4304",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JoeScho/get-ip-range/commit/98ca22b815c77273cbab259811ab0976118e13b6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/get-ip-range",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JoeScho/get-ip-range/commit/98ca22b815c77273cbab259811ab0976118e13b6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/get-ip-range",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21307",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-11T19:15:13.313",
      "lastModified" : "2024-11-21T05:47:59.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is fixed in versions 5.3.7.47, 5.3.6.68 or 5.3.5.96. As a workaround, one can block access to the Lucee Administrator."
      }, {
        "lang" : "es",
        "value" : "Lucee Server es un lenguaje dinámico, de etiquetado y scripting de comandos basado en Java (JSR-223) que es utilizado para el desarrollo rápido de aplicaciones web.&#xa0;En Lucee Admin anterior a versiones 5.3.7.47, 5.3.6.68 o 5.3.5.96 se presenta una explotación de código remota no autenticada.&#xa0;Esto es corregido en las versiones 5.3.7.47, 5.3.6.68 o 5.3.5.96.&#xa0;Como solución alternativa, se puede bloquear el acceso a Lucee Administrator"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucee:lucee_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.5.00",
            "versionEndExcluding" : "5.3.5.96",
            "matchCriteriaId" : "F63963E7-D380-493F-B75B-4FBCDD646D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucee:lucee_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.6.00",
            "versionEndExcluding" : "5.3.6.68",
            "matchCriteriaId" : "3653F1B9-18A4-4AA2-906E-C74FD9FF0611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucee:lucee_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.7.00",
            "versionEndExcluding" : "5.3.7.47",
            "matchCriteriaId" : "9ED241BC-C6BA-4DBC-BD08-3FC8A529350E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ciacfug.org/blog/updating-lucee-as-part-of-a-vulnerability-alert-response",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163864/Lucee-Administrator-imgProcess.cfm-Arbitrary-File-Write.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://dev.lucee.org/t/lucee-vulnerability-alert-november-2020/7643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lucee/Lucee/commit/6208ab7c44c61d26c79e0b0af10382899f57e1ca",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal",
        "source" : "security-advisories@github.com",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "http://ciacfug.org/blog/updating-lucee-as-part-of-a-vulnerability-alert-response",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163864/Lucee-Administrator-imgProcess.cfm-Arbitrary-File-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://dev.lucee.org/t/lucee-vulnerability-alert-november-2020/7643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/httpvoid/writeups/blob/main/Apple-RCE.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lucee/Lucee/commit/6208ab7c44c61d26c79e0b0af10382899f57e1ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lucee/Lucee/security/advisories/GHSA-2xvv-723c-8p7r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/security-researchers-earn-50k-after-exposing-critical-flaw-in-apple-travel-portal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21015",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:13.827",
      "lastModified" : "2024-11-21T05:47:24.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an OS command injection via the customer attribute save controller. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una inyección de comandos del Sistema Operativo por medio del controlador de almacenamiento de atributos del cliente.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código arbitraria por parte de un atacante autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21016",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:13.920",
      "lastModified" : "2024-11-21T05:47:24.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the WebAPI. Successful exploitation could lead to remote code execution by an authenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una inyección de comandos del Sistema Operativo por medio de la WebAPI.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código remota por parte de un atacante autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21017",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:13.997",
      "lastModified" : "2025-10-23T14:51:12.120",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a heap-based buffer overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento de búfer en la región heap de la memoria.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Adobe Acrobat and Reader Heap-based Buffer Overflow Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21017",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21018",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.077",
      "lastModified" : "2024-11-21T05:47:24.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to OS command injection via the scheduled operation module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una inyección de comandos del Sistema Operativo por medio del módulo scheduled operation.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código arbitraria por parte de un atacante autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21019",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.123",
      "lastModified" : "2024-11-21T05:47:24.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una inyección de XML en el módulo Widgets.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código arbitraria por parte de un atacante autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21020",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.187",
      "lastModified" : "2024-11-21T05:47:24.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an access control bypass vulnerability in the Login as Customer module. Successful exploitation could lead to unauthorized access to restricted resources."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son susceptibles a una vulnerabilidad de omisión del control de acceso en el módulo Login as Customer.&#xa0;Una explotación con éxito podría conllevar a un acceso no autorizado a recursos restringidos"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21021",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.263",
      "lastModified" : "2024-11-21T05:47:25.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la Memoria Previamente Liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21022",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.327",
      "lastModified" : "2024-11-21T05:47:25.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to an insecure direct object reference (IDOR) in the product module. Successful exploitation could lead to unauthorized access to restricted resources."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una referencia directa a objeto no segura (IDOR) en el módulo del producto.&#xa0;Una explotación con éxito podría conllevar a un acceso no autorizado a recursos restringidos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21023",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.387",
      "lastModified" : "2024-11-21T05:47:25.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting vulnerability in the admin console. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son susceptibles a una vulnerabilidad de tipo cross-site scripting almacenado en la consola de administración.&#xa0;Una explotación con éxito podría conllevar a una ejecución arbitraria de JavaScript en el navegador de la víctima.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21024",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.450",
      "lastModified" : "2024-11-21T05:47:25.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a blind SQL injection vulnerability in the Search module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), están afectadas por una vulnerabilidad de inyección SQL ciega en el módulo Search.&#xa0;Una explotación con éxito podría conllevar a un acceso no autorizado a recursos restringidos por parte de un atacante no autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21025",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.513",
      "lastModified" : "2024-11-21T05:47:25.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the product layout updates. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una inyección de XML en las actualizaciones de diseño del producto.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código arbitraria por parte de un atacante autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21026",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.560",
      "lastModified" : "2024-11-21T05:47:25.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by an improper authorization vulnerability in the integrations module. Successful exploitation could lead to unauthorized access to restricted resources by an unauthenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), están afectadas por una vulnerabilidad de autorización inapropiada en el módulo de integraciones.&#xa0;Una explotación con éxito podría conllevar a un acceso no autorizado a recursos restringidos por parte de un atacante no autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21027",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.623",
      "lastModified" : "2024-11-21T05:47:25.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a cross-site request forgery (CSRF) vulnerability via the GraphQL API. Successful exploitation could lead to unauthorized modification of customer metadata by an unauthenticated attacker. Access to the admin console is not required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), están afectadas por una vulnerabilidad de tipo cross-site request forgery (CSRF) por medio de la API GraphQL.&#xa0;Una explotación con éxito podría conllevar a modificaciones no autorizadas de los metadatos del cliente por parte de un atacante no autenticado.&#xa0;No es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21028",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.700",
      "lastModified" : "2024-11-21T05:47:25.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la Memoria Previamente Liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21029",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.763",
      "lastModified" : "2024-11-21T05:47:25.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a Reflected Cross-site Scripting vulnerability via 'file' parameter. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), están afectadas por una vulnerabilidad de tipo Cross-site Scripting Reflejado por medio del parámetro \"file\".&#xa0;Una explotación con éxito podría conllevar a una ejecución arbitraria de JavaScript en el navegador de la víctima.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21030",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.827",
      "lastModified" : "2024-11-21T05:47:26.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a stored cross-site scripting (XSS) in the customer address upload feature. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Exploitation of this issue requires user interaction."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a un ataque de tipo cross-site scripting (XSS) almacenado en la funcionalidad de carga de la dirección del cliente.&#xa0;Una explotación con éxito podría conllevar a una ejecución arbitraria de JavaScript en el navegador de la víctima.&#xa0;Una explotación de este problema requiere una interacción del usuario"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21031",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.887",
      "lastModified" : "2024-11-21T05:47:26.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), no invalidan adecuadamente las sesiones de usuario.&#xa0;Una explotación con éxito podría conllevar a un acceso no autorizado a recursos restringidos.&#xa0;No es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21032",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.950",
      "lastModified" : "2024-11-21T05:47:26.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) do not adequately invalidate user sessions. Successful exploitation of this issue could lead to unauthorized access to restricted resources. Access to the admin console is not required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), no invalidan adecuadamente las sesiones de usuario.&#xa0;Una explotación con éxito de este problema podría conllevar a un acceso no autorizado a recursos restringidos.&#xa0;No es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21033",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:14.997",
      "lastModified" : "2024-11-21T05:47:26.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la Memoria Previamente Liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21034",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.060",
      "lastModified" : "2024-11-21T05:47:26.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to locally elevate privileges in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de lectura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para elevar localmente los privilegios en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21035",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.137",
      "lastModified" : "2024-11-21T05:47:26.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la Memoria Previamente Liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21036",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.200",
      "lastModified" : "2024-11-21T05:47:26.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Integer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento de enteros.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21037",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.247",
      "lastModified" : "2024-11-21T05:47:26.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Path Traversal vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de Salto de Ruta.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21038",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.310",
      "lastModified" : "2024-11-21T05:47:26.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites cuando analiza un archivo jpeg diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21039",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.387",
      "lastModified" : "2024-11-21T05:47:27.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la Memoria Previamente Liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21040",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.450",
      "lastModified" : "2024-11-21T05:47:27.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la Memoria Previamente Liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21041",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.513",
      "lastModified" : "2024-11-21T05:47:27.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a use-after-free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de uso de la memoria previamente liberada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21042",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.590",
      "lastModified" : "2024-11-21T05:47:27.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Read vulnerability that could lead to arbitrary disclosure of information in the memory stack. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Las versiones 2020.013.20074 (y anteriores), 2020.001.30018 (y anteriores) y 2017.011.30188 (y anteriores) de Acrobat Reader DC están afectadas por una vulnerabilidad de lectura fuera de los límites que podría conducir a la divulgación arbitraria de información en la pila de memoria. Un atacante podría aprovechar esta vulnerabilidad para eludir mitigaciones como ASLR. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21044",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.653",
      "lastModified" : "2024-11-21T05:47:27.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an Out-of-bounds Write vulnerability when parsing a crafted jpeg file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites cuando analiza un archivo jpeg diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21045",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.717",
      "lastModified" : "2024-11-21T05:47:27.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper access control vulnerability. An unauthenticated attacker could leverage this vulnerability to elevate privileges in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de control de acceso inapropiado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para elevar sus privilegios en el contexto del usuario actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21046",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.797",
      "lastModified" : "2024-11-21T05:47:27.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an memory corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to cause an application denial-of-service. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de corrupción de la memoria.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para causar una denegación de servicio de la aplicación.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21057",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.873",
      "lastModified" : "2024-11-21T05:47:29.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a null pointer dereference vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve denial of service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de desreferencia del puntero null cuando analiza un archivo PDF especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr la denegación de servicio en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21060",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.950",
      "lastModified" : "2024-11-21T05:47:29.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Acrobat Pro DC versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by an improper input validation vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Acrobat Pro DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de comprobación inapropiada de entrada.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para revelar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21061",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T20:15:15.997",
      "lastModified" : "2024-11-21T05:47:29.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Pro DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Use-after-free vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Pro DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad Uso de la memoria previamente liberada cuando analiza un archivo PDF especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para revelar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "CC23AA00-FC0B-4CA7-83CF-D11CB679630C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "2B0D84BC-88D8-4B29-BF4C-DE3D27D0EFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "BAA2B3BC-EA31-445B-9D6F-1A3D86030F98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.0",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "33305687-D4B1-4A48-B6B3-0619038243BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.0",
            "versionEndIncluding" : "20.001.300183",
            "matchCriteriaId" : "4B989379-B8B7-4FA7-9319-F0FB8CA2253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "E5BC145F-0696-4B2F-AEC5-4FDB25E8EA6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21014",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:12.540",
      "lastModified" : "2024-11-21T05:47:24.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento versiones 2.4.1 (y anteriores), versiones 2.4.0-p1 (y anteriores) y versiones 2.3.6 (y anteriores), son vulnerables a una omisión de restricción de la carga de archivos.&#xa0;Una explotación con éxito podría conllevar a una ejecución de código arbitraria por parte de un atacante autenticado.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "14B6B496-E849-4935-B3D8-8BDB8DDD59A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*",
            "versionEndExcluding" : "2.3.6",
            "matchCriteriaId" : "79C3A2B0-AE14-4D0F-BEE2-82FC00BE6087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "F9C60780-1213-4D06-A4C4-CC915C952B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.3.6:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "3CCEDD72-7195-495C-A9B6-9D18BA9756F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "05F799AA-CDC0-409F-BB7E-CB941D6FB189"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "600AA27A-D2A8-41C3-8631-74ECF7453E78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:commerce:*:*:*",
            "matchCriteriaId" : "67683B07-34CD-4DD2-A6C9-C71733007397"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.0:p1:*:*:open_source:*:*:*",
            "matchCriteriaId" : "ECA32B69-E9D8-4C01-ACDC-E0F885D937FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:commerce:*:*:*",
            "matchCriteriaId" : "80860D39-0D51-47B3-BA92-F473ADA1BBC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:magento:2.4.1:-:*:*:open_source:*:*:*",
            "matchCriteriaId" : "2ADFE661-AB9C-4387-AC4F-D14A0717C2B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/magento/apsb21-08.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21047",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:12.697",
      "lastModified" : "2024-11-21T05:47:27.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.4 (y anteriores) y versiones 22.1.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.4",
            "matchCriteriaId" : "9C408EE9-5D46-4FCA-A165-19D8B54D2E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.1.1",
            "matchCriteriaId" : "19CCE24A-4A21-46A6-A7E9-AB517CD218ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21048",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:12.773",
      "lastModified" : "2024-11-21T05:47:28.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file"
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.4 (y anteriores) y versiones 22.1.1 (y anteriores), están afectadas por una vulnerabilidad de Corrupción de la Memoria cuando analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.4",
            "matchCriteriaId" : "9C408EE9-5D46-4FCA-A165-19D8B54D2E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.1.1",
            "matchCriteriaId" : "19CCE24A-4A21-46A6-A7E9-AB517CD218ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21049",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:12.853",
      "lastModified" : "2024-11-21T05:47:28.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.4 (y anteriores) y versiones 22.1.1 (y anteriores), están afectadas por una vulnerabilidad de lectura fuera de límites cuando analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.4",
            "matchCriteriaId" : "9C408EE9-5D46-4FCA-A165-19D8B54D2E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.1.1",
            "matchCriteriaId" : "19CCE24A-4A21-46A6-A7E9-AB517CD218ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21050",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:12.947",
      "lastModified" : "2024-11-21T05:47:28.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.4 (y anteriores) y versiones 22.1.1 (y anteriores), están afectadas por una vulnerabilidad de lectura fuera de límites cuando analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.4",
            "matchCriteriaId" : "9C408EE9-5D46-4FCA-A165-19D8B54D2E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.1.1",
            "matchCriteriaId" : "19CCE24A-4A21-46A6-A7E9-AB517CD218ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21051",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.023",
      "lastModified" : "2024-11-21T05:47:28.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.4 (and earlier) and 22.1.1 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted javascript file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.4 (y anteriores) y versiones 22.1.1 (y anteriores), están afectadas por una vulnerabilidad de desbordamiento de búfer cuando analiza un archivo javascript especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.4",
            "matchCriteriaId" : "9C408EE9-5D46-4FCA-A165-19D8B54D2E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.1.1",
            "matchCriteriaId" : "19CCE24A-4A21-46A6-A7E9-AB517CD218ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-10.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21052",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.133",
      "lastModified" : "2024-11-21T05:47:28.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.2 (and earlier) is affected by an Out-of-bounds Write vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versión 21.0.2 (y anteriores), está afectada por una vulnerabilidad de escritura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.2",
            "matchCriteriaId" : "806E32F8-AF6A-4B09-ACFD-67937ADBF3C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-11.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-11.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21053",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.213",
      "lastModified" : "2024-11-21T05:47:28.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Illustrator version 25.1 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Illustrator versiones 25.1 (y anteriores) está afectada por una vulnerabilidad de escritura fuera de límites cuando analiza un archivo diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.1",
            "matchCriteriaId" : "8CF2A7F4-1141-4179-8EA5-6DD2848D33F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb21-12.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb21-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21054",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.307",
      "lastModified" : "2024-11-21T05:47:28.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Illustrator version 25.1 (and earlier) is affected by an Out-of-bounds Write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Illustrator versiones 25.1 (y anteriores) está afectada por una vulnerabilidad de escritura fuera de límites cuando analiza un archivo creado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:illustrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "25.1",
            "matchCriteriaId" : "8CF2A7F4-1141-4179-8EA5-6DD2848D33F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb21-12.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/illustrator/apsb21-12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21055",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.383",
      "lastModified" : "2024-11-21T05:47:28.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Dreamweaver versions 21.0 (and earlier) and 20.2 (and earlier) is affected by an untrusted search path vulnerability that could result in information disclosure. An attacker with physical access to the system could replace certain configuration files and dynamic libraries that Dreamweaver references, potentially resulting in information disclosure."
      }, {
        "lang" : "es",
        "value" : "Adobe Dreamweaver versiones 21.0 (y anteriores) y versiones 20.2 (y anteriores), están afectadas por una vulnerabilidad de ruta de búsqueda no confiable que podría resultar en una divulgación de información.&#xa0;Un atacante con acceso físico al sistema podría reemplazar determinados archivos de configuración y bibliotecas dinámicas a las que hace referencia Dreamweaver, resultando potencialmente en una divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.2",
            "matchCriteriaId" : "F7D52BDC-7020-4542-9CF4-5B5D51EA9CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:dreamweaver:21.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68E8F9A9-CC0B-457D-ADF6-DB1E86D0EE1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb21-13.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/dreamweaver/apsb21-13.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21058",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.493",
      "lastModified" : "2024-11-21T05:47:29.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC, versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de corrupción de la memoria cuando analiza un archivo PDF especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "163AD098-8E6F-4710-BBB2-7D20A5ECE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "6AA3B8F3-7E2D-4463-AEC6-53AF49EB511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "8DE0EAFA-C01C-4AF3-A80D-3060C2976176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "E769E3AF-BCD8-4894-A5F3-7318DA56ABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "85DA6685-CB53-45D3-B4C3-3486E2439A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "85092AF3-B5E3-4192-ABA3-C6BEC56E3EEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21059",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.570",
      "lastModified" : "2024-11-21T05:47:29.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC, versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de corrupción de la memoria cuando analiza un archivo PDF especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "163AD098-8E6F-4710-BBB2-7D20A5ECE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "6AA3B8F3-7E2D-4463-AEC6-53AF49EB511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "8DE0EAFA-C01C-4AF3-A80D-3060C2976176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "E769E3AF-BCD8-4894-A5F3-7318DA56ABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "85DA6685-CB53-45D3-B4C3-3486E2439A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "85092AF3-B5E3-4192-ABA3-C6BEC56E3EEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21062",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.650",
      "lastModified" : "2024-11-21T05:47:29.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC, versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de corrupción de la memoria cuando analiza un archivo PDF especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "163AD098-8E6F-4710-BBB2-7D20A5ECE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "6AA3B8F3-7E2D-4463-AEC6-53AF49EB511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "8DE0EAFA-C01C-4AF3-A80D-3060C2976176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "E769E3AF-BCD8-4894-A5F3-7318DA56ABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "85DA6685-CB53-45D3-B4C3-3486E2439A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "85092AF3-B5E3-4192-ABA3-C6BEC56E3EEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21063",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-11T21:15:13.743",
      "lastModified" : "2024-11-21T05:47:29.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are affected by a Memory corruption vulnerability when parsing a specially crafted PDF file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC, versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), están afectadas por una vulnerabilidad de corrupción de la memoria cuando analiza un archivo PDF especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para alcanzar una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "163AD098-8E6F-4710-BBB2-7D20A5ECE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "6AA3B8F3-7E2D-4463-AEC6-53AF49EB511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "8DE0EAFA-C01C-4AF3-A80D-3060C2976176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "E769E3AF-BCD8-4894-A5F3-7318DA56ABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "85DA6685-CB53-45D3-B4C3-3486E2439A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "85092AF3-B5E3-4192-ABA3-C6BEC56E3EEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21311",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-11T21:15:13.820",
      "lastModified" : "2025-10-24T14:48:35.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) are affected. This is fixed in version 4.7.9."
      }, {
        "lang" : "es",
        "value" : "Adminer es una administración de base de datos de código abierto en un solo archivo PHP.&#xa0;En el administrador de la versión 4.0.0 y antes de la 4.7.9, se presenta una vulnerabilidad de tipo server-side request forgery.&#xa0;Los usuarios de las versiones Adminer que incluyen todos los controladores (por ejemplo, \"adminer.php\") están afectados.&#xa0;Esto es corregido en la versión 4.7.9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2025-09-29",
      "cisaActionDue" : "2025-10-20",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Adminer Server-Side Request Forgery Vulnerability",
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adminer:adminer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.7.9",
            "matchCriteriaId" : "F5E19DCC-D7A6-4325-8E91-E601C9967B8F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/vrana/adminer",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrana/adminer/commit/ccd2374b0b12bd547417bf0dacdf153826c83351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/vrana/adminer/files/5957311/Adminer.SSRF.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vrana/adminer/security/advisories/GHSA-x5r2-hj5c-8jx6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/vrana/adminer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21311",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21976",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-02-11T21:15:16.337",
      "lastModified" : "2024-11-21T05:49:21.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vSphere Replication 8.3.x prior to 8.3.1.2, 8.2.x prior to 8.2.1.1, 8.1.x prior to 8.1.2.3 and 6.5.x prior to 6.5.1.5 contain a post-authentication command injection vulnerability which may allow an authenticated admin user to perform a remote code execution."
      }, {
        "lang" : "es",
        "value" : "vSphere Replication versiones 8.3.x anteriores a 8.3.1.2, versiones 8.2.x anteriores a 8.2.1.1, versiones 8.1.x anteriores a 8.1.2.3 y versiones 6.5.x anteriores a 6.5.1.5, contienen una vulnerabilidad de inyección de comando posterior a la autenticación que puede permitir a un usuario administrador autenticado llevar a cabo una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_replication:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.5.1.5",
            "matchCriteriaId" : "B5FEA0E9-F007-41B1-94D8-F6D6E8E593BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_replication:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.2.3",
            "matchCriteriaId" : "5E856462-4CF8-40E9-BEEC-D791E52C1DED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_replication:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.1.1",
            "matchCriteriaId" : "74876159-3938-4186-9537-FA03C67F9625"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vsphere_replication:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0",
            "versionEndExcluding" : "8.3.1.2",
            "matchCriteriaId" : "1129CE3D-F63B-4EC2-BB2F-4D80E9A55DD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0001.html",
        "source" : "security@vmware.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21310",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-11T22:15:12.507",
      "lastModified" : "2024-11-21T05:47:59.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NextAuth.js (next-auth) is am open source authentication solution for Next.js applications. In next-auth before version 3.3.0 there is a token verification vulnerability. Implementations using the Prisma database adapter in conjunction with the Email provider are impacted. Implementations using the Email provider with the default database adapter are not impacted. Implementations using the Prisma database adapter but not using the Email provider are not impacted. The Prisma database adapter was checking the verification token, but was not verifying the email address associated with that token. This made it possible to use a valid token to sign in as another user when using the Prima adapter in conjunction with the Email provider. This issue is specific to the community supported Prisma adapter. This issue is fixed in version 3.3.0."
      }, {
        "lang" : "es",
        "value" : "NextAuth.js (next-auth) es una solución de autenticación de código abierto para aplicaciones Next.js.&#xa0;En next-auth versiones anteriores a 3.3.0, se presenta una vulnerabilidad de verificación de tokens.&#xa0;Las implementaciones que usa el adaptador de base de datos Prisma en conjunto con el proveedor de correo electrónico están afectadas.&#xa0;Las implementaciones que usa el proveedor de correo electrónico con el adaptador de base de datos predeterminado no están afectadas.&#xa0;Las implementaciones que usa el adaptador de base de datos Prisma pero que no usa el proveedor de correo electrónico no están afectadas.&#xa0;El adaptador de base de datos de Prisma estaba comprobando el token de verificación, pero no verificaba la dirección de correo electrónico asociada con ese token.&#xa0;Esto hizo posible usar un token válido para iniciar sesión como otro usuario cuando se usa el adaptador Prima en conjunto con el proveedor de correo electrónico.&#xa0;Este problema es específico del adaptador Prisma compatible con la comunidad.&#xa0;Este problema es corregido en versión 3.3.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextauth.js:next-auth:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.3.0",
            "matchCriteriaId" : "33AEB592-BAC1-4FE4-84E0-C8F9E95BF8E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextauthjs/next-auth/releases/tag/v3.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextauthjs/next-auth/security/advisories/GHSA-pg53-56cg-4m8q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/next-auth",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextauthjs/next-auth/releases/tag/v3.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextauthjs/next-auth/security/advisories/GHSA-pg53-56cg-4m8q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/next-auth",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27190",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T03:15:12.883",
      "lastModified" : "2024-11-21T05:57:31.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stored Cross Site Scripting(XSS) Vulnerability was discovered in PEEL SHOPPING 9.3.0 and 9.4.0, which are publicly available. The user supplied input containing polyglot payload is echoed back in javascript code in HTML response. This allows an attacker to input malicious JavaScript which can steal cookie, redirect them to other malicious website, etc."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de Cross Site Scripting(XSS) almacenada en PEEL SHOPPING versiones 9.3.0 y 9.4.0, que están disponibles públicamente. La entrada suministrada por el usuario que contiene la carga útil de políglota se devuelve en código javascript en la respuesta HTML. Esto permite a un atacante introducir código javascript malicioso que puede robar la cookie, redirigirla a otro sitio web malicioso, etc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peel:peel_shopping:9.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F6162D3-7FE6-4A81-8092-C639AB059B9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:peel:peel_shopping:9.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45FFE80C-0ABF-494F-9AE3-9A35E2535DC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisto/peel-shopping/issues/4#issuecomment-953461611",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vulf/Peel-Shopping-cart-9.4.0-Stored-XSS",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisto/peel-shopping/issues/4#issuecomment-953461611",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anmolksachan/CVE-2021-27190-PEEL-Shopping-cart-9.3.0-Stored-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vulf/Peel-Shopping-cart-9.4.0-Stored-XSS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.peel-shopping.com/modules/telechargement/telecharger.php?id=7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.secuneus.com/cve-2021-27190-peel-shopping-ecommerce-shopping-cart-stored-cross-site-scripting-vulnerability-in-address/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20635",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.187",
      "lastModified" : "2024-11-21T05:46:55.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper restriction of excessive authentication attempts in LOGITEC LAN-WH450N/GR allows an attacker in the wireless range of the device to recover PIN and access the network."
      }, {
        "lang" : "es",
        "value" : "Una restricción inapropiada de intentos de autenticación excesivos en LOGITEC LAN-WH450N/GR, permite a un atacante en el alcance inalámbrico del dispositivo recuperar el PIN y acceder a la red"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-wh450n\\/gr_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FE2CE6A-6FEB-4A13-B91B-CD58764FD7EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-wh450n\\/gr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2D25A96-B85F-44DC-AE8E-6B5288DD6785"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20636",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.543",
      "lastModified" : "2024-11-21T05:46:55.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/PR5B allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en LOGITEC LAN-W300N/PR5B, permite a atacantes remotos secuestrar la autenticación de los administradores por medio de una URL especialmente diseñada.&#xa0;Como resultado, se pueden realizar operaciones no deseadas en el dispositivo, como cambios en la configuración del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/pr5b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8390BE37-91F5-4B1B-B121-BF6147A79836"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/pr5b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC81E4C-AFD0-400D-9C51-D091D513A374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20637",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.590",
      "lastModified" : "2024-11-21T05:46:55.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/PR5B allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada o manejo de condiciones excepcionales en LOGITEC LAN-W300N/PR5B, permite a un atacante remoto causar una condición de denegación de servicio (DoS) al enviar una URL especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/pr5b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8390BE37-91F5-4B1B-B121-BF6147A79836"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/pr5b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC81E4C-AFD0-400D-9C51-D091D513A374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20638",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.653",
      "lastModified" : "2024-11-21T05:46:55.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "LOGITEC LAN-W300N/PGRB, permite a un atacante con privilegios administrativos ejecutar comandos arbitrarios del sistema operativo por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/pgrb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0EE692-C74D-4EB2-8086-AEF268E3A703"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/pgrb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD99F41-12B6-4412-8207-5AE69F739B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20639",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.733",
      "lastModified" : "2024-11-21T05:46:55.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "LOGITEC LAN-W300N/PGRB, permite a un atacante con privilegios administrativos ejecutar comandos arbitrarios del sistema operativo por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/pgrb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0EE692-C74D-4EB2-8086-AEF268E3A703"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/pgrb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD99F41-12B6-4412-8207-5AE69F739B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20640",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.810",
      "lastModified" : "2024-11-21T05:46:55.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow vulnerability in LOGITEC LAN-W300N/PGRB allows an attacker with administrative privilege to execute an arbitrary OS command via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento del búfer en LOGITEC LAN-W300N/PGRB, permite a un atacante con privilegios administrativos ejecutar un comando arbitrario del sistema operativo por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/pgrb_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D0EE692-C74D-4EB2-8086-AEF268E3A703"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/pgrb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD99F41-12B6-4412-8207-5AE69F739B26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "vultures@jpcert.or.jp"
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc1778b38e74b5b6142414d57623bd55b023a72361f422836782fca3c%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20641",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.873",
      "lastModified" : "2024-11-21T05:46:55.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in LOGITEC LAN-W300N/RS allows remote attackers to hijack the authentication of administrators via a specially crafted URL. As a result, unintended operations to the device such as changes of the device settings may be conducted."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en LOGITEC LAN-W300N/RS, permite a atacantes remotos secuestrar la autenticación de los administradores por medio de una URL especialmente diseñada.&#xa0;Como resultado, se pueden realizar operaciones no deseadas en el dispositivo, como cambios en la configuración del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/rs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C9E26A-BDBC-44AD-AC82-A75B6D01868A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/rs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0B570C-E90F-4AE1-80F5-1083DB612F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20642",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.937",
      "lastModified" : "2024-11-21T05:46:55.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper check or handling of exceptional conditions in LOGITEC LAN-W300N/RS allows a remote attacker to cause a denial-of-service (DoS) condition by sending a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada o el manejo de condiciones excepcionales en LOGITEC LAN-W300N/RS, permite a un atacante remoto causar una condición de denegación de servicio (DoS) al enviar una URL especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:logitech:lan-w300n\\/rs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C9E26A-BDBC-44AD-AC82-A75B6D01868A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:logitech:lan-w300n\\/rs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0B570C-E90F-4AE1-80F5-1083DB612F1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN96783542/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20643",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:14.997",
      "lastModified" : "2024-11-21T05:46:55.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in ELECOM LD-PS/U1 allows remote attackers to change the administrative password of the affected device by processing a specially crafted request."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control de acceso inapropiado en ELECOM LD-PS/U1, permite a atacantes remotos cambiar la contraseña administrativa del dispositivo afectado al procesar una petición  especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:ld-ps\\/u1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B30CAF-6AE0-4A8F-BB7F-8C2E6461E0AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:ld-ps\\/u1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A883B8-89B7-4348-BB0A-D8618207A83F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20644",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.060",
      "lastModified" : "2024-11-21T05:46:56.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ELECOM WRC-1467GHBK-A allows arbitrary scripts to be executed on the user's web browser by displaying a specially crafted SSID on the web setup page."
      }, {
        "lang" : "es",
        "value" : "ELECOM WRC-1467GHBK-A, permite ejecutar scripts arbitrarios en el navegador web del usuario mostrando un SSID especialmente diseñado en la página de configuración web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-1467ghbk-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07500E7-3757-4FEB-8A70-7BCB60D45D2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-1467ghbk-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE63634-3DBE-4B5F-B871-F076238BC4C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20645",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.137",
      "lastModified" : "2024-11-21T05:46:56.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in ELECOM WRC-300FEBK-A allows remote authenticated attackers to inject arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting en ELECOM WRC-300FEBK-A, permite a los atacantes autenticados remotamente inyectar script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-300febk-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196F5519-11FE-4579-B73D-D1966B02A051"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-300febk-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4EB1A0-00B1-4587-897D-22D7CD067515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20646",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.200",
      "lastModified" : "2024-11-21T05:46:56.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-A allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en ELECOM WRC-300FEBK-A, permite a atacantes remotos secuestrar la autenticación de los administradores y ejecutar una petición arbitraria por medio de un vector no especificado.&#xa0;Como resultado, la configuración del dispositivo puede ser alterada y/o el demonio telnet puede ser iniciado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-300febk-a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196F5519-11FE-4579-B73D-D1966B02A051"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-300febk-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4EB1A0-00B1-4587-897D-22D7CD067515"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20647",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.263",
      "lastModified" : "2024-11-21T05:46:56.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in ELECOM WRC-300FEBK-S allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en ELECOM WRC-300FEBK-S, permite a atacantes remotos secuestrar la autenticación de los administradores y ejecutar una petición arbitraria por medio de un vector no especificado.&#xa0;Como resultado, la configuración del dispositivo puede ser alterada y/o el demonio telnet puede ser iniciado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-300febk-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD41BED-6FB3-4F62-BFCC-C73927375E9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-300febk-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77EFC8AE-44A0-4ED5-AC46-13CA56313EEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20648",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.327",
      "lastModified" : "2024-11-21T05:46:56.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ELECOM WRC-300FEBK-S allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "ELECOM WRC-300FEBK-S, permite a un atacante con derechos de administrador ejecutar comandos arbitrarios del sistema operativo por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-300febk-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD41BED-6FB3-4F62-BFCC-C73927375E9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-300febk-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77EFC8AE-44A0-4ED5-AC46-13CA56313EEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20649",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.387",
      "lastModified" : "2024-11-21T05:46:56.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ELECOM WRC-300FEBK-S contains an improper certificate validation vulnerability. Via a man-in-the-middle attack, an attacker may alter the communication response. As a result, an arbitrary OS command may be executed on the affected device."
      }, {
        "lang" : "es",
        "value" : "ELECOM WRC-300FEBK-S, contiene una vulnerabilidad de comprobación de certificado inapropiada.&#xa0;Mediante un ataque man-in-the-middle, un atacante puede alterar la respuesta de comunicación.&#xa0;Como resultado, se puede ejecutar un comando arbitrario del sistema operativo en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:wrc-300febk-s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD41BED-6FB3-4F62-BFCC-C73927375E9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:wrc-300febk-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77EFC8AE-44A0-4ED5-AC46-13CA56313EEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20650",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.450",
      "lastModified" : "2024-11-21T05:46:56.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in ELECOM NCC-EWF100RMWH2 allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via unspecified vector. As a result, the device settings may be altered and/or telnet daemon may be started."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en ELECOM NCC-EWF100RMWH2, permite a atacantes remotos secuestrar la autenticación de los administradores y ejecutar una petición arbitraria por medio de un vector no especificado.&#xa0;Como resultado, la configuración del dispositivo puede ser alterada y/o puede ser iniciado el demonio telnet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:elecom:ncc-ewf100rmwh2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8488143E-CEE1-4507-8189-E4265FE03655"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:elecom:ncc-ewf100rmwh2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0884FE6A-257F-44AE-8AEC-87770490351F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47580234/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20651",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-12T07:15:15.497",
      "lastModified" : "2024-11-21T05:46:56.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in ELECOM File Manager all versions allows remote attackers to create an arbitrary file or overwrite an existing file in a directory which can be accessed with the application privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en ELECOM File Manager,  todas las versiones permite a atacantes remotos crear un archivo arbitrario o sobrescribir un archivo que puede ser accedido con privilegios de aplicación a por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elecom:file_manager:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E932924F-D486-4D2C-82F7-E7311EE11BB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN98115035/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN98115035/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.elecom.co.jp/news/security/20210126-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27187",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T08:15:10.980",
      "lastModified" : "2024-11-21T05:57:31.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked."
      }, {
        "lang" : "es",
        "value" : "El cliente terminal 1 de Sovremennye Delovye Tekhnologii FX Aggregator  almacena las credenciales de autenticación en texto sin cifrar en el archivo login.sav cuando la casilla Save Password está marcada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xn--b1agzlht:fx_aggregator_terminal_client:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12086DCA-3211-4C86-8134-B32A0130DA77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jet-pentest/CVE-2021-27187",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jet-pentest/CVE-2021-27187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27188",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T08:15:11.057",
      "lastModified" : "2024-11-21T05:57:31.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five hours) by making five invalid login attempts to a victim's account."
      }, {
        "lang" : "es",
        "value" : "El cliente terminal 1 de Sovremennye Delovye Tekhnologii FX Aggregator 1, permite a atacantes causar una denegación de servicio (acceso suspendido durante cinco horas) al realizar cinco intentos de inicio de sesión no válidos en la cuenta de una víctima"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xn--b1agzlht:fx_aggregator_terminal_client:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12086DCA-3211-4C86-8134-B32A0130DA77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jet-pentest/CVE-2021-27188",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jet-pentest/CVE-2021-27188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dnb.com/business-directory/company-profiles.pryaniki_ooo.13b676c626e38d534ff1a6a2a9fc7e6a.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T08:15:11.167",
      "lastModified" : "2024-11-21T05:57:34.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Telegram before 7.4 (212543) Stable on macOS stores the local passcode in cleartext, leading to information disclosure."
      }, {
        "lang" : "es",
        "value" : "Telegram versiones anteriores a 7.4 (212543) Stable en macOS almacena el código de acceso local en texto sin cifrar, conllevando a una la divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "AEF887D9-2A97-48A1-B362-398B496F76CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=zEt-_5b4OaA",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=zEt-_5b4OaA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27205",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T08:15:11.230",
      "lastModified" : "2024-11-21T05:57:34.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Telegram before 7.4 (212543) Stable on macOS stores the local copy of self-destructed messages in a sandbox path, leading to sensitive information disclosure."
      }, {
        "lang" : "es",
        "value" : "Telegram versiones anteriores a 7.4 (212543) Stable en macOS almacena la copia local de mensajes autodestruidos en una ruta de espacio aislado, conllevando a una divulgación de información confidencial"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "AEF887D9-2A97-48A1-B362-398B496F76CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Go-4srm_1fQ",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.inputzero.io/2020/12/telegram-privacy-fails-again.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Go-4srm_1fQ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T16:15:12.627",
      "lastModified" : "2024-11-21T05:57:32.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn't check if it's being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with \"OBJECT classid=\" and \"<SCRIPT language='vbscript'>\") to overwrite arbitrary files."
      }, {
        "lang" : "es",
        "value" : "DSUtility.dll en Pelco Digital Sentry Server versiones anteriores a 7.19.67, presenta una vulnerabilidad de escritura de archivo arbitraria.&#xa0;El método AppendToTextFile no comprueba si se llama desde la aplicación o desde un usuario malicioso.&#xa0;La vulnerabilidad es activada cuando un atacante remoto crea una página HTML (por ejemplo, con \"OBJECT classid=\" and  \"(SCRIPT language='vbscript')\") para sobrescribir archivos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 8.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pelco:digital_sentry_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.19.67",
            "matchCriteriaId" : "C7D067DB-A814-4E4E-B1C7-40D7307793CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server_AFW.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server_AFW.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20406",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:13.730",
      "lastModified" : "2024-11-21T05:46:32.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196184."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial.&#xa0;IBM X-Force ID: 198184"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.2,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@us.ibm.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196184",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414763",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414763",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20407",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:13.840",
      "lastModified" : "2024-11-21T05:46:32.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 discloses sensitive information in source code that could be used in further attacks against the system.  IBM X-Force ID:  196185."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, revela información confidencial en el código fuente que podría ser usada en futuros ataques contra el sistema.&#xa0;IBM X-Force ID: 198185"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196185",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414765",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196185",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20408",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:13.917",
      "lastModified" : "2024-11-21T05:46:32.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 could disclose highly sensitive information to a local user due to inproper storage of a plaintext cryptographic key. IBM X-Force ID: 198187."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría revelar información altamente confidencial a un usuario local debido al almacenamiento inapropiado de una clave criptográfica de texto plano.&#xa0;IBM X-Force ID: 198187"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196187",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414767",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196187",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20409",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:13.997",
      "lastModified" : "2024-11-21T05:46:32.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 196188."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría permitir a un atacante remoto obtener información confidencial, causada por el fallo al habilitar apropiadamente HTTP Strict Transport Security.&#xa0;Un atacante podría aprovechar esta vulnerabilidad para obtener información confidencial utilizando técnicas de tipo man in the middle.&#xa0;IBM X-Force ID: 198188"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196188",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414771",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414771",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20410",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:14.060",
      "lastModified" : "2024-11-21T05:46:32.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 sends user credentials in plain clear text which can be read by an authenticated user using man in the middle techniques. IBM X-Force ID: 198190."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, envía las credenciales de usuario en texto plano y sin cifrar que puede ser leído por un usuario autenticado utilizando técnicas de tipo man in the middle.&#xa0;IBM X-Force ID: 198190"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196190",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414773",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20411",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:14.153",
      "lastModified" : "2024-11-21T05:46:32.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 could allow a user to impersonate another user on the system due to incorrectly updating the session identifier. IBM X-Force ID: 198191."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, podría permitir a un usuario suplantar a otro usuario en el sistema debido a una actualización incorrecta del identificador de sesión.&#xa0;IBM X-Force ID: 198191"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196191",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414777",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20412",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-12T17:15:14.230",
      "lastModified" : "2024-11-21T05:46:32.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Information Queue 1.0.6 and 1.0.7 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 198192."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Information Queue versiones 1.0.6 y 1.0.7, contiene credenciales embebidas, tal y como una contraseña o clave criptográfica, que utiliza para su propia autenticación entrante, comunicación saliente a componentes externos o cifrado de datos internos.&#xa0;IBM X-Force ID: 198192"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9EC8B9-A847-4F63-9CBA-B19C3D42274F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_information_queue:1.0.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2716C038-2A51-449D-9939-8A9AA683F5F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196192",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414779",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6414779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22973",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T17:15:14.310",
      "lastModified" : "2024-11-21T05:51:02.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x versions, JSON parser function does not protect against out-of-bounds memory accesses or writes. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2, versiones 14.1.x anteriores a 14.1.3.1, versiones 13.1.x anteriores a 13.1.3.5 y todas las versiones de 12.1.x, la función del analizador JSON no protege contra accesos o escrituras de memoria fuera de límites.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "92233BA4-276B-46F4-94E2-423B8EB2074D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D27EBC7C-4EE1-4574-9AFD-2868611D80B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "DDECAC3C-50DA-4170-BBC1-4A6D15374FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "151ED6D1-AA85-4213-8F3A-8167CBEC4721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "29AE9C3B-C87C-4D48-8C74-A25CE73C3C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "86D94B31-6496-42B0-BA04-370C283C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "A02F84FA-6860-4FD9-9FD9-5B8C4916D2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "5D5AA99B-08E7-4959-A3B4-41AA527B4B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "46362DA5-7B1C-4944-9B16-7C46FCB091EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "2F630B15-9652-477D-ACDE-BB846FAA2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "5A487FB3-0824-43FB-86DA-C8F4E78D832D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "9DC86A5F-C793-4848-901F-04BFB57A07F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "FD000EE7-2559-4D41-8DFD-2358F24EA804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "6FB29F87-8F6B-452A-9A9B-B7680C37CE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "3C3D3FC3-D5F6-48A9-8620-BE50BEE76B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "A4AFCA70-BF3B-41DA-B0DE-03E91F3B372A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "24B9D974-3C1E-4467-A844-F9FDCD39A7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "55C2EC23-E78F-4447-BACF-21FC36ABF155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "E25DC6CD-8A17-4C18-A8DA-CC7BD131812D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "95CD946B-331A-44F5-8F64-26411E909F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "CC1E538E-C741-4FA4-921B-0459DE7012D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "945A19E8-51EB-42FE-9BF1-12DAC78B5286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "BA52F4CD-599A-4FAB-B172-80156A9A409D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "91346E36-BACA-4562-9903-9E4B7EA74834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "53337BCB-2800-4055-9F07-5128FD403C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EB5007D0-BBDB-4D74-9C88-98FBA74757D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "CA7122D0-588F-4D3E-B4D7-086413255E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "AD6C7A28-1569-44B0-BE80-7472F5ED5059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "C5B1C469-94FE-4F40-BC12-0FC445A6F44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "B7725810-66D2-4460-A174-9F3BFAD966F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "FFDEE0E6-3A43-40C5-896B-A993CEC4A868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "1C78B434-86B3-49AE-B93D-3A8F743DE00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "12CBE057-A62D-4F25-BC1E-E53CD51A51CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "65B76F53-7D8B-477E-8B6E-91AC0A9009FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "C30C3FE3-BBA8-4CE4-BEE7-82A24F64FE7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "72914086-C966-46CF-AE19-6F70EA05FEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "00515D8B-C7CB-4011-9448-5A03A38B3614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K13323323",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K13323323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22974",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T17:15:14.403",
      "lastModified" : "2024-11-21T05:51:02.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.6 and all versions of BIG-IQ 7.x and 6.x, an authenticated attacker with access to iControl REST over the control plane may be able to take advantage of a race condition to execute commands with an elevated privilege level. This vulnerability is due to an incomplete fix for CVE-2017-6167. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2, versiones 14.1.x anteriores a 14.1.3.1 y versiones 13.1.x anteriores a 13.1.3.6 y todas las versiones de BIG-IQ 7.x y 6. x, un atacante autenticado con acceso a iControl REST a través del plano de control puede ser capaz de tomar ventaja de una condición de carrera para ejecutar comandos con un nivel de privilegio elevado.&#xa0;Esta vulnerabilidad es debido a una corrección incompleta para CVE-2017-6167.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D27EBC7C-4EE1-4574-9AFD-2868611D80B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "DDECAC3C-50DA-4170-BBC1-4A6D15374FD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "29AE9C3B-C87C-4D48-8C74-A25CE73C3C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "86D94B31-6496-42B0-BA04-370C283C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "A02F84FA-6860-4FD9-9FD9-5B8C4916D2C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "BF641654-BDC0-4483-B6BA-D5566427E5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "6E0224A2-82E3-459A-8BEC-A2FC7B526230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "2F630B15-9652-477D-ACDE-BB846FAA2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "5A487FB3-0824-43FB-86DA-C8F4E78D832D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "6FB29F87-8F6B-452A-9A9B-B7680C37CE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "3C3D3FC3-D5F6-48A9-8620-BE50BEE76B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "24B9D974-3C1E-4467-A844-F9FDCD39A7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D288196E-3937-4531-9571-07893BEE7296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "25BEF1D6-6FC7-44F0-995C-29C87B03987A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "95CD946B-331A-44F5-8F64-26411E909F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "CC1E538E-C741-4FA4-921B-0459DE7012D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "BA52F4CD-599A-4FAB-B172-80156A9A409D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "91346E36-BACA-4562-9903-9E4B7EA74834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "53337BCB-2800-4055-9F07-5128FD403C31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "AD6C7A28-1569-44B0-BE80-7472F5ED5059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "C5B1C469-94FE-4F40-BC12-0FC445A6F44C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "1C78B434-86B3-49AE-B93D-3A8F743DE00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "12CBE057-A62D-4F25-BC1E-E53CD51A51CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "B6D8C63D-D669-414C-8AF1-2F3A993D6B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "29BB93E5-DE54-4BE3-9CDF-E0A8F657E3B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "72914086-C966-46CF-AE19-6F70EA05FEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "00515D8B-C7CB-4011-9448-5A03A38B3614"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FB6A00DF-2DAD-472A-88C1-1553813CF208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "201CB36E-0ED5-4B8E-9FCC-67643C99F3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "CBF2C3FB-5A73-49B6-8210-BC575361E8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "E4ADE8D9-D1EF-4591-AB3C-93D06BE701EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "F37D18F2-8C6A-4557-85DC-2A751595423C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.1.0",
            "matchCriteriaId" : "C88B0206-093A-4A18-8322-A1CD1D4ACF2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K68652018",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K68652018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22975",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T17:15:14.480",
      "lastModified" : "2024-11-21T05:51:03.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, and 14.1.x before 14.1.3.1, under some circumstances, Traffic Management Microkernel (TMM) may restart on the BIG-IP system while passing large bursts of traffic. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1 y versiones 14.1.x anteriores a 14.1.3.1, en algunas circunstancias, Traffic Management Microkernel (TMM) puede reiniciarse en el sistema BIG-IP mientras pasa grandes ráfagas de tráfico.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D27EBC7C-4EE1-4574-9AFD-2868611D80B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "86D94B31-6496-42B0-BA04-370C283C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "BF641654-BDC0-4483-B6BA-D5566427E5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "2F630B15-9652-477D-ACDE-BB846FAA2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "6FB29F87-8F6B-452A-9A9B-B7680C37CE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D288196E-3937-4531-9571-07893BEE7296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "95CD946B-331A-44F5-8F64-26411E909F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "91346E36-BACA-4562-9903-9E4B7EA74834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "AD6C7A28-1569-44B0-BE80-7472F5ED5059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "1C78B434-86B3-49AE-B93D-3A8F743DE00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "B6D8C63D-D669-414C-8AF1-2F3A993D6B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "72914086-C966-46CF-AE19-6F70EA05FEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "201CB36E-0ED5-4B8E-9FCC-67643C99F3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "9363BF22-DA96-4691-AD24-EECF6D9FCBEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "E4ADE8D9-D1EF-4591-AB3C-93D06BE701EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K21971977",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K21971977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22976",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.610",
      "lastModified" : "2024-11-21T05:51:03.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP Advanced WAF and ASM version 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and all 12.1.x versions, when the BIG-IP ASM system processes WebSocket requests with JSON payloads, an unusually large number of parameters can cause excessive CPU usage in the BIG-IP ASM bd process. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP Advanced WAF y ASM versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores 15.1.2, versiones 14.1.x anteriores a 14.1.3.1, versiones 13.1.x anteriores a 13.1.3.6, y todas las versiones 12.1.x, cuando el sistema BIG-IP ASM procesa las peticiones de WebSocket con cargas útiles JSON, una cantidad inusualmente grande de parámetros puede causar un uso excesivo de la CPU en el proceso bd de BIG-IP ASM.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "322AA283-E494-45E0-975E-2725E2FCC2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "BF641654-BDC0-4483-B6BA-D5566427E5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "6E0224A2-82E3-459A-8BEC-A2FC7B526230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "24B9D974-3C1E-4467-A844-F9FDCD39A7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K88230177",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K88230177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22979",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.673",
      "lastModified" : "2024-11-21T05:51:03.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.2.8, 13.1.x before 13.1.3.5, and all 12.1.x versions, a reflected Cross-Site Scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility when Fraud Protection Service is provisioned and allows an attacker to execute JavaScript in the context of the current logged-in user. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1, versiones 15.1.x anteriores a 15.1.1, versiones 14.1.x anteriores a 14.1.2.8, versiones 13.1.x anteriores a 13.1.3.5 y todas las versiones de 12.1.x, una vulnerabilidad de tipo Cross-Site Scripting (XSS) reflejado se presenta en una página no revelada de la utilidad de Configuración de BIG-IP cuando Fraud Protection Service es aprovisionado y permite a un atacante ejecutar JavaScript en el contexto del usuario que ha iniciado sesión actualmente.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "92233BA4-276B-46F4-94E2-423B8EB2074D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "874C243A-5A16-4942-AE90-A1B0D4078192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "C0F7F86F-EB88-44C8-83A4-2FC48CF39B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "3F3F98DD-C142-4030-AD11-A3129D5FFEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "151ED6D1-AA85-4213-8F3A-8167CBEC4721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "29AE9C3B-C87C-4D48-8C74-A25CE73C3C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "81A56F9E-5939-4252-8643-0F768AE39E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "60500DD5-0163-40B8-961B-64E1634B456F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "1247022A-F95F-4DF6-87AC-2E6757B01DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "322AA283-E494-45E0-975E-2725E2FCC2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "6DED2933-E11F-4C59-9DEC-9C8A563EB324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "89BDE0D7-10DF-4A47-8127-2674861F5D9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "AA0EA8E7-D84B-4C28-8D90-9A1EF9F6778F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "F7034BE5-23A6-47FA-9D80-3F3CF29DA2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "5D5AA99B-08E7-4959-A3B4-41AA527B4B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "46362DA5-7B1C-4944-9B16-7C46FCB091EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "350E17D3-C6D3-407F-B413-0D3D07A9A735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "4B62CF9F-F861-4AA3-9B2C-EDDA465BA06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "F491CF7C-EC9A-4413-9B84-459FE83E0AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "9DC86A5F-C793-4848-901F-04BFB57A07F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "FD000EE7-2559-4D41-8DFD-2358F24EA804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "AF90FBA3-69FA-4053-A749-E7F635A284C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "4770A77A-13EF-4E35-B006-48018F617FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "D54A135F-CD1E-41AD-82C3-F15A21AA87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "A4AFCA70-BF3B-41DA-B0DE-03E91F3B372A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "A76C1855-461C-4539-98CD-C22363B8AFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "FDD7AFF9-61D8-4D1B-BAD6-F74AD0CD364E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "C3B360C4-C9E2-4889-ADD5-3482E69BA8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E42E5C6-2E8F-4879-A5A9-3FE8422D0445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "6E3A8E8E-E758-43F1-889B-58B171DBCE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "6B51EF9A-7E41-4932-8FC5-CF4A056AD017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "63956262-A3D2-4D99-B710-E924277732DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "3448CBCB-D42E-4DAA-A52F-4225B2EB022A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "55C2EC23-E78F-4447-BACF-21FC36ABF155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "E25DC6CD-8A17-4C18-A8DA-CC7BD131812D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "786C0192-BC78-463F-8305-E890F63F153B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "61441082-FDA0-485E-B945-E6216DCCED43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "B7466098-C689-4E4B-879F-0433A020FDBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "945A19E8-51EB-42FE-9BF1-12DAC78B5286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "BA52F4CD-599A-4FAB-B172-80156A9A409D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "3798475B-3AA3-4DA2-A933-D49024C5C8C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "DAB5474D-11C7-4CA1-9386-8F12FD95CCB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "574397F4-0234-48D3-B024-D7963A41E21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EB5007D0-BBDB-4D74-9C88-98FBA74757D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "CA7122D0-588F-4D3E-B4D7-086413255E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "50DCC8F9-3393-4131-9B85-EBC2F9EEF4D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "B5F5C326-1BCE-47FC-A334-B485C755AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "EB7047B3-A248-424C-98D8-A0DD99A86F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "B7725810-66D2-4460-A174-9F3BFAD966F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "FFDEE0E6-3A43-40C5-896B-A993CEC4A868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "75AB65FB-DC81-4F50-BC2A-BCAD1EC22635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "0E48624E-6D03-423A-9232-6847E4A0AAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "15439AAC-1535-4087-9170-C885716736F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EFD760FE-4347-4D36-B5C6-4009398060F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "505AA546-BE89-4BE2-8C6D-6E487716A429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "66B64305-66FB-4C99-BD1A-BFE7BE23EE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "FD2B708E-78D3-4016-9176-C364CBE20DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "4F9D19B2-1D89-4917-A82E-289EDE52C68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "65B76F53-7D8B-477E-8B6E-91AC0A9009FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "C30C3FE3-BBA8-4CE4-BEE7-82A24F64FE7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "8134C56F-5979-4501-99BC-40A9921EAAE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "240E6558-C486-4FEB-A7AC-CCB3692D4331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "E0319299-FCCE-4B8F-8DB5-83AF0C3D68D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "440C631C-1C66-4A26-BE28-D3D1CCC4AD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "40F9AD60-A67D-444C-83BE-11D2F7814572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "DB4A0FA4-0B86-48F9-BDC7-DD11081B9C75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "730C6B1F-6C5F-4ED3-AE0B-1E8C4B273734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "21471F72-32D3-4D10-B261-731699D0619F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K63497634",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K63497634",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22980",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.737",
      "lastModified" : "2024-11-21T05:51:03.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Edge Client version 7.2.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, and 7.1.x-7.1.8.x before 7.1.8.5, an untrusted search path vulnerability in the BIG-IP APM Client Troubleshooting Utility (CTU) for Windows could allow an attacker to load a malicious DLL library from its current directory. User interaction is required to exploit this vulnerability in that the victim must run this utility on the Windows system. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En Edge Client versiones 7.2.x anteriores a 7.2.1.1, versiones 7.1.9.x anteriores 7.1.9.8 y versiones 7.1.x-7.1.8.x  anteriores a 7.1.8.5, una vulnerabilidad de ruta de búsqueda no confiable en BIG-IP APM Client Troubleshooting Utility (CTU) para Windows, podría permitir a un atacante cargar una biblioteca DLL maliciosa desde su directorio actual.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que la víctima debe ejecutar esta utilidad en el sistema Windows.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.5",
            "versionEndExcluding" : "7.1.8.5",
            "matchCriteriaId" : "8BBCE39D-283C-4D80-A83D-D4C94F2C4D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.9",
            "versionEndExcluding" : "7.1.9.8",
            "matchCriteriaId" : "6CB004A6-19ED-43E4-BE0B-76A742120B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.1",
            "versionEndExcluding" : "7.2.1.1",
            "matchCriteriaId" : "B60E89ED-5C0A-4B21-A5C5-2F902E4A2891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "2FBA9552-4645-4BFF-91A4-47B6A3414325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndIncluding" : "14.1.3",
            "matchCriteriaId" : "B176513C-86DD-4DA9-AB60-1D233091A9DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndIncluding" : "15.1.2",
            "matchCriteriaId" : "5EF8BF70-3688-4DEE-BF08-835293783996"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K29282483",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K29282483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22981",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.797",
      "lastModified" : "2024-11-21T05:51:03.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all versions of BIG-IP 12.1.x and 11.6.x, the original TLS protocol includes a weakness in the master secret negotiation that is mitigated by the Extended Master Secret (EMS) extension defined in RFC 7627. TLS connections that do not use EMS are vulnerable to man-in-the-middle attacks during renegotiation. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de BIG-IP 12.1.x y 11.6.x, el protocolo TLS original incluye una debilidad en la negociación del secreto maestro que es mitigada por la extensión Extended Master Secret (EMS) definida en RFC 7627. Las conexiones TLS que no utilizan EMS son vulnerables a ataques man-in-the-middle durante la renegociación.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "2FBA9552-4645-4BFF-91A4-47B6A3414325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "61D1B91F-8672-4947-AF9A-F635679D0FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "151ED6D1-AA85-4213-8F3A-8167CBEC4721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "D8A02AA8-E1CA-487B-AAF3-9AD3206D417E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "322AA283-E494-45E0-975E-2725E2FCC2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "C3787453-ECE9-4958-8FD8-8A43A9F86077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "5D5AA99B-08E7-4959-A3B4-41AA527B4B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "05ED802A-A8A0-4E96-AB45-811A98AA11C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "9DC86A5F-C793-4848-901F-04BFB57A07F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "B15992E6-85B6-4E62-A284-FE4B78F5F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "70F9B5A0-0EF7-4D2E-B8DF-EA3508BF4B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E42E5C6-2E8F-4879-A5A9-3FE8422D0445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "8376922B-0D04-4E5D-BADE-0D6AC23A4696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "55C2EC23-E78F-4447-BACF-21FC36ABF155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "0471086D-B70E-4B87-862E-01FB99B0D5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "945A19E8-51EB-42FE-9BF1-12DAC78B5286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "CD3D5803-35A0-4FF7-9AD3-E345C53A18FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EB5007D0-BBDB-4D74-9C88-98FBA74757D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "E20DFBD1-5469-4330-81B1-078D6487C01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "B7725810-66D2-4460-A174-9F3BFAD966F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "F92F2449-8A6E-431E-8CB1-5255D2464B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EFD760FE-4347-4D36-B5C6-4009398060F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "53F940F3-6CF4-48C8-BFBF-4FE9B3A26D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "65B76F53-7D8B-477E-8B6E-91AC0A9009FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "2B12C324-109D-42BB-82E9-702C946491BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "440C631C-1C66-4A26-BE28-D3D1CCC4AD2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K09121542",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K09121542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22982",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.860",
      "lastModified" : "2024-11-21T05:51:03.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP DNS and GTM version 13.1.x before 13.1.0.4, and all versions of 12.1.x and 11.6.x, big3d does not securely handle and parse certain payloads resulting in a buffer overflow. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP DNS y GTM versiones 13.1.x anteriores a 13.1.0.4, y en todas las versiones de 12.1.x y 11.6.x, big3d no maneja ni analiza de forma segura determinadas cargas útiles, resultando en un desbordamiento del búfer.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "55C2EC23-E78F-4447-BACF-21FC36ABF155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.0.4",
            "matchCriteriaId" : "B9A203E7-AF96-4160-88D8-B9FA5AEB039C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "CD3D5803-35A0-4FF7-9AD3-E345C53A18FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K72708443",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K72708443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22983",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.907",
      "lastModified" : "2024-11-21T05:51:03.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP AFM version 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, and 13.1.x before 13.1.3.5, authenticated users accessing the Configuration utility for AFM are vulnerable to a cross-site scripting attack if they attempt to access a maliciously-crafted URL. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP AFM versiones 15.1.x anteriores a 15.1.1, versiones 14.1.x anteriores a 14.1.3.1 y versiones 13.1.x  anteriores a 13.1.3.5, los usuarios autenticados que acceden a la utilidad de Configuración para AFM son vulnerables a un ataque de tipo cross-site scripting si intentan acceder a una URL diseñadas maliciosamente.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "29AE9C3B-C87C-4D48-8C74-A25CE73C3C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "86D94B31-6496-42B0-BA04-370C283C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "60500DD5-0163-40B8-961B-64E1634B456F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K76518456",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K76518456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22985",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T18:15:12.970",
      "lastModified" : "2024-11-21T05:51:04.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory. A malicious, authenticated VPN user may abuse this to perform a DoS attack against the APM. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP APM versiones 16.0.x anteriores a 16.0.1.1, bajo determinadas condiciones, al procesar tráfico VPN con APM, TMM consume memoria excesiva.&#xa0;Un usuario de VPN autenticado y malicioso puede abusar de esto para llevar a cabo un ataque de DoS contra APM.&#xa0;Nota: No son evaluadas unas versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.2",
            "matchCriteriaId" : "8999F566-9884-4CAA-BED7-8CF72F11E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.8",
            "matchCriteriaId" : "A76C1855-461C-4539-98CD-C22363B8AFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "24B9D974-3C1E-4467-A844-F9FDCD39A7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K88162221",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K88162221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22504",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-02-12T20:15:13.580",
      "lastModified" : "2024-11-21T05:50:14.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary code execution vulnerability on Micro Focus Operations Bridge Manager product, affecting versions 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10. The vulnerability could allow remote attackers to execute arbitrary code on an OBM server."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de código arbitraria en el producto Micro Focus Operations Bridge Manager, afectan a versiones 10.1x, 10.6x, 2018.05, 2018.11, 2019.05, 2019.11, 2020.05, 2020.10.&#xa0;La vulnerabilidad podría permitir a atacantes remotos ejecutar código arbitrario en un servidor OBM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC390D2-CF75-404F-9673-89B37DE82D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E38A260-424C-4B73-A502-75394F64AEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0B3E96-BEE7-4F04-8FB7-633C42DEBEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DEC1A77-DFF5-4E35-BD25-9ED3EEC77702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.61:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9328132A-CB29-4252-B0DE-32E1AE402526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.62:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C163191-6D2E-4403-B416-ED29174B5781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:10.63:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C552EF-2ADA-4293-8DA6-8EFF201FD2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2018.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A2E37C-69DC-42AC-BE72-475561249F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2018.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F169AF11-4F4D-4A17-8808-8F5E5822D17C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2019.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B2691B-246F-4305-943F-392062AD7C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2019.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD9DF2A-E5D3-48DD-8D0A-CD2C333E5354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2020.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F113173-2ECD-4FF6-A664-A9AABFD448CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2020.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAFEEDA-F0AB-44F3-BDB9-3413FE9C53D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03777855",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03777855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22977",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T20:15:13.673",
      "lastModified" : "2024-11-21T05:51:03.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP version 16.0.0-16.0.1 and 14.1.2.4-14.1.3, cooperation between malicious HTTP client code and a malicious server may cause TMM to restart and generate a core file. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.0-16.0.1 y 14.1.2.4-14.1.3, una cooperación entre el código de cliente HTTP malicioso y un servidor malicioso puede hacer a TMM reinicie y genere un archivo core.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D27EBC7C-4EE1-4574-9AFD-2868611D80B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "86D94B31-6496-42B0-BA04-370C283C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "BF641654-BDC0-4483-B6BA-D5566427E5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "2F630B15-9652-477D-ACDE-BB846FAA2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "6FB29F87-8F6B-452A-9A9B-B7680C37CE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D288196E-3937-4531-9571-07893BEE7296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "95CD946B-331A-44F5-8F64-26411E909F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "91346E36-BACA-4562-9903-9E4B7EA74834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "AD6C7A28-1569-44B0-BE80-7472F5ED5059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "1C78B434-86B3-49AE-B93D-3A8F743DE00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "B6D8C63D-D669-414C-8AF1-2F3A993D6B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "72914086-C966-46CF-AE19-6F70EA05FEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "201CB36E-0ED5-4B8E-9FCC-67643C99F3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "E4ADE8D9-D1EF-4591-AB3C-93D06BE701EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K14693346",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K14693346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22978",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T20:15:13.737",
      "lastModified" : "2024-11-21T05:51:03.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP version 16.0.x before 16.0.1, 15.1.x before 15.1.1, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.5, and all 12.1.x and 11.6.x versions, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of BIG-IP if the victim user is granted the admin role. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1, versiones 15.1.x anteriores a 15.1.1, versiones 14.1.x anteriores a 14.1.3.1, versiones 13.1.x anteriores a 13.1.3.5 y todas las versiones 12.1.xy 11.6.x, endpoints no divulgados en iControl REST permiten un ataque de tipo XSS reflejado, lo que podría conllevar a un compromiso completo de BIG-IP si el usuario víctima se otorgaba el rol de administrador.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "2FBA9552-4645-4BFF-91A4-47B6A3414325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "92233BA4-276B-46F4-94E2-423B8EB2074D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D27EBC7C-4EE1-4574-9AFD-2868611D80B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "C0F7F86F-EB88-44C8-83A4-2FC48CF39B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "3F3F98DD-C142-4030-AD11-A3129D5FFEA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "61D1B91F-8672-4947-AF9A-F635679D0FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "151ED6D1-AA85-4213-8F3A-8167CBEC4721"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "29AE9C3B-C87C-4D48-8C74-A25CE73C3C97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "86D94B31-6496-42B0-BA04-370C283C4641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "60500DD5-0163-40B8-961B-64E1634B456F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "1247022A-F95F-4DF6-87AC-2E6757B01DC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "D8A02AA8-E1CA-487B-AAF3-9AD3206D417E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "322AA283-E494-45E0-975E-2725E2FCC2DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "6DED2933-E11F-4C59-9DEC-9C8A563EB324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "BF641654-BDC0-4483-B6BA-D5566427E5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "AA0EA8E7-D84B-4C28-8D90-9A1EF9F6778F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "F7034BE5-23A6-47FA-9D80-3F3CF29DA2B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "C3787453-ECE9-4958-8FD8-8A43A9F86077"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "5D5AA99B-08E7-4959-A3B4-41AA527B4B22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "46362DA5-7B1C-4944-9B16-7C46FCB091EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "2F630B15-9652-477D-ACDE-BB846FAA2D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "4B62CF9F-F861-4AA3-9B2C-EDDA465BA06A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "F491CF7C-EC9A-4413-9B84-459FE83E0AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "05ED802A-A8A0-4E96-AB45-811A98AA11C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "9DC86A5F-C793-4848-901F-04BFB57A07F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "FD000EE7-2559-4D41-8DFD-2358F24EA804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "6FB29F87-8F6B-452A-9A9B-B7680C37CE43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "4770A77A-13EF-4E35-B006-48018F617FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "D54A135F-CD1E-41AD-82C3-F15A21AA87BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "B15992E6-85B6-4E62-A284-FE4B78F5F373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E5552A3-91CD-4B97-AD33-4F1FB4C8827A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "A4AFCA70-BF3B-41DA-B0DE-03E91F3B372A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "FDD7AFF9-61D8-4D1B-BAD6-F74AD0CD364E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "C3B360C4-C9E2-4889-ADD5-3482E69BA8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "70F9B5A0-0EF7-4D2E-B8DF-EA3508BF4B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "2E42E5C6-2E8F-4879-A5A9-3FE8422D0445"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "6E3A8E8E-E758-43F1-889B-58B171DBCE18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "D288196E-3937-4531-9571-07893BEE7296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "63956262-A3D2-4D99-B710-E924277732DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "3448CBCB-D42E-4DAA-A52F-4225B2EB022A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "8376922B-0D04-4E5D-BADE-0D6AC23A4696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "55C2EC23-E78F-4447-BACF-21FC36ABF155"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "E25DC6CD-8A17-4C18-A8DA-CC7BD131812D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "95CD946B-331A-44F5-8F64-26411E909F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "61441082-FDA0-485E-B945-E6216DCCED43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "B7466098-C689-4E4B-879F-0433A020FDBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "0471086D-B70E-4B87-862E-01FB99B0D5D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "945A19E8-51EB-42FE-9BF1-12DAC78B5286"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "BA52F4CD-599A-4FAB-B172-80156A9A409D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "91346E36-BACA-4562-9903-9E4B7EA74834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "DAB5474D-11C7-4CA1-9386-8F12FD95CCB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "574397F4-0234-48D3-B024-D7963A41E21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "CD3D5803-35A0-4FF7-9AD3-E345C53A18FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EB5007D0-BBDB-4D74-9C88-98FBA74757D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "CA7122D0-588F-4D3E-B4D7-086413255E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "AD6C7A28-1569-44B0-BE80-7472F5ED5059"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "B5F5C326-1BCE-47FC-A334-B485C755AAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "EB7047B3-A248-424C-98D8-A0DD99A86F50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "E20DFBD1-5469-4330-81B1-078D6487C01D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "B7725810-66D2-4460-A174-9F3BFAD966F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "FFDEE0E6-3A43-40C5-896B-A993CEC4A868"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "1C78B434-86B3-49AE-B93D-3A8F743DE00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "0E48624E-6D03-423A-9232-6847E4A0AAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "15439AAC-1535-4087-9170-C885716736F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "F92F2449-8A6E-431E-8CB1-5255D2464B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "EFD760FE-4347-4D36-B5C6-4009398060F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "505AA546-BE89-4BE2-8C6D-6E487716A429"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "B6D8C63D-D669-414C-8AF1-2F3A993D6B75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "FD2B708E-78D3-4016-9176-C364CBE20DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "4F9D19B2-1D89-4917-A82E-289EDE52C68F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "53F940F3-6CF4-48C8-BFBF-4FE9B3A26D31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "65B76F53-7D8B-477E-8B6E-91AC0A9009FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "C30C3FE3-BBA8-4CE4-BEE7-82A24F64FE7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "72914086-C966-46CF-AE19-6F70EA05FEF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "240E6558-C486-4FEB-A7AC-CCB3692D4331"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "E0319299-FCCE-4B8F-8DB5-83AF0C3D68D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "2B12C324-109D-42BB-82E9-702C946491BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "440C631C-1C66-4A26-BE28-D3D1CCC4AD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.5",
            "matchCriteriaId" : "40F9AD60-A67D-444C-83BE-11D2F7814572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "201CB36E-0ED5-4B8E-9FCC-67643C99F3CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.1",
            "matchCriteriaId" : "730C6B1F-6C5F-4ED3-AE0B-1E8C4B273734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1",
            "matchCriteriaId" : "21471F72-32D3-4D10-B261-731699D0619F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K87502622",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K87502622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22984",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-02-12T20:15:13.800",
      "lastModified" : "2024-11-21T05:51:04.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP Advanced WAF and ASM version 15.1.x before 15.1.0.2, 15.0.x before 15.0.1.4, 14.1.x before 14.1.2.5, 13.1.x before 13.1.3.4, 12.1.x before 12.1.5.2, and 11.6.x before 11.6.5.2, when receiving a unauthenticated client request with a maliciously crafted URI, a BIG-IP Advanced WAF or ASM virtual server configured with a DoS profile with Proactive Bot Defense (versions prior to 14.1.0), or a Bot Defense profile (versions 14.1.0 and later), may subject clients and web servers to Open Redirection attacks. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP Advanced WAF y ASM versiones 15.1.x  anteriores a 15.1.0.2, versiones 15.0.x anteriores a 15.0.1.4, versiones 14.1.x  anteriores a 14.1.2.5, versiones 13.1.x anteriores a 13.1.3.4, versiones 12.1.x  anteriores a 12.1.5.2 y  versiones 11.6.x anteriores a 11.6.5.2, cuando se recibe una petición de cliente no autenticado con un URI diseñado maliciosamente, un servidor virtual de BIG-IP Advanced WAF o ASM configurado con un perfil DoS con Proactive Bot Defense (versiones anteriores a 14.1.0) o un perfil Bot Defense (versiones 14.1.0 y posteriores) puede someter a los clientes y servidores web a ataques de redireccionamiento abierto.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development  (EoSD)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.2",
            "matchCriteriaId" : "E64263B7-7BE1-472E-9130-7BC8F2932683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.2",
            "matchCriteriaId" : "694C630B-5342-4C6C-A0FA-050B9C76936D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.4",
            "matchCriteriaId" : "EC400989-FE65-4DEC-B9DD-7BEF6EB72DC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.5",
            "matchCriteriaId" : "925D0924-8CEB-4F06-B1ED-4ACA34D24201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.1.4",
            "matchCriteriaId" : "7FBF20C1-5B3C-4DC0-B6F7-4DB0205BF2B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.0.2",
            "matchCriteriaId" : "D003688C-AB35-4169-85E9-1B2DDF399DB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.2",
            "matchCriteriaId" : "8999F566-9884-4CAA-BED7-8CF72F11E6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.2",
            "matchCriteriaId" : "91BF72A9-EB50-4315-B956-5926967DCC46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.4",
            "matchCriteriaId" : "4AEE0B76-3F8E-420A-9589-BF3FDB942DEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.2.5",
            "matchCriteriaId" : "DA9E370F-2A37-4612-91DD-2B1FD7EECCE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.0.1.4",
            "matchCriteriaId" : "E6C4B56F-D022-4268-9D78-6E4D12AE9215"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.0.2",
            "matchCriteriaId" : "53CA3EC2-CE36-4388-A7A9-4311AD80A8B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K33440533",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K33440533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26751",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T21:15:12.900",
      "lastModified" : "2024-11-21T05:56:47.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NeDi 1.9C allows an authenticated user to perform a SQL Injection in the Monitoring History function on the endpoint /Monitoring-History.php via the det HTTP GET parameter. This allows an attacker to access all the data in the database and obtain access to the NeDi application."
      }, {
        "lang" : "es",
        "value" : "NeDi versión 1.9C, permite a un usuario autenticado llevar a cabo una inyección SQL en la función Monitoring History en el endpoint /Monitoring-History.php por medio del parámetro GET HTTP det.&#xa0;Esto permite a un atacante acceder a todos los datos de la base de datos y conseguir acceso a la aplicación NeDi"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nedi:nedi:1.9c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BB6C22-9477-4233-874F-7FA0717789AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26752",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T21:15:12.963",
      "lastModified" : "2024-11-21T05:56:47.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NeDi 1.9C allows an authenticated user to execute operating system commands in the Nodes Traffic function on the endpoint /Nodes-Traffic.php via the md or ag HTTP GET parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data."
      }, {
        "lang" : "es",
        "value" : "NeDi versión 1.9C, permite a un usuario autenticado ejecutar comandos del sistema operativo en la función Nodes Traffic en el endpoint /Nodes-Traffic.php por medio del parámetro GET HTTP md o ag.&#xa0;Esto permite a un atacante conseguir acceso al sistema operativo donde está instalado NeDi y todos los datos de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nedi:nedi:1.9c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BB6C22-9477-4233-874F-7FA0717789AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26753",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-12T21:15:13.027",
      "lastModified" : "2024-11-21T05:56:48.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NeDi 1.9C allows an authenticated user to inject PHP code in the System Files function on the endpoint /System-Files.php via the txt HTTP POST parameter. This allows an attacker to obtain access to the operating system where NeDi is installed and to all application data."
      }, {
        "lang" : "es",
        "value" : "NeDi versión 1.9C, permite a un usuario autenticado inyectar código PHP en la función System Files en el endpoint /System-Files.php por medio del parámetro POST HTTP txt.&#xa0;Esto permite a un atacante conseguir acceso al sistema operativo donde está instalado NeDi y todos los datos de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nedi:nedi:1.9c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0BB6C22-9477-4233-874F-7FA0717789AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/nedi-multiple-vulnerabilities-i/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-13T01:15:12.733",
      "lastModified" : "2024-11-21T05:57:35.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the management interface on TP-Link Archer C5v 1.7_181221 devices, credentials are sent in a base64 format over cleartext HTTP."
      }, {
        "lang" : "es",
        "value" : "En la interfaz de administración de los dispositivos TP-Link Archer C5v versión 1.7_181221, unas credenciales son enviadas en formato base64 por medio de HTTP de texto sin cifrar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_c5v_firmware:1.7_181221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EB089-92A9-4619-A697-87E63F2AA080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_c5v:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3281C72-92A0-48EB-856D-ACD1C5BC122A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gokay.org/tp-link-archer-c5v-base64-cookie/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gokay.org/tp-link-archer-c5v-base64-cookie/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-13T01:15:12.797",
      "lastModified" : "2024-11-21T05:57:35.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link Archer C5v 1.7_181221 devices allows remote attackers to retrieve cleartext credentials via [USER_CFG#0,0,0,0,0,0#0,0,0,0,0,0]0,0 to the /cgi?1&5 URI."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TP-Link Archer C5v versión 1.7_181221, permiten a atacantes remotos recuperar credenciales de texto sin cifrar por medio de [USER_CFG#0,0,0,0,0,0 # 0,0,0,0,0,0] 0,0 al URI /cgi?1&amp;5"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_c5v_firmware:1.7_181221:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64EB089-92A9-4619-A697-87E63F2AA080"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_c5v:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3281C72-92A0-48EB-856D-ACD1C5BC122A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gokay.org/tp-links-archer-c5v-improper-authorization/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gokay.org/tp-links-archer-c5v-improper-authorization/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27212",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-14T03:15:12.957",
      "lastModified" : "2024-11-21T05:57:36.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp. This is related to schema_init.c and checkTime."
      }, {
        "lang" : "es",
        "value" : "En OpenLDAP versiones hasta 2.4.57 y versiones 2.5.x hasta 2.5.1alpha, puede ocurrir un fallo de aserción en slapd en la función issuerAndThisUpdateCheck por medio de un paquete diseñado, resultando en una denegación de servicio (salida del demonio) por medio de una marca de tiempo corta.&#xa0;Esto está relacionado con el archivo schema_init.c y checkTime"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.57",
            "matchCriteriaId" : "516467D7-7498-4C65-B2C3-C36F5591749E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.5.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "40E051DB-A915-45D6-AB96-149FC5FFAF7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openldap:openldap:2.5.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FC4896-931B-4B04-9401-7A85F3F0CE8C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.openldap.org/show_bug.cgi?id=9454",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4860",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.openldap.org/show_bug.cgi?id=9454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openldap.org/openldap/openldap/-/commit/3539fc33212b528c56b716584f2c2994af7c30b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.openldap.org/openldap/openldap/-/commit/9badb73425a67768c09bcaed1a9c26c684af6c30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-14T04:15:12.777",
      "lastModified" : "2024-11-21T05:57:04.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is mishandled by preProcess in Text2html.php, because bespoke use of \\x00\\x00\\x00 and \\x01\\x01\\x01 interferes with XSS defenses."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de tipo XSS en Horde Groupware Webmail Edition versiones hasta 5.2.22 (donde es usada la biblioteca Horde_Text_Filter versiones anteriores a 2.3.7).&#xa0;El atacante puede enviar un mensaje de correo electrónico de texto plano, con JavaScript codificado como un enlace o correo electrónico que es manejado apropiadamente por la función preProcess en el archivo Text2html.php, porque el uso personalizado de \\x00\\x00\\x00 y \\x01\\x01\\x01 interfiere con las defensas de XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:horde:groupware:*:*:*:*:webmail:*:*:*",
            "versionEndIncluding" : "5.2.22",
            "matchCriteriaId" : "9B749CF0-3995-4FFF-BA34-35D7C889AD78"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162187/Webmail-Edition-5.2.22-XSS-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162194/Horde-Groupware-Webmail-5.2.22-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/webmail/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.horde.org/archives/announce/2021/001298.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.alexbirnberg.com/horde-xss.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.horde.org/apps/webmail",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162187/Webmail-Edition-5.2.22-XSS-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162194/Horde-Groupware-Webmail-5.2.22-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/horde/webmail/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.horde.org/archives/announce/2021/001298.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://www.alexbirnberg.com/horde-xss.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.horde.org/apps/webmail",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27213",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-14T04:15:12.837",
      "lastModified" : "2024-11-21T05:57:36.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "config.py in pystemon before 2021-02-13 allows code execution via YAML deserialization because SafeLoader and safe_load are not used."
      }, {
        "lang" : "es",
        "value" : "El archivo config.py en pystemon antes del 13-02-2021, permite una ejecución de código por medio de la deserialización YAML porque las funciones SafeLoader y safe_load no son usadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pystemon_project:pystemon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-02-13",
            "matchCriteriaId" : "BC93F6B1-1E40-4ED3-ADD8-231CD5BF114C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cvandeplas/pystemon/commit/dbeb87afefdb63de2f4cff69b6f10c5965d14b54",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.huntr.dev/bounties/1-other-pystemon/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cvandeplas/pystemon/commit/dbeb87afefdb63de2f4cff69b6f10c5965d14b54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.huntr.dev/bounties/1-other-pystemon/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21702",
      "sourceIdentifier" : "security@php.net",
      "published" : "2021-02-15T04:15:12.673",
      "lastModified" : "2024-11-21T05:48:51.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In PHP versions 7.3.x below 7.3.27, 7.4.x below 7.4.15 and 8.0.x below 8.0.2, when using SOAP extension to connect to a SOAP server, a malicious SOAP server could return malformed XML data as a response that would cause PHP to access a null pointer and thus cause a crash."
      }, {
        "lang" : "es",
        "value" : "En PHP versiones 7.3.x por debajo de 7.3.27, 7.4.x por debajo de 7.4.15 y 8.0.x por debajo de 8.0.2, cuando se usa la extensión SOAP para conectarse a un servidor SOAP, un servidor SOAP malicioso podría devolver datos XML malformados como respuesta eso haría que PHP acceda a un puntero null y, por tanto, causaría un bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@php.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@php.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.27",
            "matchCriteriaId" : "21A1DC5C-CFAD-4A37-8343-8F18F446ED45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.15",
            "matchCriteriaId" : "8043349D-1EEB-46ED-9DC4-7D1D7B60BC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php:php:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "D70FC63A-BC22-491B-836F-7FDA82D61908"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:clustered_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FE996B1-6951-4F85-AA58-B99A379D2163"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.5.0",
            "matchCriteriaId" : "C88D46AF-459D-4917-9403-0F63FEC83512"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.php.net/bug.php?id=80672",
        "source" : "security@php.net",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00008.html",
        "source" : "security@php.net",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-23",
        "source" : "security@php.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0005/",
        "source" : "security@php.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4856",
        "source" : "security@php.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@php.net",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-14",
        "source" : "security@php.net",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.php.net/bug.php?id=80672",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23336",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-15T13:15:12.433",
      "lastModified" : "2025-12-17T22:15:55.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package python/cpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter."
      }, {
        "lang" : "es",
        "value" : "El paquete python/cpython desde versiones 0 y anteriores a 3.6.13, desde versiones 3.7.0 y anteriores a 3.7.10, desde versiones 3.8.0 y anteriores a 3.8.8, desde versiones 3.9.0 y anteriores a 3.9.2, son vulnerables al envenenamiento de caché web por medio de urllib.parse.parse_qsl y urllib.parse.parse_qs usando un vector llamado encubrimiento de parámetros.&#xa0;Cuando el atacante puede separar los parámetros de la consulta usando un punto y coma (;), pueden causar una diferencia en la interpretación de la petición entre el proxy (que se ejecuta con la configuración predeterminada) y el servidor.&#xa0;Esto puede resultar en que las peticiones maliciosas se almacenen en caché como completamente seguras, ya que el proxy normalmente no vería el punto y coma como un separador y, por lo tanto, no lo incluiría en una clave de caché de un parámetro sin clave"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.13",
            "matchCriteriaId" : "BB8842D9-B554-4B83-9E2E-0FAF292E448A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.10",
            "matchCriteriaId" : "EEB52F35-D464-4C26-A253-1B96B2A4921A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "8F40C09A-B9FD-40D7-B0A3-89C13DAD040B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.2",
            "matchCriteriaId" : "7ECC4038-73C0-4AEA-99C2-3CFD7C283ABD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:inventory_collect_tool:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C13438-3C64-40A6-AA0D-327CB722888D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "2.2.19",
            "matchCriteriaId" : "D7BD0710-9119-4813-B605-AD61E46EC450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.13",
            "matchCriteriaId" : "83059A91-A193-402A-966C-852841B3B84A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.7",
            "matchCriteriaId" : "E9318762-F84D-4012-A969-BAD7E7D7BC66"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49ACFC73-A509-4D1C-8FC3-F68F495AB055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7B49D71-6A31-497A-B6A9-06E84F086E7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/19/4",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/01/2",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/24297",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00030.html",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EPYWWFDV22CJ5AOH5VCE72DOASZZ255/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YKKDLXL3UEZ3J426C2XTBS63AHE46SM/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46N6A52EGSXHJYCZWVMBJJIH4NWIV2B5/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZTM7KLHFCE3LWSEVO2NAFLUHMGYMCRY/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHQDU7NXA7EWAE4W7VO6MURVJIULEPPR/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJXCMHLY7H3FIYLE4OKDYUILU2CCRUCZ/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVNH6Z24IG3E67ZCQGGJ46FZB4XFLQNZ/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNUN5SOMFL2BBKP6ZAICIIUPQKZDMGYO/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJSCSN722JO2E2AGPWD4NTGVELVRPB4R/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OAGSWNGZJ6HQ5ISA67SNMK3CJRKICET7/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFTELUMWZE3KV3JB2H5EE6VFRZFRD5MV/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2LSKBEFI5SYEY5FM6ICZVZM5WRQUCS4/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-04",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0004/",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/blog/cache-poisoning-in-popular-open-source-packages/",
        "source" : "report@snyk.io",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/19/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/24297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EPYWWFDV22CJ5AOH5VCE72DOASZZ255/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3YKKDLXL3UEZ3J426C2XTBS63AHE46SM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/46N6A52EGSXHJYCZWVMBJJIH4NWIV2B5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FONHJIOZOFD7CD35KZL6SVBUTMBPGZGA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HCQTCSP6SCVIYNIRUJC5X7YBVUHPLSC4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZTM7KLHFCE3LWSEVO2NAFLUHMGYMCRY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHQDU7NXA7EWAE4W7VO6MURVJIULEPPR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KJXCMHLY7H3FIYLE4OKDYUILU2CCRUCZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LVNH6Z24IG3E67ZCQGGJ46FZB4XFLQNZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MNUN5SOMFL2BBKP6ZAICIIUPQKZDMGYO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MP572OLHMS7MZO4KUPSCIMSZIA5IZZ62/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N6VXJZSZ6N64AILJX4CTMACYGQGHHD5C/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJSCSN722JO2E2AGPWD4NTGVELVRPB4R/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NODWHDIFBQE5RU5PUWUVE47JOT5VCMJ2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OAGSWNGZJ6HQ5ISA67SNMK3CJRKICET7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RSLQD5CCM75IZGAMBDGUZEATYU5YSGJ7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SGIY6I4YS3WOXAK4SXKIEOC2G4VZKIR7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFTELUMWZE3KV3JB2H5EE6VFRZFRD5MV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W2LSKBEFI5SYEY5FM6ICZVZM5WRQUCS4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/blog/cache-poisoning-in-popular-open-source-packages/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-UPSTREAM-PYTHONCPYTHON-1074933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23337",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-15T13:15:12.560",
      "lastModified" : "2024-11-21T05:51:31.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Lodash anteriores a la 4.17.21 son vulnerables a la inyección de comandos a través de la función de plantilla"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lodash:lodash:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.17.21",
            "matchCriteriaId" : "D51E96E4-8E0F-4B1D-ACAD-DB726036467F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9A061-2421-426D-9854-0A4E55B2961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95EDC3D-54BB-48F9-82F2-7CCF335FCA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72B735F-4E52-484A-9C2C-23E6E2070385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B36A1D4-F391-4EE3-9A65-0A10568795BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55116032-AAD1-4FEA-9DA8-2C4CBD3D3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0275F820-40BE-47B8-B167-815A55DF578E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_extensibility_workbench:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8E145E-1DF0-4B18-B625-F04DF71F6ACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_extensibility_workbench:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EABAFD73-150F-4DFE-B721-29EB4475D979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_extensibility_workbench:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A45D47B-3401-49CF-92EE-79D007D802A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8420D4-AAF1-44AA-BF28-48EE3ED310B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB80AC5-35F2-4703-AD93-416B46972EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DAAEFF-AB4A-4D0D-8C86-D2F2811B53B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E14324D-B9EE-4C06-ACC7-255189ED6300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBB60F-6EAB-4AE5-B777-5044C657FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185C1EA-71E6-4972-8637-08A33CC00841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868E7C46-7E45-4CFA-8A25-7CBFED912096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC7DB86F-3FAA-43C1-9C44-7CC5FB34419E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_design_studio:7.4.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040DA31B-2A0C-46F6-8EDF-9B88F9FB0F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062E4E7C-55BB-46F3-8B61-5A663B565891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_border_controller:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C416FD3-2E2F-4BBC-BD5F-F896825883F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_border_controller:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D886339E-EDB2-4879-BD54-1800E4CA9CAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_communications_broker:3.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348EEE70-E114-4720-AAAF-E77DE5C9A2D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_communications_broker:3.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DCDD73B-57B1-4580-B922-5662E3AC13B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55F091C7-0869-4FD6-AC73-DA697D990304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_crime_and_compliance_management_studio:8.0.8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D134C60-F9E2-46C2-8466-DB90AD98439E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9A32B-B776-4704-818D-977B4B20D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6989178B-A3D5-4441-A56C-6C639D4759DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.1",
            "matchCriteriaId" : "D1298AA2-0103-4457-B260-F976B78468E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.12.0",
            "versionEndIncluding" : "17.12.11",
            "matchCriteriaId" : "8B1C88FD-C2EC-4C96-AC7E-6F95C8763B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndIncluding" : "18.8.12",
            "matchCriteriaId" : "301E7158-9090-467C-B3B4-30A8DB3B395D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.12.0",
            "versionEndIncluding" : "19.12.11",
            "matchCriteriaId" : "BBEFACB1-C8EA-492B-8F85-A564DB363C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.12.0",
            "versionEndIncluding" : "20.12.7",
            "matchCriteriaId" : "E6B70E72-B9FC-4E49-8EDD-29C7E14F5792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "08FA59A8-6A62-4B33-8952-D6E658F8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10864586-270E-4ACF-BDCC-ECFCD299305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38340E3C-C452-4370-86D4-355B6B4E0A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFAEA84-E376-40A2-8C9F-3E0676FEC527"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197D0D80-6702-4B61-B681-AFDBA7D69067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:system_manager:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0968FEE3-7685-4747-AEC0-DB6E0F35E256"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "C89891C1-DFD7-4E1F-80A9-7485D86A15B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4664B195-AF14-4834-82B3-0B2C98020EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "75BC588E-CDF0-404E-AD61-02093A1DF343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0006/",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-LODASH-1040724",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lodash/lodash/blob/ddfd9b11a0126db2302cb70ec9973b66baec0975/lodash.js%23L14851",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGFUJIONWEBJARS-1074932",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBLODASH-1074931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-LODASH-1040724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25296",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T13:15:12.683",
      "lastModified" : "2025-11-03T15:14:53.967",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server."
      }, {
        "lang" : "es",
        "value" : "Nagios XI versión xi-5.7.5, esta afectada por una inyección de comandos del Sistema Operativo.&#xa0;La vulnerabilidad se presenta en el archivo /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php debido a un saneamiento inapropiado de la entrada controlada por el usuario autenticado mediante una única petición HTTP, que puede conllevar a una inyección de comandos del el servidor de Nagios XI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-18",
      "cisaActionDue" : "2022-02-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Nagios XI OS Command Injection",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.6",
            "versionEndIncluding" : "5.7.5",
            "matchCriteriaId" : "F16363BB-D503-4020-A9FA-D78B0ABE217C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nagios.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170924/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fastly.com/blog/anatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://nagios.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170924/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fastly.com/blog/anatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25296",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25297",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T13:15:12.793",
      "lastModified" : "2025-11-03T15:13:58.033",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server."
      }, {
        "lang" : "es",
        "value" : "Nagios XI versión xi-5.7.5, esta afectada por una inyección de comandos del Sistema Operativo.&#xa0;La vulnerabilidad se presenta en el archivo /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php debido a un saneamiento inapropiado de la entrada controlada por el usuario autenticado mediante una única petición HTTP, lo que puede conllevar a una inyección de comandos del sistema operativo en el servidor de Nagios XI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-18",
      "cisaActionDue" : "2022-02-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Nagios XI OS Command Injection",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.6",
            "versionEndIncluding" : "5.7.5",
            "matchCriteriaId" : "F16363BB-D503-4020-A9FA-D78B0ABE217C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nagios.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170924/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fastly.com/blog/anatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://nagios.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170924/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fastly.com/blog/anatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25297",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25298",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T13:15:12.857",
      "lastModified" : "2025-11-03T15:13:53.253",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled input by a single HTTP request, which can lead to OS command injection on the Nagios XI server."
      }, {
        "lang" : "es",
        "value" : "Nagios XI versión xi-5.7.5, esta afectada por una inyección de comandos del Sistema Operativo.&#xa0;La vulnerabilidad se presenta en el archivo /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php debido a un saneamiento inapropiado de la entrada controlada por el usuario autenticado mediante una única petición HTTP, lo que puede conducir a una inyección de comandos del Sistema Operativo en el servidor de Nagios XI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-18",
      "cisaActionDue" : "2022-02-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Nagios XI OS Command Injection",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.6",
            "versionEndIncluding" : "5.7.5",
            "matchCriteriaId" : "F16363BB-D503-4020-A9FA-D78B0ABE217C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nagios.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170924/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fastly.com/blog/anatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://nagios.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170924/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.fastly.com/blog/anatomy-of-a-command-injection-cve-2021-25296-7-8-with-metasploit-module-and",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25298",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25299",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T13:15:12.920",
      "lastModified" : "2024-11-21T05:54:42.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when clicked by an admin user, can be used to steal his/her session cookies or it can be chained with the previous bugs to get one-click remote command execution (RCE) on the Nagios XI server."
      }, {
        "lang" : "es",
        "value" : "Nagios XI versión xi-5.7.5, esta afectada por una vulnerabilidad de tipo cross-site scripting (XSS).&#xa0;La vulnerabilidad se presenta en el archivo /usr/local/nagiosxi/html/admin/sshterm.php debido a un saneamiento inapropiado de la entrada controlada por el usuario.&#xa0;Una URL maliciosamente, cuando un usuario administrador hace clic en ella, puede ser usada para robar  las cookies de su sesión o puede ser encadenada con los bugs previos para obtener una ejecución de comandos remota (RCE) con un solo clic en el servidor de Nagios XI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:5.7.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBFAF29F-D022-4E72-85E6-4642752B2516"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nagios.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://nagios.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161561/Nagios-XI-5.7.5-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://assets.nagios.com/downloads/nagiosxi/versions.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/fs0c-sh/nagios-xi-5.7.5-bugs/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23338",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-15T16:15:15.263",
      "lastModified" : "2024-11-21T05:51:31.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package qlib. The workflow function in cli part of qlib was using an unsafe YAML load function."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete qlib.&#xa0;La función workflow en parte de la cli de qlib estaba usando una función de carga YAML no segura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:qlib:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579E772F-9A8F-4952-A2CC-02A2A5BCFE75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/418sec/huntr/pull/1329",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-PYTHON-QLIB-1054635",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/418sec/huntr/pull/1329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-PYTHON-QLIB-1054635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T17:15:13.073",
      "lastModified" : "2024-11-21T05:57:37.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GNOME GLib before 2.66.7 and 2.67.x before 2.67.4. If g_byte_array_new_take() was called with a buffer of 4GB or more on a 64-bit platform, the length would be truncated modulo 2**32, causing unintended length truncation."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en GNOME GLib versiones anteriores a 2.66.7 y versiones 2.67.x anteriores a 2.67.4.&#xa0;Si se llamó a la función g_byte_array_new_take() con un búfer de 4 GB o más sobre una plataforma de 64 bits, la longitud debería ser truncada módulo 2**32, causando un truncamiento de la longitud no prevista"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.66.7",
            "matchCriteriaId" : "04BDBBFD-75D9-4681-9225-F38780B6757E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.67.0",
            "versionEndExcluding" : "2.67.4",
            "matchCriteriaId" : "AED4217E-24BB-43F3-B979-8077FDF50DA4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1942",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1944",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1944",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T17:15:13.137",
      "lastModified" : "2024-11-21T05:57:37.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GNOME GLib before 2.66.6 and 2.67.x before 2.67.3. The function g_bytes_new has an integer overflow on 64-bit platforms due to an implicit cast from 64 bits to 32 bits. The overflow could potentially lead to memory corruption."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en GNOME GLib versiones anteriores a 2.66.6 y versiones 2.67.x anteriores a 2.67.3.&#xa0;La función g_bytes_new presenta un desbordamiento de enteros en plataformas de 64 bits debido a una conversión implícita de 64 bits a 32 bits.&#xa0;El desbordamiento podría conllevar a una corrupción de la memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.66.6",
            "matchCriteriaId" : "75B40F42-BA65-4AAE-AA5B-34D0AD59E17F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.67.0",
            "versionEndExcluding" : "2.67.3",
            "matchCriteriaId" : "6011C526-C3E7-42A9-AAE8-16AE5CE53C0B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/2319",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/2319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2REA7RVKN7ZHRLJOEGBRQKJIPZQPAELZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJMPNDO4GDVURYQFYKFOWY5HAF4FTEPN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210319-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T18:15:13.897",
      "lastModified" : "2024-11-21T06:21:22.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ActivePresenter 6.1.6 is affected by a memory corruption vulnerability that may result in a denial of service (DoS) or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "ActivePresenter versión 6.1.6, está afectado por una vulnerabilidad de corrupción de la memoria que puede resultar en una denegación de servicio (DoS) o una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atomisystems:activepresenter:6.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD01555E-D919-48E3-8176-D8186B9A466A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://code610.blogspot.com/2021/01/crashing-activepresenter.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://code610.blogspot.com/2021/01/crashing-activepresenter.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T19:15:13.127",
      "lastModified" : "2024-11-21T05:57:34.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Endian Firewall Community (aka EFW) 3.3.2 allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in a backup comment."
      }, {
        "lang" : "es",
        "value" : "Endian Firewall Community (también se conoce como EFW) versión 3.3.2, permite a los usuarios autenticados remotamente ejecutar comandos arbitrarios del sistema operativo por medio de metacaracteres de shell en un comentario de copia de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:endian:firewall_community:3.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8496394D-6026-4E9D-A15F-0F35184531E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MucahitSaratar/endian_firewall_authenticated_rce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.endian.com/company/news/endian-community-releases-new-version-332-148/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/MucahitSaratar/endian_firewall_authenticated_rce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/efw/files/Development/EFW-3.3.2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.endian.com/company/news/endian-community-releases-new-version-332-148/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27211",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T19:15:13.207",
      "lastModified" : "2024-11-21T05:57:36.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "steghide 0.5.1 relies on a certain 32-bit seed value, which makes it easier for attackers to detect hidden data."
      }, {
        "lang" : "es",
        "value" : "steghide versión 0.5.1, se basa en un cierto valor de seed de 32 bits, lo que facilita a atacantes la detección de datos ocultos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-335"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:steghide_project:steghide:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD38FA59-8E93-4617-B4EE-175ABF0D5CC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/165199/Steghide-Hidden-Data-Extraction.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/StefanoDeVuono/steghide",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/b4shfire/stegcrack",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://sourceforge.net/projects/steghide/files/steghide/0.5.1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/165199/Steghide-Hidden-Data-Extraction.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/StefanoDeVuono/steghide",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/b4shfire/stegcrack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://sourceforge.net/projects/steghide/files/steghide/0.5.1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26200",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T21:15:13.343",
      "lastModified" : "2024-11-21T05:55:55.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user area for Library System 1.0 is vulnerable to SQL injection where a user can bypass the authentication and login as the admin user."
      }, {
        "lang" : "es",
        "value" : "El área de usuario de Library System versión 1.0, es vulnerable a la inyección SQL, donde un usuario puede omitir la autenticación e iniciar sesión como usuario administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:library_system_project:library_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9DDE89-9456-4FAB-B277-1F80D6D9EDBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49462",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26201",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T21:15:13.407",
      "lastModified" : "2024-11-21T05:55:55.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Login Panel of CASAP Automated Enrollment System 1.0 is vulnerable to SQL injection authentication bypass. An attacker can obtain access to the admin panel by injecting a SQL query in the username field of the login page."
      }, {
        "lang" : "es",
        "value" : "El panel de inicio de sesión de CASAP Automated Enrollment System versión 1.0, es vulnerable a una omisión de la autenticación de inyección SQL.&#xa0;Un atacante puede obtener acceso al panel de administración insertando una consulta SQL en el campo username de la página de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:casap_automated_enrollment_system_project:casap_automated_enrollment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA6FCDF-214D-46B9-BDC4-32B296AC4920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49463",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26822",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T21:15:13.467",
      "lastModified" : "2024-11-21T05:56:51.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Teachers Record Management System 1.0 is affected by a SQL injection vulnerability in 'searchteacher' POST parameter in search-teacher.php. This vulnerability can be exploited by a remote unauthenticated attacker to leak sensitive information and perform code execution attacks."
      }, {
        "lang" : "es",
        "value" : "Teachers Record Management System versión 1.0, está afectado por una vulnerabilidad de inyección SQL en el parámetro POST \"searchteacher\" en el archivo search-teacher.php.&#xa0;Esta vulnerabilidad puede ser aprovechada por un atacante remoto no autenticado para filtrar información confidencial y realizar ataques de ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:teachers_record_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF4AD3BB-B100-46A6-8DA8-DC4BFC2F79C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49562",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-26822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://phpgurukul.com/teachers-record-management-system-using-php-and-mysql/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-15T21:15:13.547",
      "lastModified" : "2024-11-21T06:21:09.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell."
      }, {
        "lang" : "es",
        "value" : "E-Learning System versión 1.0, sufre de una vulnerabilidad de inyección SQL no autenticada, que permite a atacantes remotos ejecutar código arbitrario en el servidor web de hosting y obtener un shell inverso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e-learning_system_project:e-learning_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C4C256-63C3-470F-9B6A-6AA11D0271D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TCSWT/E-Learning-System/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101821",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160966/E-Learning-System-1.0-SQL-Injection-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49434",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/12808/e-learning-system-using-phpmysqli.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TCSWT/E-Learning-System/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/janobe/CVE-nu11-101821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/160966/E-Learning-System-1.0-SQL-Injection-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/12808/e-learning-system-using-phpmysqli.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21511",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-02-15T22:15:13.897",
      "lastModified" : "2024-11-21T05:48:30.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC Avamar Server, versions 19.3 and 19.4 contain an Improper Authorization vulnerability in the web UI. A remote low privileged attacker could potentially exploit this vulnerability, to gain unauthorized read or modification access to other users' backup data."
      }, {
        "lang" : "es",
        "value" : "Dell EMC Avamar Server, versiones 19.3 y 19.4, contienen una vulnerabilidad de Autorización Inapropiada en la Interfaz de Usuario web.&#xa0;Un atacante remoto con pocos privilegios podría aprovechar esta vulnerabilidad para obtener acceso no autorizado de lectura o modificación a los datos de respaldo de otros usuarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_avamar_server:19.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7FEBC8A-A479-4684-A870-19E5046EA3B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_avamar_server:19.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC33D28B-F305-47AB-84DE-40A2DCB956AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_integrated_data_protection_appliance:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5D783F9-E4AD-41A8-B1F9-D52333B00D62"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000182926/dsa-2021-033-dell-emc-avamar-server-improper-authorization-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000182926/dsa-2021-033-dell-emc-avamar-server-improper-authorization-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T04:15:12.733",
      "lastModified" : "2024-11-21T05:57:38.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mumble before 1.3.4 allows remote code execution if a victim navigates to a crafted URL on a server list and clicks on the Open Webpage text."
      }, {
        "lang" : "es",
        "value" : "Mumble versiones anteriores a 1.3.4, permite una ejecución de código remota si una víctima navega hacia una URL diseñada en una lista de servidores y hace clic sobre el texto Open Webpage"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mumble:mumble:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "C23B5471-A5C4-4024-89B8-373397CA9204"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mumble-voip/mumble/commit/e59ee87abe249f345908c7d568f6879d16bfd648",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mumble-voip/mumble/compare/1.3.3...1.3.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mumble-voip/mumble/pull/4733",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mumble-voip/mumble/commit/e59ee87abe249f345908c7d568f6879d16bfd648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mumble-voip/mumble/compare/1.3.3...1.3.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mumble-voip/mumble/pull/4733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/02/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T04:15:12.827",
      "lastModified" : "2024-11-21T05:57:38.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hestia Control Panel 1.3.5 and below, in a shared-hosting environment, sometimes allows remote authenticated users to create a subdomain for a different customer's domain name, leading to spoofing of services or email messages."
      }, {
        "lang" : "es",
        "value" : "Hestia Control Panel versión 1.3.5 e inferiores, en un ambiente de hosting compartido, a veces permite a usuarios autenticados remotos crear un subdominio para un nombre de dominio de un cliente diferente, conllevando a una suplantación de servicios o de mensajes de correo electrónico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hestiacp:control_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.5",
            "matchCriteriaId" : "297CF6F7-621F-4AE4-85F5-FF8A1C6A0F1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hestiacp/hestiacp/issues/1622",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/sick-2021-006.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://sick.codes/sick-2021-006",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.hestiacp.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hestiacp/hestiacp/issues/1622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/sick-2021-006.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://sick.codes/sick-2021-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.hestiacp.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T04:15:12.923",
      "lastModified" : "2024-11-21T05:57:39.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, password information for external systems is visible in cleartext. The Settings.asp page is affected by this issue."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mutare Voice (EVM) versiones 3.x anteriores a 3.3.8.&#xa0;En el portal de administración de la aplicación web, la información de la contraseña para sistemas externos es visible en texto sin cifrar.&#xa0;La página Settings.asp está afectada por este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutare:voice:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "8A1EA71C-BD80-41D2-BD7E-8B9F30E758A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-004-mutare-voice/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-004-mutare-voice/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T04:15:12.983",
      "lastModified" : "2024-11-21T05:57:39.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. The web application suffers from SQL injection on Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp, and Evmlog.asp."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mutare Voice (EVM) versiones 3.x anteriores a 3.3.8.&#xa0;La aplicación web sufre de inyección SQL en los archivos Adminlog.asp, Archivemsgs.asp, Deletelog.asp, Eventlog.asp y Evmlog.asp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutare:voice:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "8A1EA71C-BD80-41D2-BD7E-8B9F30E758A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-002-mutare-voice/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-002-mutare-voice/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T04:15:13.047",
      "lastModified" : "2024-11-21T05:57:39.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. On the admin portal of the web application, there is a functionality at diagzip.asp that allows anyone to export tables of a database."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mutare Voice (EVM) versiones 3.x anteriores a 3.3.8.&#xa0;En el portal de administración de la aplicación web, existe una funcionalidad en el archivo diagzip.asp que permite a cualquiera exportar tablas de una base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutare:voice:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.6",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "22E67857-07E8-400D-95E2-62AB12B31C9B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-003-mutare-voice/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-003-mutare-voice/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T04:15:13.110",
      "lastModified" : "2024-11-21T05:57:39.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Mutare Voice (EVM) 3.x before 3.3.8. getfile.asp allows Unauthenticated Local File Inclusion, which can be leveraged to achieve Remote Code Execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Mutare Voice (EVM) versiones 3.x anteriores a 3.3.8.&#xa0;El archivo getfile.asp permite una Inclusión de Archivos Locales No Autenticados, que puede ser aprovechada para lograr una Ejecución de Código Remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutare:voice:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.3.8",
            "matchCriteriaId" : "8A1EA71C-BD80-41D2-BD7E-8B9F30E758A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-001-mutare-voice/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mutare.com/security-adv-mutare-2021-001-mutare-voice/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T15:15:13.587",
      "lastModified" : "2024-11-21T05:55:12.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mobile application \"Testes de Codigo\" 11.4 and prior allows an attacker to gain access to the administrative interface and premium features by tampering the boolean value of parameters \"isAdmin\" and \"isPremium\" located on device storage."
      }, {
        "lang" : "es",
        "value" : "La aplicación movil \"Testes de Codigo\" versiones 11.4 y anteriores, permite a un atacante conseguir acceso a la interfaz administrativa y las funcionalidades premium al alterar el valor booleano de los parámetros \"isAdmin\" e \"isPremium\" ubicados en el almacenamiento del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:testes-codigo:testes_de_codigo:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "11.4",
            "matchCriteriaId" : "706D1B98-0971-4FF6-BBC1-98430941EEAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:testes-codigo:testes_de_codigo:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "11.4",
            "matchCriteriaId" : "74ACB733-28D4-40C2-9752-8A6638D0F972"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vrls.ws/posts/2021/02/cve-2021-25648-mobile-application-testes-de-codigo-privilege-escalation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://vrls.ws/posts/2021/02/cve-2021-25648-mobile-application-testes-de-codigo-privilege-escalation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T15:15:13.647",
      "lastModified" : "2024-11-21T05:57:38.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The RTSPLive555.dll ActiveX control in Pelco Digital Sentry Server 7.18.72.11464 has a SetCameraConnectionParameter stack-based buffer overflow. This can be exploited by a remote attacker to potentially execute arbitrary attacker-supplied code. The victim would have to visit a malicious webpage using Internet Explorer where the exploit could be triggered."
      }, {
        "lang" : "es",
        "value" : "El control ActiveX RTSPLive555.dll en Pelco Digital Sentry Server versión 7.18.72.11464, presenta un desbordamiento del búfer en la región stack de la memoria en la función SetCameraConnectionParameter.&#xa0;Esto puede ser explotado por un atacante remoto para ejecutar potencialmente código arbitrario suministrado por el atacante.&#xa0;La víctima tendría que visitar una página web maliciosa usando Internet Explorer donde se podría desencadenar el exploit"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pelco:digital_sentry_server:7.18.72.11464:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84039097-D4AD-40FC-B43A-17CEC8286EE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server-RSTPLive555%20Activex%20Buffer%20overflow.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/Pelco_Digital_Sentry_Server-RSTPLive555%20Activex%20Buffer%20overflow.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.pelco.com/s/article/What-is-the-Digital-Sentry-software-release-revision-history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20986",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2021-02-16T17:15:12.817",
      "lastModified" : "2024-11-21T05:47:20.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Denial of Service vulnerability was found in Hilscher PROFINET IO Device V3 in versions prior to V3.14.0.7. This may lead to unexpected loss of cyclic communication or interruption of acyclic communication."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de Denegación de Servicio en Hilscher PROFINET IO Device versiones V3 anteriores a V3.14.0.7. Esto puede conllevar a una pérdida inesperada de la comunicación cíclica o a una interrupción de la comunicación acíclica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hilscher:profinet_io_device_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.14.0.7",
            "matchCriteriaId" : "94E2418D-7518-40DA-936F-83A9473083F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hilscher:profinet_io_device:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F25E84F4-ACBA-42D9-8DBE-CD6E491D0B12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv100-f200a-b17-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "EADBDFE4-E2C8-4845-B646-E4F797A81DDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv100-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7820B671-3B36-4B9C-AF5E-99FB32B17A7D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv150i-f200a-b17-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "BA3E85D2-9B42-4D09-B65B-7809D039BFD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv150i-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE49394-30F2-4A4A-83ED-7E629F905888"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv100-f200-b17-v1d-7477_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "0764F7F2-E82C-4100-8612-F09854DD3D58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv100-f200-b17-v1d-7477:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE18C0A-FF70-4908-BDAF-3B8A8F4B7B4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100-f200-b17-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "68591B76-5CB4-428A-AD7F-12BC0C7B244C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B65D25-D329-4F76-AB8E-A638F67662D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100-f200-b17-v1d-3636_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "0B0D5FCE-9DA2-4368-9826-6E74B141F3CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100-f200-b17-v1d-3636:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC410A7-CDCB-4FC8-B7E4-D36E64C18514"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv80-f200-b17-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "79A7D56B-9917-4221-B60F-691F0B86F69D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv80-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30626D56-330A-40A9-AACA-1A220807E9AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv100-f200-b17-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "72EBE6E8-120C-4D79-AE06-99C9E2AF9B5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv100-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B112346-D300-44E1-93A8-28EEFA051D17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv50-f200-b17-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "87151D45-4150-4938-9761-99458D85226A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv50-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CDDEFC-7E12-4219-971F-3B65773CBAFA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv100-f200-b17-v1d-6011-6997_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.3",
            "matchCriteriaId" : "FFE4A4E5-8DAD-4CFA-8667-183174259BB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv100-f200-b17-v1d-6011-6997:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCEFC26-0059-46A4-958F-4FF0967FCDA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv100-f200-b17-v1d-6011_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "E6DE232C-C5ED-41C1-8E9B-FBFAD96A7654"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv100-f200-b17-v1d-6011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D04FCC36-6058-41A2-9010-46EEE9F15A3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv100-f200-b17-v1d-6011-8203_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2.5",
            "matchCriteriaId" : "6168758B-2968-4961-ACF7-B2371E7518B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv100-f200-b17-v1d-6011-8203:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9973B3F1-D71A-4117-A04E-DA0937D6979E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100a-f200-b28-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "EC8D884C-73DC-48A2-8E52-013B7EA29E8F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100a-f200-b28-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C743A5C3-7B1A-4E87-8BA1-FB10C258B0A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100a-f200-b28-v1d-6011_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "F0D49EA3-9A07-4C3B-97CB-1D3906A674E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100a-f200-b28-v1d-6011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C43D66DD-07DA-4E26-B51F-CE15A9CBB770"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv100a-f200-b28-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "48ABA114-93E1-418B-8006-5AC79CAFFD2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv100a-f200-b28-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B54DE8-7555-42B8-8960-085CED675897"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv100a-f200a-b28-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "8B0A7DA2-143C-4E31-8E9E-5960D3FDFA8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv100a-f200a-b28-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02679097-13BD-4867-9D1E-D069131019CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv100aq-f200a-b28-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "9D7244F0-967F-47F4-85E1-6B5FC01595A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv100aq-f200a-b28-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32460D01-AFE8-4B0F-B65B-BA58D47D2687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pgv100aq-f200-b28-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "2B836CA6-38D8-441D-8DBC-DE0A64A58E03"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pgv100aq-f200-b28-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E07DB5-9D46-4159-84A6-8145DDA4A0F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100aq-f200-b28-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "27E38BA2-FAE8-4355-A351-88744B3B6670"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100aq-f200-b28-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9600E1-845A-4404-905A-42C9761620FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100aq-f200-b28-v1d-6011_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.1.1",
            "matchCriteriaId" : "58510D41-8212-44B0-B9EF-CB30F53DA921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100aq-f200-b28-v1d-6011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD1ACB11-4365-4FEF-AC2A-2EB4721F3F91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:ohv-f230-b17_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.0",
            "matchCriteriaId" : "279998E5-5DCB-415A-AB1E-840100A803E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:ohv-f230-b17:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627BECB8-5689-4F88-9404-7EF16EE70434"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:oit500-f113b17-cb_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.4",
            "matchCriteriaId" : "C593C217-FDCF-403C-92D0-5221F66342C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:oit500-f113b17-cb:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2B6391-9F15-4DFE-99A5-4440873AD44D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pha_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.1.5",
            "matchCriteriaId" : "96B9CEFE-9C75-4279-976C-A4830E2906C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha150-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B4C008E-C31C-4788-BAE0-C9960FB318A9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha150-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "037EDAB3-DC96-49D0-86E8-9D6D8033D314"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha200-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB81E2ED-A3D8-4D20-AD1F-610DDC6789C8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha200-f200a-b17-t-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F430258E-0ADE-4ACB-BF48-2FBE368381E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha200-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C00E2D-1C87-48DE-B7BF-AF1CD5C1F47F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha300-f200-b17-t-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD0F1E5-3323-4AA1-BF20-B2111BFF8B0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha300-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1E9EFD8-E0D1-4860-91CB-2CD55B12668E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha300-f200a-b17-t-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B8A275A-11B6-4000-AB96-E6D19DF31021"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha300-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9601FE8F-AD3F-40F9-B9D5-58AAE81593F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha400-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB5BB1C-3A52-44E5-BC6A-BA5BFE8F7A8A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha400-f200a-b17-t-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F942041F-1E10-4171-BA81-74CCDBEC0EF5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha400-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104373CF-567C-4AFD-8E53-7DF1DE5F977D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha500-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7C8345-8E3B-4A40-9E64-C4549845CFE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha500-f200a-b17-t-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA36B79E-B922-4DFB-A50A-92C6A8282B97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha500-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F08D2B93-201A-4020-A395-3AC1DB2F3BEA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha600-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DA38FEF-041D-4A96-89AA-591B7E9768D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha600-f200a-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE576C56-A5AC-40D9-BE06-D58DD3D3BA84"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha700-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "458EA429-3D7D-4517-A3CB-A3E84B090FD5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pha800-f200-b17-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099D8DF5-FED9-4689-9E18-2FF235803089"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:wcs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0.0",
            "matchCriteriaId" : "5AD9ED51-C1E2-416C-AE52-81900D7F1D39"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5BBD05-EF10-4DDB-A1D3-5E1E902F65FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763E39F6-B1FE-45A7-8578-6ADDA9968F1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86638FFD-6080-43F1-B4BC-8B6F9AFFFDB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610d-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9651E8F-0074-4C00-AC43-5F6F3E8A3F6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610dh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE03C43-E1A4-4BEE-A2F0-2DA3637A1866"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610dh-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E8C6F65-CADD-45AC-9B5C-A9C278217D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D960E9-8EA7-417B-8897-B55D7866367B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls610h-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC8F378E-D294-4A2F-90D7-ADE345DC4A9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2021-006",
        "source" : "info@cert.vde.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device",
        "source" : "info@cert.vde.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2021-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.hilscher.com/display/ISMS/2020-12-03+Denial+of+Service+vulnerability+in+PROFINET+IO+Device",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20987",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2021-02-16T17:15:12.973",
      "lastModified" : "2024-11-21T05:47:20.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service and memory corruption vulnerability was found in Hilscher EtherNet/IP Core V2 prior to V2.13.0.21that may lead to code injection through network or make devices crash without recovery."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de denegación de servicio y corrupción de memoria en Hilscher EtherNet/IP Core versiones V2 anteriores a V2.13.0.21, que puede conllevar a una inyección de código a través de la red o hacer que los dispositivos se bloqueen sin recuperación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hilscher:ethernet\\/ip_adapter_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.13.0.21",
            "matchCriteriaId" : "419E6FB7-27B2-4889-A1FB-6A9BA0F302DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hilscher:ethernet\\/ip_adapter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947FAA6B-18CE-4503-A95B-423FA814BD88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:wcs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.1",
            "matchCriteriaId" : "508CB169-DD1D-4514-A620-BF046D84F6AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B49403E2-B4ED-4DD2-85EC-491967213920"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B48FAFCA-7284-40DB-8D86-D464065548EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EDF8C0-3875-4D1E-B6D7-8E09CE4E5674"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510d-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F6BE9B-8E19-4D83-90A8-1029BD9AB16E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510dh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21019E61-A45B-4143-A0D6-43B4769E102F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510dh-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8C0988-2D6E-43BA-BF22-F70EE923BE64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A434318B-7853-45A5-B843-D2D810FD4F3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:wcs3b-ls510h-om:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FE4EE57-3442-4202-834A-109B9599053B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.0",
            "matchCriteriaId" : "4EFB0689-CA7B-4CE4-9B8B-8A747B623CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100-f200-b25-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDBD1518-8CE9-45E1-A69E-4A34188DA968"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pxv100i-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.0",
            "matchCriteriaId" : "C78577F8-F883-4AD7-AC5C-8DC56FDC408B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pxv100i-f200-b25-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "103DD562-1E4E-45CC-9A42-6F0FE55D20B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv100-f200-b25-v1d-6011-6720_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.0",
            "matchCriteriaId" : "49A20F93-3553-4D94-8BDE-6730561CBEE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv100-f200-b25-v1d-6011-6720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D059058-1DF7-4537-B0E4-5E4037594C31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv50-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.0",
            "matchCriteriaId" : "F5F4DBF2-DDB0-4884-AB22-8AEE90AA077A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv50-f200-b25-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4537296-FB20-44B5-880F-5F66D6B8152B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv80-f200-b25-v1d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.0",
            "matchCriteriaId" : "38C654B5-1D2C-4FEF-BC84-5DCB1E840ADC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv80-f200-b25-v1d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CADB9FC-8E07-42FE-B4C4-914EC105286F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pepperl-fuchs:pcv100-f200-b25-v1d-6011_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.10.0",
            "matchCriteriaId" : "027742F4-4E2A-49AB-AF7E-3C69A3D04D5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pepperl-fuchs:pcv100-f200-b25-v1d-6011:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7FD4CB0-4AF3-4507-AB18-C0B96B9E7DFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2021-007",
        "source" : "info@cert.vde.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.hilscher.com/pages/viewpage.action?pageId=108969480",
        "source" : "info@cert.vde.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert.vde.com/en-us/advisories/vde-2021-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.hilscher.com/pages/viewpage.action?pageId=108969480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21315",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-16T17:15:13.050",
      "lastModified" : "2025-10-24T14:47:57.750",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The System Information Library for Node.JS (npm package \"systeminformation\") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command injection vulnerability. Problem was fixed in version 5.3.1. As a workaround instead of upgrading, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... do only allow strings, reject any arrays. String sanitation works as expected."
      }, {
        "lang" : "es",
        "value" : "La Biblioteca System Information para Node.JS (paquete npm \"systeminformation\") es una colección de funciones de código abierto para recuperar información detallada sobre el hardware, el sistema y el SO. En systeminformation versiones anteriores a 5.3.1, se presenta una vulnerabilidad de inyección de comandos. El problema se ha corregido en la versión 5.3.1. Como solución en lugar de actualizar, asegúrese de comprobar o sanear los parámetros de servicio que son pasados a las funciones si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() ... sólo permiten cadenas, rechazan cualquier matriz. El saneamiento de cadenas funciona como se esperaba"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-18",
      "cisaActionDue" : "2022-02-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "System Information Library for Node.JS Command Injection",
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systeminformation:systeminformation:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.3.1",
            "matchCriteriaId" : "52B945D4-063D-4674-9AF0-12AD903B3B55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cordova:10.0.0:*:*:*:*:-:*:*",
            "matchCriteriaId" : "480219C3-0BEA-4B50-979E-88EA4E8F1DD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/07daa05fb06f24f96297abaa30c2ace8bfd8b525",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-2m8v-572m-ff2v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8afea9a83ed568f2647cccc6d8d06126f9815715ddf9a4d479b26b05%40%3Cissues.cordova.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0007/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/systeminformation",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/07daa05fb06f24f96297abaa30c2ace8bfd8b525",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-2m8v-572m-ff2v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8afea9a83ed568f2647cccc6d8d06126f9815715ddf9a4d479b26b05%40%3Cissues.cordova.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210312-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/systeminformation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21315",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23839",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2021-02-16T17:15:13.190",
      "lastModified" : "2024-11-21T05:51:55.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSSL 1.0.2 supports SSLv2. If a client attempts to negotiate SSLv2 with a server that is configured to support both SSLv2 and more recent SSL and TLS versions then a check is made for a version rollback attack when unpadding an RSA signature. Clients that support SSL or TLS versions greater than SSLv2 are supposed to use a special form of padding. A server that supports greater than SSLv2 is supposed to reject connection attempts from a client where this special form of padding is present, because this indicates that a version rollback has occurred (i.e. both client and server support greater than SSLv2, and yet this is the version that is being requested). The implementation of this padding check inverted the logic so that the connection attempt is accepted if the padding is present, and rejected if it is absent. This means that such as server will accept a connection if a version rollback attack has occurred. Further the server will erroneously reject a connection if a normal SSLv2 connection attempt is made. Only OpenSSL 1.0.2 servers from version 1.0.2s to 1.0.2x are affected by this issue. In order to be vulnerable a 1.0.2 server must: 1) have configured SSLv2 support at compile time (this is off by default), 2) have configured SSLv2 support at runtime (this is off by default), 3) have configured SSLv2 ciphersuites (these are not in the default ciphersuite list) OpenSSL 1.1.1 does not have SSLv2 support and therefore is not vulnerable to this issue. The underlying error is in the implementation of the RSA_padding_check_SSLv23() function. This also affects the RSA_SSLV23_PADDING padding mode used by various other functions. Although 1.1.1 does not support SSLv2 the RSA_padding_check_SSLv23() function still exists, as does the RSA_SSLV23_PADDING padding mode. Applications that directly call that function or use that padding mode will encounter this issue. However since there is no support for the SSLv2 protocol in 1.1.1 this is considered a bug and not a security issue in that version. OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.0.2y (Affected 1.0.2s-1.0.2x)."
      }, {
        "lang" : "es",
        "value" : "OpenSSL versión 1.0.2 soporta SSLv2. Si un cliente intenta negociar SSLv2 con un servidor que está configurado para soportar tanto SSLv2 como versiones más recientes de SSL y TLS, entonces se hace una comprobación de un ataque de retroceso de versión cuando se deshace una firma RSA. Los clientes que soportan versiones de SSL o TLS superiores a SSLv2 deben usar una forma especial de relleno. Un servidor que soporta una versión superior a SSLv2 debe rechazar los intentos de conexión de un cliente en el que esté presente esta forma especial de relleno, porque esto indica que se ha producido un retroceso de versión (es decir, tanto el cliente como el servidor soportan una versión superior a SSLv2, y sin embargo esta es la versión que se está requiriendo). La implementación de esta comprobación de padding invirtió la lógica para que el intento de conexión sea aceptado si el padding está presente, y rechazado si está ausente. Esto significa que tal servidor aceptará una conexión si se ha producido un ataque de retroceso de versión. Además, el servidor rechazará erróneamente una conexión si se realiza un intento de conexión SSLv2 normal. Sólo los servidores OpenSSL versión 1.0.2 desde la versión 1.0.2s hasta la 1.0.2x están afectados por este problema. Para ser vulnerable, un servidor versión 1.0.2 debe 1) haber configurado la compatibilidad con SSLv2 en tiempo de compilación (está desactivada por defecto), 2) haber configurado la compatibilidad con SSLv2 en tiempo de ejecución (está deshabilitada por defecto), 3) haber configurado los ciphersuites de SSLv2 (no están en la lista de ciphersuites por defecto) OpenSSL versión 1.1.1 no presenta compatibilidad con SSLv2 y, por tanto, no es vulnerable a este problema. El error subyacente está en la implementación de la función RSA_padding_check_SSLv23(). Esto también afecta al modo de relleno RSA_SSLV23_PADDING usado por otras funciones. Aunque la versión 1.1.1 no soporta SSLv2, la función RSA_padding_check_SSLv23() sigue existiendo, al igual que el modo de relleno RSA_SSLV23_PADDING. Las aplicaciones que llamen directamente a esa función o utilicen ese modo de relleno se encontrarán con este problema. Sin embargo, como no existe soporte para el protocolo SSLv2 en la versión 1.1.1, esto se considera un error y no un problema de seguridad en esa versión. OpenSSL versión 1.0.2 está fuera de soporte y ya no recibe actualizaciones públicas. Los clientes de soporte Premium de OpenSSL versión 1.0.2 deben actualizar a la versión 1.0.2y. Los demás usuarios deben actualizar a la versión 1.1.1j. Corregido en OpenSSL versión 1.0.2y (Afectó versiones 1.0.2s-1.0.2x)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2s",
            "versionEndIncluding" : "1.0.2x",
            "matchCriteriaId" : "3E90DD3D-CF27-4D49-973A-86E03225027B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61516569-C48F-4362-B334-8CA10EDB0EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "F325B4DE-1330-4DE2-B127-76FA14C3639B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:community:*:*:*",
            "matchCriteriaId" : "CEDB365B-ABB3-4E62-B8C6-5E3454270855"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CAD50-749F-4ADB-A046-BF3585677A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "C89891C1-DFD7-4E1F-80A9-7485D86A15B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4664B195-AF14-4834-82B3-0B2C98020EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "75BC588E-CDF0-404E-AD61-02093A1DF343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0009/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210216.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=30919ab80a478f2d81f2e9acdcca3fa4740cd547",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210216.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23840",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2021-02-16T17:15:13.300",
      "lastModified" : "2026-04-16T15:16:45.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)."
      }, {
        "lang" : "es",
        "value" : "Las llamadas a EVP_CipherUpdate, EVP_EncryptUpdate y EVP_DecryptUpdate, pueden desbordar el argumento de la longitud de salida en algunos casos en los que la longitud de entrada está cerca de la longitud máxima permitida para un entero en la plataforma. En tales casos, el valor de retorno de la llamada a la función será 1 (indicando success), pero el valor de la longitud de salida será negativo. Esto podría causar que las aplicaciones se comporten de forma incorrecta o se bloqueen. Las versiones de OpenSSL 1.1.1i e inferiores están afectadas por este problema. Los usuarios de estas versiones deberían actualizar a OpenSSL versión 1.1.1j. Las versiones de OpenSSL 1.0.2x e inferiores están afectadas por este problema. Sin embargo, OpenSSL versión 1.0.2 está fuera de soporte y ya no recibe actualizaciones públicas. Los clientes con soporte Premium de OpenSSL versión 1.0.2 deben actualizar a la versión 1.0.2y. Los demás usuarios deben actualizar a la versión 1.1.1j. Corregido en OpenSSL versión 1.1.1j (Afectó versiones 1.1.1-1.1.1i). Corregido en OpenSSL versión 1.0.2y (Afectó versiones 1.0.2-1.0.2x)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2y",
            "matchCriteriaId" : "F12DBEEA-AAB3-4383-A3E2-F865B960BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1j",
            "matchCriteriaId" : "90147138-26F0-42CF-A1DB-BE1853885CA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.8",
            "matchCriteriaId" : "D2D529D0-539D-4540-B70C-230D09A87572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657682A0-54D5-4DC6-A98E-8BAF685926C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8661D361-71B5-4C41-A818-C89EC551D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253603DC-2D92-442A-B3A8-A63E14D8A070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4367D9B-BF81-47AD-A840-AC46317C774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61516569-C48F-4362-B334-8CA10EDB0EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CAD50-749F-4ADB-A046-BF3585677A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.33",
            "matchCriteriaId" : "C9E14DE8-29C1-4C0C-9B31-2E3A11EE68E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.15",
            "versionEndExcluding" : "8.0.23",
            "matchCriteriaId" : "FBE10671-5C91-4ACF-ABD2-255E9F2F9D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3",
            "matchCriteriaId" : "D04565AE-D092-4AE0-8FEE-0E8114662A1B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0",
            "matchCriteriaId" : "A30F7908-5AF6-4761-BC6A-4C18EFAE48E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B00DDE7-7002-45BE-8EDE-65D964922CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DB88C165-BB24-49FB-AAF6-087A766D5AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE847E0-431D-497D-9C57-C4E59749F6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "46385384-5561-40AA-9FDE-A2DE4FDFAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4E5481-1070-4E1F-8679-1985DE4E785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EEA681-67FF-43B3-8610-0FA17FD279E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "C33BA8EA-793D-4E79-BE9C-235ACE717216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "823DBE80-CB8D-4981-AE7C-28F3FDD40451"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "5E63B7B2-409A-476E-BA12-2A2D2F3B85DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983D27DE-BC89-454E-AE47-95A26A3651E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "ADB5D4C9-DA14-4188-9181-17336F9445F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5825AEE1-B668-40BD-86A9-2799430C742C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "0B65E2F3-57EC-46C0-BB4A-0A0F3F8D387E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "90B7CFBF-761C-4EAA-A322-EF5E294AADED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0CF40B-E5BD-4558-9321-184D58EF621D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "48B28ABF-7E1A-4A1E-8F78-0D95D7BDF886"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp2410",
            "matchCriteriaId" : "E74AAF52-1388-4BD9-B17B-3A6A32CA3608"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95503CE5-1D06-4092-A60D-D310AADCAFB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "A107698C-9C63-44A9-8A2B-81EDD5702B4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "983D27DE-BC89-454E-AE47-95A26A3651E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "0FC0460E-4695-44FB-99EE-28B2C957B760"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5825AEE1-B668-40BD-86A9-2799430C742C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m10-4s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "BD54A092-85A7-4459-9C69-19E6E24AC24B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m10-4s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA2D526-BDCF-4A65-914A-B3BA3A0CD613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "5F813DBC-BA1E-4C73-AA11-1BD3F9508372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE0CF40B-E5BD-4558-9321-184D58EF621D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "EFDF4F39-1C6C-4AD3-99CF-BD5B44B8C71B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F3C9C09-7B2B-4DB6-8BE0-35302ED35776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujitsu:m12-2s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "xcp3110",
            "matchCriteriaId" : "416B805F-799A-4466-AC5A-93D083A2ABBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujitsu:m12-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95503CE5-1D06-4092-A60D-D310AADCAFB1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.12.0",
            "matchCriteriaId" : "25A3180B-21AF-4010-9DAB-41ADFD2D8031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "10.13.0",
            "versionEndExcluding" : "10.24.0",
            "matchCriteriaId" : "67D64118-C228-41AF-8193-F90A772AAB8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.12.0",
            "matchCriteriaId" : "564ED5C8-50D7-413A-B88E-E62B6C07336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "12.13.0",
            "versionEndExcluding" : "12.21.0",
            "matchCriteriaId" : "F1D6CFAA-BEDB-40EB-BDE6-35BBA99F0BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.14.0",
            "matchCriteriaId" : "428DCD7B-6F66-4F18-B780-5BD80143D482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.10.0",
            "matchCriteriaId" : "E640EA36-17B2-4745-A831-AB8655F3579D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:14.15.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "0425023F-CA30-4447-AD5C-B76556461CCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0009/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4855",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210216.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-10",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=6a51b9e1d0cf0bf8515f7201b68fb0a3482b3dc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=9b1129239f3ebb1d1c98ce9ed41d5c9476c47cb2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210216.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23841",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2021-02-16T17:15:13.377",
      "lastModified" : "2024-11-21T05:51:55.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x)."
      }, {
        "lang" : "es",
        "value" : "La función de la API pública de OpenSSL X509_issuer_and_serial_hash() intenta crear un valor hash único basado en los datos del emisor y del número de serie contenidos en un certificado X509. Sin embargo, no gestiona correctamente los errores que puedan producirse al analizar el campo del emisor (lo que podría ocurrir si el campo del emisor se construye de forma maliciosa). Esto puede dar lugar a un desvío de puntero NULL y a un fallo que conduzca a un posible ataque de denegación de servicio. La función X509_issuer_and_serial_hash() nunca es llamada directamente por OpenSSL, por lo que las aplicaciones sólo son vulnerables si utilizan esta función directamente y lo hacen con certificados que pueden haber sido obtenidos de fuentes no fiables. Las versiones de OpenSSL 1.1.1i y posteriores están afectadas por este problema. Los usuarios de estas versiones deberían actualizar a OpenSSL 1.1.1j. Las versiones de OpenSSL 1.0.2x e inferiores se ven afectadas por este problema. Sin embargo, OpenSSL 1.0.2 está fuera de soporte y ya no recibe actualizaciones públicas. Los clientes con soporte Premium de OpenSSL 1.0.2 deben actualizar a la versión 1.0.2y. Los demás usuarios deben actualizar a la versión 1.1.1j. Corregido en OpenSSL 1.1.1j (Afectado 1.1.1-1.1.1i). Corregido en OpenSSL 1.0.2y (Afectado 1.0.2-1.0.2x)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.2",
            "versionEndExcluding" : "1.0.2y",
            "matchCriteriaId" : "F12DBEEA-AAB3-4383-A3E2-F865B960BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1j",
            "matchCriteriaId" : "90147138-26F0-42CF-A1DB-BE1853885CA6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657682A0-54D5-4DC6-A98E-8BAF685926C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8661D361-71B5-4C41-A818-C89EC551D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253603DC-2D92-442A-B3A8-A63E14D8A070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13.0",
            "versionEndIncluding" : "5.17.0",
            "matchCriteriaId" : "AC1721B5-9FCD-47C3-8338-E02932CF2C05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.1.1",
            "matchCriteriaId" : "FFDA8CE0-8F2C-4FA7-91F8-A720F56EBC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.6",
            "matchCriteriaId" : "168B0313-B7B6-4CD5-AD4F-C133050498BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.6",
            "matchCriteriaId" : "E1BB03E7-7DC3-404B-AD37-78849BE46420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.1",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "617E79BC-1012-4778-BDE7-44A238CC8D7A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4367D9B-BF81-47AD-A840-AC46317C774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61516569-C48F-4362-B334-8CA10EDB0EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B095CC03-7077-4A58-AB25-CC5380CDCE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CAD50-749F-4ADB-A046-BF3585677A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.23",
            "matchCriteriaId" : "44B24982-87BE-4563-8B7E-D846607B641B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7.33",
            "matchCriteriaId" : "C9E14DE8-29C1-4C0C-9B31-2E3A11EE68E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.15",
            "versionEndExcluding" : "8.0.23",
            "matchCriteriaId" : "FBE10671-5C91-4ACF-ABD2-255E9F2F9D79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0",
            "matchCriteriaId" : "C89891C1-DFD7-4E1F-80A9-7485D86A15B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4664B195-AF14-4834-82B3-0B2C98020EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_ins:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "75BC588E-CDF0-404E-AD61-02093A1DF343"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/May/67",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/68",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/70",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0009/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://support.apple.com/kb/HT212528",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212529",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212534",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4855",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210216.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=122a19ab48091c657f7cb1fb3af9fc07bd557bbf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=8252ee4d90f3f2004d3d0aeeed003ad49c9a7807",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210219-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/kb/HT212528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210216.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21316",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-16T18:15:12.490",
      "lastModified" : "2024-11-21T05:48:00.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "less-openui5 is an npm package which enables building OpenUI5 themes with Less.js. In less-openui5 before version 0.10., when processing theming resources (i.e. `*.less` files) with less-openui5 that originate from an untrusted source, those resources might contain JavaScript code which will be executed in the context of the build process. While this is a feature of the Less.js library it is an unexpected behavior in the context of OpenUI5 and SAPUI5 development. Especially in the context of UI5 Tooling which relies on less-openui5. An attacker might create a library or theme-library containing a custom control or theme, hiding malicious JavaScript code in one of the .less files. Refer to the referenced GHSA-3crj-w4f5-gwh4 for examples. Starting with Less.js version 3.0.0, the Inline JavaScript feature is disabled by default. less-openui5 however currently uses a fork of Less.js v1.6.3. Note that disabling the Inline JavaScript feature in Less.js versions 1.x, still evaluates code has additional double codes around it. We decided to remove the inline JavaScript evaluation feature completely from the code of our Less.js fork. This fix is available in less-openui5 version 0.10.0."
      }, {
        "lang" : "es",
        "value" : "less-openui5 es un paquete npm que permite construir temas de OpenUI5 con Less.js. En less-openui5 versiones anteriores a 0.10., cuando se procesan recursos de tematización (es decir, archivos \"*.less\") con less-openui5 que se originan desde una fuente no confiable, esos recursos podrían contener código JavaScript que se ejecutará en el contexto del proceso de compilación. Aunque esta es una funcionalidad de la biblioteca Less.js, es un comportamiento inesperado en el contexto del desarrollo de OpenUI5 y SAPUI5. Especialmente en el contexto de UI5 Tooling que depende de less-openui5. Un atacante podría crear una biblioteca o biblioteca de tema que contenga un control o tema personalizado, ocultando código JavaScript malicioso en uno de los archivos .less. Consulte la referencia GHSA-3crj-w4f5-gwh4 para visualizar ejemplos. A partir de Less.js versión 3.0.0, la función Inline JavaScript está deshabilitada por defecto. Sin embargo, less-openui5 usa actualmente un derivación de Less.js versión v1.6.3. Note que al deshabilitar la funcionalidad Inline JavaScript en las versiones 1.x de Less.js, se sigue evaluando el código con códigos dobles adicionales a su alrededor. Hemos decidido eliminar completamente la funcionalidad de evaluación de JavaScript en línea del código de nuestra derivación de Less.js. Esta corrección está disponible en less-openui5 versión 0.10.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:less-openui5_project:less-openui5:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.10.0",
            "matchCriteriaId" : "3708A086-29BC-4569-9966-7E17A3063DD6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lesscss.org/usage/#less-options-enable-inline-javascript-deprecated-",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/less-openui5/commit/c0d3a8572974a20ea6cee42da11c614a54f100e8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/less-openui5/releases/tag/v0.10.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/less-openui5/security/advisories/GHSA-3crj-w4f5-gwh4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/less-openui5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://lesscss.org/usage/#less-options-enable-inline-javascript-deprecated-",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/less-openui5/commit/c0d3a8572974a20ea6cee42da11c614a54f100e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/less-openui5/releases/tag/v0.10.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SAP/less-openui5/security/advisories/GHSA-3crj-w4f5-gwh4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/less-openui5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21317",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-16T18:15:12.583",
      "lastModified" : "2024-11-21T05:48:00.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "uap-core in an open-source npm package which contains the core of BrowserScope's original user agent string parser. In uap-core before version 0.11.0, some regexes are vulnerable to regular expression denial of service (REDoS) due to overlapping capture groups. This allows remote attackers to overload a server by setting the User-Agent header in an HTTP(S) request to maliciously crafted long strings. This is fixed in version 0.11.0. Downstream packages such as uap-python, uap-ruby etc which depend upon uap-core follow different version schemes."
      }, {
        "lang" : "es",
        "value" : "uap-core en un paquete npm de código abierto que contiene el core del analizador de cadenas del agente de usuario original de BrowserScope.&#xa0;En uap-core versiones anteriores a 0.11.0, algunas expresiones regulares son vulnerables a una denegación de servicio de expresión regular (REDoS) debido a la superposición de grupos de captura.&#xa0;Esto permite a atacantes remotos sobrecargar un servidor configurando el encabezado User-Agent en una petición HTTP(S) en cadenas largas diseñadas maliciosamente.&#xa0;Esto es corregido en versión 0.11.0.&#xa0;Los paquetes posteriores como uap-python, uap-ruby, etc., que dependen de uap-core, siguen esquemas de versiones diferentes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uap-core_project:uap-core:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.11.0",
            "matchCriteriaId" : "77C70DB0-831D-4909-B87A-839C80F96572"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ua-parser/uap-core/commit/dc9925d458214cfe87b93e35346980612f6ae96c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ua-parser/uap-core/security/advisories/GHSA-p4pj-mg4r-x6v4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/uap-core",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ua-parser/uap-core/commit/dc9925d458214cfe87b93e35346980612f6ae96c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ua-parser/uap-core/security/advisories/GHSA-p4pj-mg4r-x6v4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/uap-core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T19:15:13.010",
      "lastModified" : "2024-11-21T05:57:39.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The admin panel in BlackCat CMS 1.3.6 allows stored XSS (by an admin) via the Display Name field to backend/preferences/ajax_save.php."
      }, {
        "lang" : "es",
        "value" : "El panel de administración en BlackCat CMS versión 1.3.6, permite un ataque de tipo XSS almacenado (por un administrador) por medio del campo Display Name para el archivo backend/preferences/ajax_save.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blackcat-cms:blackcat_cms:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43FE187C-677C-400B-ABED-9CFC115CCE9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackCatDevelopment/BlackCatCMS/commits/release-1.4/upload/backend/preferences/ajax_save.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackCatDevelopment/BlackCatCMS/compare/1.3.6...1.4Beta",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49565",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BlackCatDevelopment/BlackCatCMS/commits/release-1.4/upload/backend/preferences/ajax_save.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackCatDevelopment/BlackCatCMS/compare/1.3.6...1.4Beta",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20066",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:15.767",
      "lastModified" : "2024-11-21T05:45:51.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled."
      }, {
        "lang" : "es",
        "value" : "JSDom permite inapropiadamente la carga de recursos locales, lo que permite que los archivos locales sean manipulados por una página web maliciosa cuando la ejecución de script está habilitada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsdom_project:jsdom:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C10B28FE-6B6A-461E-98FF-B4B1894F7302"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-05",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsdom/jsdom/issues/3124#issuecomment-783502951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20067",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:15.923",
      "lastModified" : "2024-11-21T05:45:51.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a atacantes visualizar eventos de syslog confidenciales sin autenticación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20068",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:15.970",
      "lastModified" : "2024-11-21T05:45:51.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the error handling functionality of web pages."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a atacantes conducir ataques de tipo cross-site scripting por medio de la funcionalidad error handling de páginas web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20069",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.017",
      "lastModified" : "2024-11-21T05:45:52.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scripting attacks via the regionalSettings.php dialogs."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a atacantes conducir ataques de tipo cross-site scripting por medio de cuadros diálogos del archivo regionalSettings.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20070",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.067",
      "lastModified" : "2024-11-21T05:45:52.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the virtualization.php dialogs."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a atacantes conducir ataques de tipo cross-site scripting por medio de los cuadros de diálogo del archivo virtualization.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20071",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.110",
      "lastModified" : "2024-11-21T05:45:52.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to conduct cross-site scriptings attacks via the sms.php dialogs."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a atacantes conducir ataques de tipo cross-site scripting por medio de los cuadros de diálogo del archivo sms.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20072",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.157",
      "lastModified" : "2024-11-21T05:45:52.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an authenticated directory traveral."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a atacantes acceder y eliminar archivos arbitrariamente por medio de un salto de directorio autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:P/A:C",
            "baseScore" : 8.7,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20073",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.220",
      "lastModified" : "2024-11-21T05:45:52.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for cross-site request forgeries."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite ataques de tipo cross-site request forgery"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20074",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.283",
      "lastModified" : "2024-11-21T05:45:52.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows users to escape the provided command line interface and execute arbitrary OS commands."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite a usuarios escapar de la interfaz de línea de comandos proporcionada y ejecutar comandos arbitrarios del Sistema Operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20075",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-02-16T20:15:16.347",
      "lastModified" : "2024-11-21T05:45:52.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows for privilege escalation via configd."
      }, {
        "lang" : "es",
        "value" : "El dispositivo MIDGE de Racom versión de Firmware 4.4.40.105, contiene un problema que permite una escalada de privilegios por medio de configd"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:racom:m\\!dge_firmware:4.4.40.105:*:*:*:*:*:*:*",
            "matchCriteriaId" : "779C22FA-7C9D-484E-999E-B1015D0700A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:racom:m\\!dge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "421E1B5D-6A4A-47D9-8DEC-990D5C8F060A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27203",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T20:15:16.407",
      "lastModified" : "2024-11-21T05:57:34.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Dekart Private Disk 2.15, invalid use of the Type3 user buffer for IOCTL codes using METHOD_NEITHER results in arbitrary memory dereferencing."
      }, {
        "lang" : "es",
        "value" : "En Dekart Private Disk versión 2.15, un uso no válido del búfer del usuario Type3 para códigos IOCTL usando METHOD_NEITHER da como resultado una desreferencia de memoria arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dekart:private_disk:2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513BACB0-D083-43E5-B3FB-7DBB00F6304A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dekart.com/products/encryption/private_disk",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.rootshellsecurity.net/rootshell-discover-denial-of-service-flaw-dekart-private-disk-encryption-software/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dekart.com/products/encryption/private_disk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.rootshellsecurity.net/rootshell-discover-denial-of-service-flaw-dekart-private-disk-encryption-software/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T21:15:13.077",
      "lastModified" : "2025-11-03T15:06:03.827",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accellion FTA 9_12_370 and earlier is affected by SQL injection via a crafted Host header in a request to document_root.html. The fixed version is FTA_9_12_380 and later."
      }, {
        "lang" : "es",
        "value" : "Accellion versiones FTA 9_12_370 y anteriores, están afectadas por una inyección SQL por medio de un encabezado de Host diseñado en una petición al archivo document_root.html.&#xa0;La versión corregida es FTA_9_12_380 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Accellion FTA SQL Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:fta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_370",
            "matchCriteriaId" : "DF245E43-AB5D-44C8-BDD8-C43ADF45D966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27101.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27101.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27101",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T21:15:13.140",
      "lastModified" : "2025-11-03T15:06:07.610",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accellion FTA 9_12_411 and earlier is affected by OS command execution via a local web service call. The fixed version is FTA_9_12_416 and later."
      }, {
        "lang" : "es",
        "value" : "Accellion versiones FTA 9_12_411 y anteriores, está afectada por una ejecución de comandos del Sistema Operativo por medio de una llamada de servicio web local.&#xa0;La versión corregida es FTA_9_12_416 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Accellion FTA OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:fta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_411",
            "matchCriteriaId" : "A7BD1EA0-8D9D-449C-9D0A-1641EC942F77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27102.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27102.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27102",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T21:15:13.217",
      "lastModified" : "2025-11-03T15:08:35.423",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later."
      }, {
        "lang" : "es",
        "value" : "Accellion versiones FTA 9_12_411 y anteriores, están afectadas por una vulnerabilidad de tipo SSRF por medio de una petición POST diseñada para el archivo wmProgressstat.html.&#xa0;La versión corregida es FTA_9_12_416 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:fta:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9_12_416",
            "matchCriteriaId" : "B2830686-FC4A-4457-B4AD-1F583267B66B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27103.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Product" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27103.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Product" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27103",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-16T21:15:13.280",
      "lastModified" : "2025-11-03T15:08:31.467",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later."
      }, {
        "lang" : "es",
        "value" : "Accellion versiones FTA 9_12_370 y anteriores, está afectada por una ejecución de comandos del Sistema Operativo por medio de una petición POST diseñada para varios endpoints de administración.&#xa0;La versión corregida es FTA_9_12_380 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Accellion FTA OS Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:fta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_370",
            "matchCriteriaId" : "DF245E43-AB5D-44C8-BDD8-C43ADF45D966"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27104.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27104.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.accellion.com/products/fta/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27104",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T01:15:13.157",
      "lastModified" : "2024-11-21T05:57:04.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel 3.11 through 5.10.16, as used by Xen. To service requests to the PV backend, the driver maps grant references provided by the frontend. In this process, errors may be encountered. In one case, an error encountered earlier might be discarded by later processing, resulting in the caller assuming successful mapping, and hence subsequent operations trying to access space that wasn't mapped. In another case, internal state would be insufficiently updated, preventing safe recovery from the error. This affects drivers/block/xen-blkback/blkback.c."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones 3.11 hasta 5.10.16, como es usado Xen.&#xa0;Para atender las peticiones al backend de PV, los mapas de controladores otorgan referencias proporcionadas por el frontend.&#xa0;En este proceso, se pueden encontrar errores.&#xa0;En un caso, un error encontrado anteriormente podría descartarse mediante un procesamiento posterior, resultando en que la persona que llama asuma un mapeo exitoso y, por lo tanto, las operaciones posteriores intentan acceder al espacio que no fue asignado.&#xa0;En otro caso, el estado interno no se actualizaría lo suficiente, impidiendo una recuperación segura del error.&#xa0;Esto afecta al archivo drivers/block/xen-blkback/blkback.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndIncluding" : "5.10.16",
            "matchCriteriaId" : "9D13F863-285D-4B97-9E4D-2A78E7FC0CF7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xenbits.xen.org/xsa/advisory-365.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=871997bc9e423f05c7da7c9178e62dde5df2a7f8",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-365.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=871997bc9e423f05c7da7c9178e62dde5df2a7f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T02:15:12.987",
      "lastModified" : "2024-11-21T05:57:04.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel 2.6.39 through 5.10.16, as used in Xen. Block, net, and SCSI backends consider certain errors a plain bug, deliberately causing a kernel crash. For errors potentially being at least under the influence of guests (such as out of memory conditions), it isn't correct to assume a plain bug. Memory allocations potentially causing such crashes occur only when Linux is running in PV mode, though. This affects drivers/block/xen-blkback/blkback.c and drivers/xen/xen-scsiback.c."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones 2.6.39 hasta 5.10.16, como es usado en Xen.&#xa0;Los backends de bloque, red y SCSI consideran determinados errores como un bug simple, causando deliberadamente un bloqueo del kernel.&#xa0;Para los errores que pueden estar al menos bajo la influencia de los invitados (como las condiciones de falta de memoria), no es correcto suponer un bug simple.&#xa0;Sin embargo, las asignaciones de memoria que pueden causar tales bloqueos ocurren solo cuando Linux se ejecuta en modo PV.&#xa0;Esto afecta a los archivos drivers/block/xen-blkback/blkback.c y drivers/xen/xen-scsiback.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.39",
            "versionEndIncluding" : "5.10.16",
            "matchCriteriaId" : "60442DCE-D80D-4512-BAE8-E1C5E54BBBF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xenbits.xen.org/xsa/advisory-362.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3194a1746e8aabe86075fd3c5e7cf1f4632d7f16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a264285ed1cd32e26d9de4f3c8c6855e467fd63",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7c77474b2d22176d2bfb592ec74e0f2cb71352c9",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-362.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=3194a1746e8aabe86075fd3c5e7cf1f4632d7f16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=5a264285ed1cd32e26d9de4f3c8c6855e467fd63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7c77474b2d22176d2bfb592ec74e0f2cb71352c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T02:15:13.033",
      "lastModified" : "2024-11-21T05:57:04.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then loops over the results, performing follow-up actions based on the success or failure of each operation. Unfortunately, when running in PV mode, the Linux backend drivers mishandle this: Some errors are ignored, effectively implying their success from the success of related batch elements. In other cases, errors resulting from one batch element lead to further batch elements not being inspected, and hence successful ones to not be possible to properly unmap upon error recovery. Only systems with Linux backends running in PV mode are vulnerable. Linux backends run in HVM / PVH modes are not vulnerable. This affects arch/*/xen/p2m.c and drivers/xen/gntdev.c."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones 3.2 hasta 5.10.16, tal como es usado Xen.&#xa0;Las operaciones de mapeo de concesiones a menudo ocurren hiperllamadas por lotes, donde se realizan varias operaciones en una sola hiperllamada, el éxito o el fallo de cada una es reportada al controlador del backend, y el controlador del backend luego recorre los resultados, llevando a cabo acciones de seguimiento en función del éxito o fallo de cada operación.&#xa0;Desafortunadamente, cuando se ejecuta en modo PV, los controladores del backend de Linux manejan inapropiadamente esto: algunos errores son ignorados, lo que implica efectivamente su éxito por el éxito de los elementos de lote relacionados.&#xa0;En otros casos, los errores que resultan de un elemento del lote conllevan a que no se inspeccionen más elementos del lote y, por lo tanto, no es posible desasignar apropiadamente los correctos tras la recuperación del error.&#xa0;Solo los sistemas con backends de Linux que se ejecutan en modo PV son vulnerables.&#xa0;Los backends de Linux que se ejecutan en modos HVM / PVH no son vulnerables.&#xa0;Esto afecta a los archivos arch/*/xen/p2m.c y drivers/xen/gntdev.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndIncluding" : "5.10.16",
            "matchCriteriaId" : "02DED9BD-F021-49CC-B2D3-C92E5DBEF3AF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire\\,_enterprise_sds_\\&_hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA3919C-B2B1-4CB5-BA76-7A079AAFFC52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFE5CAF-ACA7-4F82-BEC1-69562D75E66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:hci_h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C564D8-E21F-403C-B4BB-7B14B7FB5DAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:hci_h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8532F5F0-00A1-4FA9-A80B-09E46D03F74F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xenbits.xen.org/xsa/advisory-361.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ebee0eab08594b2bd5db716288a4f1ae5936e9bc",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-361.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ebee0eab08594b2bd5db716288a4f1ae5936e9bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQR52ICKRK3GC4HDWLMWF2U55YGAR63/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWQWPWYZRXVFJI5M3VCM72X27IB7CKOB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T02:15:13.097",
      "lastModified" : "2024-11-21T05:57:04.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen 4.9 through 4.14.x. On Arm, a guest is allowed to control whether memory accesses are bypassing the cache. This means that Xen needs to ensure that all writes (such as the ones during scrubbing) have reached the memory before handing over the page to a guest. Unfortunately, the operation to clean the cache is happening before checking if the page was scrubbed. Therefore there is no guarantee when all the writes will reach the memory."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Xen versiones 4.9 hasta 4.14.x.&#xa0;En Arm, un invitado puede controlar si los accesos a la memoria pasan por encima de la caché. Esto significa que Xen necesita asegurarse de que todas las escrituras (como las que se producen durante el scrubbing) han llegado a la memoria antes de entregar la página a un invitado. Desgraciadamente, la operación de limpieza de la caché se realiza antes de comprobar si la página ha sido limpiada. Por lo tanto, no existe garantía de que todas las escrituras lleguen a la memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:arm:*",
            "versionStartIncluding" : "4.9.0",
            "versionEndIncluding" : "4.14.1",
            "matchCriteriaId" : "495F24F7-FCA8-44DB-9B3B-BCD2997536F6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xenbits.xen.org/xsa/advisory-364.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GELN5E6MDR5KQBJF5M5COUUED3YFZTD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOAJBVAVR6RSCUCHNXPVSNRPSFM7INMP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-364.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GELN5E6MDR5KQBJF5M5COUUED3YFZTD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOAJBVAVR6RSCUCHNXPVSNRPSFM7INMP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T02:15:13.143",
      "lastModified" : "2024-11-21T05:57:04.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel 4.18 through 5.10.16, as used by Xen. The backend allocation (aka be-alloc) mode of the drm_xen_front drivers was not meant to be a supported configuration, but this wasn't stated accordingly in its support status entry."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones 4.18 hasta 5.10.16, como es usado por Xen. El modo de asignación del backend de los controladores drm_xen_front no estaba destinado a ser una configuración soportada, pero esto no fue declarado por consiguiente en su entrada de estado de soporte"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.18",
            "versionEndIncluding" : "5.10.16",
            "matchCriteriaId" : "E6CF7320-1265-46D5-8034-B91B12D9FF6D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://xenbits.xen.org/xsa/advisory-363.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GELN5E6MDR5KQBJF5M5COUUED3YFZTD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOAJBVAVR6RSCUCHNXPVSNRPSFM7INMP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-363.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4GELN5E6MDR5KQBJF5M5COUUED3YFZTD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOAJBVAVR6RSCUCHNXPVSNRPSFM7INMP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20653",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-17T03:15:12.210",
      "lastModified" : "2024-11-21T05:46:57.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calsos CSDJ (CSDJ-B 01.08.00 and earlier, CSDJ-H 01.08.00 and earlier, CSDJ-D 01.08.00 and earlier, and CSDJ-A 03.08.00 and earlier) allows remote attackers to bypass access restriction and to obtain unauthorized historical data without access privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Calsos CSDJ (CSDJ-B versiones 01.08.00 y anteriores, CSDJ-H versiones 01.08.00 y anteriores, CSDJ-D versiones 01.08.00 y anteriores, y CSDJ-A versiones 03.08.00 y anteriores), permite a atacantes remotos omitir la restricción de acceso y obtener datos históricos no autorizados sin privilegios de acceso por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:csdj-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.08.00",
            "matchCriteriaId" : "60624A2B-2A3C-4333-A645-327DF825DD5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:csdj-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4BD38A7-5D74-441C-8BBB-542932FA3C32"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:csdj-h_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.08.00",
            "matchCriteriaId" : "B8DD7FC5-7ED4-481B-B4A0-B3144E4F0F1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:csdj-h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81E05164-5B82-47BC-9B79-0DAFAB82D603"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:csdj-d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.08.00",
            "matchCriteriaId" : "377D780A-7893-46FB-A507-C05565B158B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:csdj-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B30D061-6EB9-4524-AA80-41676777CFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:csdj-a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "03.08.00",
            "matchCriteriaId" : "AA71F885-D385-4EBD-A544-9CDB5227C6C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:csdj-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE75BF33-2910-48A9-915E-D043DA500E5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-006.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87164507/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN87164507/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20655",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-17T03:15:12.290",
      "lastModified" : "2024-11-21T05:46:57.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FileZen (V3.0.0 to V4.2.7 and V5.0.0 to V5.0.2) allows a remote attacker with administrator rights to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "FileZen (versiones V3.0.0 hasta V4.2.7 y versiones V5.0.0 hasta V5.0.2) permite a un atacante remoto con derechos de administrador ejecutar comandos arbitrarios del Sistema Operativo por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soliton:filezen:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "4.2.7",
            "matchCriteriaId" : "F56BC33B-7DF8-4756-AA3A-BE6BF13F11EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soliton:filezen:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "0CEEA681-E1F2-4A87-BDEC-2467A152A2E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN58774946/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.soliton.co.jp/support/2021/004334.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN58774946/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.soliton.co.jp/support/2021/004334.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23339",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-17T08:15:11.330",
      "lastModified" : "2024-11-21T05:51:31.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions before 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones anteriores a 10.1.14 y desde la versión 10.2.0 a la versión 10.2.4 del paquete com.typesafe.akka:akka-http-core.&#xa0;Este permite múltiples encabezados Transfer-Encoding"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightbend:akka-http:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.14",
            "matchCriteriaId" : "70AE43A8-E0C9-4A8F-8187-59DA2ED3B4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightbend:akka-http:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.4",
            "matchCriteriaId" : "B4914037-70FB-4FB2-9229-AC372D5E2064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/akka/akka-http/pull/3754%23issuecomment-779265201",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-COMTYPESAFEAKKA-1075043",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/akka/akka-http/pull/3754%23issuecomment-779265201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-COMTYPESAFEAKKA-1075043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23885",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-02-17T10:15:12.647",
      "lastModified" : "2024-11-21T05:52:00.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege escalation vulnerability in McAfee Web Gateway (MWG) prior to 9.2.8 allows an authenticated user to gain elevated privileges through the User Interface and execute commands on the appliance via incorrect improper neutralization of user input in the troubleshooting page."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios en McAfee Web Gateway (MWG) versiones anteriores a 9.2.8, permite a un usuario autenticado alcanzar privilegios elevados por medio de la interfaz de usuario y ejecutar comandos en el dispositivo por medio de la neutralización inapropiada e incorrecta de la entrada del usuario en la página de solución de problemas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.17",
            "matchCriteriaId" : "368112E1-3BB1-4EA4-8C7B-23C16C5ADA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2",
            "versionEndExcluding" : "9.2.8",
            "matchCriteriaId" : "74D83AD2-38B7-447F-8E0D-61E8E95E2EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.0.4",
            "matchCriteriaId" : "2109DF5C-07B8-4F9B-B4C2-41A62B5CFD89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10349",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22856",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-02-17T11:15:15.443",
      "lastModified" : "2024-11-21T05:50:46.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CGE property management system contains SQL Injection vulnerabilities. Remote attackers can inject SQL commands into the parameters in Cookie and obtain data in the database without privilege."
      }, {
        "lang" : "es",
        "value" : "El sistema de administración de propiedades de CGE contiene vulnerabilidades de inyección SQL.&#xa0;Unos atacantes remotos pueden inyectar comandos SQL hacia los parámetros en la Cookie y obtener datos en la base de datos sin privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changjia_property_management_system_project:changjia_property_management_system:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF36CF4-9611-4BAA-A01F-82C874316257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4394-76d41-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4394-76d41-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22857",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-02-17T11:15:15.710",
      "lastModified" : "2024-11-21T05:50:46.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CGE page with download function contains a Directory Traversal vulnerability. Attackers can use this loophole to download system files arbitrarily."
      }, {
        "lang" : "es",
        "value" : "La página de CGE con la función de descarga contiene una vulnerabilidad de Salto de Directorio.&#xa0;Unos atacantes pueden usar esta laguna para descargar archivos del sistema de forma arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changjia_property_management_system_project:changjia_property_management_system:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF36CF4-9611-4BAA-A01F-82C874316257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4395-c01f7-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4395-c01f7-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22858",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-02-17T11:15:15.817",
      "lastModified" : "2024-11-21T05:50:46.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Attackers can access the CGE account management function without privilege for permission elevation and execute arbitrary commands or files after obtaining user permissions."
      }, {
        "lang" : "es",
        "value" : "Unos atacante pueden acceder a la función de administración de cuentas de CGE sin privilegios para la elevación de permisos y ejecutar comandos o archivos arbitrarios después de obtener unos permisos de usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changjia_property_management_system_project:changjia_property_management_system:1.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DF36CF4-9611-4BAA-A01F-82C874316257"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4396-e6d44-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/fe1e30ef-4dac-4848-a3c9-a7df12672422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4396-e6d44-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22553",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2021-02-17T12:15:12.063",
      "lastModified" : "2024-11-21T05:50:19.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Any git operation is passed through Jetty and a session is created. No expiry is set for the session and Jetty does not automatically dispose of the session. Over multiple git actions, this can lead to a heap memory exhaustion for Gerrit servers. We recommend upgrading Gerrit to any of the versions listed above."
      }, {
        "lang" : "es",
        "value" : "Cualquier operación git es pasada a través de Jetty y es creada una sesión. No es ajustada ninguna fecha de expiración para la sesión y Jetty no elimina automáticamente la sesión. Durante múltiples acciones git, esto puede conllevar a un agotamiento de la memoria de la pila para los servidores de Gerrit. Recomendamos actualizar Gerrit a cualquiera de las versiones mencionadas anteriormente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.15.22",
            "matchCriteriaId" : "CA106DC3-BD15-42E3-80D1-C83267AE45D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.16.0",
            "versionEndExcluding" : "2.16.26",
            "matchCriteriaId" : "86ABAE59-1B32-4598-9513-793862CCC88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.16",
            "matchCriteriaId" : "CB09EBE5-D228-49EE-80AC-978661C5284A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.12",
            "matchCriteriaId" : "E263BE88-AF2F-4D06-A7CF-A9D806EC3A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.7",
            "matchCriteriaId" : "D5660350-95CD-4E70-A2A7-92D4E0554776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:gerrit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.3.0",
            "versionEndExcluding" : "3.3.2",
            "matchCriteriaId" : "8D44029D-AC7C-4D24-BEEA-25712B1DF63D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/gerrit/issues/detail?id=13858",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/gerrit/issues/detail?id=13858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0109",
      "sourceIdentifier" : "secure@intel.com",
      "published" : "2021-02-17T14:15:19.077",
      "lastModified" : "2024-11-21T05:41:51.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure inherited permissions for the Intel(R) SOC driver package for STK1A32SC before version 604 may allow an authenticated user to potentially enable escalation of privilege via local access."
      }, {
        "lang" : "es",
        "value" : "Los permisos heredados no seguros para el paquete de controladores Intel® SOC para STK1A32SC versión anterior a 604, pueden permitir a un usuario autenticado habilitar potencialmente una escalada de privilegios por medio de un acceso local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intel:compute_stick_stk1a32sc_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "604",
            "matchCriteriaId" : "467BCDD9-D447-46EE-B719-5AAE051AE9DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intel:compute_stick_stk1a32sc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74313836-5B68-44CE-915F-C92C8E771BAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00471.html",
        "source" : "secure@intel.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00471.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22853",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-02-17T14:15:19.153",
      "lastModified" : "2024-11-21T05:50:46.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HR Portal of Soar Cloud System fails to manage access control. While obtaining user ID, remote attackers can access sensitive data via a specific data packet, such as user’s login information, further causing the login function not to work."
      }, {
        "lang" : "es",
        "value" : "El HR Portal de Soar Cloud System presenta un fallo al manejar el control de acceso. Mientras obtienen el ID del usuario, los atacantes remotos pueden acceder a datos confidenciales por medio de un paquete de datos específico, tal y como la información de inicio de sesión del usuario, causando que la función de inicio de sesión no funcione"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hr_portal_project:hr_portal:7.3.2020.1013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A24E7-A9EE-4C23-AFD7-8CB76F13A56E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4403-8eb68-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4403-8eb68-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22854",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-02-17T14:15:19.263",
      "lastModified" : "2024-11-21T05:50:46.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HR Portal of Soar Cloud System fails to filter specific parameters. Remote attackers can inject SQL syntax and obtain all data in the database without privilege."
      }, {
        "lang" : "es",
        "value" : "El HR Portal de Soar Cloud System presenta un fallo al filtrar parámetros específicos.&#xa0;Los atacantes remotos pueden inyectar sintaxis SQL y obtener todos los datos de la base de datos sin privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hr_portal_project:hr_portal:7.3.2020.1013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A24E7-A9EE-4C23-AFD7-8CB76F13A56E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4404-3f498-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4404-3f498-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22855",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-02-17T14:15:19.327",
      "lastModified" : "2024-11-21T05:50:46.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function of HR Portal of Soar Cloud System accepts any type of object to be deserialized. Attackers can send malicious serialized objects to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "La función específica de HR Portal de Soar Cloud System acepta cualquier tipo de objeto para ser deserializado.&#xa0;Los atacantes pueden enviar objetos serializados maliciosos para ejecutar comandos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hr_portal_project:hr_portal:7.3.2020.1013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A24E7-A9EE-4C23-AFD7-8CB76F13A56E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4405-2ddde-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/d334641f-2b28-4eab-a5ed-c6ec6740557e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4405-2ddde-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22173",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-02-17T15:15:13.140",
      "lastModified" : "2024-11-21T05:49:38.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "Una fuga de memoria en el disector HID USB en Wireshark versiones 3.4.0 hasta 3.4.2, permite una denegación de servicio por medio de una inyección de paquetes o archivo de captura diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.3",
            "matchCriteriaId" : "B16CB4A7-022F-4475-98DC-51F9A50659E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22173.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17124",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-01.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22173.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22174",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-02-17T15:15:13.283",
      "lastModified" : "2024-11-21T05:49:38.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Crash in USB HID dissector in Wireshark 3.4.0 to 3.4.2 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "Un bloqueo en el disector HID USB en Wireshark versiones 3.4.0 hasta 3.4.2, permite una denegación de servicio por medio de una inyección de paquetes o un archivo de captura diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.3",
            "matchCriteriaId" : "B16CB4A7-022F-4475-98DC-51F9A50659E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22174.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17165",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-02.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22174.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GND3PIQC3KZALR227V4YUMPKJBA5BZG4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYXLKQJ3D632XSG6VO7M4YFDAG6GRCLY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T15:15:13.360",
      "lastModified" : "2025-11-18T20:01:33.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page."
      }, {
        "lang" : "es",
        "value" : "Baby Care System versión v1.0, es vulnerable a una inyección de SQL por medio del parámetro \"id\" en la página contentsectionpage.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CE41EF-8BBD-48C2-871E-5FE729477690"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TCSWT/Baby-Care-System/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TCSWT/Baby-Care-System/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T15:15:13.423",
      "lastModified" : "2025-11-18T20:01:33.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de carga de archivos arbitraria en el archivo posts.php en Baby Care System versión 1.0.&#xa0;La vulnerabilidad podría ser explotada por un atacante remoto para cargar contenido en el servidor, incluyendo archivos PHP, lo que podría resultar en una ejecución de comandos y obtención de un shell"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:baby_care_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42CE41EF-8BBD-48C2-871E-5FE729477690"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TCSWT/Baby-Care-System/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TCSWT/Baby-Care-System/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26559",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-02-17T15:15:13.500",
      "lastModified" : "2024-11-21T05:56:28.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control on Configurations Endpoint for the Stable API of Apache Airflow allows users with Viewer or User role to get Airflow Configurations including sensitive information even when `[webserver] expose_config` is set to `False` in `airflow.cfg`. This allowed a privilege escalation attack. This issue affects Apache Airflow 2.0.0."
      }, {
        "lang" : "es",
        "value" : "Un Control de Acceso Inapropiado en el Endpoint Configurations para la API Stable de Apache Airflow permite a usuarios con rol de Visualizadores o Usuario obtener Configuraciones de Airflow, incluyendo información confidencial, incluso cuando \"[webserver] expose_config\" está configurado como \"False\" en \"airflow.cfg\".&#xa0;Esto permitió un ataque de escalada de privilegios.&#xa0;Este problema afecta a Apache Airflow versión 2.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A12F59D-265C-4E88-A7A9-0A972A45408D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/17/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb26891a12ce864e4a13c8d%40%3Cusers.airflow.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rd142565996d7ee847b9c14b8a9921dcf80bc6bc160e3d9dca6dfc2f8%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r3b3787700279ec361308cbefb7c2cce2acb26891a12ce864e4a13c8d%40%3Cusers.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rd142565996d7ee847b9c14b8a9921dcf80bc6bc160e3d9dca6dfc2f8%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26697",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-02-17T15:15:13.593",
      "lastModified" : "2024-11-21T05:56:41.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The lineage endpoint of the deprecated Experimental API was not protected by authentication in Airflow 2.0.0. This allowed unauthenticated users to hit that endpoint. This is low-severity issue as the attacker needs to be aware of certain parameters to pass to that endpoint and even after can just get some metadata about a DAG and a Task. This issue affects Apache Airflow 2.0.0."
      }, {
        "lang" : "es",
        "value" : "El endpoint lineage de la API Experimental obsoleta no estaba protegido por autenticación en Airflow versión 2.0.0.&#xa0;Esto permitió a usuarios no autenticados llegar a ese endpoint.&#xa0;Este es un problema de baja gravedad, ya que el atacante debe estar consciente de determinados parámetros para pasar a ese endpoint e incluso después puede obtener algunos metadatos sobre un DAG y una tarea.&#xa0;Este problema afecta a Apache Airflow versión 2.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A12F59D-265C-4E88-A7A9-0A972A45408D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/17/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r36111262a59219a3e2704c71e97cf84937dae5ba7a1da99499e5d8f9%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cdev.airflow.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/17/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r36111262a59219a3e2704c71e97cf84937dae5ba7a1da99499e5d8f9%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cdev.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re21fec81baea7a6d73b0b5d31efd07cc02c61f832e297f65bb19b519%40%3Cusers.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26809",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T15:15:13.673",
      "lastModified" : "2024-11-21T05:56:50.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PHPGurukul Car Rental Project version 2.0 suffers from a remote shell upload vulnerability in changeimage1.php."
      }, {
        "lang" : "es",
        "value" : "PHPGurukul Car Rental Project versión 2.0, sufre una vulnerabilidad de carga remota de shell en el archivo changeimage1.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:car_rental_portal:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966C918E-9D08-4392-91DD-7B25971858E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/161267/Car-Rental-Project-2.0-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49520",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161267/Car-Rental-Project-2.0-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T16:15:13.040",
      "lastModified" : "2024-11-21T05:57:38.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "El plugin WPG versión anterior a 3.1.0.0 para IrfanView 4.57, presenta una Violación de Acceso de Lectura en el Flujo de Control que comienza en WPG + 0x0000000000012ec6, lo que podría permitir a atacantes remotos ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:wpg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.0.0",
            "matchCriteriaId" : "75D45F47-A45A-422F-968F-529AC6774381"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8FA69A-368E-4EA1-9604-930C96A2D196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161449/IrfanView-4.57-Denial-Of-Service-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161449/IrfanView-4.57-Denial-Of-Service-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T16:15:13.117",
      "lastModified" : "2024-11-21T05:57:50.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a Read Access Violation on Control Flow starting at WPG!ReadWPG_W+0x0000000000000133, which might allow remote attackers to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "El plugin WPG versión anterior a 3.1.0.0 para IrfanView versión 4.57, presenta una Violación de Acceso de Lectura en el Flujo de Control que comienza en WPG! ReadWPG_W+0x0000000000000133, lo que podría permitir a atacantes remotos ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:irfanview:wpg:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.0.0",
            "matchCriteriaId" : "75D45F47-A45A-422F-968F-529AC6774381"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:irfanview:irfanview:4.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B8FA69A-368E-4EA1-9604-930C96A2D196"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.irfanview.com/plugins.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-irfanview-wpg/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.irfanview.com/plugins.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1351",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-17T17:15:11.863",
      "lastModified" : "2024-11-21T05:44:09.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based interface of Cisco Webex Meetings could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web-based interface of the affected service. The vulnerability is due to insufficient validation of user-supplied input by the web-based interface of the affected service. An attacker could exploit this vulnerability by persuading a user of the interface to click a maliciously crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz basada en web de Cisco Webex Meetings, podría permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz basada en web del servicio afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por el usuario mediante la interfaz basada en web del servicio afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario de la interfaz para que haga clic en un enlace diseñado maliciosamente.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:41.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90DCF524-259C-4C15-89C4-ED271D2BF9F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-Lz6HbGCt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-xss-Lz6HbGCt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1366",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-17T17:15:12.643",
      "lastModified" : "2024-11-21T05:44:11.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected device if the VPN Posture (HostScan) Module is installed on the AnyConnect client. This vulnerability is due to insufficient validation of resources that are loaded by the application at run time. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to execute arbitrary code on the affected machine with SYSTEM privileges. To exploit this vulnerability, the attacker needs valid credentials on the Windows system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el canal de comunicación entre procesos (IPC) de Cisco AnyConnect Secure Mobility Client para Windows, podría permitir a un atacante local autenticado realizar un ataque de secuestro de DLL en un dispositivo afectado si el módulo VPN Posture (HostScan) está instalado en el cliente AnyConnect.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de los recursos que carga la aplicación en tiempo de ejecución.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío un mensaje IPC diseñado al proceso AnyConnect.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en la máquina afectada con privilegios SYSTEM.&#xa0;Para explotar esta vulnerabilidad, el atacante necesita credenciales válidas en el sistema Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.05042",
            "matchCriteriaId" : "D1CDA351-7CDE-4550-BAFB-8EDB7508E7AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-hijac-JrcTOQMC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dll-hijac-JrcTOQMC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1372",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-17T17:15:13.020",
      "lastModified" : "2024-11-21T05:44:12.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Webex Meetings Desktop App and Webex Productivity Tools for Windows could allow an authenticated, local attacker to gain access to sensitive information on an affected system. This vulnerability is due to the unsafe usage of shared memory by the affected software. An attacker with permissions to view system memory could exploit this vulnerability by running an application on the local system that is designed to read shared memory. A successful exploit could allow the attacker to retrieve sensitive information from the shared memory, including usernames, meeting information, or authentication tokens. Note: To exploit this vulnerability, an attacker must have valid credentials on a Microsoft Windows end-user system and must log in after another user has already authenticated with Webex on the same end-user system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Webex Meetings Desktop App y Webex Productivity Tools para Windows, podría permitir a un atacante local autenticado obtener acceso a información confidencial en un sistema afectado.&#xa0;Esta vulnerabilidad es debido al uso no seguro de la memoria compartida por parte del software afectado.&#xa0;Un atacante con permisos para visualizar la memoria del sistema podría explotar esta vulnerabilidad ejecutando una aplicación en el sistema local diseñada para leer la memoria compartida.&#xa0;Una explotación con éxito podría permitir al atacante recuperar información confidencial de la memoria compartida, incluyendo nombres de usuario, información de reuniones o tokens de autenticación.&#xa0;Nota: Para aprovechar esta vulnerabilidad, un atacante debe tener credenciales válidas en un sistema de usuario final de Microsoft Windows y debe iniciar sesión después de que otro usuario ya se haya autenticado con Webex en el mismo sistema de usuario final"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-202"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:slow_channel:*:*:*",
            "versionEndExcluding" : "40.6",
            "matchCriteriaId" : "F7D08553-62A9-47B7-833D-B96489758028"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:latest_channel:*:*:*",
            "versionEndExcluding" : "40.10",
            "matchCriteriaId" : "2949195F-BF83-42E4-806B-614363AB83C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0",
            "matchCriteriaId" : "DCF06551-3FF4-4BCD-9EE4-75EFCE7BBCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4D6CF856-093A-4E89-A71D-50A2887C265B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1:*:*:*:*:*:*",
            "matchCriteriaId" : "B36A9043-0621-43CD-BFCD-66529F937859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2:*:*:*:*:*:*",
            "matchCriteriaId" : "8842B42E-C412-4356-9F54-DFC53B683D3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3:*:*:*:*:*:*",
            "matchCriteriaId" : "D25BC647-C569-46E5-AD45-7E315EBEB784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3_security_patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "EA561408-D53D-43B9-A464-A413EC2E083E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wda-pt-msh-6LWOcZ5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wda-pt-msh-6LWOcZ5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1378",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-17T17:15:13.583",
      "lastModified" : "2024-11-21T05:44:13.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SSH service of the Cisco StarOS operating system could allow an unauthenticated, remote attacker to cause an affected device to stop processing traffic, resulting in a denial of service (DoS) condition. The vulnerability is due to a logic error that may occur under specific traffic conditions. An attacker could exploit this vulnerability by sending a series of crafted packets to an affected device. A successful exploit could allow the attacker to prevent the targeted service from receiving any traffic, which would lead to a DoS condition on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio SSH del sistema operativo Cisco StarOS podría permitir a un atacante remoto no autenticado causar que un dispositivo afectado dejara de procesar el tráfico, resultando en una condición de denegación de servicio (DoS).&#xa0;La vulnerabilidad es debido a un error lógico que puede ocurrir en condiciones de tráfico específicas.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío una serie de paquetes diseñados hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante impedir que el servicio apuntado reciba cualquier tráfico, lo que conllevaría a una condición de DoS en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:staros:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.9.0",
            "versionEndIncluding" : "21.19.10",
            "matchCriteriaId" : "6641C2A8-1E57-4C46-A9E7-3A4177E5FC84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-StarOS-DoS-RLLvGFJj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-StarOS-DoS-RLLvGFJj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1412",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-17T17:15:13.987",
      "lastModified" : "2024-11-21T05:44:17.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An attacker with read-only administrator access to the Admin portal could exploit these vulnerabilities by browsing to one of the pages that contains sensitive data. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el portal de Administración de Cisco Identity Services Engine (ISE), podrían permitir a un atacante remoto autenticado obtener información confidencial.&#xa0;Estas vulnerabilidades son debido a una aplicación inapropiada de los niveles de privilegios del administrador para datos confidenciales.&#xa0;Un atacante con acceso de administrador de solo lectura al portal de administración podría explotar estas vulnerabilidades al navegar en una de las páginas que contiene datos confidenciales.&#xa0;Una explotación con éxito podría permitir al atacante recopilar información confidencial sobre la configuración del sistema.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "3115779E-040F-457B-AE4D-8685A59DB1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2FE2F6-5AE9-4A7C-B3A1-ADBCF2943E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBADFC2-2932-47F7-A547-B5248D1D1A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A829408-50C6-42D7-AFF9-86B965FD069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "6127E2E2-203B-41BF-ADB8-ACA28D12C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD91197-CEBB-41A5-B1D9-46ADC0C3F12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "49910CE9-E408-49B0-9FB1-0D5CAEE2F0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "B587597C-3F72-4E5D-A965-DF7C5E2F0014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4F2F0A-6525-4C41-B67F-989BD67AF376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "439948AD-C95D-4FC3-ADD1-C3D241529F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "934E62A3-4968-484A-8ECC-70027DC70C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId" : "84A3C461-ADFC-4352-86F8-06E32F762BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId" : "47989AE7-2B37-4424-80CD-61C48599100D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch12:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D220CF-8178-4F26-B1C3-175A10EBD65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch13:*:*:*:*:*:*",
            "matchCriteriaId" : "16A0985C-38A7-401D-9BE1-4FB06105416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "62B24B6A-1AAA-491E-BD23-4841B101E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CF4B74-F6A8-4D90-87A2-888708B4590C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF76083-7F81-4470-B363-083144609686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "C6973D7D-6638-4E86-A28A-0CEA425C53E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "D52BC38C-69B9-483D-B975-B7C27CFBA336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3BA3F0-8635-439D-9B77-0B7713FBF8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5923013-0A76-4109-A58C-62754D7CF0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId" : "65B47822-FED9-4073-885C-9228599C036D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8B45856E-6BE4-40A7-AE2F-4F9DC9315875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6D1780-3306-4481-A3CD-8F7732D955CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "07BF9702-0607-49A1-A82A-E4ADF1A4135F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "11AA4EC0-6F3C-45A9-9AA4-0D81876F44B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4B88F0-3229-4B07-9308-C37C794595A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "E02F0E61-FBFF-4C6D-9132-E266FF67802B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "541EC483-540A-4080-AA69-82A0F30EE3D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFE97-295F-48F7-A92C-A90D3B837483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1F22FABF-2831-4895-B0A9-283B98398F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "2887A2C0-BADA-41D3-AA6A-F10BC58AA7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A1063044-BCD7-487F-9880-141C30547E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA42E65A-7207-48B8-BE1B-0B352201BC09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1416",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-17T17:15:14.550",
      "lastModified" : "2024-11-21T05:44:18.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the Admin portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to obtain sensitive information. These vulnerabilities are due to improper enforcement of administrator privilege levels for sensitive data. An attacker with read-only administrator access to the Admin portal could exploit these vulnerabilities by browsing to one of the pages that contains sensitive data. A successful exploit could allow the attacker to collect sensitive information regarding the configuration of the system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el portal de Administración de Cisco Identity Services Engine (ISE), podrían permitir a un atacante remoto autenticado obtener información confidencial.&#xa0;Estas vulnerabilidades son debido a una aplicación inapropiada de los niveles de privilegios del administrador para datos confidenciales.&#xa0;Un atacante con acceso de administrador de solo lectura al portal de administración podría explotar estas vulnerabilidades al navegar en una de las páginas que contiene datos confidenciales.&#xa0;Una explotación con éxito podría permitir al atacante recopilar información confidencial sobre la configuración del sistema.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "3115779E-040F-457B-AE4D-8685A59DB1A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2FE2F6-5AE9-4A7C-B3A1-ADBCF2943E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "4BBADFC2-2932-47F7-A547-B5248D1D1A5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "0A829408-50C6-42D7-AFF9-86B965FD069F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "6127E2E2-203B-41BF-ADB8-ACA28D12C13C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD91197-CEBB-41A5-B1D9-46ADC0C3F12D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "49910CE9-E408-49B0-9FB1-0D5CAEE2F0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "B587597C-3F72-4E5D-A965-DF7C5E2F0014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.3.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4F2F0A-6525-4C41-B67F-989BD67AF376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "439948AD-C95D-4FC3-ADD1-C3D241529F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "934E62A3-4968-484A-8ECC-70027DC70C35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch10:*:*:*:*:*:*",
            "matchCriteriaId" : "84A3C461-ADFC-4352-86F8-06E32F762BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch11:*:*:*:*:*:*",
            "matchCriteriaId" : "47989AE7-2B37-4424-80CD-61C48599100D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch12:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D220CF-8178-4F26-B1C3-175A10EBD65B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch13:*:*:*:*:*:*",
            "matchCriteriaId" : "16A0985C-38A7-401D-9BE1-4FB06105416D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "62B24B6A-1AAA-491E-BD23-4841B101E6EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "B0CF4B74-F6A8-4D90-87A2-888708B4590C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch4:*:*:*:*:*:*",
            "matchCriteriaId" : "9AF76083-7F81-4470-B363-083144609686"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "C6973D7D-6638-4E86-A28A-0CEA425C53E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "D52BC38C-69B9-483D-B975-B7C27CFBA336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "3F3BA3F0-8635-439D-9B77-0B7713FBF8A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId" : "A5923013-0A76-4109-A58C-62754D7CF0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.4.0:patch9:*:*:*:*:*:*",
            "matchCriteriaId" : "65B47822-FED9-4073-885C-9228599C036D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8B45856E-6BE4-40A7-AE2F-4F9DC9315875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "1F6D1780-3306-4481-A3CD-8F7732D955CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "07BF9702-0607-49A1-A82A-E4ADF1A4135F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch3:*:*:*:*:*:*",
            "matchCriteriaId" : "11AA4EC0-6F3C-45A9-9AA4-0D81876F44B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch5:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4B88F0-3229-4B07-9308-C37C794595A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch6:*:*:*:*:*:*",
            "matchCriteriaId" : "E02F0E61-FBFF-4C6D-9132-E266FF67802B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch7:*:*:*:*:*:*",
            "matchCriteriaId" : "541EC483-540A-4080-AA69-82A0F30EE3D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.6.0:patch8:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFE97-295F-48F7-A92C-A90D3B837483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1F22FABF-2831-4895-B0A9-283B98398F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:2.7.0:patch2:*:*:*:*:*:*",
            "matchCriteriaId" : "2887A2C0-BADA-41D3-AA6A-F10BC58AA7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A1063044-BCD7-487F-9880-141C30547E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:identity_services_engine:3.0.0:patch1:*:*:*:*:*:*",
            "matchCriteriaId" : "DA42E65A-7207-48B8-BE1B-0B352201BC09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ise-info-exp-8RsuEu8S",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26911",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T21:15:12.900",
      "lastModified" : "2024-11-21T05:57:01.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "core/imap/MCIMAPSession.cpp in Canary Mail before 3.22 has Missing SSL Certificate Validation for IMAP in STARTTLS mode."
      }, {
        "lang" : "es",
        "value" : "El archivo core/imap/MCIMAPSession.cpp en Canary Mail versiones anteriores a 3.22, tiene una Falta de Comprobación de Certificado SSL para IMAP en modo STARTTLS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canarymail:canary_mail:3.20:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "8A0F96F5-488B-485C-93D9-0DFE7DD732C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:canarymail:canary_mail:3.21:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "A3D232FE-4500-4FD5-B7B0-901134B488E2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libmailcore:mailcore2:0.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973E27F1-AE98-4C43-BE54-C4A453EEF046"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/17/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://apps.apple.com/us/app/canary-mail/id1236045954",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://census-labs.com/news/2021/02/17/canary-mail-app-missing-certificate-validation-check-on-imap-starttls/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://census-labs.com/news/category/advisories/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/canarymail/mailcore2/commit/45acb4efbcaa57a20ac5127dc976538671fce018",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/17/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://apps.apple.com/us/app/canary-mail/id1236045954",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://census-labs.com/news/2021/02/17/canary-mail-app-missing-certificate-validation-check-on-imap-starttls/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://census-labs.com/news/category/advisories/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/canarymail/mailcore2/commit/45acb4efbcaa57a20ac5127dc976538671fce018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/17/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27367",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T21:15:13.010",
      "lastModified" : "2024-11-21T05:57:51.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal."
      }, {
        "lang" : "es",
        "value" : "Los archivos Controller/Backend/FileEditController.php y Controller/Backend/FilemanagerController.php en Bolt versiones anteriores a 4.1.13, permiten un Salto de Directorio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boltcms:bolt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.13",
            "matchCriteriaId" : "923EADF3-7011-4177-9161-2FECC9AC1064"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bolt/core/pull/2371",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bolt/core/releases/tag/4.1.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bolt/core/pull/2371",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bolt/core/releases/tag/4.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3396",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T21:15:13.120",
      "lastModified" : "2024-11-21T06:21:24.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenNMS Meridian 2016, 2017, 2018 before 2018.1.25, 2019 before 2019.1.16, and 2020 before 2020.1.5, Horizon 1.2 through 27.0.4, and Newts <1.5.3 has Incorrect Access Control, which allows local and remote code execution using JEXL expressions."
      }, {
        "lang" : "es",
        "value" : "OpenNMS Meridian versiones 2016, 2017, 2018 anteriores a 2018.1.25, versiones 2019 anteriores a 2019.1.16 y versiones 2020 anteriores a 2020.1.5, Horizon versiones 1.2 hasta 27.0.4 y Newts versiones anteriores a 1.5.3, presenta un Control de Acceso Incorrecto, que permite una ejecución de código local y remota utilizando expresiones JEXL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:horizon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndIncluding" : "27.0.3",
            "matchCriteriaId" : "6514B3D6-FF65-419B-8703-E1E099B14133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.1.0",
            "versionEndIncluding" : "2016.1.24",
            "matchCriteriaId" : "65ADE797-2053-4420-B1BE-63B1338104CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.1.0",
            "versionEndIncluding" : "2017.1.26",
            "matchCriteriaId" : "E81416D1-B874-4D00-86C0-928AFC6D9A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.1.0",
            "versionEndExcluding" : "2018.1.25",
            "matchCriteriaId" : "9EC6B5D3-EA6D-4C13-B74E-B5BEA825243F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.1.0",
            "versionEndExcluding" : "2019.1.16",
            "matchCriteriaId" : "A64A562E-4797-4A06-879B-02886AA6DD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:meridian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.1.0",
            "versionEndExcluding" : "2020.1.5",
            "matchCriteriaId" : "1AA3C085-8DCA-4E6A-A201-73B2143D7FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opennms:newts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.3",
            "matchCriteriaId" : "E46F90CA-50A7-4526-BF00-9B4ADF807B24"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.opennms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.opennms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.opennms.com/en/blog/2021-02-16-cve-2021-3396-full-security-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26720",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T22:15:12.710",
      "lastModified" : "2024-11-21T05:56:44.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "avahi-daemon-check-dns.sh in the Debian avahi package through 0.8-4 is executed as root via /etc/network/if-up.d/avahi-daemon, and allows a local attacker to cause a denial of service or create arbitrary empty files via a symlink attack on files under /run/avahi-daemon. NOTE: this only affects the packaging for Debian GNU/Linux (used indirectly by SUSE), not the upstream Avahi product."
      }, {
        "lang" : "es",
        "value" : "El archivo avahi-daemon-check-dns.sh en el paquete Debian avahi a versiones hasta 0.8-4, es ejecutado como root por medio de /etc/network/if-up.d/avahi-daemon, y permite a un atacante local causar una denegación de servicio o crear archivos vacíos arbitrarios por medio de un ataque de tipo symlink en archivos bajo /run/avahi-daemon.&#xa0;NOTA: esto solo afecta al empaquetado de Debian GNU/Linux (usado indirectamente por SUSE), no al producto de Avahi previo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avahi:avahi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.8-4",
            "matchCriteriaId" : "7960274F-0D6F-4054-8236-145A6430B6CE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982796",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1870824",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1180827",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://metadata.ftp-master.debian.org/changelogs/main/a/avahi/avahi_0.8-4_changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://packages.debian.org/bullseye/avahi-daemon",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://packages.debian.org/buster/avahi-daemon",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://packages.debian.org/sid/avahi-daemon",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2021-26720",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/15/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982796",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/ubuntu/+source/avahi/+bug/1870824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1180827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://metadata.ftp-master.debian.org/changelogs/main/a/avahi/avahi_0.8-4_changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://packages.debian.org/bullseye/avahi-daemon",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://packages.debian.org/buster/avahi-daemon",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://packages.debian.org/sid/avahi-daemon",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://security-tracker.debian.org/tracker/CVE-2021-26720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/15/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T22:15:12.883",
      "lastModified" : "2024-11-21T05:57:51.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VertiGIS WebOffice 10.7 SP1 before patch20210202 and 10.8 SP1 before patch20210207 allows attackers to achieve \"Zugriff auf Inhalte der WebOffice Applikation.\""
      }, {
        "lang" : "es",
        "value" : "VertiGIS WebOffice versiones 10.7 SP1 anteriores a patch20210202 y versiones 10.8 SP1 anteriores a patch20210207, permite a atacantes lograr \"Zugriff auf Inhalte der WebOffice Applikation\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vertigis:weboffice:10.7:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "02F96C4E-84FC-4AE1-9F84-4D70D502309A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vertigis:weboffice:10.8:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "18156C2C-11BA-4E59-AF6A-09A53F085766"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://resources.weboffice.vertigis.com/WebOffice107/Patches/Readme_Patch_de.html#patch20210202",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://resources.weboffice.vertigis.com/WebOffice108/Patches/Readme_Patch_de.html#patch20210207",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://resources.weboffice.vertigis.com/WebOffice107/Patches/Readme_Patch_de.html#patch20210202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://resources.weboffice.vertigis.com/WebOffice108/Patches/Readme_Patch_de.html#patch20210207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27097",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T23:15:13.653",
      "lastModified" : "2025-11-03T19:15:40.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT."
      }, {
        "lang" : "es",
        "value" : "El cargador de arranque en Das U-Boot versiones anteriores a 2021.04-rc2, maneja inapropiadamente un FIT modificado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021.01",
            "matchCriteriaId" : "A5899D85-92F8-4CB2-879B-E75488D8471C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denx:u-boot:2021.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B5BAFE-DC47-41E2-94D9-15A7DC1E3E28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/u-boot/u-boot/commit/6f3c2d8aa5e6cbd80b5e869bbbddecb66c329d01",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/8a7d4cf9820ea16fabd25a6379351b4dc291204b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/6f3c2d8aa5e6cbd80b5e869bbbddecb66c329d01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/8a7d4cf9820ea16fabd25a6379351b4dc291204b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/09/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-17T23:15:13.717",
      "lastModified" : "2025-11-03T19:15:40.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT."
      }, {
        "lang" : "es",
        "value" : "El cargador de arranque en Das U-Boot versiones anteriores a 2021.04-rc2, maneja inapropiadamente el uso de direcciones de unidad en un FIT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021.01",
            "matchCriteriaId" : "A5899D85-92F8-4CB2-879B-E75488D8471C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:denx:u-boot:2021.04:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B5BAFE-DC47-41E2-94D9-15A7DC1E3E28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/u-boot/u-boot/commit/3f04db891a353f4b127ed57279279f851c6b4917",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/79af75f7776fc20b0d7eb6afe1e27c00fdb4b9b4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/3f04db891a353f4b127ed57279279f851c6b4917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/79af75f7776fc20b0d7eb6afe1e27c00fdb4b9b4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/09/msg00037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T03:15:12.720",
      "lastModified" : "2024-11-21T05:57:52.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Traefik before 2.4.5 allows the loading of IFRAME elements from other domains."
      }, {
        "lang" : "es",
        "value" : "Traefik versión 2.4.3, permite la carga de elementos IFRAME desde otros dominios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:containous:traefik:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.5",
            "matchCriteriaId" : "FA674D39-233C-44AE-9A5E-F87BD46E1458"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/traefik/traefik/pull/7904",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.4.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/traefik/traefik/pull/7904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/traefik/traefik/releases/tag/v2.4.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T04:15:11.620",
      "lastModified" : "2024-11-21T05:57:22.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL en el parámetro expertise en el archivo earch_result.php en Doctor Appointment System versión v1.0, permite a un usuario paciente autenticado volcar las credenciales de la base de datos por medio de un ataque de inyección SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161342/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://naku-ratti.medium.com/doctor-appointment-system-1-0-authenticated-sql-dios-7689b1d30f5f",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161342/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://naku-ratti.medium.com/doctor-appointment-system-1-0-authenticated-sql-dios-7689b1d30f5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T04:15:11.700",
      "lastModified" : "2024-11-21T05:57:52.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the nb-connect crate before 1.0.3 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate nb-connect versiones anteriores a 1.0.3 para Rust.&#xa0;Puede tener acceso a memoria no válido para determinadas versiones de la biblioteca estándar porque se basa en una transmisión directa de las estructuras de datos de las funciones std::net::SocketAddrV4 y std::net::SocketAddrV6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nb-connect_project:nb-connect:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "8E6837D8-D7FF-4B37-AB78-22BBC6C0902B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T04:15:11.763",
      "lastModified" : "2024-11-21T05:57:52.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the yottadb crate before 1.2.0 for Rust. For some memory-allocation patterns, ydb_subscript_next_st and ydb_subscript_prev_st have a use-after-free."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate yottadb versiones anteriores a 1.2.0 para Rust.&#xa0;Para algunos patrones de asignación de memoria, las funciones ydb_subscript_next_st y ydb_subscript_prev_st presentan un uso de la memoria previamente liberada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yottadb:yottadb:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "A0558ADF-8CBB-4610-9D74-AB3D100B0588"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T04:15:11.823",
      "lastModified" : "2024-11-21T05:57:52.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the rand_core crate before 0.6.2 for Rust. Because read_u32_into and read_u64_into mishandle certain buffer-length checks, a random number generator may be seeded with too little data."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate rand_core versiones anteriores a 0.6.2 para Rust.&#xa0;Debido a que las funciones read_u32_into y read_u64_into manejan inapropiadamente determinadas comprobaciones de la longitud del búfer, un generador de números aleatorios puede ser sembrado con muy pocos datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rand_core_project:rand_core:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.6.0",
            "versionEndExcluding" : "0.6.2",
            "matchCriteriaId" : "76C21C9D-DDFF-4143-B2FB-8C5869812D61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20354",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-18T15:15:14.343",
      "lastModified" : "2024-11-21T05:46:27.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL request containing \"dot dot\" sequences (/../) to view arbitrary files on the system. IBM X-Force ID: 194883."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versiones 8.0, 8.5 y 9.0, podría permitir a un atacante remoto un salto de directorio.&#xa0;Un atacante podría enviar una petición URL especialmente diseñada que contenga secuencias \"dot dot\" (/../) para visualizar archivos arbitrarios en el sistema.&#xa0;IBM X-Force ID: 194883"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.15",
            "matchCriteriaId" : "E596AE8A-34AD-43F3-A97E-DC79CE517C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.19",
            "matchCriteriaId" : "F421D853-4015-4375-AD38-E2E95CA51676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.5.6",
            "matchCriteriaId" : "F390039E-A164-4AFF-8C63-0ED129F17C04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C684FC45-C9BA-4EF0-BD06-BB289450DD21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E97A964-6F9E-4C87-9B90-21AE2C1DF52F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "F5027746-8216-452D-83C5-2F8E9546F2A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194883",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415959",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20443",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-18T15:15:14.500",
      "lastModified" : "2024-11-21T05:46:36.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo for Civil Infrastructure 7.6.2 includes executable functionality (such as a library) from a source that is outside of the intended control sphere. IBM X-Force ID: 196619."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo for Civil Infrastructure versión 7.6.2, incluye una funcionalidad ejecutable (tal y como una biblioteca) de una fuente que está fuera de la esfera de control prevista.&#xa0;IBM X-Force ID: 196619"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_for_civil_infrastructure:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECEACE5-BCE6-4F2B-911C-31B3EFDE70A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196619",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415883",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196619",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20444",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-18T15:15:14.593",
      "lastModified" : "2024-11-21T05:46:36.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196620."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo for Civil Infrastructure versión 7.6.2, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable.&#xa0;Identificación de IBM X-Force: 196620"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_for_civil_infrastructure:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECEACE5-BCE6-4F2B-911C-31B3EFDE70A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196620",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415887",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196620",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20445",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-18T15:15:14.657",
      "lastModified" : "2024-11-21T05:46:36.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo for Civil Infrastructure 7.6.2 could allow a user to obtain sensitive information due to insecure storeage of authentication credentials. IBM X-Force ID: 196621."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo for Civil Infrastructure versión 7.6.2, podría permitir a un usuario obtener información confidencial debido a un almacenamiento no seguro de credenciales de autenticación.&#xa0;IBM X-Force ID: 196621"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_for_civil_infrastructure:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECEACE5-BCE6-4F2B-911C-31B3EFDE70A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196621",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415891",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20446",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-02-18T15:15:14.733",
      "lastModified" : "2024-11-21T05:46:36.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196622."
      }, {
        "lang" : "es",
        "value" : "IBM Maximo for Civil Infrastructure versión 7.6.2, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 196622"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:maximo_for_civil_infrastructure:7.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECEACE5-BCE6-4F2B-911C-31B3EFDE70A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196622",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415893",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6415893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23340",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-18T15:15:14.953",
      "lastModified" : "2024-11-21T05:51:32.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportController class (bundles/AdminBundle/Controller/Reports/CustomReportController.php). An authenticated user can reach this function with a GET request at the following endpoint: /admin/reports/custom-report/download-csv?exportFile=&91;filename]. Since exportFile variable is not sanitized, an attacker can exploit a local file inclusion vulnerability."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete pimcore/pimcore versiones anteriores a 6.8.8.&#xa0;Se presenta una vulnerabilidad de inclusión de archivo local en la función downloadCsvAction de la clase CustomReportController (bundles/AdminBundle/Controller/Reports/CustomReportController.php).&#xa0;Un usuario autenticado puede acceder a esta función con una petición GET en el siguiente endpoint: /admin/reports/custom-report/download-csv?exportFile=&amp;91;filename].&#xa0;Dado que la variable exportFile no está saneada, un atacante puede explotar una vulnerabilidad de inclusión de archivos locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pimcore:pimcore:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "815CB9D7-CE44-4E76-8F5E-EAAC9BC8F7F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pimcore/pimcore/blob/v6.7.2/bundles/AdminBundle/Controller/Reports/CustomReportController.php%23L454",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/1786bdd4962ee51544fad537352c2b4223309442",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1070132",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/blob/v6.7.2/bundles/AdminBundle/Controller/Reports/CustomReportController.php%23L454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pimcore/pimcore/commit/1786bdd4962ee51544fad537352c2b4223309442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-PHP-PIMCOREPIMCORE-1070132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23341",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-18T16:15:14.143",
      "lastModified" : "2024-11-21T05:51:32.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package prismjs before 1.23.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the prism-asciidoc, prism-rest, prism-tap and prism-eiffel components."
      }, {
        "lang" : "es",
        "value" : "El paquete prismjs versiones anteriores a 1.23.0, es vulnerable a la Denegación de Servicio de Expresión Regular (ReDoS) por medio de los componentes prism-asciidoc, prism-rest, prism-tap y prism-eiffel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prismjs:prism:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.23.0",
            "matchCriteriaId" : "E1E5D8C6-2FCA-4B91-84FD-411C24D93902"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrismJS/prism/commit/c2f6a64426f44497a675cb32dccb079b3eff1609",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrismJS/prism/issues/2583",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrismJS/prism/pull/2584",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1076583",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076582",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrismJS/prism/commit/c2f6a64426f44497a675cb32dccb079b3eff1609",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrismJS/prism/issues/2583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrismJS/prism/pull/2584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1076583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PRISMJS-1076581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T17:15:15.867",
      "lastModified" : "2024-11-21T05:57:52.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Xen versiones hasta 4.11.x, permitiendo a usuarios del Sistema Operativo invitado x86 Intel HVM obtener acceso DMA de lectura y escritura no previsto y posiblemente causar una denegación de servicio (bloqueo del Sistema Operativo host) o alcanzar privilegios.&#xa0;Esto ocurre porque un backport no se descargó y, por lo tanto, las actualizaciones de IOMMU no siempre fueron correctas.&#xa0;NOTA: este problema se presenta debido a una corrección incompleta para CVE-2020-15565"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:C",
            "baseScore" : 5.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:*:*:*:*:*:*:x86:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "4.12.0",
            "matchCriteriaId" : "7156BE00-A98A-4395-9E5E-945B2E0C9E6E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/23/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-366.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-366.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/23/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xen.org/xsa/advisory-366.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21318",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-18T18:15:11.490",
      "lastModified" : "2024-11-21T05:48:00.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Opencast is a free, open-source platform to support the management of educational audio and video content. In Opencast before version 9.2 there is a vulnerability in which publishing an episode with strict access rules will overwrite the currently set series access. This allows for an easy denial of access for all users without superuser privileges, effectively hiding the series. Access to series and series metadata on the search service (shown in media module and player) depends on the events published which are part of the series. Publishing an event will automatically publish a series and update access to it. Removing an event or republishing the event should do the same. Affected versions of Opencast may not update the series access or remove a published series if an event is being removed. On removal of an episode, this may lead to an access control list for series metadata with broader access rules than the merged access rules of all remaining events, or the series metadata still being available although all episodes of that series have been removed. This problem is fixed in Opencast 9.2."
      }, {
        "lang" : "es",
        "value" : "Opencast es una plataforma gratuita de código abierto para respaldar la administración de contenido educativo de audio y video.&#xa0;En Opencast versiones anteriores a 9.2, se presenta una vulnerabilidad en la que la publicación de un episodio con reglas de acceso estrictas sobrescribirá el acceso a la serie configurada actualmente.&#xa0;Esto permite una fácil denegación de acceso para todos los usuarios sin privilegios de superusuario, ocultando efectivamente la serie.&#xa0;El acceso a series y metadatos de series en el servicio de búsqueda (mostrado en módulo multimedia y reproductor) depende de los eventos publicados que forman parte de la serie.&#xa0;La publicación de un evento publicará automáticamente una serie y actualizará el acceso a ella.&#xa0;Eliminar un evento o volver a publicarlo debería hacer lo mismo.&#xa0;Es posible que las versiones afectadas de Opencast no actualicen el acceso a la serie ni eliminen una serie publicada si un evento ha sido eliminado.&#xa0;Al eliminar un episodio,&#xa0;esto puede conllevar a una lista de control de acceso para los metadatos de la serie con reglas de acceso más amplias que las reglas de acceso combinadas de todos los eventos restantes, o que los metadatos de la serie sigan estando disponibles aunque todos los episodios de esa serie hayan sido eliminados.&#xa0;Este problema se corrigió en Opencast versión 9.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apereo:opencast:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2",
            "matchCriteriaId" : "0BD75109-ECB3-42D8-AC2E-F6AB4E080C14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opencast/opencast/commit/b18c6a7f81f08ed14884592a6c14c9ab611ad450",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencast/opencast/security/advisories/GHSA-vpc2-3wcv-qj4w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencast/opencast/commit/b18c6a7f81f08ed14884592a6c14c9ab611ad450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencast/opencast/security/advisories/GHSA-vpc2-3wcv-qj4w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T18:15:11.677",
      "lastModified" : "2024-11-21T05:57:48.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names."
      }, {
        "lang" : "es",
        "value" : "Friendica versión 2021.01, permite un ataque de tipo SSRF por medio de parse_url?binurl= para búsquedas de DNS o peticiones HTTP para nombres de dominio arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:frendi:frendica:2021.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E01771F-BE73-421C-BB99-0257000C0AB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/friendica/friendica/issues/9929",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/friendica/friendica/issues/9929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27335",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T18:15:11.787",
      "lastModified" : "2024-11-21T05:57:48.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KollectApps before 4.8.16c is affected by insecure Java deserialization, leading to Remote Code Execution via a ysoserial.payloads.CommonsCollections parameter."
      }, {
        "lang" : "es",
        "value" : "KollectApps versiones anteriores a 4.8.16c, está afectado por una deserialización de Java no segura, conllevando a una ejecución de código remota por medio de un parámetro ysoserial.payloads.CommonsCollections"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kollectapp:kollect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.16c",
            "matchCriteriaId" : "111C634C-BF79-4714-B7FA-54F6263C6948"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hacked0x90.net/index.php/2021/02/15/kollectapp-insecure-java-deserialization/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hacked0x90.net/index.php/2021/02/15/kollectapp-insecure-java-deserialization/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T19:15:13.273",
      "lastModified" : "2024-11-21T06:21:11.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PressBooks 5.17.3 contains a cross-site scripting (XSS). Stored XSS can be submitted via the Book Info's Long Description Body, and all actions to open or preview the books page will result in the triggering the stored XSS."
      }, {
        "lang" : "es",
        "value" : "PressBooks versión 5.17.3, contiene una vulnerabilidad de tipo cross-site scripting (XSS).&#xa0;El ataque XSS almacenado puede ser enviado por medio del Long Description Body de Book Info, y todas las acciones para abrir o obtener una vista previa de la página del libro resultarán en un desencadenamiento del XSS almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pressbooks:pressbooks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.17.3",
            "matchCriteriaId" : "13DFFC4D-20A6-4ACB-AFA8-E4B6DE4CA783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pressbooks/pressbooks",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pressbooks/pressbooks/pull/2072",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pressbooks/pressbooks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pressbooks/pressbooks/pull/2072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.gosecure.net/blog/2021/02/16/cve-2021-3271-pressbooks-stored-cross-site-scripting-proof-of-concept/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26717",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T20:15:12.667",
      "lastModified" : "2024-11-21T05:56:44.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Sangoma Asterisk 16.x before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6. When re-negotiating for T.38, if the initial remote response was delayed just enough, Asterisk would send both audio and T.38 in the SDP. If this happened, and the remote responded with a declined T.38 stream, then Asterisk would crash."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Sangoma Asterisk versiones 16.x anteriores a 16.16.1, versiones 17.x anteriores a 17.9.2 y versiones 18.x anteriores a 18.2.1 y Certified Asterisk versiones anteriores a  16.8-cert6.&#xa0;Al renegociar para T.38, si la respuesta remota inicial se retrasó lo suficiente, Asterisk enviaría tanto audio como T.38 en el SDP.&#xa0;Si esto sucediera, y el control remoto respondiera con una transmisión T.38 rechazada, entonces Asterisk podría bloquearse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.16.1",
            "matchCriteriaId" : "7382B641-0396-456F-BF33-3F6412E35F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "C5BA8606-ADA9-4841-A7E2-A9165138849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2.1",
            "matchCriteriaId" : "F10CB148-DF9C-4134-A417-3B111C036E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81C3E390-8B99-4EB8-82DD-02893611209A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17DB2297-1908-4F87-8046-2BAA74569D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA2CC40-C2F6-4828-82F0-1B50D3E61F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32F19F43-C1E8-4B6C-9356-AF355B7320BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D1FA32-B441-485F-8AE9-F3A394626909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "F7795CCF-B160-4B4F-9529-1192C11D7FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E5D0D-9EB3-40FD-8B7E-E93A95D07AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DFDA30-DD61-4BBC-AFE4-448BF2A4F303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "142F1F89-49AC-4A0B-A273-61F697063A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53041795-788C-4914-A2F6-41539ABE0244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB98E65-B2D0-49A4-8BF3-12155E3E13C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "769C854C-03CD-40A9-B39B-C0CDCA8252EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D86AD6E-4E07-48B0-88D8-E18F277FFE6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161471/Asterisk-Project-Security-Advisory-AST-2021-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/58",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29203",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161471/Asterisk-Project-Security-Advisory-AST-2021-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/58",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26906",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T20:15:12.743",
      "lastModified" : "2024-11-21T05:57:00.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in res_pjsip_session.c in Digium Asterisk through 13.38.1; 14.x, 15.x, and 16.x through 16.16.0; 17.x through 17.9.1; and 18.x through 18.2.0, and Certified Asterisk through 16.8-cert5. An SDP negotiation vulnerability in PJSIP allows a remote server to potentially crash Asterisk by sending specific SIP responses that cause an SDP negotiation failure."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo res_pjsip_session.c en Digium Asterisk versiones hasta 13.38.1;&#xa0;14.x, 15.x y 16.xa 16.16.0;&#xa0;17.xa 17.9.1;&#xa0;y 18.xa 18.2.0, y Certified Asterisk versiones hasta 16.8-cert5.&#xa0;Una vulnerabilidad de negociación SDP en PJSIP permite a un servidor remoto bloquear potencialmente Asterisk mediante el envío de respuestas SIP específicas que causan un fallo en la negociación SDP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.38.2",
            "matchCriteriaId" : "37BA1B0D-474E-4F73-A329-F703C928C07D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.16.1",
            "matchCriteriaId" : "7382B641-0396-456F-BF33-3F6412E35F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "C5BA8606-ADA9-4841-A7E2-A9165138849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2.1",
            "matchCriteriaId" : "F10CB148-DF9C-4134-A417-3B111C036E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81C3E390-8B99-4EB8-82DD-02893611209A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17DB2297-1908-4F87-8046-2BAA74569D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA2CC40-C2F6-4828-82F0-1B50D3E61F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32F19F43-C1E8-4B6C-9356-AF355B7320BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D1FA32-B441-485F-8AE9-F3A394626909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "F7795CCF-B160-4B4F-9529-1192C11D7FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E5D0D-9EB3-40FD-8B7E-E93A95D07AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DFDA30-DD61-4BBC-AFE4-448BF2A4F303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "142F1F89-49AC-4A0B-A273-61F697063A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53041795-788C-4914-A2F6-41539ABE0244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB98E65-B2D0-49A4-8BF3-12155E3E13C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "769C854C-03CD-40A9-B39B-C0CDCA8252EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D86AD6E-4E07-48B0-88D8-E18F277FFE6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161477/Asterisk-Project-Security-Advisory-AST-2021-005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/61",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29196",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161477/Asterisk-Project-Security-Advisory-AST-2021-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29196",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T21:15:11.447",
      "lastModified" : "2024-11-21T05:56:43.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect access controls in res_srtp.c in Sangoma Asterisk 13.38.1, 16.16.0, 17.9.1, and 18.2.0 and Certified Asterisk 16.8-cert5 allow a remote unauthenticated attacker to prematurely terminate secure calls by replaying SRTP packets."
      }, {
        "lang" : "es",
        "value" : "Los controles de acceso incorrectos en el archivo res_srtp.c en Sangoma Asterisk versiones 13.38.1, 16.16.0, 17.9.1 y 18.2.0 y Certified Asterisk 16.8-cert5, permite a un atacante remoto no autenticado finalizar prematuramente llamadas seguras al reproducir paquetes SRTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndIncluding" : "13.38.2",
            "matchCriteriaId" : "DA727A7F-D350-450F-BF24-9E6D45FA6930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.16.1",
            "matchCriteriaId" : "7382B641-0396-456F-BF33-3F6412E35F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "C5BA8606-ADA9-4841-A7E2-A9165138849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0",
            "versionEndExcluding" : "18.2.1",
            "matchCriteriaId" : "F10CB148-DF9C-4134-A417-3B111C036E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81C3E390-8B99-4EB8-82DD-02893611209A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17DB2297-1908-4F87-8046-2BAA74569D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA2CC40-C2F6-4828-82F0-1B50D3E61F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32F19F43-C1E8-4B6C-9356-AF355B7320BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D1FA32-B441-485F-8AE9-F3A394626909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "F7795CCF-B160-4B4F-9529-1192C11D7FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E5D0D-9EB3-40FD-8B7E-E93A95D07AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DFDA30-DD61-4BBC-AFE4-448BF2A4F303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "142F1F89-49AC-4A0B-A273-61F697063A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53041795-788C-4914-A2F6-41539ABE0244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB98E65-B2D0-49A4-8BF3-12155E3E13C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "769C854C-03CD-40A9-B39B-C0CDCA8252EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D86AD6E-4E07-48B0-88D8-E18F277FFE6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161473/Asterisk-Project-Security-Advisory-AST-2021-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/59",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29260",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161473/Asterisk-Project-Security-Advisory-AST-2021-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29260",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26747",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-18T21:15:11.510",
      "lastModified" : "2024-11-21T05:56:47.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Netis WF2780 versión 2.3.40404 y WF2411 versión 1.1.29629, permiten una inyección de metacaracteres de Shell en el comando ping, conllevando a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netis-systems:wf2780_firmware:2.3.40404:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FB4154-156D-4AEB-B648-8B2B7B778C16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netis-systems:wf2780:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B8E231-D7D6-4667-9B55-D8B00860B2CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netis-systems:wf2411_firmware:1.1.29629:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3F4877-E669-4E60-BF00-9FBC00E371F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netis-systems:wf2411:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F193A5C4-1878-4941-B009-5AEF3BE290BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.netis-systems.com.tw/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yhstar00/netis-route",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.netis-systems.com.tw/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/yhstar00/netis-route",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27403",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T04:15:12.427",
      "lastModified" : "2024-11-21T05:57:55.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow cgi-bin/te_acceso_router.cgi curWebPage XSS."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Askey versiones RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014, permiten un ataque de tipo XSS de curWebPage del archivo cgi-bin/ te_acceso_router.cgi"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:askey_rtf8115vw_firmware:br_sv_g11.11_rtf_tef001_v6.54_v014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5693A4B-29D2-4E5F-BA00-CCB3F14667F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:askey_rtf8115vw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E20081-EAA1-43DD-B743-8A9A3BB04B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bokanrb/XSS-Askey",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bokanrb/XSS-Askey",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27404",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T04:15:12.503",
      "lastModified" : "2024-11-21T05:57:55.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014 devices allow injection of a Host HTTP header."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Askey RTF8115VW BR_SV_g11.11_RTF_TEF001_V6.54_V014, permiten una inyección de un encabezado Host HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:askey_rtf8115vw_firmware:br_sv_g11.11_rtf_tef001_v6.54_v014:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5693A4B-29D2-4E5F-BA00-CCB3F14667F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:askey_rtf8115vw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E20081-EAA1-43DD-B743-8A9A3BB04B9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bokanrb/HostHeaderInjection-Askey",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bokanrb/HostHeaderInjection-Askey",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26746",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T05:15:19.257",
      "lastModified" : "2024-11-21T05:56:47.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Chamilo 1.11.14 allows XSS via a main/calendar/agenda_list.php?type= URI."
      }, {
        "lang" : "es",
        "value" : "Chamilo versión 1.11.14, permite un ataque de tipo XSS por medio de un URI main/calendar/agenda_list.php?type="
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo:1.11.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53C8A896-7D31-460F-9BD1-C384916B5BCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chamilo/chamilo-lms/commit/d939402d83bf68af5377b629883d8e5437d843ec",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-45-2021-01-21-Moderate-impact-moderate-risk-XSS-vulnerability-in-agenda",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-21-001-cross-site-scripting-in-chamilo-lms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chamilo/chamilo-lms/commit/d939402d83bf68af5377b629883d8e5437d843ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.chamilo.org/projects/chamilo-18/wiki/Security_issues#Issue-45-2021-01-21-Moderate-impact-moderate-risk-XSS-vulnerability-in-agenda",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.netsparker.com/web-applications-advisories/ns-21-001-cross-site-scripting-in-chamilo-lms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27405",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T05:15:19.430",
      "lastModified" : "2024-11-21T05:57:55.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ReDoS (regular expression denial of service) flaw was found in the @progfay/scrapbox-parser package before 6.0.3 for Node.js."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de tipo ReDoS (denegación de servicio de expresión regular) en el paquete @progfay/scrapbox-parser versiones anteriores a 6.0.3 para Node.js"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scrapbox-parser_project:scrapbox-parser:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "96788409-9C73-4656-8A7A-EE3B60958094"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/progfay/scrapbox-parser/pull/519",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/progfay/scrapbox-parser/pull/539",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/progfay/scrapbox-parser/pull/540",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/progfay/scrapbox-parser/pull/519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/progfay/scrapbox-parser/pull/539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/progfay/scrapbox-parser/pull/540",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3339",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T08:15:11.900",
      "lastModified" : "2024-11-21T06:21:19.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ModernFlow before 1.3.00.208 does not constrain web-page access to members of a security group, as demonstrated by the Search Screen and the Profile Screen."
      }, {
        "lang" : "es",
        "value" : "ModernFlow versiones anteriores a 1.3.00.208, no restringe el acceso a la página web a miembros de un grupo de seguridad, como es demostrado por la Search Screen y la Profile Screen"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:modernflow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.00.208",
            "matchCriteriaId" : "C58DE29C-B888-4026-91CB-09FDC41372DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://4sightwebsite.azurewebsites.net/mf_releaseNotes",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://4sightwebsite.azurewebsites.net/mf_releaseNotes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://appsource.microsoft.com/en-us/product/web-apps/acctech-systems-pty-ltd.modernflow-saas?tab=overview",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26296",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-02-19T09:15:13.283",
      "lastModified" : "2024-11-21T05:56:02.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the default configuration, Apache MyFaces Core versions 2.2.0 to 2.2.13, 2.3.0 to 2.3.7, 2.3-next-M1 to 2.3-next-M4, and 3.0.0-RC1 use cryptographically weak implicit and explicit cross-site request forgery (CSRF) tokens. Due to that limitation, it is possible (although difficult) for an attacker to calculate a future CSRF token value and to use that value to trick a user into executing unwanted actions on an application."
      }, {
        "lang" : "es",
        "value" : "En la configuración predeterminada, Apache MyFaces Core versiones 2.2.0 hasta 2.2.13, versiones 2.3.0 hasta 2.3.7, versiones 2.3-next-M1 hasta 2.3-next-M4 y 3.0.0-RC1, usan tokens de tipo cross-site request forgery (CSRF) implícitos y explícitos criptográficamente débiles.&#xa0;Debido a esa limitación, es posible (aunque difícil) para un atacante calcular un valor futuro de token CSRF y usar ese valor para engañar al usuario a ejecutar acciones no deseadas en una aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndIncluding" : "2.2.13",
            "matchCriteriaId" : "43C2311F-12BF-4C37-8FF2-B5F555888D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndIncluding" : "2.3.7",
            "matchCriteriaId" : "ACA9DF3E-01A7-49C4-9E63-1CA07DA1A2C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:2.3:next-m1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF54DDD0-74AA-494B-9F69-C1BA5A208B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:2.3:next-m2:*:*:*:*:*:*",
            "matchCriteriaId" : "6DBA33A5-97A2-45D4-AAAC-AD6A05888656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:2.3:next-m3:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE81BF3-66DB-4BD7-A767-547A727CF9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:2.3:next-m4:*:*:*:*:*:*",
            "matchCriteriaId" : "3A377CFB-B073-4B74-9CE9-0D09A08FCFCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:myfaces:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD2AAA3-C1C0-43B2-BD90-742B0B85CD65"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161484/Apache-MyFaces-2.x-Cross-Site-Request-Forgery.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/66",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2b73e2356c6155e9ec78fdd8f72a4fac12f3e588014f5f535106ed9b%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0007/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161484/Apache-MyFaces-2.x-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2b73e2356c6155e9ec78fdd8f72a4fac12f3e588014f5f535106ed9b%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3204",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T14:15:12.510",
      "lastModified" : "2024-11-21T06:21:08.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSRF in the document conversion component of Webware Webdesktop 5.1.15 allows an attacker to read all files from the server."
      }, {
        "lang" : "es",
        "value" : "Un SSRF en el componente document conversion de Webware Webdesktop versión 5.1.15, permite a un atacante leer todos los archivos del servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webware:webdesktop:5.1.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB3CE37F-BB71-4F52-894F-553255A3E32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.l0l.xyz/sec/2021/01/05/1-webdesktop-root-ssrf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.l0l.xyz/sec/2021/01/05/1-webdesktop-root-ssrf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3210",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T14:15:12.573",
      "lastModified" : "2024-11-21T06:21:08.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "components/Modals/HelpTexts/GenericAll/GenericAll.jsx in Bloodhound <= 4.0.1 allows remote attackers to execute arbitrary system commands when the victim imports a malicious data file containing JavaScript in the objectId parameter."
      }, {
        "lang" : "es",
        "value" : "El archivo components/Modals/HelpTexts/GenericAll/GenericAll.jsx en Bloodhound versiones anteriores a 4.0.1, permite a atacantes remotos ejecutar comandos arbitrarios del sistema cuando la víctima importa un archivo de datos malicioso que contiene JavaScript en el parámetro objectId"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bloodhound_project:bloodhound:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0.1",
            "matchCriteriaId" : "28AF6D85-0B1A-4E95-B434-622D024D82D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpModal.jsx#L57",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpTexts/GenericAll/GenericAll.jsx#L31-L37",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BloodHoundAD/BloodHound/issues/338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpModal.jsx#L57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BloodHoundAD/BloodHound/blob/338e197dc4b7a1ee929c335141172ada5bc80800/src/components/Modals/HelpTexts/GenericAll/GenericAll.jsx#L31-L37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BloodHoundAD/BloodHound/issues/338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22701",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-02-19T16:15:12.937",
      "lastModified" : "2024-11-21T05:50:29.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-352: Cross-Site Request Forgery vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause a user to perform an unintended action on the target device when using the HTTP web interface."
      }, {
        "lang" : "es",
        "value" : "Una CWE-352: Se presenta una vulnerabilidad de tipo Cross-Site Request Forgery en PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 y PM800 (consulte la notificación para las versiones afectadas), que podría causar que un usuario lleve a cabo una acción no deseada en el dispositivo de destino cuando se usa la interfaz web HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "DCE7015C-02DD-44A1-ADEE-5E71CE312266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F28EAA-FC60-4CE0-BD39-DFD3EB88E195"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C23FEAFC-9F15-4214-BF9C-A33130362110"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1647241-A18D-4E4C-A118-8809EA625FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF2D964-79EF-43F2-9AC6-D263F75BAFA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6B0276-AB51-4B8F-B2A7-85EDD56C9E7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324CF58A-753C-4D9C-8E72-FC8EE26EDA0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.31.2",
            "matchCriteriaId" : "5D91486A-36CD-49A9-8A45-EDAA75F05E50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3A306-D4F4-4C2A-9D60-DD8F0826AEEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95DCE16-BAA5-46DD-835B-2299376387CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E8E79E-6DA7-4094-9622-3B91D5913493"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "32067EA8-5153-4A00-9DE8-C4BEC42C00A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6718EAAA-074D-4807-AC2D-DD0A06D397FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_pm8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "E5A75862-E1AC-4C6E-83AD-DE5FCD8BA50D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_pm8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16A7BEC-1BED-4A61-A6C9-BF7DB13B998C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1047C892-B7F5-49FB-AB36-8E8061A58037"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01E9FE2-4110-4A6D-99F3-49784808D951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BAC583-6101-4F26-A264-26E5D69E9188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82527983-6167-4D7B-A70A-D1A814ED3D06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768FB179-B6D7-457C-9795-310400460F6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E37742-CFF9-4F80-9B6A-0D4F5AD23112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-040-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-040-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22702",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-02-19T16:15:13.077",
      "lastModified" : "2024-11-21T05:50:29.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts Telnet network traffic between a user and the device."
      }, {
        "lang" : "es",
        "value" : "A CWE-319: Se presenta una vulnerabilidad de transmisión de información confidencial en texto sin cifrar en PowerLogic ION7400, ION7650, ION7700/73xx, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 y PM800 (consulte la notificación para las versiones afectadas), que podría causar una divulgación de credenciales de usuario cuando un actor malicioso intercepta el tráfico de red Telnet entre un usuario y el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "DCE7015C-02DD-44A1-ADEE-5E71CE312266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F28EAA-FC60-4CE0-BD39-DFD3EB88E195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1647241-A18D-4E4C-A118-8809EA625FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF2D964-79EF-43F2-9AC6-D263F75BAFA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7700_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CA14DE-656C-4D60-986B-FE149560FC2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07312E20-FF8A-4BD2-AB8D-AEA01B984AFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D4CF8E-053E-42CD-8A8D-EBCFD52A7266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F527180F-F818-4D4C-A0BF-F10C8B53B9C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6B0276-AB51-4B8F-B2A7-85EDD56C9E7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324CF58A-753C-4D9C-8E72-FC8EE26EDA0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.31.2",
            "matchCriteriaId" : "5D91486A-36CD-49A9-8A45-EDAA75F05E50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3A306-D4F4-4C2A-9D60-DD8F0826AEEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95DCE16-BAA5-46DD-835B-2299376387CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E8E79E-6DA7-4094-9622-3B91D5913493"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "32067EA8-5153-4A00-9DE8-C4BEC42C00A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6718EAAA-074D-4807-AC2D-DD0A06D397FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_pm8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "E5A75862-E1AC-4C6E-83AD-DE5FCD8BA50D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_pm8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16A7BEC-1BED-4A61-A6C9-BF7DB13B998C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1047C892-B7F5-49FB-AB36-8E8061A58037"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01E9FE2-4110-4A6D-99F3-49784808D951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BAC583-6101-4F26-A264-26E5D69E9188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82527983-6167-4D7B-A70A-D1A814ED3D06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768FB179-B6D7-457C-9795-310400460F6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E37742-CFF9-4F80-9B6A-0D4F5AD23112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-040-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-040-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22703",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-02-19T16:15:13.157",
      "lastModified" : "2024-11-21T05:50:29.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-319: Cleartext transmission of sensitive information vulnerability exists in PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 and PM800 (see notification for affected versions), that could cause disclosure of user credentials when a malicious actor intercepts HTTP network traffic between a user and the device."
      }, {
        "lang" : "es",
        "value" : "Una CWE-319: Se presenta una vulnerabilidad de transmisión de información confidencial en texto sin cifrar en PowerLogic ION7400, ION7650, ION83xx/84xx/85xx/8600, ION8650, ION8800, ION9000 y PM800 (consulte la notificación para las versiones afectadas), que podría causar una divulgación de las credenciales del usuario cuando un actor malicioso intercepta el tráfico de red HTTP entre un usuario y el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "DCE7015C-02DD-44A1-ADEE-5E71CE312266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F28EAA-FC60-4CE0-BD39-DFD3EB88E195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1647241-A18D-4E4C-A118-8809EA625FC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF2D964-79EF-43F2-9AC6-D263F75BAFA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6B0276-AB51-4B8F-B2A7-85EDD56C9E7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324CF58A-753C-4D9C-8E72-FC8EE26EDA0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.31.2",
            "matchCriteriaId" : "5D91486A-36CD-49A9-8A45-EDAA75F05E50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3A306-D4F4-4C2A-9D60-DD8F0826AEEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C95DCE16-BAA5-46DD-835B-2299376387CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E8E79E-6DA7-4094-9622-3B91D5913493"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "32067EA8-5153-4A00-9DE8-C4BEC42C00A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6718EAAA-074D-4807-AC2D-DD0A06D397FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_pm8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "E5A75862-E1AC-4C6E-83AD-DE5FCD8BA50D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_pm8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16A7BEC-1BED-4A61-A6C9-BF7DB13B998C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1047C892-B7F5-49FB-AB36-8E8061A58037"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01E9FE2-4110-4A6D-99F3-49784808D951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BAC583-6101-4F26-A264-26E5D69E9188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82527983-6167-4D7B-A70A-D1A814ED3D06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768FB179-B6D7-457C-9795-310400460F6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E37742-CFF9-4F80-9B6A-0D4F5AD23112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-040-01/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-040-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21512",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-02-19T17:15:13.577",
      "lastModified" : "2024-11-21T05:48:30.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account."
      }, {
        "lang" : "es",
        "value" : "Dell EMC PowerProtect Cyber ??Recovery, versión 19.7.0.1, contiene una vulnerabilidad de Divulgación de Información.&#xa0;Un usuario de Cyber ??Recovery con altos privilegios y autenticado localmente puede explotar potencialmente esta vulnerabilidad, lo que conlleva a la toma de control de la cuenta de correo electrónico de notificación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_powerprotect_cyber_recovery:19.7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CE0F64-382D-4FD9-8EBA-71FDE8BFB5A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-security-update-for-unintended-information-disclosure",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183169/dsa-2021-038-dell-emc-powerprotect-cyber-recovery-security-update-for-unintended-information-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23342",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-19T17:15:13.717",
      "lastModified" : "2024-11-21T05:51:32.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package docsify before 4.12.0. It is possible to bypass the remediation done by CVE-2020-7680 and execute malicious JavaScript through the following methods 1) When parsing HTML from remote URLs, the HTML code on the main page is sanitized, but this sanitization is not taking place in the sidebar. 2) The isURL external check can be bypassed by inserting more “////” characters"
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete docsify versiones anteriores a 4.12.0.&#xa0;Es posible omitir la corrección realizada por CVE-2020-7680 y ejecutar JavaScript malicioso por medio de los siguientes métodos 1) Al analizar HTML desde URL remotas, el código HTML en la página principal es saneado, pero este saneamiento no se lleva a cabo en el barra lateral.&#xa0;2) La comprobación externa de isURL se puede omitir insertando más caracteres \"////\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docsifyjs:docsify:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.12.0",
            "matchCriteriaId" : "E69E149B-25FD-4819-B489-EC99DA188A8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161495/docsify-4.11.6-Cross-Site-Scripting.html",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/71",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docsifyjs/docsify/commit/ff2a66f12752471277fe81a64ad6c4b2c08111fe",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076593",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-DOCSIFY-1066017",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161495/docsify-4.11.6-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docsifyjs/docsify/commit/ff2a66f12752471277fe81a64ad6c4b2c08111fe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1076593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-DOCSIFY-1066017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27214",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T19:15:12.567",
      "lastModified" : "2024-11-21T05:57:36.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server-side request forgery (SSRF) vulnerability in the ProductConfig servlet in Zoho ManageEngine ADSelfService Plus through 6013 allows a remote unauthenticated attacker to perform blind HTTP requests or perform a Cross-site scripting (XSS) attack against the administrative interface via an HTTP request, a different vulnerability than CVE-2019-3905."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Server-side request forgery (SSRF) en el servlet ProductConfig en Zoho ManageEngine ADSelfService Plus versiones hasta 6013, permite a un atacante remoto no autenticado realizar peticiones HTTP ciegas o realizar un ataque de tipo Cross-site scripting (XSS) contra la interfaz administrativa por medio de una petición HTTP, una vulnerabilidad diferente a CVE-2019-3905"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "86396EFE-E4E1-42DB-A206-9D44B977DB95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6000:*:*:*:*:*:*",
            "matchCriteriaId" : "1ECD4B6F-D157-4AA6-A288-AF85ECFE3D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6001:*:*:*:*:*:*",
            "matchCriteriaId" : "89042E18-91F4-4EB7-9276-251A94529D36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6002:*:*:*:*:*:*",
            "matchCriteriaId" : "0215A848-4170-42E0-9711-E9922CE82CD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6003:*:*:*:*:*:*",
            "matchCriteriaId" : "4E738DAF-2E66-4D0F-9A8E-B988A51E17DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6004:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D87211-8D8F-420A-AAAC-296FCD214CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6005:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C120A3-C62A-4F39-BB9C-546C7AC57D89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6006:*:*:*:*:*:*",
            "matchCriteriaId" : "301FC0FF-8064-470E-BFAA-CC54078D1044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6007:*:*:*:*:*:*",
            "matchCriteriaId" : "AAAF70B7-53FA-41EF-8558-EAC27EF35AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6008:*:*:*:*:*:*",
            "matchCriteriaId" : "821E2F3D-5B0C-4985-9934-F80E163EC1A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6009:*:*:*:*:*:*",
            "matchCriteriaId" : "0FFD43E2-8C28-4423-8660-8C9FC996C339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6012:*:*:*:*:*:*",
            "matchCriteriaId" : "E9497B19-1845-44C5-8868-332DDE6DD1D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_adselfservice_plus:6.0:6013:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A5D3A5-E2C6-43A3-9142-F5FE23BCB3E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.horizonsecurity.it/lang_EN/advisories/?a=20&title=ManageEngine+ADSelfService+Plus+privilege+escalation++CVE202127214",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/self-service-password/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.horizonsecurity.it/lang_EN/advisories/?a=20&title=ManageEngine+ADSelfService+Plus+privilege+escalation++CVE202127214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/self-service-password/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T19:15:12.627",
      "lastModified" : "2024-11-21T05:57:47.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such as a password or decryption key."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Yeastar NeoGate TG400 versión 91.3.0.3, están afectados por un Salto de Directorio.&#xa0;Un usuario autenticado puede descifrar el firmware y puede leer información confidencial, como una contraseña o una clave de descifrado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:yeastar:neogate_tg400_firmware:91.3.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F5677DF-B933-4CED-8BD7-D717970BC083"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:yeastar:neogate_tg400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B68796A-C77A-4913-8028-8F70592F091F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://yeastar.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/SQSamir/CVE-2021-27328",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161560/Yeastar-TG400-GSM-Gateway-91.3.0.3-Path-Traversal.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://yeastar.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/SQSamir/CVE-2021-27328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27351",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T19:15:12.690",
      "lastModified" : "2024-11-21T05:57:49.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Terminate Session feature in the Telegram application through 7.2.1 for Android, and through 2.4.7 for Windows and UNIX, fails to invalidate a recently active session."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad Terminate Session en la aplicación Telegram hasta la versión 7.2.1 para Android, y hasta la versión 2.4.7 para Windows y UNIX, presenta una fallo al invalidar una sesión activa recientemente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram:*:*:*:*:*:unix:*:*",
            "versionEndIncluding" : "2.4.7",
            "matchCriteriaId" : "2F800B5C-6AB3-4177-B2FB-23AB42F9D754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram:*:*:*:*:*:windows:*:*",
            "versionEndIncluding" : "2.4.7",
            "matchCriteriaId" : "F685C105-8269-4DE8-BA20-323B9EB1323E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "7.2.1",
            "matchCriteriaId" : "F00955F1-BB6E-4BD9-8807-F8A9FE2A87A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://0ffsecninja.github.io/Telegram:CVE-2021-2735.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20587",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2021-02-19T20:15:12.833",
      "lastModified" : "2025-06-13T00:15:20.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap-based buffer overflow vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de desbordamiento de búfer basada en Heap en el software de ingeniería de Mitsubishi Electric FA (CPU Module Logging Configuration Tool versiones 1.112R y anteriores, CW Configurator versiones 1.011M y anteriores, Data Transfer versiones 3.44W y anteriores, EZSocket versiones 5.4 y anteriores, FR Configurator todas las versiones, FR Configurator SW3 todas las versiones, FR Configurator2 versiones 1.24A y anteriores, GT Designer3 Version1(GOT1000) versiones 1. 250L y anteriores, GT Designer3 Version1(GOT2000) versiones 1.250L y anteriores, GT SoftGOT1000 Version3 versiones 3.245F y anteriores, GT SoftGOT2000 Version1 versiones 1.250L y anteriores, GX Configurator-DP versiones 7. 14Q y anteriores, GX Configurator-QP todas las versiones, GX Developer versiones 8.506C y anteriores, GX Explorer todas las versiones, GX IEC Developer todas las versiones, GX LogViewer versiones 1.115U y anteriores, GX RemoteService-I todas las versiones, GX Works2 versiones 1. 597X y anteriores, GX Works3 versiones 1.070Y y anteriores, iQ Monozukuri ANDON (Data Transfer) todas las versiones, iQ Monozukuri Process Remote Monitoring (Data Transfer) todas las versiones, M_CommDTM-HART todas las versiones, M_CommDTM-IO-Link versiones 1.03D y anteriores, MELFA-Works versiones 4.4 y anteriores, MELSEC WinCPU Setting Utility todas las versiones, MELSOFT EM Software Development Kit (EM Configurator) versiones 1. 015R y anteriores, MELSOFT Navigator versiones 2.74C y anteriores, MH11 SettingTool Version2 versiones 2.004E y anteriores, MI Configurator versiones 1.004E y anteriores, MT Works2 versiones 1.167Z y anteriores, MX Component versiones 5.001B y anteriores, Network Interface Board CC IE Control utility versiones 1.29F y anteriores, Network Interface Board CC IE Field Utility versiones 1.16S y anteriores, Network Interface Board CC-Link Ver.2 1.23Z y anteriores, Network Interface Board MNETH utility versions 34L y anteriores, PX Developer versions 1.53F y anteriores, RT ToolBox2 versions 3.73B y anteriores, RT ToolBox3 versions 1.82L y anteriores, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N y anteriores y SLMP Data Collector versions 1. 04E y anteriores) permite que un atacante remoto no autenticado provoque una condición de denegación de servicio de los productos de software, y posiblemente ejecute un programa malicioso en el ordenador personal que ejecuta los productos de software, aunque no se ha reproducido, mediante la suplantación de MELSEC, GOT o FREQROL y el retorno de paquetes de respuesta manipulados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB4A4DA-DBC0-42A8-B933-933DE45F004D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.112r",
            "matchCriteriaId" : "D83BA6D0-2A25-4DDA-B7BA-DE11FA55D276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.011m",
            "matchCriteriaId" : "91D2BDFB-0A0A-4A1B-8671-8B5D652253DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.44w",
            "matchCriteriaId" : "6AF9A2A7-6F9E-4CA9-8485-3AF83A6411DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E4BC24-6583-4791-9ED9-D2D675187DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:fr_configurator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1773F87D-7E58-4E00-90B7-92BDDB4AA3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D236ABC2-93E4-4428-B949-7E17945E4D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24a",
            "matchCriteriaId" : "18E81D47-F88A-481B-98E0-56C52CDF6C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gt_designer3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.250l",
            "matchCriteriaId" : "66DEB37E-A837-4A2F-9660-7DE8441004D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.245f",
            "matchCriteriaId" : "B835ECE8-6923-47DF-9BB8-E0AA8D77228D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.250l",
            "matchCriteriaId" : "92C96AF0-1DCE-4769-AAC4-422F8B411A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_configurator-dp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.14q",
            "matchCriteriaId" : "E767C69A-23D9-4C67-AA66-392D5E70ED7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_configurator-qp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492299CE-FE94-4CB4-9D62-03F05CBCDE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.506c",
            "matchCriteriaId" : "C4588898-2ABA-4AA3-A33F-551387DC84AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A18533-FF83-4C7C-839D-077A7523DBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_iec_developer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974700B4-FC0B-4097-8826-CE055E13434F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.115u",
            "matchCriteriaId" : "6FFEE46E-C37D-4E82-BDC5-1225C03BFFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_remoteservice-i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DAEEF5-50CA-4DCD-8B1A-BAE8DEEA23AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.597x",
            "matchCriteriaId" : "76E34DC3-5D48-49DB-B1CB-CB5BDDED169D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.070y",
            "matchCriteriaId" : "920FC6C1-32FA-4251-81AA-B76D353B216A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:iq_monozukuri_andon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07756207-64DF-4F89-B3A1-19086CCC42BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:iq_monozukuri_process_remote_monitoring:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978160CD-B7D4-4494-A5BB-CA0195441985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:m_commdtm-hart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92717-C371-42B4-8AA6-73E14B60A87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B55AB8-B00D-4960-9F31-45E1855B109E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "4116C452-19C3-4F48-8A05-864BD884BDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melsec_wincpu_setting_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C51CF8E-49C1-418C-B410-50B23F9A23D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melsoft_em_software_development_kit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724C0E0B-5658-4040-A925-A07128EAD323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.74c",
            "matchCriteriaId" : "0DC7353B-EFF7-432D-8F88-0D5EBBBBE4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mh11_settingtool_version2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.004e",
            "matchCriteriaId" : "A8D3CBAF-5876-4DCE-908F-CCA8B0DDDB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A661B972-912C-4DAA-9518-CC01E0EB1A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.167z",
            "matchCriteriaId" : "57031F64-353E-403C-B7F8-0A145E70CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.001b",
            "matchCriteriaId" : "3B623A09-688E-49B1-99EF-CFA8DADC79E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_cc-link:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A92A26-7148-4A2A-BAFA-5F819468F48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_control_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D02C00E-B8C6-4987-8F25-E3D46FEDB44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_field_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F71BF3-FC69-4DA3-9989-DA269B557085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_mneth_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171CD9BC-2A02-4ACA-B29C-332094AA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.53f",
            "matchCriteriaId" : "445EF081-A7BB-4568-850F-00CF58060D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.73b",
            "matchCriteriaId" : "5BD4EC4A-ACF7-45F2-893D-569B4F8F8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.82l",
            "matchCriteriaId" : "779B0C13-D3DD-4D27-B18B-C0119B7BC5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:setting\\/monitoring_tools_for_the_c_controller_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CBC7FE-6EF9-4DA5-8128-849233A8DC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:slmp_data_collector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04e",
            "matchCriteriaId" : "8814A8BA-AA54-4270-AAB1-679D0881D715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU92330101",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://jvn.jp/vu/JVNVU92330101/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-049-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20588",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2021-02-19T20:15:13.023",
      "lastModified" : "2025-06-13T00:15:22.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Handling of Length Parameter Inconsistency vulnerability in Mitsubishi Electric FA Engineering Software (CPU Module Logging Configuration Tool versions 1.112R and prior, CW Configurator versions 1.011M and prior, Data Transfer versions 3.44W and prior, EZSocket versions 5.4 and prior, FR Configurator all versions, FR Configurator SW3 all versions, FR Configurator2 versions 1.24A and prior, GT Designer3 Version1(GOT1000) versions 1.250L and prior, GT Designer3 Version1(GOT2000) versions 1.250L and prior, GT SoftGOT1000 Version3 versions 3.245F and prior, GT SoftGOT2000 Version1 versions 1.250L and prior, GX Configurator-DP versions 7.14Q and prior, GX Configurator-QP all versions, GX Developer versions 8.506C and prior, GX Explorer all versions, GX IEC Developer all versions, GX LogViewer versions 1.115U and prior, GX RemoteService-I all versions, GX Works2 versions 1.597X and prior, GX Works3 versions 1.070Y and prior, iQ Monozukuri ANDON (Data Transfer) versions 1.003D and prior, iQ Monozukuri Process Remote Monitoring (Data Transfer) versions 1.002C and prior, M_CommDTM-HART all versions, M_CommDTM-IO-Link versions 1.03D and prior, MELFA-Works versions 4.4 and prior, MELSEC WinCPU Setting Utility all versions, MELSOFT EM Software Development Kit (EM Configurator) versions 1.015R and prior, MELSOFT Navigator versions 2.74C and prior, MH11 SettingTool Version2 versions 2.004E and prior, MI Configurator versions 1.004E and prior, MT Works2 versions 1.167Z and prior, MX Component versions 5.001B and prior, Network Interface Board CC IE Control utility versions 1.29F and prior, Network Interface Board CC IE Field Utility versions 1.16S and prior, Network Interface Board CC-Link Ver.2 Utility versions 1.23Z and prior, Network Interface Board MNETH utility versions 34L and prior, PX Developer versions 1.53F and prior, RT ToolBox2 versions 3.73B and prior, RT ToolBox3 versions 1.82L and prior, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N and prior, and SLMP Data Collector versions 1.04E and prior) allows a remote unauthenticated attacker to cause a DoS condition on the software products, and possibly to execute a malicious code on the personal computer running the software products although it has not been reproduced, by spoofing MELSEC, GOT or FREQROL and returning crafted reply packets."
      }, {
        "lang" : "es",
        "value" : "Manejo inadecuado de la vulnerabilidad de inconsistencia de parámetros de longitud en el software de ingeniería FA de Mitsubishi Electric (Herramienta de configuración de registro del módulo de la CPU versiones 1.112R y anteriores, Configurador CW versiones 1.011M y anteriores, Transferencia de datos versiones 3.44W y anteriores, EZSocket versiones 5.4 y anteriores, Configurador FR todas las versiones, Configurador FR SW3 todas las versiones, Configurador FR2 versiones 1. 24A y anteriores, GT Designer3 Versión1(GOT1000) versiones 1.250L y anteriores, GT Designer3 Versión1(GOT2000) versiones 1.250L y anteriores, GT SoftGOT1000 Versión3 versiones 3.245F y anteriores, GT SoftGOT2000 Versión1 versiones 1.250L y anteriores, GX Configurator-DP versiones 7.14Q y anteriores, GX Configurator-QP todas las versiones, GX Developer versiones 8.506C y anteriores, GX Explorer todas las versiones, GX IEC Developer todas las versiones, GX LogViewer versiones 1. 115U y anteriores, GX RemoteService-I todas las versiones, GX Works2 versiones 1.597X y anteriores, GX Works3 versiones 1.070Y y anteriores, iQ Monozukuri ANDON (Data Transfer) todas las versiones, iQ Monozukuri Process Remote Monitoring (Data Transfer) todas las versiones, M_CommDTM-HART todas las versiones, M_CommDTM-IO-Link versiones 1. 03D y anteriores, MELFA-Works versiones 4.4 y anteriores, MELSEC WinCPU Setting Utility todas las versiones, MELSOFT EM Software Development Kit (EM Configurator) versiones 1. 015R y anteriores, MELSOFT Navigator versiones 2.74C y anteriores, MH11 SettingTool Version2 versiones 2.004E y anteriores, MI Configurator versiones 1.004E y anteriores, MT Works2 versiones 1.167Z y anteriores, MX Component versiones 5.001B y anteriores, Network Interface Board CC IE Control utility versiones 1.29F y anteriores, Network Interface Board CC IE Field Utility versiones 1.16S y anteriores, Network Interface Board CC-Link Ver.2 1.23Z y anteriores, Network Interface Board MNETH utility versions 34L y anteriores, PX Developer versions 1.53F y anteriores, RT ToolBox2 versions 3.73B y anteriores, RT ToolBox3 versions 1.82L y anteriores, Setting/monitoring tools for the C Controller module (SW4PVC-CCPU) versions 4.12N y anteriores y SLMP Data Collector versions 1. 04E y anteriores) permite que un atacante remoto no autenticado provoque una condición de denegación de servicio de los productos de software, y posiblemente ejecute un programa malicioso en el ordenador personal que ejecuta los productos de software, aunque no se ha reproducido, mediante la suplantación de MELSEC, GOT o FREQROL y el retorno de paquetes de respuesta manipulados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-130"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:c_controller_module_setting_and_monitoring_tool:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB4A4DA-DBC0-42A8-B933-933DE45F004D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:cpu_module_logging_configuration_tool:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.112r",
            "matchCriteriaId" : "D83BA6D0-2A25-4DDA-B7BA-DE11FA55D276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:cw_configurator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.011m",
            "matchCriteriaId" : "91D2BDFB-0A0A-4A1B-8671-8B5D652253DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:data_transfer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.44w",
            "matchCriteriaId" : "6AF9A2A7-6F9E-4CA9-8485-3AF83A6411DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:ezsocket:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E4BC24-6583-4791-9ED9-D2D675187DCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:fr_configurator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1773F87D-7E58-4E00-90B7-92BDDB4AA3BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:fr_configurator_sw3:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D236ABC2-93E4-4428-B949-7E17945E4D98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:fr_configurator2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24a",
            "matchCriteriaId" : "18E81D47-F88A-481B-98E0-56C52CDF6C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gt_designer3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.250l",
            "matchCriteriaId" : "66DEB37E-A837-4A2F-9660-7DE8441004D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gt_softgot1000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.245f",
            "matchCriteriaId" : "B835ECE8-6923-47DF-9BB8-E0AA8D77228D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gt_softgot2000:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.250l",
            "matchCriteriaId" : "92C96AF0-1DCE-4769-AAC4-422F8B411A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_configurator-dp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.14q",
            "matchCriteriaId" : "E767C69A-23D9-4C67-AA66-392D5E70ED7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_configurator-qp:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492299CE-FE94-4CB4-9D62-03F05CBCDE74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_developer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.506c",
            "matchCriteriaId" : "C4588898-2ABA-4AA3-A33F-551387DC84AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_explorer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A18533-FF83-4C7C-839D-077A7523DBDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_iec_developer:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "974700B4-FC0B-4097-8826-CE055E13434F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_logviewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.115u",
            "matchCriteriaId" : "6FFEE46E-C37D-4E82-BDC5-1225C03BFFFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_remoteservice-i:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DAEEF5-50CA-4DCD-8B1A-BAE8DEEA23AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_works2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.597x",
            "matchCriteriaId" : "76E34DC3-5D48-49DB-B1CB-CB5BDDED169D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:gx_works3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.070y",
            "matchCriteriaId" : "920FC6C1-32FA-4251-81AA-B76D353B216A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:iq_monozukuri_andon:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07756207-64DF-4F89-B3A1-19086CCC42BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:iq_monozukuri_process_remote_monitoring:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "978160CD-B7D4-4494-A5BB-CA0195441985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:m_commdtm-hart:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBC92717-C371-42B4-8AA6-73E14B60A87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:m_commdtm-io-link:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87B55AB8-B00D-4960-9F31-45E1855B109E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melfa-works:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4",
            "matchCriteriaId" : "4116C452-19C3-4F48-8A05-864BD884BDD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melsec_wincpu_setting_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C51CF8E-49C1-418C-B410-50B23F9A23D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melsoft_em_software_development_kit:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "724C0E0B-5658-4040-A925-A07128EAD323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:melsoft_navigator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.74c",
            "matchCriteriaId" : "0DC7353B-EFF7-432D-8F88-0D5EBBBBE4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mh11_settingtool_version2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.004e",
            "matchCriteriaId" : "A8D3CBAF-5876-4DCE-908F-CCA8B0DDDB75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mi_configurator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A661B972-912C-4DAA-9518-CC01E0EB1A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mt_works2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.167z",
            "matchCriteriaId" : "57031F64-353E-403C-B7F8-0A145E70CBE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:mx_component:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.001b",
            "matchCriteriaId" : "3B623A09-688E-49B1-99EF-CFA8DADC79E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_cc-link:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A92A26-7148-4A2A-BAFA-5F819468F48E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_control_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D02C00E-B8C6-4987-8F25-E3D46FEDB44A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_cc_ie_field_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F71BF3-FC69-4DA3-9989-DA269B557085"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:network_interface_board_mneth_utility:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171CD9BC-2A02-4ACA-B29C-332094AA3EDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:px_developer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.53f",
            "matchCriteriaId" : "445EF081-A7BB-4568-850F-00CF58060D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:rt_toolbox2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.73b",
            "matchCriteriaId" : "5BD4EC4A-ACF7-45F2-893D-569B4F8F8909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:rt_toolbox3:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.82l",
            "matchCriteriaId" : "779B0C13-D3DD-4D27-B18B-C0119B7BC5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:setting\\/monitoring_tools_for_the_c_controller_module:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CBC7FE-6EF9-4DA5-8128-849233A8DC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitsubishielectric:slmp_data_collector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.04e",
            "matchCriteriaId" : "8814A8BA-AA54-4270-AAB1-679D0881D715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU92330101",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2020-021_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://jvn.jp/vu/JVNVU92330101/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/news-events/ics-advisories/icsa-21-049-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2020-021_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26713",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T20:15:13.193",
      "lastModified" : "2024-11-21T05:56:43.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow in res_rtp_asterisk.c in Sangoma Asterisk before 16.16.1, 17.x before 17.9.2, and 18.x before 18.2.1 and Certified Asterisk before 16.8-cert6 allows an authenticated WebRTC client to cause an Asterisk crash by sending multiple hold/unhold requests in quick succession. This is caused by a signedness comparison mismatch."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer en la región stack de la memoria en el archivo res_rtp_asterisk.c en Sangoma Asterisk versiones anteriores a 16.16.1, versiones 17.x anteriores a 17.9.2 y versiones 18.x anteriores a 18.2.1 y Certified Asterisk versiones anteriores a 16.8-cert6, permite a un cliente WebRTC autenticado causar un bloqueo de Asterisk mediante el envío de múltiples peticiones de hold/unhold en una sucesión rápida.&#xa0;Esto es causado por una discrepancia en la comparación de firmas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.16.1",
            "matchCriteriaId" : "7382B641-0396-456F-BF33-3F6412E35F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.0.0",
            "versionEndExcluding" : "17.9.2",
            "matchCriteriaId" : "C5BA8606-ADA9-4841-A7E2-A9165138849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:asterisk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "18.2.1",
            "matchCriteriaId" : "CE8661F7-03A5-4850-BEF7-E306AECE3037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "81C3E390-8B99-4EB8-82DD-02893611209A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "17DB2297-1908-4F87-8046-2BAA74569D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEA2CC40-C2F6-4828-82F0-1B50D3E61F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "32F19F43-C1E8-4B6C-9356-AF355B7320BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert1-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "21D1FA32-B441-485F-8AE9-F3A394626909"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert2:*:*:*:*:*:*",
            "matchCriteriaId" : "F7795CCF-B160-4B4F-9529-1192C11D7FDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert3:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E5D0D-9EB3-40FD-8B7E-E93A95D07AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4:*:*:*:*:*:*",
            "matchCriteriaId" : "C7DFDA30-DD61-4BBC-AFE4-448BF2A4F303"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "142F1F89-49AC-4A0B-A273-61F697063A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "53041795-788C-4914-A2F6-41539ABE0244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB98E65-B2D0-49A4-8BF3-12155E3E13C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert4-rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "769C854C-03CD-40A9-B39B-C0CDCA8252EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:digium:certified_asterisk:16.8:cert5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D86AD6E-4E07-48B0-88D8-E18F277FFE6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29205",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://downloads.asterisk.org/pub/security/AST-2021-004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://issues.asterisk.org/jira/browse/ASTERISK-29205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27509",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T23:15:12.733",
      "lastModified" : "2024-11-21T05:58:07.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Visualware MyConnection Server before 11.0b build 5382, each published report is not associated with its own access code."
      }, {
        "lang" : "es",
        "value" : "En Visualware MyConnection Server versiones anteriores a 11.0b build 5382, cada reporte publicado no está asociado con su propio código de acceso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualware:myconnection_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0b",
            "matchCriteriaId" : "26497F68-FCFE-4A7E-9032-EA20B14CD9F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualware:myconnection_server:11.0b:build5321:*:*:*:*:*:*",
            "matchCriteriaId" : "F175E6C3-5D6A-489F-999E-94771E492786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualware:myconnection_server:11.0b:build5360:*:*:*:*:*:*",
            "matchCriteriaId" : "975DAB54-0FCB-4A8B-BC43-6A467A410260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualware:myconnection_server:11.0b:build5363:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC73EB-FF53-4334-AB5E-3A32C49AC4F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://myconnectionserver.visualware.com/support/newrelease.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://myconnectionserver.visualware.com/support/newrelease.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-19T23:15:12.797",
      "lastModified" : "2024-11-21T06:21:06.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The slashify package 1.0.0 for Node.js allows open-redirect attacks, as demonstrated by a localhost:3000///example.com/ substring."
      }, {
        "lang" : "es",
        "value" : "El paquete slashify versión 1.0.0 para Node.js, permite ataques de redireccionamiento abierto, como es demostrado por una subcadena localhost:3000///example.com/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:slashify:1.0.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "0A200016-7227-4F56-9716-1FB281A9DB73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210401-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/slashify",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210401-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2020-199-open-redirect-slashify",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/slashify",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26544",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-02-20T09:15:12.377",
      "lastModified" : "2024-11-21T05:56:27.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access logs and results of other users' sessions and run jobs with their privileges. This issue is fixed in Livy 0.7.1-incubating."
      }, {
        "lang" : "es",
        "value" : "Livy Server versión 0.7.0-incubating (solamente) es vulnerable a un problema de tipo cross site scripting en el nombre de la sesión.&#xa0;Un usuario malicioso podría usar este fallo para acceder a los registros y resultados de las sesiones de otros usuarios y ejecutar trabajos con sus privilegios.&#xa0;Este problema es corregido en Livy versión 0.7.1-incubating"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:livy:0.7.0-incubating:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0153E9AC-2495-40AD-8ECF-C242E8416CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/20/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/incubator-livy/commit/4d8a912699683b973eee76d4e91447d769a0cb0d",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2db14e7fd1e5ec2519e8828d43529bad623d75698cc7918af3a3f3ed%40%3Cuser.livy.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/20/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/apache/incubator-livy/commit/4d8a912699683b973eee76d4e91447d769a0cb0d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2db14e7fd1e5ec2519e8828d43529bad623d75698cc7918af3a3f3ed%40%3Cuser.livy.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26716",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-21T06:15:12.257",
      "lastModified" : "2024-11-21T05:56:44.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Modules/input/Views/schedule.php in Emoncms through 10.2.7 allows XSS via the node parameter."
      }, {
        "lang" : "es",
        "value" : "El archivo Modules/input/Views/schedule.php en Emoncms versiones hasta 10.2.7, permite un ataque de tipo XSS por medio del parámetro node"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openenergymonitor:emoncms:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.7",
            "matchCriteriaId" : "2CCCE00D-43E0-43B7-8BEE-D3AA3BA629D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emoncms/emoncms/issues/1652",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/emoncms/emoncms/issues/1652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27513",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T00:15:12.310",
      "lastModified" : "2024-11-21T05:58:08.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on \"le filtre userside.\""
      }, {
        "lang" : "es",
        "value" : "El módulo admin_ITSM en EyesOfNetwork versión 5.3-10, permite a usuarios autenticados remoto cargar archivos .xml.php arbitrarios porque es basado en \"le filtre userside\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EF3A57-69B9-4E5F-9E04-0273F5A011F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/issues/87",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/issues/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27514",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T00:15:12.370",
      "lastModified" : "2024-11-21T05:58:08.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EyesOfNetwork 5.3-10 uses an integer of between 8 and 10 digits for the session ID, which might be leveraged for brute-force authentication bypass (such as in CVE-2021-27513 exploitation)."
      }, {
        "lang" : "es",
        "value" : "EyesOfNetwork versión 5.3-10, usa un número entero de entre 8 y 10 dígitos para el ID de sesión, que podría ser aprovechado para omitir una autenticación de fuerza bruta (como en la explotación del CVE-2021-27513)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eyesofnetwork:eyesofnetwork:5.3-10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EF3A57-69B9-4E5F-9E04-0273F5A011F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/issues/87",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ArianeBlow/exploit-eyesofnetwork5.3.10/blob/main/PoC-BruteForceID-arbitraty-file-upload-RCE-PrivEsc.py",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/EyesOfNetworkCommunity/eonweb/issues/87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27515",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T00:15:12.543",
      "lastModified" : "2024-11-21T05:58:08.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "url-parse before 1.5.0 mishandles certain uses of backslash such as http:\\/ and interprets the URI as a relative path."
      }, {
        "lang" : "es",
        "value" : "url-parse versiones anteriores a 1.5.0, maneja inapropiadamente determinados usos de la barra invertida como http:\\/ e interpreta el URI como una ruta relativa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:url-parse_project:url-parse:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "D44F1021-5EF0-4A06-B7C6-EADB95427807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unshiftio/url-parse/pull/197",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unshiftio/url-parse/compare/1.4.7...1.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/unshiftio/url-parse/pull/197",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27516",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T00:15:12.620",
      "lastModified" : "2024-11-21T05:58:08.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "URI.js (aka urijs) before 1.19.6 mishandles certain uses of backslash such as http:\\/ and interprets the URI as a relative path."
      }, {
        "lang" : "es",
        "value" : "URI.js (también se conoce como urijs) versiones anteriores a 1.19.6, maneja inapropiadamente determinados usos de barra invertida como http:\\/ e interpreta el URI como una ruta relativa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uri.js_project:uri.js:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.6",
            "matchCriteriaId" : "36DFF109-A827-4D9A-9790-55C2564E83EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4305",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/medialize/URI.js/commit/a1ad8bcbc39a4d136d7e252e76e957f3ece70839",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/medialize/URI.js/releases/tag/v1.19.6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4305",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/medialize/URI.js/commit/a1ad8bcbc39a4d136d7e252e76e957f3ece70839",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/medialize/URI.js/releases/tag/v1.19.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T02:15:14.180",
      "lastModified" : "2024-11-21T05:52:23.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Botan before 2.17.3, constant-time computations are not used for certain decoding and encoding operations (base32, base58, base64, and hex)."
      }, {
        "lang" : "es",
        "value" : "En Botan versiones anteriores a 2.17.3, los cálculos de tiempo constante no son usados para determinadas operaciones de decodificación y codificación (base32, base58, base64 y hex)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:botan_project:botan:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17.3",
            "matchCriteriaId" : "0913558B-6F4A-43B4-96F4-18E0533E5A25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://botan.randombit.net/news.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/randombit/botan/compare/2.17.2...2.17.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/randombit/botan/pull/2549",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://botan.randombit.net/news.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/randombit/botan/compare/2.17.2...2.17.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/randombit/botan/pull/2549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T02:15:14.260",
      "lastModified" : "2024-11-21T05:55:54.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smarty before 3.1.39 allows a Sandbox Escape because $smarty.template_object can be accessed in sandbox mode."
      }, {
        "lang" : "es",
        "value" : "Smarty versiones anteriores a 3.1.39, permite un Escape del Sandbox porque un $smarty.template_object puede ser accedido en el modo sandbox"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.39",
            "matchCriteriaId" : "EC1FB377-4E78-4086-BCA1-0B6805311AA7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5151",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T02:15:14.323",
      "lastModified" : "2024-11-21T05:55:54.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring."
      }, {
        "lang" : "es",
        "value" : "Smarty versiones anteriores a 3.1.39, permite una inyección de código por medio de un nombre de función no previsto después de una subcadena {function name="
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smarty:smarty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.39",
            "matchCriteriaId" : "EC1FB377-4E78-4086-BCA1-0B6805311AA7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5151",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/smarty-php/smarty/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T02:15:14.383",
      "lastModified" : "2024-11-21T06:20:59.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Netshield NANO 25 10.2.18 devices, /usr/local/webmin/System/manual_ping.cgi allows OS command injection (after authentication by the attacker) because the system C library function is used unsafely."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Netshield NANO versión 25 10.2.18, el archivo /usr/local/webmin/System/manual_ping.cgi permite una inyección de comandos del Sistema Operativo (después de la autenticación por parte del atacante) porque la función de la biblioteca del sistema C es usada de manera no segura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netshieldcorp:nano_25_firmware:10.2.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3584B948-4921-4FCB-A567-31ABB9FDEB29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netshieldcorp:nano_25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD55999A-BFC4-4ECB-A1F1-D212956C3AF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.digitaldefense.com/resources/vulnerability-research/netshield-corporation-nano-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.netshieldcorp.com/netshield-appliances/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.digitaldefense.com/resources/vulnerability-research/netshield-corporation-nano-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.netshieldcorp.com/netshield-appliances/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27368",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T15:15:12.677",
      "lastModified" : "2024-11-21T05:57:51.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact page in Monica 2.19.1 allows stored XSS via the First Name field."
      }, {
        "lang" : "es",
        "value" : "La página Contact en Monica versión 2.19.1, permite un ataque de tipo XSS almacenado por medio del campo First Name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monicahq:monica:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CE0D8A-8910-46A7-BE3C-E4F44C09042F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T15:15:12.927",
      "lastModified" : "2024-11-21T05:57:51.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact page in Monica 2.19.1 allows stored XSS via the Middle Name field."
      }, {
        "lang" : "es",
        "value" : "La página Contact en Monica versión 2.19.1, permite un ataque de tipo XSS almacenado por medio del campo Middle Name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monicahq:monica:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CE0D8A-8910-46A7-BE3C-E4F44C09042F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T15:15:13.037",
      "lastModified" : "2024-11-21T05:57:51.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field."
      }, {
        "lang" : "es",
        "value" : "La página Contact en Monica versión 2.19.1, permite un ataque de tipo XSS almacenado por medio del campo Last Name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monicahq:monica:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CE0D8A-8910-46A7-BE3C-E4F44C09042F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2-other-monica/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161501/Monica-2.19.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/2-other-monica/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27371",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T15:15:13.163",
      "lastModified" : "2024-11-21T05:57:51.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact page in Monica 2.19.1 allows stored XSS via the Description field."
      }, {
        "lang" : "es",
        "value" : "La página Contact en Monica versión 2.19.1, permite un ataque de tipo XSS almacenado por medio del campo Description"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monicahq:monica:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CE0D8A-8910-46A7-BE3C-E4F44C09042F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27559",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T15:15:13.227",
      "lastModified" : "2024-11-21T05:58:11.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact page in Monica 2.19.1 allows stored XSS via the Nickname field."
      }, {
        "lang" : "es",
        "value" : "La página Contact en Monica versión 2.19.1, permite un ataque de tipo XSS almacenado por medio del campo Nickname"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:monicahq:monica:2.19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CE0D8A-8910-46A7-BE3C-E4F44C09042F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/issues/4888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/monicahq/monica/pull/4543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3120",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T15:15:13.367",
      "lastModified" : "2024-11-21T06:20:55.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server. In order to exploit this vulnerability, an attacker must be able to place a valid Gift Card product into the shopping cart. An uploaded file is placed at a predetermined path on the web server with a user-specified filename and extension. This occurs because the ywgc-upload-picture parameter can have a .php value even though the intention was to only allow uploads of Gift Card images."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de carga de archivos arbitraria en el plugin YITH WooCommerce Gift Cards Premium versiones anteriores a 3.3.1, para WordPress, permite a atacantes remotos lograr una ejecución de código remota en el sistema operativo en el contexto de seguridad del servidor web.&#xa0;A fin de explotar esta vulnerabilidad, un atacante debe poder colocar una Tarjeta de Regalo válida en el carrito de compras.&#xa0;Un archivo cargado se coloca en una ruta predeterminada en el servidor web con un nombre de archivo y una extensión especificados por el usuario.&#xa0;Esto ocurre porque el parámetro ywgc-upload-picture puede tener un valor .php aunque la intención era permitir solo la carga de imágenes de Tarjetas de Regalo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yithemes:yith_woocommerce_gift_cards:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "3.3.1",
            "matchCriteriaId" : "8F1E3219-DBAC-446E-9631-6EF41D9DA346"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/guy-liu/yith-giftdrop",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://yithemes.com/themes/plugins/yith-woocommerce-gift-cards/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/guy-liu/yith-giftdrop",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://yithemes.com/themes/plugins/yith-woocommerce-gift-cards/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T17:15:12.657",
      "lastModified" : "2024-11-21T05:57:38.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Shinobi through ocean version 1. lib/auth.js has Incorrect Access Control. Valid API Keys are held in an internal JS Object. Therefore an attacker can use JS Proto Method names (such as constructor or hasOwnProperty) to convince the System that the supplied API Key exists in the underlying JS object, and consequently achieve complete access to User/Admin/Super API functions, as demonstrated by a /super/constructor/accounts/list URI."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Shinobi versiones hasta Ocean versión 1. La biblioteca lib/auth.js presenta un Control de Acceso Incorrecto.&#xa0;Las claves de API válidas son guardadas en un objeto JS interno.&#xa0;Por lo tanto, un atacante puede usar nombres del JS Proto Method (como constructor o hasOwnProperty) para convencer al sistema de que la API Key suministrada existe en el objeto JS subyacente y, en consecuencia, lograr un acceso completo a las funciones de la API User/Admin/Super, como es demostrado por un URI /super/constructor /accounts/list"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shinobi:shinobi_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "CB0722FC-17E5-4B2D-BB04-BEB1FEA2349A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/Shinobi-Systems/Shinobi/-/merge_requests/286",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/Shinobi-Systems/Shinobi/-/tags",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://shinobi.video/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://gitlab.com/Shinobi-Systems/Shinobi/-/merge_requests/286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/Shinobi-Systems/Shinobi/-/tags",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://shinobi.video/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T17:15:12.767",
      "lastModified" : "2024-11-21T05:58:10.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Genymotion Desktop through 3.2.0 leaks the host's clipboard data to the Android application by default. NOTE: the vendor's position is that this is intended behavior that can be changed through the Settings > Device screen"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Genymotion Desktop versiones hasta 3.2.0, filtra los datos del portapapeles del host a la aplicación de Android por defecto.&#xa0;NOTA: la posición del proveedor es que este es un comportamiento previsto que se puede cambiar por medio de la pantalla Settings &gt; Device"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genymobile:genymotion_desktop:*:*:*:*:*:-:*:*",
            "versionEndIncluding" : "3.2.0",
            "matchCriteriaId" : "8D927D8B-FDC9-43D8-A345-1B05334C7405"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.genymotion.com/desktop/latest/02_Application.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/eybisi/misc/tree/main/clipwatch",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/0xabc0/status/1363788023956185090",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/0xabc0/status/1363855602477387783",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/0xabc0/status/1363856804602671104",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.genymotion.com/download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Tod8Q6sf0P8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.genymotion.com/desktop/latest/02_Application.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/eybisi/misc/tree/main/clipwatch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://twitter.com/0xabc0/status/1363788023956185090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/0xabc0/status/1363855602477387783",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/0xabc0/status/1363856804602671104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.genymotion.com/download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=Tod8Q6sf0P8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27564",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T17:15:12.847",
      "lastModified" : "2024-11-21T05:58:12.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored XSS issue exists in Appspace 6.2.4. After a user is authenticated and enters an XSS payload under the groups section of the network tab, it is stored as the group name. Whenever another member visits that group, this payload executes."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema de tipo XSS almacenado en Appspace versión 6.2.4.&#xa0;Después de que un usuario se autentique e introduzca una carga útil XSS en la sección de grupos de la pestaña de red, es almacenada como el nombre del grupo. Cada vez que otro miembro visita ese grupo, esta carga útil es ejecutada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appspace:appspace:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD7EBEE-1FA6-4C7D-ACE7-B3D7D62373EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-Xss",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/viperbluff/Appspace-Ver-6.2.4-Stored-Xss",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-22T20:15:13.243",
      "lastModified" : "2024-11-21T05:57:45.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MyBB before 1.8.25 allows stored XSS via nested [email] tags with MyCode (aka BBCode)."
      }, {
        "lang" : "es",
        "value" : "MyBB versiones anteriores a 1.8.25, permite un ataque de tipo XSS almacenado por medio de etiquetas [correo electrónico] anidadas con MyCode (también se conoce como BBCode)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.25",
            "matchCriteriaId" : "F8B31EA3-CFEA-43B3-8348-397BED3FD568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://mybb.com/versions/1.8.25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/commit/cb781b49116bf5c4d8deca3e17498122b701677a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-6483-hcpp-p75w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://mybb.com/versions/1.8.25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26068",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-02-22T21:15:19.727",
      "lastModified" : "2024-11-21T05:55:48.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An endpoint in Atlassian Jira Server for Slack plugin from version 0.0.3 before version 2.0.15 allows remote attackers to execute arbitrary code via a template injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "Un endpoint en el plugin Atlassian Jira Server para Slack desde versiones 0.0.3 anteriores a 2.0.15, permite a atacantes remotos ejecutar código arbitrario por medio de una vulnerabilidad de inyección de plantilla"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server_for_slack:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.0.3",
            "versionEndExcluding" : "2.0.15",
            "matchCriteriaId" : "40D9AB76-3031-49F4-9B3B-5C44146102B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://confluence.atlassian.com/jira/jira-server-for-slack-security-advisory-17th-february-2021-1044091690.html",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/jira/jira-server-for-slack-security-advisory-17th-february-2021-1044091690.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26724",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2021-02-22T21:15:19.787",
      "lastModified" : "2024-11-21T05:56:45.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos del Sistema Operativo cuando se cambia la configuración de fecha o el nombre de host usando la GUI web de Nozomi Networks Guardian y CMC, permite a administradores autenticados llevar a cabo una ejecución de código remota .&#xa0;Este problema afecta a: Nozomi Networks Guardian versión 20.0.7.3 versión 20.0.7.3 y versiones anteriores.&#xa0;Nozomi Networks CMC versión 20.0.7.3 versión 20.0.7.3 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:central_management_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndIncluding" : "19.0.12",
            "matchCriteriaId" : "6CEDEFB4-AD39-4211-BC5C-0B698E979ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:central_management_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.0.0.0",
            "versionEndExcluding" : "20.0.7.4",
            "matchCriteriaId" : "928EC60A-002B-4E8C-ABD5-E617EA853EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.0.12",
            "matchCriteriaId" : "06B9E3D4-EEA8-4314-B0F5-5C47431545C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.0.0.0",
            "versionEndExcluding" : "20.0.7.4",
            "matchCriteriaId" : "77035537-8C15-4130-A2B8-88D4F082BADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.nozominetworks.com/NN-2021:1-01",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.nozominetworks.com/NN-2021:1-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26725",
      "sourceIdentifier" : "prodsec@nozominetworks.com",
      "published" : "2021-02-22T21:15:19.913",
      "lastModified" : "2024-11-21T05:56:45.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Salto de Ruta cuando se cambia la zona horaria usando la GUI web de Nozomi Networks Guardian y CMC, permite a un administrador autenticado tener archivos del sistema protegidos contra lectura.&#xa0;Este problema afecta a: Nozomi Networks Guardian versión 20.0.7.3 versión 20.0.7.3 y versiones anteriores.&#xa0;Nozomi Networks CMC versión 20.0.7.3 versión 20.0.7.3 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "HIGH",
            "vulnIntegrityImpact" : "HIGH",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "prodsec@nozominetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "prodsec@nozominetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:central_management_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndIncluding" : "19.0.12",
            "matchCriteriaId" : "6CEDEFB4-AD39-4211-BC5C-0B698E979ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:central_management_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.0.0.0",
            "versionEndExcluding" : "20.0.7.4",
            "matchCriteriaId" : "928EC60A-002B-4E8C-ABD5-E617EA853EEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.0.12",
            "matchCriteriaId" : "06B9E3D4-EEA8-4314-B0F5-5C47431545C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.0.0.0",
            "versionEndExcluding" : "20.0.7.4",
            "matchCriteriaId" : "77035537-8C15-4130-A2B8-88D4F082BADE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.nozominetworks.com/NN-2021:2-01",
        "source" : "prodsec@nozominetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.nozominetworks.com/NN-2021:2-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21149",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.350",
      "lastModified" : "2024-11-21T05:47:39.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in Data Transfer in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento del búfer de la pila en Data Transfer en Google Chrome en Linux versiones anteriores a 88.0.4324.182, permitía a un atacante remoto llevar a cabo un acceso a la memoria fuera de límites por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1138143",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1138143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21150",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.427",
      "lastModified" : "2024-11-21T05:47:39.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Downloads in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Downloads en Google Chrome en Windows versiones anteriores a 88.0.4324.182, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1172192",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1172192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21151",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.490",
      "lastModified" : "2024-11-21T05:47:39.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Payments in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Payments en Google Chrome versiones anteriores a 88.0.4324.182, permitía a un atacante remoto llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1165624",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1165624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21152",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.553",
      "lastModified" : "2024-11-21T05:47:40.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Media in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en Media en Google Chrome en Linux versiones anteriores a 88.0.4324.182, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166504",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21153",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.677",
      "lastModified" : "2024-11-21T05:47:40.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack buffer overflow in GPU Process in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en GPU Process en Google Chrome en Linux versiones anteriores a 88.0.4324.182, permitió a un atacante remoto llevar a cabo potencialmente un acceso a la memoria fuera de límites por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155974",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155974",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21154",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.740",
      "lastModified" : "2024-11-21T05:47:40.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Tab Strip in Google Chrome prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en Tab Strip en Google Chrome versiones anteriores a 88.0.4324.182, permitía a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173269",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21155",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.803",
      "lastModified" : "2024-11-21T05:47:40.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in Tab Strip in Google Chrome on Windows prior to 88.0.4324.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en Tab Strip en Google Chrome en Windows versiones anteriores a 88.0.4324.182, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175500",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21156",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.867",
      "lastModified" : "2024-11-21T05:47:40.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted script."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en V8 en Google Chrome versiones anteriores a 88.0.4324.182, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de un script diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1177341",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162579/Chrome-Array-Transfer-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1177341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21157",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-02-22T22:15:12.927",
      "lastModified" : "2024-11-21T05:47:40.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Web Sockets en Google Chrome en Linux versiones anteriores a 88.0.4324.182, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.705.74",
            "matchCriteriaId" : "8CB6598E-765C-44B8-B4B5-C52B45B87500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "8601DF94-0AD3-4486-B88B-CF1336647F5A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "88.0.4324.182",
            "matchCriteriaId" : "A12AD8EF-7715-47A7-8FBA-3E6FAA9EFCF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1170657",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/02/stable-channel-update-for-desktop_16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1170657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BI6ZIJQYP5DFMYVX4J5OGOU2NQLEZ3SB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T00:15:12.533",
      "lastModified" : "2024-11-21T05:51:54.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Keybase Desktop Client before 5.6.0 on Windows and macOS, and before 5.6.1 on Linux, allows an attacker to obtain potentially sensitive media (such as private pictures) in the Cache and uploadtemps directories. It fails to effectively clear cached pictures, even after deletion via normal methodology within the client, or by utilizing the \"Explode message/Explode now\" functionality. Local filesystem access is needed by the attacker."
      }, {
        "lang" : "es",
        "value" : "Keybase Desktop Client antes de la versión 5.6.0 en Windows y macOS, y antes de la 5.6.1 en Linux, permite a un atacante obtener medios potencialmente sensibles (como fotos privadas) en los directorios Cache y uploadtemps. No consigue borrar eficazmente las imágenes almacenadas en la caché, ni siquiera después de haberlas borrado mediante la metodología normal dentro del cliente, o utilizando la funcionalidad \"Explotar mensaje/Explotar ahora\". El atacante necesita acceso al sistema de archivos local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keybase:keybase:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.0",
            "matchCriteriaId" : "EB47E767-AB7D-40EA-BC26-2BCA3FD29271"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:keybase:keybase:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.6.1",
            "matchCriteriaId" : "CF8618D1-A963-4F75-94BA-74994AAFB2FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:linux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EBE07A-6FEF-4343-BA5D-58FD175F5CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/keybase/client/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1074930",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://johnjhacking.com/blog/cve-2021-23827/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keybase/client/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1074930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://johnjhacking.com/blog/cve-2021-23827/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27189",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T00:15:12.613",
      "lastModified" : "2024-11-21T05:57:31.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CIRA Canadian Shield app before 4.0.13 for iOS lacks SSL Certificate Validation."
      }, {
        "lang" : "es",
        "value" : "La aplicación CIRA Canadian Shield anterior a la versión 4.0.13 para iOS carece de validación de certificados SSL."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cira:canadian_shield:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "4.0.13",
            "matchCriteriaId" : "A133321F-DDFC-4D8F-B72E-57DFBA5C53D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161507/CIRA-Canadian-Shield-Man-In-The-Middle.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/72",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/CIRA-Canadian-Shield.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161507/CIRA-Canadian-Shield-Man-In-The-Middle.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/72",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.info-sec.ca/advisories/CIRA-Canadian-Shield.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27568",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T02:15:12.887",
      "lastModified" : "2024-11-21T05:58:12.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en netplex json-smart-v1 hasta el 23-10-2015 y json-smart-v2 hasta 2.4.&#xa0;Una excepción es lanzada desde una función, pero no es detectada, como es demostrado por la función NumberFormatException.&#xa0;Cuando no se detecta, puede causar a los programas usando la biblioteca para bloquear o exponer información confidencial"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:json-smart_project:json-smart-v1:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "CF4BCC9F-24C9-4BA3-84D2-F31A3B473F34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:json-smart_project:json-smart-v2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "CCD2A223-7D65-4A73-A810-3EA9A1FC6027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:json-smart_project:json-smart-v2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.4",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "72EE4B3C-E1F2-4370-B42E-AC7E58651690"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.42",
            "matchCriteriaId" : "71CB79ED-A93E-4CBD-BCDD-82C5A00B373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F906F04-39E4-4BE4-8A73-9D058AAADB43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B393A82-476A-4270-A903-38ED4169E431"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85CAE52B-C2CA-4C6B-A0B7-2B9D6F0499E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/netplex/json-smart-v1/issues/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netplex/json-smart-v2/issues/60",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb6287f5aa628c8d9af52b5401ec6cc51b6fc28ab20d318943453e396%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re237267da268c690df5e1c6ea6a38a7fc11617725e8049490f58a6fa%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf70210b4d63191c0bfb2a0d5745e104484e71703bf5ad9cb01c980c6%40%3Ccommits.druid.apache.org%3E",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netplex/json-smart-v1/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netplex/json-smart-v2/issues/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb6287f5aa628c8d9af52b5401ec6cc51b6fc28ab20d318943453e396%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re237267da268c690df5e1c6ea6a38a7fc11617725e8049490f58a6fa%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf70210b4d63191c0bfb2a0d5745e104484e71703bf5ad9cb01c980c6%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22643",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-23T04:15:14.100",
      "lastModified" : "2024-11-21T05:50:22.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an out-of-bounds read while processing project files, which may allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Luxion KeyShot versiones anteriores a 10.1, Luxion KeyShot Viewer versiones anteriores a 10.1, Luxion KeyShot Network Rendering versiones anteriores a 10.1 y Luxion KeyVR versiones anteriores a 10.1, son vulnerables a una lectura fuera de límites mientras se procesan archivos de proyecto, lo que puede permitir a un atacante ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "92EA043D-B0BD-4C61-B6C6-709C001F0363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_network_rendering:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "99429D18-218B-4B84-B1E7-7E4B54B6CDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_viewer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "50848054-203F-4C61-8A26-154083FC0C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyvr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "80310813-CE50-4876-85FF-18760DD5F502"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8F6B67-0A8A-42E5-B9BD-3539475D7C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BB7C3E-32DA-477C-8C11-E35546BC5D61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83F677E-3133-407D-8089-E2682DBFDA1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9B3882-6975-42EA-A056-B6EC83E51E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-316/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-319/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-316/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-319/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22645",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-23T04:15:14.210",
      "lastModified" : "2024-11-21T05:50:22.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to an attack because the .bip documents display a “load” command, which can be pointed to a .dll from a remote network share. As a result, the .dll entry point can be executed without sufficient UI warning."
      }, {
        "lang" : "es",
        "value" : "Luxion KeyShot versiones anteriores a 10.1, Luxion KeyShot Viewer versiones anteriores a 10.1, Luxion KeyShot Network Rendering versiones anteriores a 10.1 y Luxion KeyVR versiones anteriores a 10.1, son vulnerables a un ataque porque los documentos .bip muestran un comando \"load\", que puede ser apuntado a una .dll desde un recurso compartido de red remoto.&#xa0;Como resultado, el punto de entrada .dll puede ser ejecutado sin suficiente advertencia de la Interfaz de Usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-357"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "92EA043D-B0BD-4C61-B6C6-709C001F0363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_network_rendering:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "99429D18-218B-4B84-B1E7-7E4B54B6CDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_viewer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "50848054-203F-4C61-8A26-154083FC0C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyvr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "80310813-CE50-4876-85FF-18760DD5F502"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8F6B67-0A8A-42E5-B9BD-3539475D7C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BB7C3E-32DA-477C-8C11-E35546BC5D61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83F677E-3133-407D-8089-E2682DBFDA1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9B3882-6975-42EA-A056-B6EC83E51E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-323/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-323/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22647",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-23T04:15:14.290",
      "lastModified" : "2024-11-21T05:50:22.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are vulnerable to multiple out-of-bounds write issues while processing project files, which may allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Luxion KeyShot versiones anteriores a 10.1, Luxion KeyShot Viewer versiones anteriores a 10.1, Luxion KeyShot Network Rendering versiones anteriores a 10.1 y Luxion KeyVR versiones anteriores a 10.1, son vulnerables a múltiples problemas de escritura fuera de límites mientras se procesan archivos de proyecto, lo que puede permitir a un atacante ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "92EA043D-B0BD-4C61-B6C6-709C001F0363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_network_rendering:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "99429D18-218B-4B84-B1E7-7E4B54B6CDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_viewer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "50848054-203F-4C61-8A26-154083FC0C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyvr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "80310813-CE50-4876-85FF-18760DD5F502"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8F6B67-0A8A-42E5-B9BD-3539475D7C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BB7C3E-32DA-477C-8C11-E35546BC5D61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83F677E-3133-407D-8089-E2682DBFDA1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9B3882-6975-42EA-A056-B6EC83E51E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-318/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-320/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-321/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-322/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-326/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-318/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-320/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-321/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-322/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-326/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22649",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-23T04:15:14.350",
      "lastModified" : "2024-11-21T05:50:23.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 have multiple NULL pointer dereference issues while processing project files, which may allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Luxion KeyShot versiones anteriores a 10.1, Luxion KeyShot Viewer versiones anteriores a 10.1, Luxion KeyShot Network Rendering versiones anteriores a 10.1 y Luxion KeyVR versiones anteriores a 10.1, presentan múltiples problemas de desreferencia de puntero NULL mientras se procesar archivos de proyecto, lo que puede permitir a un atacante ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-822"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "92EA043D-B0BD-4C61-B6C6-709C001F0363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_network_rendering:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "99429D18-218B-4B84-B1E7-7E4B54B6CDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_viewer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "50848054-203F-4C61-8A26-154083FC0C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyvr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "80310813-CE50-4876-85FF-18760DD5F502"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8F6B67-0A8A-42E5-B9BD-3539475D7C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BB7C3E-32DA-477C-8C11-E35546BC5D61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83F677E-3133-407D-8089-E2682DBFDA1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9B3882-6975-42EA-A056-B6EC83E51E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-317/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-325/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-317/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-325/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20242",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T13:15:12.583",
      "lastModified" : "2023-11-07T03:29:02.123",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-20176. Reason: This candidate is a reservation duplicate of CVE-2021-20176. Notes: All CVE users should reference CVE-2021-20176 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T15:15:15.903",
      "lastModified" : "2024-11-21T05:58:11.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Polaris Office v9.102.66 is affected by a divide-by-zero error in PolarisOffice.exe and EngineDLL.dll that may cause a local denial of service. To exploit the vulnerability, someone must open a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Polaris Office versión v9.102.66, está afectado por un error de división por cero en los archivos PolarisOffice.exe y EngineDLL.dll que puede causar una denegación de servicio local.&#xa0;Para explotar la vulnerabilidad, alguien debe abrir un archivo PDF diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:polarisoffice:polaris_office:9.102.66:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C4C099-A07B-4143-9D38-D136A00C19DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/sqrtrev/1f9986d4bdd1393832c60a97b56e170a",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/sqrtrev/1f9986d4bdd1393832c60a97b56e170a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3252",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T15:15:15.967",
      "lastModified" : "2024-11-21T06:21:10.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KACO New Energy XP100U Up to XP-JAVA 2.0 is affected by incorrect access control. Credentials will always be returned in plain-text from the local server during the KACO XP100U authentication process, regardless of whatever passwords have been provided, which leads to an information disclosure vulnerability."
      }, {
        "lang" : "es",
        "value" : "KACO New Energy XP100U versiones hasta XP-JAVA 2.0, está afectado por un control de acceso incorrecto.&#xa0;Unas credenciales siempre serán devueltas en texto plano desde el servidor local durante el proceso de autenticación de KACO XP100U, independientemente de las contraseñas que hayan sido proporcionadas, lo que conlleva a una vulnerabilidad de divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:kaco-newenergy:xp100u_firmware:xp-java_2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7433757-F3B9-491B-8543-73D5D25F3FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:kaco-newenergy:xp100u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4319EC8B-12C1-418E-B20C-9FA05648A0A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tiger-team-1337.blogspot.com/2021/01/kaco-xp100u-hmi-credential-leak.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/Kevin2600/status/1351189347501023238",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-224-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://tiger-team-1337.blogspot.com/2021/01/kaco-xp100u-hmi-credential-leak.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/Kevin2600/status/1351189347501023238",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/alerts/ICS-ALERT-15-224-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25630",
      "sourceIdentifier" : "security@documentfoundation.org",
      "published" : "2021-02-23T16:15:13.253",
      "lastModified" : "2024-11-21T05:55:10.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "\"loolforkit\" is a privileged program that is supposed to be run by a special, non-privileged \"lool\" user. Before doing anything else \"loolforkit\" checks, if it was invoked by the \"lool\" user, and refuses to run with privileges, if it's not the case. In the vulnerable version of \"loolforkit\" this check was wrong, so a normal user could start \"loolforkit\" and eventually get local root privileges."
      }, {
        "lang" : "es",
        "value" : "\"loolforkit\" es un programa privilegiado que se supone debe ser ejecutado por un usuario \"lool\" especial, sin privilegios.&#xa0;Antes de hacer cualquier otra cosa, \"loolforkit\" comprueba si fue invocado por el usuario \"lool\" y se niega a ejecutar con privilegios, si no es el caso.&#xa0;En la versión vulnerable de \"loolforkit\", esta comprobación era equivocada, por lo que un usuario normal podría iniciar \"loolforkit\" y eventualmente alcanzar privilegios de root local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collaboraoffice:online:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.13",
            "matchCriteriaId" : "D3C184D8-37CC-4935-A1A1-A63CE7AEE5E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:collaboraoffice:online:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.3",
            "matchCriteriaId" : "42BD9B21-ACCF-4E83-8526-1A481CA6ED53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CollaboraOnline/online/security/advisories/GHSA-49w3-gr3w-m68v",
        "source" : "security@documentfoundation.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/18/3",
        "source" : "security@documentfoundation.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CollaboraOnline/online/security/advisories/GHSA-49w3-gr3w-m68v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/18/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20226",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T17:15:13.660",
      "lastModified" : "2024-11-21T05:46:10.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in the io_uring in Linux kernel, where a local attacker with a user privilege could cause a denial of service problem on the system The issue results from the lack of validating the existence of an object prior to performing operations on the object by not incrementing the file reference counter while in use. The highest threat from this vulnerability is to data integrity, confidentiality and system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de uso de la memoria previamente liberada en io_uring en el kernel de Linux, donde un atacante local con un privilegio de usuario podría causar un problema de denegación de servicio en el sistema. El problema resulta de una falta de comprobación de la existencia de un objeto antes de llevar a cabo operaciones en el objeto al no incrementar el contador de referencia de archivo mientras está en uso.&#xa0;La mayor amenaza de esta vulnerabilidad es la integridad de los datos, la confidencialidad y la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.8.18",
            "matchCriteriaId" : "86AA25E5-980E-499C-A2C5-4486C23BD302"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.9.0",
            "versionEndExcluding" : "5.9.3",
            "matchCriteriaId" : "C3A40FCF-3E31-4750-9F29-AC10A7A87A73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1873476",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210401-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1873476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210401-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20230",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T17:15:13.753",
      "lastModified" : "2024-11-21T05:46:10.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in stunnel before 5.57, where it improperly validates client certificates when it is configured to use both redirect and verifyChain options. This flaw allows an attacker with a certificate signed by a Certificate Authority, which is not the one accepted by the stunnel server, to access the tunneled service instead of being redirected to the address specified in the redirect option. The highest threat from this vulnerability is to confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en stunnel versiones anteriores a 5.57, donde comprueba inapropiadamente los certificados del cliente cuando está configurado para usar las opciones de redireccionamiento y verifyChain.&#xa0;Este fallo permite a un atacante con un certificado firmado por una Autoridad de Certificación, que no es el aceptado por el servidor de stunnel, para acceder al servicio de túnel en lugar de ser redireccionado a la dirección especificada en la opción de redireccionamiento.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stunnel:stunnel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.57",
            "matchCriteriaId" : "99F6A33C-E8E1-4C44-978D-6F475DB634E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1925226",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mtrojnar/stunnel/commit/ebad9ddc4efb2635f37174c9d800d06206f1edf9",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-02",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1925226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mtrojnar/stunnel/commit/ebad9ddc4efb2635f37174c9d800d06206f1edf9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22113",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-02-23T17:15:13.833",
      "lastModified" : "2024-11-21T05:49:32.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Applications using the “Sensitive Headers” functionality in Spring Cloud Netflix Zuul 2.2.6.RELEASE and below may be vulnerable to bypassing the “Sensitive Headers” restriction when executing requests with specially constructed URLs. Applications that use Spring Security's StrictHttpFirewall (enabled by default for all URLs) are not affected by the vulnerability, as they reject requests that allow bypassing."
      }, {
        "lang" : "es",
        "value" : "Unas aplicaciones que usan la funcionalidad de \"Sensitive Headers\" en Spring Cloud Netflix Zuul versiones 2.2.6.RELEASE y anteriores, pueden ser vulnerables al omitir la restricción \"Sensitive Headers\" cuando se ejecutan peticiones con URL especialmente construidas.&#xa0;Unas aplicaciones que usan StrictHttpFirewall de Spring Security (habilitado por defecto para todas las URL) no están afectadas por la vulnerabilidad, ya que rechazan unas peticiones que permiten la omisión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_cloud_netflix_zuul:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.6",
            "matchCriteriaId" : "F2CDA0AD-BEFC-446E-A2E1-918A75AA47E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tanzu.vmware.com/security/cve-2021-22113",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tanzu.vmware.com/security/cve-2021-22113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26685",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T17:15:13.927",
      "lastModified" : "2024-11-21T05:56:40.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección SQL autenticada remota en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la API de la interfaz de administración basada en web de ClearPass podría permitir a un atacante remoto autenticado conducir ataques de inyección SQL contra la instancia de ClearPass.&#xa0;Un atacante podría explotar esta vulnerabilidad para obtener y modificar información confidencial en la base de datos subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.14",
            "matchCriteriaId" : "B971BE7F-57D3-4352-8159-E864E26F9B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndIncluding" : "6.8.8",
            "matchCriteriaId" : "1AEB5958-5400-41CC-B070-B64A24D57706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "18FF8724-CF77-4A7A-A9AB-5A72292344AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20198",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T18:15:13.287",
      "lastModified" : "2024-11-21T05:46:06.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the OpenShift Installer before version v0.9.0-master.0.20210125200451-95101da940b0. During installation of OpenShift Container Platform 4 clusters, bootstrap nodes are provisioned with anonymous authentication enabled on kubelet port 10250. A remote attacker able to reach this port during installation can make unauthenticated `/exec` requests to execute arbitrary commands within running containers. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en el instalador de OpenShift versiones anteriores a v0.9.0-master.0.20210125200451-95101da940b0.&#xa0;Durante la instalación de los clústeres de OpenShift Container Platform versión 4, los nodos de arranque se aprovisionan con autenticación anónima habilitada en el puerto 10250 de kubelet. Un atacante remoto capaz de llegar a este puerto durante la instalación puede realizar peticiones \"/exec\" no autenticadas para ejecutar comandos arbitrarios dentro de contenedores en ejecución.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_installer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.0-master.0.20210125200451-95101da940b0",
            "matchCriteriaId" : "DD47923E-8DE5-46A2-875C-15F8EFE22004"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1920764",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1920764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20220",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T18:15:13.397",
      "lastModified" : "2024-11-21T05:46:09.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Undertow. A regression in the fix for CVE-2020-10687 was found. HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS attack, or obtain sensitive information from request other than their own. The highest threat from this vulnerability is to data confidentiality and integrity."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Undertow.&#xa0;Se encontró una regresión en la corrección para CVE-2020-10687.&#xa0;El trafico no autorizado de peticiones HTTP relacionado con CVE-2017-2666 es posible contra HTTP/1.x y HTTP/2 debido a que se permiten caracteres no válidos en una petición HTTP.&#xa0;Este fallo permite a un atacante envenenar un caché web, llevar a cabo un ataque XSS y obtener información confidencial de una petición distinta a la suya.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.34",
            "matchCriteriaId" : "CCD4C3D6-3E6F-4C9D-93C9-4E7142BDEED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:undertow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.1.6",
            "matchCriteriaId" : "4E096991-59C2-4899-BC00-611CF65E7B5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923133",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220210-0013/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220210-0013/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20229",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T18:15:13.473",
      "lastModified" : "2024-11-21T05:46:10.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all columns of the table. The highest threat from this vulnerability is to confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en PostgreSQL en las versiones anteriores a la 13.2. Este fallo permite a un usuario con privilegio SELECT en una columna elaborar una consulta especial que devuelva todas las columnas de la tabla. La mayor amenaza de esta vulnerabilidad es la confidencialidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "38EBA6FE-62E7-4865-ADCB-4F9E5F074F06"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749804DA-4B27-492A-9ABA-6BB562A6B3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1925296",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-32",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1925296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22651",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-23T18:15:13.553",
      "lastModified" : "2024-11-21T05:50:23.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering versions prior to 10.1, and Luxion KeyVR versions prior to 10.1 are, while processing the extraction of temporary files, suffering from a directory traversal vulnerability, which allows an attacker to store arbitrary scripts into automatic startup folders."
      }, {
        "lang" : "es",
        "value" : "Cuando se carga un archivo especialmente diseñado, Luxion KeyShot versiones anteriores a 10.1, Luxion KeyShot Viewer versiones anteriores a 10.1, Luxion KeyShot Network Rendering versiones anteriores a 10.1 y Luxion KeyVR versiones anteriores a 10.1, mientras se procesa la extracción de archivos temporales, sufre de una vulnerabilidad de salto de directorio, que permite a un atacante almacenar scripts arbitrarios en carpetas de inicio automático"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "92EA043D-B0BD-4C61-B6C6-709C001F0363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_network_rendering:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "99429D18-218B-4B84-B1E7-7E4B54B6CDD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyshot_viewer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "50848054-203F-4C61-8A26-154083FC0C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:luxion:keyvr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1",
            "matchCriteriaId" : "80310813-CE50-4876-85FF-18760DD5F502"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2020_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8F6B67-0A8A-42E5-B9BD-3539475D7C92"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2BB7C3E-32DA-477C-8C11-E35546BC5D61"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:solid_edge_se2021_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83F677E-3133-407D-8089-E2682DBFDA1E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:solid_edge_se2021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9B3882-6975-42EA-A056-B6EC83E51E78"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-324/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-231216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-035-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-324/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26678",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T18:15:13.630",
      "lastModified" : "2024-11-21T05:56:39.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthenticated stored cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface of ClearPass could allow an unauthenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) almacenado y no autenticado en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de ClearPass podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario administrativo de la interfaz.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar código de script arbitrario en el navegador de la víctima en el contexto de la interfaz afectada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.6",
            "matchCriteriaId" : "936C9A74-C7A0-43F4-B199-1E51651FB6B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.2",
            "matchCriteriaId" : "13182451-2A0A-4027-8EE7-50214675709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26681",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T18:15:13.693",
      "lastModified" : "2024-11-21T05:56:39.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección de comando autenticada remota en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la CLI de ClearPass podría permitir a unos usuarios autenticados remotos ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.7",
            "matchCriteriaId" : "861634EC-9068-4DBA-AE30-0A0C96C88542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.2",
            "matchCriteriaId" : "13182451-2A0A-4027-8EE7-50214675709C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26682",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T18:15:13.757",
      "lastModified" : "2024-11-21T05:56:39.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote reflected cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the guest portal interface of ClearPass could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the portal. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the guest portal interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) reflejado remoto en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la interfaz del portal de invitados de ClearPass podría permitir a un atacante remoto llevar a cabo un ataque de tipo cross-site scripting (XSS) reflejado contra un usuario del portal.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar código de script arbitrario en el navegador de la víctima en el contexto de la interfaz del portal de invitados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "0A578484-F964-431E-9D08-38EC8707330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "18FF8724-CF77-4A7A-A9AB-5A72292344AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "44DD6113-B80E-4533-A225-759DA9A118C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE78DCC-7E8D-4E31-8FDC-6549C3BEB8C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26683",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T18:15:13.817",
      "lastModified" : "2024-11-21T05:56:40.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección de comando autenticada remota en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de ClearPass permite a usuarios autenticados remotos ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.14",
            "matchCriteriaId" : "B971BE7F-57D3-4352-8159-E864E26F9B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndIncluding" : "6.8.8",
            "matchCriteriaId" : "1AEB5958-5400-41CC-B070-B64A24D57706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "18FF8724-CF77-4A7A-A9AB-5A72292344AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26684",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T18:15:13.927",
      "lastModified" : "2024-11-21T05:56:40.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección de comando autenticada remota en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de ClearPass permite a usuarios autenticados remoto ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.14",
            "matchCriteriaId" : "B971BE7F-57D3-4352-8159-E864E26F9B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "0A578484-F964-431E-9D08-38EC8707330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "18FF8724-CF77-4A7A-A9AB-5A72292344AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26686",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T18:15:13.990",
      "lastModified" : "2024-11-21T05:56:40.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección SQL autenticada remota en Aruba ClearPass Policy Manager: versiones anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la API de la interfaz de administración basada en web de ClearPass podría permitir a un atacante remoto autenticado conducir ataques de inyección SQL contra la instancia de ClearPass.&#xa0;Un atacante podría explotar esta vulnerabilidad para obtener y modificar información confidencial en la base de datos subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.7",
            "matchCriteriaId" : "861634EC-9068-4DBA-AE30-0A0C96C88542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.3",
            "matchCriteriaId" : "2F2A560A-FF32-46EE-B321-FF5A2767CCA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26926",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T18:15:14.053",
      "lastModified" : "2024-11-21T05:57:03.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in jasper before 2.0.25. An out of bounds read issue was found in jp2_decode function whic may lead to disclosure of information or program crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en jaspe versiones anteriores a 2.0.25.&#xa0;Se encontró un problema de lectura fuera de límites en la función jp2_decode que puede conllevar a una divulgación de información o un bloqueo del programa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.25",
            "matchCriteriaId" : "5F4472E5-259B-44B7-AAC5-93765989D527"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f2430212110f5cd9b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasper-software/jasper/issues/264",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYVCFVTVPL66OS7LCNLUSYCMYQAVWXMM/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRZFZSJ4UVLLMXSKHR455TAC2SD3TOHI/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f2430212110f5cd9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasper-software/jasper/issues/264",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYVCFVTVPL66OS7LCNLUSYCMYQAVWXMM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRZFZSJ4UVLLMXSKHR455TAC2SD3TOHI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27579",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T18:15:14.303",
      "lastModified" : "2024-11-21T05:58:13.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Snow Inventory Agent through 6.7.0 on Windows uses CPUID to report on processor types and versions that may be deployed and in use across an IT environment. A privilege-escalation vulnerability exists if CPUID is enabled, and thus it should be disabled via configuration settings."
      }, {
        "lang" : "es",
        "value" : "Snow Inventory Agent versiones hasta 6.7.0 en Windows, usa CPUID para reportar sobre los tipos y versiones de procesadores que pueden ser implementadas y usadas en un entorno de TI.&#xa0;Se presenta una vulnerabilidad de escalada de privilegios si CPUID está habilitado y, por lo tanto, debe deshabilitarse por medio de unos ajustes de configuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snowsoftware:snow_inventory_agent:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "5.3.1",
            "versionEndIncluding" : "6.7.0",
            "matchCriteriaId" : "F8E4B739-BD76-492B-9D87-274A87615E1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.snowsoftware.com/s/feed/0D56900009cfHLDCA2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27582",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T18:15:14.363",
      "lastModified" : "2024-11-21T05:58:14.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "org/mitre/oauth2/web/OAuthConfirmationController.java in the OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Mass Assignment (aka Autobinding) vulnerability. This arises due to unsafe usage of the @ModelAttribute annotation during the OAuth authorization flow, in which HTTP request parameters affect an authorizationRequest."
      }, {
        "lang" : "es",
        "value" : "El archivo org/mitre/oauth2/web/OAuthConfirmationController.java en la implementación del servidor OpenID Connect para MITREid Connect versiones hasta 1.3.3, contiene una vulnerabilidad de Asignación Masiva (también se conoce como Autobinding).&#xa0;Esto surge debido al uso no seguro de la anotación @ModelAttribute durante el flujo de autorización de OAuth, en el que los parámetros de petición HTTP afectan a una autorización de petición"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitreid:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "FC637AA4-26EF-4FB8-8608-6B658EBEDFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://agrrrdog.blogspot.com/2017/03/autobinding-vulns-and-spring-mvc.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/commit/7eba3c12fed82388f917e8dd9b73e86e3a311e4c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/hidden-oauth-attack-vectors",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://agrrrdog.blogspot.com/2017/03/autobinding-vulns-and-spring-mvc.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/commit/7eba3c12fed82388f917e8dd9b73e86e3a311e4c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/hidden-oauth-attack-vectors",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20247",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T19:15:13.510",
      "lastModified" : "2024-11-21T05:46:12.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromised server to use specially crafted mailbox names containing '..' path components to access data outside the designated mailbox on the opposite end of the synchronization channel. The highest threat from this vulnerability is to data confidentiality and integrity."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en mbsync versiones anteriores a v1.3.5 y v1.4.1.&#xa0;Las comprobaciones de los nombres de buzones devueltos por IMAP LIST/LSUB no ocurren, permitiendo a un servidor malicioso o comprometido utilizar nombres de buzones especialmente diseñados que contengan componentes de ruta \"..\" para acceder a datos fuera del buzón designado en el extremo opuesto del canal de sincronización.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mbsync_project:mbsync:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.5",
            "matchCriteriaId" : "95F34E8C-0E1E-4B6B-AD8C-3CFF03D7AB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mbsync_project:mbsync:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "DD5B6CC7-2DF0-4B09-8ACD-5A26DC6D3F38"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fedoraproject:extra_packages_for_enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB176AC3-3CDA-4DDA-9089-C67B2F73AA62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928963",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAXQLCK35QGRCRENRTGKJO4VVZGUXUJJ/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVDEBZQJMWDW5JFK4NTHH6DAFNAZTESW/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-15",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/22/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CAXQLCK35QGRCRENRTGKJO4VVZGUXUJJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GVDEBZQJMWDW5JFK4NTHH6DAFNAZTESW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22112",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-02-23T19:15:13.573",
      "lastModified" : "2024-11-21T05:49:31.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programmed in). However, if the application's intent is to only allow the user to run with elevated privileges in a small portion of the application, the bug can be leveraged to extend those privileges to the rest of the application."
      }, {
        "lang" : "es",
        "value" : "Spring Security versiones 5.4.x anteriores a 5.4.4, versiones 5.3.x anteriores a 5.3.8.RELEASE, versiones 5.2.x anteriores a 5.2.9.RELEASE, y versiones anteriores no compatibles, pueden producir un fallo al guardar el SecurityContext si se cambia más de una vez en una sola petición. Un usuario malicioso no puede causar el error (debe estar programado).&#xa0;Sin embargo, si la intención de la aplicación es sólo permitir que el usuario solo se ejecute con privilegios elevados en una pequeña parte de la aplicación, el error puede ser aprovechado para extender esos privilegios al resto de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.9",
            "matchCriteriaId" : "3AD0B286-87BD-4042-B14D-CCEBA35063FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pivotal_software:spring_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.3.0",
            "versionEndExcluding" : "5.3.8",
            "matchCriteriaId" : "6B466D0D-7C51-4442-AABA-6C131A9E95E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.4.4",
            "matchCriteriaId" : "80052391-7A7E-4101-99FF-8A345518377A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_element_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "0331877D-D5DB-4EE8-8220-C1CDC3F90CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E23F2E-6733-45AF-9BD9-1A600BD278C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E812639B-EE28-4C68-9F6F-70C8BF981C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_cruise_shipboard_property_management_system:20.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05F5B430-8BA1-4865-93B5-0DE89F424B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7138F2C-EBD9-4685-9113-F5ECE9FCA90E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF958C28-4289-4433-8CD9-B6551F01926F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.25",
            "matchCriteriaId" : "88627B99-16DC-4878-A63A-A40F6FC1F477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/19/7",
        "source" : "security@vmware.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb05e499807900ba23e539643eead9c5f0652fd271f223f89da1804%40%3Cpluto-scm.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r37423ec7eea340e92a409452c35b649dce02fdc467f0b3f52086c177%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3868207b967f926819fe3aa8d33f1666429be589bb4a62104a49f4e3%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r390783b3b1c59b978131ac08390bf77fbb3863270cbde59d5b0f5fde%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r413e380088c427f56102968df89ef2f336473e1b56b7d4b3a571a378%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r89aa1b48a827f5641310305214547f1d6b2101971a49b624737c497f%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra53677224fe4f04c2599abc88032076faa18dc84b329cdeba85d4cfc%40%3Cpluto-scm.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra6389b1b82108a3b6bbcd22979f7665fd437c2a3408c9509a15a9ca1%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/redbd004a503b3520ae5746c2ab5e93fd7da807a8c128e60d2002cd9b%40%3Cissues.nifi.apache.org%3E",
        "source" : "security@vmware.com"
      }, {
        "url" : "https://tanzu.vmware.com/security/cve-2021-22112",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/19/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r163b3e4e39803882f5be05ee8606b2b9812920e196daa2a82997ce14%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2cb05e499807900ba23e539643eead9c5f0652fd271f223f89da1804%40%3Cpluto-scm.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r37423ec7eea340e92a409452c35b649dce02fdc467f0b3f52086c177%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3868207b967f926819fe3aa8d33f1666429be589bb4a62104a49f4e3%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r390783b3b1c59b978131ac08390bf77fbb3863270cbde59d5b0f5fde%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r413e380088c427f56102968df89ef2f336473e1b56b7d4b3a571a378%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r89aa1b48a827f5641310305214547f1d6b2101971a49b624737c497f%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra53677224fe4f04c2599abc88032076faa18dc84b329cdeba85d4cfc%40%3Cpluto-scm.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra6389b1b82108a3b6bbcd22979f7665fd437c2a3408c9509a15a9ca1%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/redbd004a503b3520ae5746c2ab5e93fd7da807a8c128e60d2002cd9b%40%3Cissues.nifi.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tanzu.vmware.com/security/cve-2021-22112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22882",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-02-23T19:15:13.637",
      "lastModified" : "2024-11-21T05:50:49.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UniFi Protect before v1.17.1 allows an attacker to use spoofed cameras to perform a denial-of-service attack that may cause the UniFi Protect controller to crash."
      }, {
        "lang" : "es",
        "value" : "UniFi Protect versiones anteriores a v1.17.1, permite a un atacante usar cámaras falsificadas para llevar a cabo un ataque de denegación de servicio que puede causar que el controlador UniFi Protect se bloquee"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ui:unifi_protect_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.17.1",
            "matchCriteriaId" : "457307C5-8911-48DF-9D07-3B98253DE53B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:unifi_cloud_key_plus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C4ED829-08E6-4330-B105-DC01A3159C90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:unifi_dream_machine_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B493983E-8632-4492-9B0A-E8E11E0E0BB2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ui:unifi_network_video_recorder:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D7AF0C-CF50-485D-8471-9AB1AA6471CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.ui.com/releases/Security-advisory-bulletin-017-017/071141e5-bc2e-4b71-81f3-5e499316fcee",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1008579",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.ui.com/releases/Security-advisory-bulletin-017-017/071141e5-bc2e-4b71-81f3-5e499316fcee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1008579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26593",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T19:15:13.713",
      "lastModified" : "2024-11-21T05:56:32.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Directus 8.x through 8.8.1, an attacker can see all users in the CMS using the API /users/{id}. For each call, they get in response a lot of information about the user (such as email address, first name, and last name) but also the secret for 2FA if one exists. This secret can be regenerated. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** En Directus versiones 8.xa hasta 8.8.1, un atacante puede visualizar a todos los usuarios en el CMS usando la API /users/{id}.&#xa0;Para cada llamada, obtienen en respuesta una gran cantidad de información sobre el usuario (tal y como la dirección de correo electrónico, el nombre y el apellido), pero también el secreto de 2FA si existe.&#xa0;Este secreto puede ser regenerado.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "1C1339B0-4DEA-4F71-91CA-7C53B889867B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26594",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T19:15:13.777",
      "lastModified" : "2024-11-21T05:56:32.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** En Directus versiones 8.xa hasta 8.8.1, un atacante puede cambiar hacia el rol de administrador (por medio del método PATCH) sin ningún control por parte del back-end.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "1C1339B0-4DEA-4F71-91CA-7C53B889867B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26595",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T19:15:13.853",
      "lastModified" : "2024-11-21T05:56:32.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** En Directus versiones 8.xa hasta 8.8.1, un atacante puede aprender información confidencial tal y como la versión del CMS, la versión de PHP utilizada por el sitio y el nombre del DBMS, simplemente al visualizar el resultado de la api-aa, llamado automáticamente en una conexión.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "1C1339B0-4DEA-4F71-91CA-7C53B889867B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26677",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T19:15:13.917",
      "lastModified" : "2024-11-21T05:56:39.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local authenticated escalation of privilege vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users on a Windows platform to elevate their privileges. A successful exploit could allow an attacker to execute arbitrary code with SYSTEM level privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de escalada de privilegios autenticada local en Aruba ClearPass Policy Manager versiones: Anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en ClearPass OnGuard podría permitir a usuarios locales autenticados en una plataforma Windows elevar sus privilegios.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar código arbitrario con privilegios de nivel de System"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.7",
            "matchCriteriaId" : "861634EC-9068-4DBA-AE30-0A0C96C88542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.2",
            "matchCriteriaId" : "13182451-2A0A-4027-8EE7-50214675709C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26679",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T19:15:13.980",
      "lastModified" : "2024-11-21T05:56:39.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comando autenticada remota fue detectada en Aruba ClearPass Policy Manager versiones: Anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de ClearPass permite a usuarios autenticados remotos ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "0A578484-F964-431E-9D08-38EC8707330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "18FF8724-CF77-4A7A-A9AB-5A72292344AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "44DD6113-B80E-4533-A225-759DA9A118C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE78DCC-7E8D-4E31-8FDC-6549C3BEB8C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26680",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-02-23T19:15:14.057",
      "lastModified" : "2024-11-21T05:56:39.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comando autenticada remota fue detectada en Aruba ClearPass Policy Manager versiones: Anteriores a 6.9.5, 6.8.8-HF1, 6.7.14-HF1.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de ClearPass permite a usuarios autenticados remotos ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "B7D11F63-2289-47CA-A4C8-A5F80A0F6510"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "0A578484-F964-431E-9D08-38EC8707330B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "18FF8724-CF77-4A7A-A9AB-5A72292344AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "44DD6113-B80E-4533-A225-759DA9A118C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE78DCC-7E8D-4E31-8FDC-6549C3BEB8C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-23T19:15:14.213",
      "lastModified" : "2024-11-21T05:58:14.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** En Directus versiones 8.x hasta 8.8.1, un atacante puede detectar si un usuario está presente en la base de datos mediante la funcionalidad password reset.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles con el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.8.1",
            "matchCriteriaId" : "1C1339B0-4DEA-4F71-91CA-7C53B889867B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sgranel/directusv8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26927",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T20:15:12.040",
      "lastModified" : "2024-11-21T05:57:03.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in jasper before 2.0.25. A null pointer dereference in jp2_decode in jp2_dec.c may lead to program crash and denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en jaspe versiones anteriores a 2.0.25.&#xa0;Una desreferencia de puntero null en la función jp2_decode en el archivo jp2_dec.c puede conllevar el bloqueo del programa y una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.25",
            "matchCriteriaId" : "5F4472E5-259B-44B7-AAC5-93765989D527"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f2430212110f5cd9b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasper-software/jasper/issues/265",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYVCFVTVPL66OS7LCNLUSYCMYQAVWXMM/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRZFZSJ4UVLLMXSKHR455TAC2SD3TOHI/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://github.com/jasper-software/jasper/commit/41f214b121b837fa30d9ca5f2430212110f5cd9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jasper-software/jasper/issues/265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSXESYUHMO522Z3RHXOQ2SJNWP3XTO67/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JYVCFVTVPL66OS7LCNLUSYCMYQAVWXMM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YRZFZSJ4UVLLMXSKHR455TAC2SD3TOHI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3405",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T20:15:12.087",
      "lastModified" : "2024-11-21T06:21:25.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libebml before 1.4.2. A heap overflow bug exists in the implementation of EbmlString::ReadData and EbmlUnicodeString::ReadData in libebml."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en libebml versiones anteriores a 1.4.2.&#xa0;Se presenta un error de desbordamiento de la pila en la implementación de las funciones EbmlString::ReadData y EbmlUnicodeString::ReadData en libebml"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matroska:libebml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.2",
            "matchCriteriaId" : "A929FB51-F804-41A9-AF60-834ECB4352E8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Matroska-Org/libebml/issues/74",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00016.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNHQI6MDOECJ2HT5GCLEX2DMJFEOWPW7/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHIIMWZKHHELFF4NRDMOOCS3HKK3K4DF/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YY7R2JZRO5I6WS62KTJFTZGKYELVFTVB/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-21",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matroska-Org/libebml/issues/74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JNHQI6MDOECJ2HT5GCLEX2DMJFEOWPW7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHIIMWZKHHELFF4NRDMOOCS3HKK3K4DF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YY7R2JZRO5I6WS62KTJFTZGKYELVFTVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20182",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T22:15:12.277",
      "lastModified" : "2024-11-21T05:46:05.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to this build container, they can potentially utilize the raw devices of the underlying node, such as the network and storage devices, to at least escalate their privileges to that of the cluster admin. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de escalada de privilegios en openshift4/ose-docker-builder.&#xa0;El contenedor de compilación se ejecuta con altos privilegios usando un entorno chrooted en lugar de runc.&#xa0;Si un atacante puede obtener acceso a este contenedor de compilación, potencialmente puede utilizar los dispositivos sin procesar del nodo subyacente, como la red y los dispositivos de almacenamiento, para al menos escalar sus privilegios a los del administrador del clúster.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4",
            "versionEndExcluding" : "4.4.33",
            "matchCriteriaId" : "40889CD3-C71C-4492-A205-EF77959B41EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.5.30",
            "matchCriteriaId" : "E1EF5095-8334-4616-B000-D89CE8B8045C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.6.15",
            "matchCriteriaId" : "BDA0D0C1-DB10-4816-A521-D8D2EBF5BF5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1915110",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1915110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20194",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T23:15:13.100",
      "lastModified" : "2024-11-21T05:46:06.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a vulnerability in the linux kernel versions higher than 5.2 (if kernel compiled with config params CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y , CONFIG_CGROUP_BPF=y , CONFIG_HARDENED_USERCOPY not set, and BPF hook to getsockopt is registered). As result of BPF execution, the local user can trigger bug in __cgroup_bpf_run_filter_getsockopt() function that can lead to heap overflow (because of non-hardened usercopy). The impact of attack could be deny of service or possibly privileges escalation."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad en el kernel de Linux versiones superiores a 5.2 (si el kernel compilado con los parámetros config CONFIG_BPF_SYSCALL=y , CONFIG_BPF=y , CONFIG_CGROUPS=y , CONFIG_CGROUP_BPF=y , CONFIG_HARDENED_USERCOPY no se establece y el hook BPF a getsockopt está registrado).&#xa0;Como resultado de la ejecución de BPF, el usuario local puede desencadenar un error en la función __cgroup_bpf_run_filter_getsockopt() que puede conllevar a un desbordamiento de la pila (debido a una copia de usuario no reforzada).&#xa0;El impacto del ataque podría ser la denegación de servicio o posiblemente una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "5.2",
            "matchCriteriaId" : "52C57624-28DE-4E03-B6EF-F09CC640D9F0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C5E433-229C-4BB9-8481-8A74AFA8DB8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D432C063-0805-4151-A819-508FE8954101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B62E762-2878-455A-93C9-A5DB430D7BB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1912683",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0003/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1912683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20252",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T23:15:13.177",
      "lastModified" : "2024-11-21T05:46:12.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Red Hat 3scale API Management Platform 2. The 3scale backend does not perform preventive handling on user-requested date ranges in certain queries allowing a malicious authenticated user to submit a request with a sufficiently large date range to eventually yield an internal server error resulting in denial of service. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Red Hat 3scale API Management Platform versión 2. El backend 3scale no lleva a cabo un manejo preventivo en los rangos de fechas requeridos por el usuario en determinadas consultas, permitiendo a un usuario autenticado malicioso enviar una petición con un rango de fechas suficientemente grande para eventualmente generar un error del servidor resultando en una denegación de servicio.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:3scale_api_management:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5434CC8-66E0-4378-AAB3-B2FECDDE61BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928302",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20256",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T23:15:13.257",
      "lastModified" : "2024-11-21T05:46:13.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Red Hat Satellite. The BMC interface exposes the password through the API to an authenticated local attacker with view_hosts permission. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Red Hat Satellite.&#xa0;La interfaz BMC expone la contraseña mediante la API a un atacante local autenticado con permiso view_hosts.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C92A9-0677-442B-8D52-A448F2019903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1930926",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1930926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21323",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-23T23:15:13.317",
      "lastModified" : "2024-11-21T05:48:01.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Brave is an open source web browser with a focus on privacy and security. In Brave versions 1.17.73-1.20.103, the CNAME adblocking feature added in Brave 1.17.73 accidentally initiated DNS requests that bypassed the Brave Tor proxy. Users with adblocking enabled would leak DNS requests from Tor windows to their DNS provider. (DNS requests that were not initiated by CNAME adblocking would go through Tor as expected.) This is fixed in Brave version 1.20.108"
      }, {
        "lang" : "es",
        "value" : "Brave es un navegador web de código abierto que se centra en la privacidad y la seguridad.&#xa0;En Brave versiones 1.17.73-1.20.103, la funcionalidad CNAME adblocking agregada en Brave versión 1.17.73, inició accidentalmente peticiones de DNS que omitieron el proxy Brave Tor.&#xa0;Los usuarios con adblocking habilitado filtrarían las peticiones DNS de las ventanas Tor a su proveedor de DNS.&#xa0;(Las peticiones DNS que no fueron iniciadas por el CNAME adblocking pasarían por Tor como se esperaba). Esto se corrigió en Brave versión 1.20.108"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brave:brave:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.17.73",
            "versionEndIncluding" : "1.20.103",
            "matchCriteriaId" : "AD17A757-9D61-4E54-849D-AD603B5001F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/brave/brave-browser/issues/13527",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-browser/security/advisories/GHSA-mqjf-9x5g-2rv6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-core/commit/12fe321eaad8acc1cbd1d70b4128f687777bcf15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-core/pull/7769",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1077022",
        "source" : "security-advisories@github.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-browser/issues/13527",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-browser/security/advisories/GHSA-mqjf-9x5g-2rv6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-core/commit/12fe321eaad8acc1cbd1d70b4128f687777bcf15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/brave/brave-core/pull/7769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1077022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3407",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-23T23:15:14.100",
      "lastModified" : "2024-11-21T06:21:25.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en mupdf versión 1.18.0.&#xa0;Una doble liberación de objetos durante la linealización puede conllevar a una corrupción de la memoria y otras potenciales consecuencias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artifex:mupdf:1.18.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DB83DDAD-11E6-405B-B4C3-DE7465B0D1B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=cee7cefc610d42fd383b3c80c12cbc675443176a",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=703366",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00012.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCADE3VSPWCGTE5BV4KL273R5VK3GDKM/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M44PNYCBL33OD7GC75XNE6CDS4VSGVWO/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLC6MPH7YS6JPU427XOFRLF3KKZQUZJN/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://git.ghostscript.com/?p=mupdf.git%3Bh=cee7cefc610d42fd383b3c80c12cbc675443176a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://bugs.ghostscript.com/show_bug.cgi?id=703366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCADE3VSPWCGTE5BV4KL273R5VK3GDKM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/M44PNYCBL33OD7GC75XNE6CDS4VSGVWO/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLC6MPH7YS6JPU427XOFRLF3KKZQUZJN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3410",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2021-02-23T23:15:14.160",
      "lastModified" : "2024-11-21T06:21:26.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libcaca v0.99.beta19. A buffer overflow issue in caca_resize function in libcaca/caca/canvas.c may lead to local execution of arbitrary code in the user context."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en libcaca versión v0.99.beta19.&#xa0;Un problema de desbordamiento del búfer en la función caca_resize en el archivo libcaca/caca/canvas.c, puede conllevar a una ejecución local de código arbitrario en el contexto del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libcaca_project:libcaca:0.99:beta19:*:*:*:*:*:*",
            "matchCriteriaId" : "27B545C0-6311-4AD1-AC52-F9C86040A90B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928437",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cacalabs/libcaca/issues/52",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00006.html",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/",
        "source" : "patrick@puiterwijk.org"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cacalabs/libcaca/issues/52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20656",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:22.330",
      "lastModified" : "2024-11-21T05:46:57.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exposure of information through directory listing in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain the information inside the system, such as directories and/or file configurations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una exposición de información por medio de la lista de directorios en SolarView Compact SV-CPT-MC310 versiones anteriores a Ver.6.5, permite a un atacante autenticado obtener la información dentro del sistema, como directorios y/o configuraciones de archivos por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20657",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:22.720",
      "lastModified" : "2024-11-21T05:46:57.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to obtain and/or alter the setting information without the access privilege via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en SolarView Compact SV-CPT-MC310 versiones anteriores a Ver.6.5, permite a un atacante autenticado obtener y/o alterar la información de configuración sin el privilegio de acceso por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20658",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:22.830",
      "lastModified" : "2024-11-21T05:46:57.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to execute arbitrary OS commands with the web server privilege via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "SolarView Compact SV-CPT-MC310 versiones anteriores a Ver.6.5, permite a un atacante ejecutar comandos arbitrarios del sistema operativo con privilegios de servidor web por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20659",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:22.923",
      "lastModified" : "2024-11-21T05:46:57.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an authenticated attacker to upload arbitrary files via unspecified vectors. If the file is PHP script, an attacker may execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "SolarView Compact SV-CPT-MC310 versiones anteriores a Ver.6.5, permite a un atacante autenticado cargar archivos arbitrarios por medio de vectores no especificados.&#xa0;Si el archivo es un script PHP, un atacante puede ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20660",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:23.017",
      "lastModified" : "2024-11-21T05:46:57.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting en SolarView Compact SV-CPT-MC310 versiones anteriores a 6.5, permite a un atacante inyectar una secuencia de comandos arbitraria por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20661",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:23.097",
      "lastModified" : "2024-11-21T05:46:57.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorios en SolarView Compact SV-CPT-MC310 versiones anteriores a Ver.6.5, permite a atacantes autenticados eliminar archivos y/o directorios arbitrarios en el servidor por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20662",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-02-24T12:15:23.173",
      "lastModified" : "2024-11-21T05:46:58.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing authentication for critical function in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to alter the setting information without the access privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una falta de autenticación para funciones críticas en SolarView Compact SV-CPT-MC310 versiones anteriores a Ver.6.5, permite a un atacante alterar la información de configuración sin los privilegios de acceso por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contec:sv-cpt-mc310_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "F8EF2969-D593-4759-849A-FA0C3B0C7524"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:contec:sv-cpt-mc310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FCCA5E-19F8-47D9-A6C6-77AF2AEFD51A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37417423/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/api/downloadlogger?download=https://www.contec.com/jp/-/media/contec/jp/support/security-info/contec_security_solarview_210216.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.contec.com/jp/download/contract/contract2/?itemid=b28c8b7c-9f40-40b2-843c-b5b04c035b0e&downloaditemid=fa248fba-8901-4d9e-8212-b139f2defbdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27645",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-24T15:15:13.837",
      "lastModified" : "2025-06-09T15:15:25.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The nameserver caching daemon (nscd) in the GNU C Library (aka glibc or libc6) 2.29 through 2.33, when processing a request for netgroup lookup, may crash due to a double-free, potentially resulting in degraded service or Denial of Service on the local system. This is related to netgroupcache.c."
      }, {
        "lang" : "es",
        "value" : "El demonio de almacenamiento en caché nameserver (nscd) en el GNU C Library (también se conoce como glibc o libc6) versiones 2.29 hasta 2.33, cuando se procesa una petición de búsqueda de netgroup, puede cometer un fallo debido a una doble liberación, potencialmente resultando en un servicio degradado o denegación de servicio en el sistema local.&#xa0;Esto está relacionado con el archivo netgroupcache.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.29",
            "versionEndIncluding" : "2.33",
            "matchCriteriaId" : "174E5B68-7057-43C3-9294-D0C9DA73B1D3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LZNT6KTMCCWPWXEOGSHD3YLYZKUGMH5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7TS26LIZSOBLGJEZMJX4PXT5BQDE2WS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-07",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27462",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/10/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7LZNT6KTMCCWPWXEOGSHD3YLYZKUGMH5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/I7TS26LIZSOBLGJEZMJX4PXT5BQDE2WS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=27462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3355",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-24T15:15:13.933",
      "lastModified" : "2024-11-21T06:21:22.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo XSS almacenado en LightCMS versión v1.3.4, permite a un atacante ejecutar código HTML o JavaScript en un campo Title vulnerable en un archivo /admin/SensitiveWords"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightcms_project:lightcms:1.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F82513F0-C30D-4A33-9847-EF0EB278146E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/Peithon/1c628ded0c4fc96c6331c3cce1d0c69b",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eddy8/LightCMS/issues/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49598",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161562/LightCMS-1.3.4-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gist.github.com/Peithon/1c628ded0c4fc96c6331c3cce1d0c69b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eddy8/LightCMS/issues/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49598",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21616",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:14.663",
      "lastModified" : "2024-11-21T05:48:42.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins Active Choices Plugin versiones 2.5.2 y anteriores, no escapan a unos valores de parámetros reference, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes con permiso Job/Configure"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:active_choices:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.5.2",
            "matchCriteriaId" : "D08B1EF7-2486-47FE-B8C7-B0D0D5EDA447"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/24/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2192",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/24/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2192",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21617",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:14.807",
      "lastModified" : "2024-11-21T05:48:42.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Configuration Slicing Plugin 1.51 and earlier allows attackers to apply different slice configurations."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins Configuration Slicing Plugin versiones 1.51 y anteriores, permite a atacantes aplicar diferentes configuraciones de segmentos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:configuration_slicing:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.51",
            "matchCriteriaId" : "FC31F461-5DDD-4553-8476-23780A9538AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/24/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2003",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/24/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21618",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:14.897",
      "lastModified" : "2024-11-21T05:48:42.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins Repository Connector Plugin versiones 2.0.2 y anteriores, no escapan los parámetros names y descriptions de compilaciones anteriores, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes con permiso Item/Configure"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:repository_connector:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.0.2",
            "matchCriteriaId" : "9DB945AC-4040-4E2A-8F08-8A21B95A9D40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21619",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:14.983",
      "lastModified" : "2024-11-21T05:48:42.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Claim Plugin 2.18.1 and earlier does not escape the user display name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers who are able to control the display names of Jenkins users, either via the security realm, or directly inside Jenkins."
      }, {
        "lang" : "es",
        "value" : "Jenkins Claim Plugin versiones 2.18.1 y anteriores, no escapan el nombre de pantalla del usuario, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes que son capaces de controlar los nombres de pantalla de los usuarios de Jenkins, ya sea por medio del ámbito de seguridad o directamente dentro de Jenkins"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:claim:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.18.1",
            "matchCriteriaId" : "105987B5-7F1D-4619-B2B8-94ECCDD68D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/24/3",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%281%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/24/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%281%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21620",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:15.053",
      "lastModified" : "2024-11-21T05:48:42.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Claim Plugin 2.18.1 and earlier allows attackers to change claims."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins Claim Plugin versiones 2.18.1 y anteriores, permite a atacantes cambiar las reclamaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:claim:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.18.1",
            "matchCriteriaId" : "105987B5-7F1D-4619-B2B8-94ECCDD68D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2188%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21621",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:15.133",
      "lastModified" : "2024-11-21T05:48:42.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Support Core Plugin 2.72 and earlier provides the serialized user authentication as part of the \"About user (basic authentication details only)\" information, which can include the session ID of the user creating the support bundle in some configurations."
      }, {
        "lang" : "es",
        "value" : "Jenkins Support Core Plugin versiones 2.72 y anteriores, proporcionan la autenticación de usuario serializada como parte de la información \"About user (basic authentication details only)\", que puede incluir el ID de sesión del usuario creando el paquete de soporte en algunas configuraciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:support_core:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.72",
            "matchCriteriaId" : "B40EA8FA-9FE1-4649-966D-823B10D96EEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21622",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-02-24T16:15:15.227",
      "lastModified" : "2024-11-21T05:48:42.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Artifact Repository Parameter Plugin 1.0.0 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins Artifact Repository Parameter Plugin versiones 1.0.0 y anteriores, no escapan a los parámetros names y descriptions, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes con permiso Job/Configure"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:artifact_repository_parameter:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.0.0",
            "matchCriteriaId" : "6752F291-09C8-4F8B-82DC-6E9FE2A7B2F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2168",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-02-24/#SECURITY-2168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21972",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-02-24T17:15:15.833",
      "lastModified" : "2025-10-30T20:06:27.130",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlying operating system that hosts vCenter Server. This affects VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2)."
      }, {
        "lang" : "es",
        "value" : "El VSphere Client (HTML5) contiene una vulnerabilidad de ejecución de código remota en un plugin de vCenter Server.&#xa0;Un actor malicioso con acceso de red al puerto 443 puede explotar este problema para ejecutar comandos con privilegios no restringidos en el sistema operativo subyacente que aloja vCenter Server.&#xa0;Esto afecta a VMware vCenter Server (versiones 7.x anteriores a 7.0 U1c, versiones 6.7 anteriores a 6.7 U3l y versiones 6.5 anteriores a 6.5 U3n) y VMware Cloud Foundation (versiones 4.x anteriores a 4.2 y versiones 3.x anteriores a 3.10.1.2)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "VMware vCenter Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.10.1.2",
            "matchCriteriaId" : "1995769A-1AB9-47FA-966A-8E82D414161E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "A608D809-6E65-4228-9207-CB470529C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "23CFE5A5-A166-4FD5-BE97-5F16DAB1EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7DDB0C-3C07-4B5E-8B8A-0542FEE72877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD16169-A7DF-4604-888C-156A60018E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*",
            "matchCriteriaId" : "46FC9F34-C8FA-4AFE-9F4A-7CF9516BD4D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*",
            "matchCriteriaId" : "D26534EB-327B-4ED6-A3E1-005552CB1F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*",
            "matchCriteriaId" : "786CDD50-7E18-4437-8DB9-2D0ADECD436E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE8DAE-0E78-4004-983D-1ECD8855EC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*",
            "matchCriteriaId" : "F72A1E9C-F960-4E8C-A46C-B38209E6349E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*",
            "matchCriteriaId" : "2C33CE46-F529-4EA9-9344-6ED3BFA7019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1D8161-0E02-45C9-BF61-14799AB65E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB1FF-6118-4875-945D-07BAA3A21FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEDA28A-5C8E-4E95-A377-3BE530DBEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDC6510-3116-4578-80C8-8EF044A8370A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*",
            "matchCriteriaId" : "8678DB48-CB98-4E4C-ADE6-CABA73265FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD9A341-1FBF-4E04-848B-550DEB27261A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "4955663C-1BB6-4F3E-9D4B-362DF144B7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0F8453-3D6C-4F1C-9167-3F02E3D905DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD4045-A7F9-464F-ABB9-3782941162CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0A79C2-33AE-40C5-A853-770A4C691F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E456F84C-A86E-4EA9-9A3E-BEEA662136E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*",
            "matchCriteriaId" : "5241C282-A02B-44B2-B6CA-BA3A99F9737C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*",
            "matchCriteriaId" : "04A60AC7-C2EA-4DBF-9743-54D708584AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*",
            "matchCriteriaId" : "8A91B0C4-F184-459E-AFD3-DE0E351CC964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "23253631-2655-48A8-9B00-CB984232329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*",
            "matchCriteriaId" : "50C2A9A8-0E66-4702-BCD4-74622108E7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4D3E2A-C32D-408F-B811-EF8BC86F0D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7802-D78D-4BAD-A45A-68B601C010C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*",
            "matchCriteriaId" : "3B98981B-4721-4752-BAB4-361DB5AEB86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "04487105-980A-4943-9360-4442BF0411E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*",
            "matchCriteriaId" : "24D24E06-EB3F-4F11-849B-E66757B01466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF12716-88E2-44B5-ACD7-BCBECA130FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*",
            "matchCriteriaId" : "3352212C-E820-47B3-BDF5-57018F5B9E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*",
            "matchCriteriaId" : "6436ADFD-6B94-4D2A-B09B-CED4EC6CA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*",
            "matchCriteriaId" : "D06832CE-F946-469D-B495-6735F18D02A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA81CCD-A05E-498C-820E-21980E92132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83406-A3D9-4F75-A1A6-63831CEBEEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "FB563627-C9CF-4D8A-B882-9AB65EAE9E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA03B2A-48B2-48AD-B8EB-9D7BB2016819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*",
            "matchCriteriaId" : "A2392D0F-D7A2-4E01-9212-1BA6C895AEBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D731C1A-9FE5-461C-97E2-6F45E4CBABE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*",
            "matchCriteriaId" : "8725E544-2A94-4829-A683-1ECCE57A74A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161695/VMware-vCenter-Server-File-Upload-Remote-Code-Execution.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163268/VMware-vCenter-6.5-6.7-7.0-Remote-Code-Execution.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0002.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161590/VMware-vCenter-Server-7.0-Arbitrary-File-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161695/VMware-vCenter-Server-File-Upload-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163268/VMware-vCenter-6.5-6.7-7.0-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21972",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21973",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-02-24T17:15:15.923",
      "lastModified" : "2025-10-30T20:06:18.013",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a POST request to vCenter Server plugin leading to information disclosure. This affects: VMware vCenter Server (7.x before 7.0 U1c, 6.7 before 6.7 U3l and 6.5 before 6.5 U3n) and VMware Cloud Foundation (4.x before 4.2 and 3.x before 3.10.1.2)."
      }, {
        "lang" : "es",
        "value" : "El VSphere Client (HTML5) contiene una vulnerabilidad SSRF (Server Side Request Forgery) debido a una comprobación inapropiada de las URL en un plugin de vCenter Server.&#xa0;Un actor malicioso con acceso de red al puerto 443 puede explotar este problema mediante el envío de una petición POST al plugin vCenter Server conllevando a una divulgación de información.&#xa0;Esto afecta a: VMware vCenter Server (versiones 7.x anteriores a 7.0 U1c, versiones 6.7 anteriores a 6.7 U3l y versiones 6.5 anteriores a 6.5 U3n) y VMware Cloud Foundation (versiones 4.x anteriores a 4.2 y versiones 3.x anteriores a 3.10.1.2)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-07",
      "cisaActionDue" : "2022-03-21",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "VMware vCenter Server and Cloud Foundation Server Side Request Forgery (SSRF) Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.10.1.2",
            "matchCriteriaId" : "1995769A-1AB9-47FA-966A-8E82D414161E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "A608D809-6E65-4228-9207-CB470529C542"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "23CFE5A5-A166-4FD5-BE97-5F16DAB1EAE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:a:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7DDB0C-3C07-4B5E-8B8A-0542FEE72877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:b:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD16169-A7DF-4604-888C-156A60018E32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:c:*:*:*:*:*:*",
            "matchCriteriaId" : "46FC9F34-C8FA-4AFE-9F4A-7CF9516BD4D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:d:*:*:*:*:*:*",
            "matchCriteriaId" : "D26534EB-327B-4ED6-A3E1-005552CB1F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:e:*:*:*:*:*:*",
            "matchCriteriaId" : "786CDD50-7E18-4437-8DB9-2D0ADECD436E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:f:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CE8DAE-0E78-4004-983D-1ECD8855EC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1d:*:*:*:*:*:*",
            "matchCriteriaId" : "F72A1E9C-F960-4E8C-A46C-B38209E6349E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1e:*:*:*:*:*:*",
            "matchCriteriaId" : "2C33CE46-F529-4EA9-9344-6ED3BFA7019D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update1g:*:*:*:*:*:*",
            "matchCriteriaId" : "9F1D8161-0E02-45C9-BF61-14799AB65E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2CB1FF-6118-4875-945D-07BAA3A21FFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2b:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEDA28A-5C8E-4E95-A377-3BE530DBEAB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2c:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDC6510-3116-4578-80C8-8EF044A8370A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2d:*:*:*:*:*:*",
            "matchCriteriaId" : "8678DB48-CB98-4E4C-ADE6-CABA73265FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update2g:*:*:*:*:*:*",
            "matchCriteriaId" : "DBD9A341-1FBF-4E04-848B-550DEB27261A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "4955663C-1BB6-4F3E-9D4B-362DF144B7F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3d:*:*:*:*:*:*",
            "matchCriteriaId" : "CE0F8453-3D6C-4F1C-9167-3F02E3D905DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3f:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAD4045-A7F9-464F-ABB9-3782941162CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.5:update3k:*:*:*:*:*:*",
            "matchCriteriaId" : "2F0A79C2-33AE-40C5-A853-770A4C691F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E456F84C-A86E-4EA9-9A3E-BEEA662136E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:a:*:*:*:*:*:*",
            "matchCriteriaId" : "5241C282-A02B-44B2-B6CA-BA3A99F9737C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:b:*:*:*:*:*:*",
            "matchCriteriaId" : "04A60AC7-C2EA-4DBF-9743-54D708584AFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:d:*:*:*:*:*:*",
            "matchCriteriaId" : "8A91B0C4-F184-459E-AFD3-DE0E351CC964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "23253631-2655-48A8-9B00-CB984232329C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update1b:*:*:*:*:*:*",
            "matchCriteriaId" : "50C2A9A8-0E66-4702-BCD4-74622108E7A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE4D3E2A-C32D-408F-B811-EF8BC86F0D34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update2a:*:*:*:*:*:*",
            "matchCriteriaId" : "31CA7802-D78D-4BAD-A45A-68B601C010C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update2c:*:*:*:*:*:*",
            "matchCriteriaId" : "3B98981B-4721-4752-BAB4-361DB5AEB86F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "04487105-980A-4943-9360-4442BF0411E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3a:*:*:*:*:*:*",
            "matchCriteriaId" : "24D24E06-EB3F-4F11-849B-E66757B01466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3b:*:*:*:*:*:*",
            "matchCriteriaId" : "8AF12716-88E2-44B5-ACD7-BCBECA130FB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3f:*:*:*:*:*:*",
            "matchCriteriaId" : "3352212C-E820-47B3-BDF5-57018F5B9E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3g:*:*:*:*:*:*",
            "matchCriteriaId" : "6436ADFD-6B94-4D2A-B09B-CED4EC6CA276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:6.7:update3j:*:*:*:*:*:*",
            "matchCriteriaId" : "D06832CE-F946-469D-B495-6735F18D02A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA81CCD-A05E-498C-820E-21980E92132F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:a:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE83406-A3D9-4F75-A1A6-63831CEBEEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "FB563627-C9CF-4D8A-B882-9AB65EAE9E15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:c:*:*:*:*:*:*",
            "matchCriteriaId" : "DCA03B2A-48B2-48AD-B8EB-9D7BB2016819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:d:*:*:*:*:*:*",
            "matchCriteriaId" : "A2392D0F-D7A2-4E01-9212-1BA6C895AEBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "6D731C1A-9FE5-461C-97E2-6F45E4CBABE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vcenter_server:7.0:update1a:*:*:*:*:*:*",
            "matchCriteriaId" : "8725E544-2A94-4829-A683-1ECCE57A74A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0002.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21973",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21974",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-02-24T17:15:16.017",
      "lastModified" : "2024-11-21T05:49:21.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access to port 427 may be able to trigger the heap-overflow issue in OpenSLP service resulting in remote code execution."
      }, {
        "lang" : "es",
        "value" : "OpenSLP como es usado en ESXi (versiones 7.0 anteriores a ESXi70U1c-17325551, versiones 6.7 anteriores a ESXi670-202102401-SG, versiones 6.5 anteriores a ESXi650-202102101-SG), presenta una vulnerabilidad de desbordamiento de la pila.&#xa0;Un actor malicioso que reside dentro del mismo segmento de red que ESXi y que presenta acceso al puerto 427 puede desencadenar el problema de desbordamiento de la pila en el servicio OpenSLP, resultando en una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.10.1.2",
            "matchCriteriaId" : "1995769A-1AB9-47FA-966A-8E82D414161E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.2",
            "matchCriteriaId" : "A608D809-6E65-4228-9207-CB470529C542"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FBA15143-734D-4889-8B5A-2445A2DDDD4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:2:*:*:*:*:*:*",
            "matchCriteriaId" : "60405BAB-A6C6-4AD8-A5D2-EAD114FE931F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201701001:*:*:*:*:*:*",
            "matchCriteriaId" : "04FA10C6-2B0D-47C9-8C4E-1BA98C97DC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2ED442-3F6D-472A-AA98-51D05A65B2E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201703002:*:*:*:*:*:*",
            "matchCriteriaId" : "2A71EC72-3389-4EC7-8104-2A78F7B8C0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201704001:*:*:*:*:*:*",
            "matchCriteriaId" : "F948E806-0F73-4145-A723-7A43BA45842B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707101:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAFF86-C65F-4723-8A63-BACE2F797937"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707102:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC31DE3-ACFE-422F-B253-2FE4AAFE3954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707103:*:*:*:*:*:*",
            "matchCriteriaId" : "B30B3EA4-495F-4915-B6E3-5FB9277C2DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707201:*:*:*:*:*:*",
            "matchCriteriaId" : "6FA9E337-B4F3-4895-BA58-962F8CDEE73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707202:*:*:*:*:*:*",
            "matchCriteriaId" : "830B0BC1-A368-49AC-B6C9-B000972EF92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707203:*:*:*:*:*:*",
            "matchCriteriaId" : "614394F3-3BEE-4E12-AABF-436D54A04313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707204:*:*:*:*:*:*",
            "matchCriteriaId" : "350FD3CE-8B64-4FCF-82DE-BE941156F4F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707205:*:*:*:*:*:*",
            "matchCriteriaId" : "C9EAE177-6C7E-4C1B-ADEE-2C036F731272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707206:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFEEC31-8462-4DF9-A1DA-D7057C209CBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707207:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC6BC16-0A1D-44B3-BA68-63EA05EDD54B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707208:*:*:*:*:*:*",
            "matchCriteriaId" : "942DAD67-9455-4D02-BD3B-BFD2DE7A7E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707209:*:*:*:*:*:*",
            "matchCriteriaId" : "7ACC1A72-F6B6-430A-AB89-AB0A11587F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707210:*:*:*:*:*:*",
            "matchCriteriaId" : "45111C74-BF6F-4C05-A0D3-CE325AD0C02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707211:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CE5849-01B1-4E36-83E8-496A3F328C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707212:*:*:*:*:*:*",
            "matchCriteriaId" : "A879BA05-3A80-4EBC-AA9D-9B53695425B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707213:*:*:*:*:*:*",
            "matchCriteriaId" : "3D65A0E8-A1E0-42F3-B77D-2F32979278BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707214:*:*:*:*:*:*",
            "matchCriteriaId" : "80C10150-39BA-4818-B48F-8645D4A0D316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707215:*:*:*:*:*:*",
            "matchCriteriaId" : "9792B986-86EF-40E0-9427-A45F858717E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707216:*:*:*:*:*:*",
            "matchCriteriaId" : "37EDD688-C91A-4A35-913A-82E156ADD242"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707217:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC1AC0E-8D3F-46C0-BDA9-EB9DC9971F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707218:*:*:*:*:*:*",
            "matchCriteriaId" : "47DA50DA-7CA4-4B76-8B3B-A5732509F71D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707219:*:*:*:*:*:*",
            "matchCriteriaId" : "76EB1A04-0645-4909-AEF9-33D6FADA4793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707220:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A35723-D968-42D6-89EB-86CA550516E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201707221:*:*:*:*:*:*",
            "matchCriteriaId" : "C3AC8A19-F98E-48F1-A1EA-EAA1C7208335"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201710001:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6A3952-8429-4762-8701-47D7C1F05A5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201712001:*:*:*:*:*:*",
            "matchCriteriaId" : "5B007609-C312-469B-BACF-04D6D80DADF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201803001:*:*:*:*:*:*",
            "matchCriteriaId" : "514F2ECD-FC55-42A5-BEE4-DA7641CC93A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201806001:*:*:*:*:*:*",
            "matchCriteriaId" : "3594E391-19CD-4803-8285-FA11BE63AB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201808001:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEC248D-502E-4A8D-8786-CD72A2E3AB1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201810001:*:*:*:*:*:*",
            "matchCriteriaId" : "4F08529C-B14C-45FB-AEA1-77D12C88CB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201810002:*:*:*:*:*:*",
            "matchCriteriaId" : "617835F5-49DA-4B42-8C7B-C122D7363A00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201811001:*:*:*:*:*:*",
            "matchCriteriaId" : "E7DF3ED7-FA3F-4EBC-99AC-B7AD20E85927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201811002:*:*:*:*:*:*",
            "matchCriteriaId" : "9ED86C29-2EA6-41DD-ACCB-1E02F9CB747E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201811301:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1372AD-2853-4BED-BB71-6BACB28B95C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201901001:*:*:*:*:*:*",
            "matchCriteriaId" : "F0E684DF-9E45-459E-AB75-6B4653E5C7CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201903001:*:*:*:*:*:*",
            "matchCriteriaId" : "B3DDD3E9-186F-472C-BA76-C2A363206792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201905001:*:*:*:*:*:*",
            "matchCriteriaId" : "A09E9914-DB27-41EF-B55D-5B79ECD1DA69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201908001:*:*:*:*:*:*",
            "matchCriteriaId" : "7F916A39-13BD-44A7-A9EC-1FD40EBE357C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201910001:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8219B4-1FC2-4383-83E6-92DF700C72D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-20191004001:*:*:*:*:*:*",
            "matchCriteriaId" : "C44C9D6A-8BBE-4970-A732-B9F86D42A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201911001:*:*:*:*:*:*",
            "matchCriteriaId" : "427F4ED8-8782-4BDF-A559-11CB8E0A65F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201911401:*:*:*:*:*:*",
            "matchCriteriaId" : "63DDC95E-BBCD-4A68-9AFB-B5F9D206818E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201911402:*:*:*:*:*:*",
            "matchCriteriaId" : "B27E3424-5D4E-4E5D-8762-7AECBB11FE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912001:*:*:*:*:*:*",
            "matchCriteriaId" : "2D217AAB-D45F-480B-8F82-16B261F370D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912002:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58312B-D72B-4F13-9EF5-0F42CE592757"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912101:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBB88C2-793A-40F2-AA40-EC315115AE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912102:*:*:*:*:*:*",
            "matchCriteriaId" : "21F59801-904B-427F-A1A9-C933E38AB7AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912103:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3FFDE9-FD36-41F9-AC35-E14BB6AEF7CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912104:*:*:*:*:*:*",
            "matchCriteriaId" : "D22AFAE1-F817-4037-8EE5-AF04314AAAB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912301:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4C44D6-73AD-48A3-B5F3-31B1FDC77E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912401:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1694B2-1CD9-4943-8CFF-38218CDB88F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912402:*:*:*:*:*:*",
            "matchCriteriaId" : "154B54C8-1D65-4D3E-A64B-CF2D21E71FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912403:*:*:*:*:*:*",
            "matchCriteriaId" : "D86BCD56-4BD6-4C61-B80E-12E47D12A00F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-201912404:*:*:*:*:*:*",
            "matchCriteriaId" : "6741A159-1D92-4E25-BD43-606DE1138D49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202005001:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC98C53-EEC1-4CFE-9C31-9F2592723B3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202006001:*:*:*:*:*:*",
            "matchCriteriaId" : "C565246C-896C-4E48-8C24-344C9B0A3057"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202007001:*:*:*:*:*:*",
            "matchCriteriaId" : "8479F377-4F47-433D-867D-A94A4B0E46EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202010001:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC2468D-6B23-4C7E-951B-DDA8DD17B51E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202011001:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB7210B-C9FC-41FA-A258-1F6EC737E9BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202011002:*:*:*:*:*:*",
            "matchCriteriaId" : "3279299C-37AD-47DF-B22A-20562D13AD80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.5:650-202102001:*:*:*:*:*:*",
            "matchCriteriaId" : "91032EB0-AC08-459A-8D78-C7412AE64E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B2792D06-A73E-4A56-A152-82E1AD4E707D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201806001:*:*:*:*:*:*",
            "matchCriteriaId" : "0CE9D758-2170-4ACD-965C-C76BDA693466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201807001:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4A373B-2AC6-4193-9C34-1E4EEB552A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201808001:*:*:*:*:*:*",
            "matchCriteriaId" : "E75F4E15-2C5F-4667-B8A4-0EE9895FAEC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810001:*:*:*:*:*:*",
            "matchCriteriaId" : "8B75B45F-E25A-4362-856D-465A9F8B70DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810101:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA4AE4C-3BA8-472D-950A-3C8684565CD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810102:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA3617D-B911-4BC5-B544-B31D4F43D2B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810103:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC6E0F6-83DF-4670-8D04-A41C7DC1B881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810201:*:*:*:*:*:*",
            "matchCriteriaId" : "047A71B3-CDFB-41F3-B2DE-11360DAE5744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810202:*:*:*:*:*:*",
            "matchCriteriaId" : "F88691FD-F263-4B75-BF21-481BC1623C3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810203:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A47CDA-D3DD-4E0F-8268-32A188EA1D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810204:*:*:*:*:*:*",
            "matchCriteriaId" : "36A67476-2E8E-4104-9F10-7AE42F82508F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810205:*:*:*:*:*:*",
            "matchCriteriaId" : "ED029F1A-96D0-4EF2-9148-FC98E8B8FDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810206:*:*:*:*:*:*",
            "matchCriteriaId" : "E2283675-582F-44A8-833B-B5B439CBFA1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810207:*:*:*:*:*:*",
            "matchCriteriaId" : "94C4A188-6B00-48C4-B7E2-9F70811BF618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810208:*:*:*:*:*:*",
            "matchCriteriaId" : "F82943E9-E2D0-49F4-BD32-40E84BA1957E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810209:*:*:*:*:*:*",
            "matchCriteriaId" : "3ACB68F5-EC73-4C30-8FD3-F6647F9BCCD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810210:*:*:*:*:*:*",
            "matchCriteriaId" : "B854BA24-11FD-4D0C-9EFD-A88E64FED4E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810211:*:*:*:*:*:*",
            "matchCriteriaId" : "554434AB-763F-4E95-B616-F7594041D511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810212:*:*:*:*:*:*",
            "matchCriteriaId" : "CE56E7AC-F63D-4A4B-9B45-0E623973B14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810213:*:*:*:*:*:*",
            "matchCriteriaId" : "36664142-0111-42F5-A371-AD2C0DF211EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810214:*:*:*:*:*:*",
            "matchCriteriaId" : "49EA78B6-8208-4351-88F9-103CA01EF3A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810215:*:*:*:*:*:*",
            "matchCriteriaId" : "27AC575F-9AC4-4AA1-A71C-BF9F752295F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810216:*:*:*:*:*:*",
            "matchCriteriaId" : "4C0F47F3-0509-45AC-8EA9-37246E4E6095"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810217:*:*:*:*:*:*",
            "matchCriteriaId" : "CE103301-6AEF-4348-8F36-833021739AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810218:*:*:*:*:*:*",
            "matchCriteriaId" : "8D92B2FF-8962-41F9-B019-D83AAAD188FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810219:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6D5227-3421-412F-9BE0-583AA768446D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810220:*:*:*:*:*:*",
            "matchCriteriaId" : "BD2F52AF-D7EF-4F57-8F04-B0C6CD3FED63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810221:*:*:*:*:*:*",
            "matchCriteriaId" : "82BA9EB1-4EFB-4649-92C7-2C307966956E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810222:*:*:*:*:*:*",
            "matchCriteriaId" : "2133378D-8DFD-48B9-83A1-9FA7DDC68902"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810223:*:*:*:*:*:*",
            "matchCriteriaId" : "57BF8703-0C83-4BA5-B0F7-FB6E45229685"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810224:*:*:*:*:*:*",
            "matchCriteriaId" : "DAADDD62-2F6E-4D12-A49F-3D38ACF488E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810225:*:*:*:*:*:*",
            "matchCriteriaId" : "B5834F35-6D9A-48E5-BB5C-3A7D6CCE36D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810226:*:*:*:*:*:*",
            "matchCriteriaId" : "27FA0C0E-B5A2-4619-998B-CFB45496D895"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810227:*:*:*:*:*:*",
            "matchCriteriaId" : "B98EDBA4-0BA4-4894-B6F6-681117A5C5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810228:*:*:*:*:*:*",
            "matchCriteriaId" : "8E756914-2C2A-4999-AAEA-2F6835A29C49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810229:*:*:*:*:*:*",
            "matchCriteriaId" : "0AC0C89B-26A3-40F7-855F-5F6B36B77F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810230:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF2FE18-A90E-429A-98D1-9A97DD0464B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810231:*:*:*:*:*:*",
            "matchCriteriaId" : "92289D85-0652-41D1-A6BA-D4B8C7EE1F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810232:*:*:*:*:*:*",
            "matchCriteriaId" : "CF41887D-B145-4D01-9AEF-2E36479B2FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810233:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEAF0ED-BD20-4BA6-BB23-1C978B823A11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201810234:*:*:*:*:*:*",
            "matchCriteriaId" : "36234CE1-FA7E-4534-9720-410435E2BAEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201811001:*:*:*:*:*:*",
            "matchCriteriaId" : "ABE65721-57C0-4748-B159-F6D97CE8CAB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901001:*:*:*:*:*:*",
            "matchCriteriaId" : "CD1889D7-3313-4004-AA42-7879E8551413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901401:*:*:*:*:*:*",
            "matchCriteriaId" : "494E0B07-CE16-46D4-A89B-4F12A6CECDF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901402:*:*:*:*:*:*",
            "matchCriteriaId" : "DD046237-16D7-4A57-9F09-2A6A649368C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201901403:*:*:*:*:*:*",
            "matchCriteriaId" : "8343E8DB-1D54-4B82-9254-2E2AFC548609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201903001:*:*:*:*:*:*",
            "matchCriteriaId" : "F853B5B8-E8F8-4EA2-90EB-0603F4AADAD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904001:*:*:*:*:*:*",
            "matchCriteriaId" : "0169E032-F47A-45E0-BC33-B7DF54EC11BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904201:*:*:*:*:*:*",
            "matchCriteriaId" : "B0FCF0BB-9905-415A-8E30-DB96CCC49782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904201-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "7264CDC9-FB2D-45A9-9307-C197B1052477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904202:*:*:*:*:*:*",
            "matchCriteriaId" : "0C02E0DF-7656-475B-B028-10406DAB30F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904202-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "D0538570-759A-441A-BC37-556642C090F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904203:*:*:*:*:*:*",
            "matchCriteriaId" : "41340C91-4E96-4578-BB96-6758EBE072E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904203-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "9CF906E5-A846-49BA-925B-C6059FD02BFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904204:*:*:*:*:*:*",
            "matchCriteriaId" : "FAE29DD3-BFC7-4781-A805-DE379CAB3DD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904204-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "7D3D0230-53D4-469F-AD46-74F057F6F9B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904205:*:*:*:*:*:*",
            "matchCriteriaId" : "322DC091-A4A1-4534-AB5C-0030114A63D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904205-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "8D8E89CE-C919-4CDF-98BE-BA9A126B36BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904206:*:*:*:*:*:*",
            "matchCriteriaId" : "4B23002D-D157-412F-B2ED-CD4504C79987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904206-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "73DA1453-4756-4C16-9640-B3B0C6F617DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904207:*:*:*:*:*:*",
            "matchCriteriaId" : "8A2AE141-7503-4C0B-B0F1-B67A898FDF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904207-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "589EE886-6927-4AEA-903C-155C23B1747A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904208:*:*:*:*:*:*",
            "matchCriteriaId" : "4547B798-9F00-4B28-B667-9D38B9E3591B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904208-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "3BDDFA27-0D99-4D98-B00F-5D038488BAAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904209:*:*:*:*:*:*",
            "matchCriteriaId" : "53129601-DDA4-4BF4-8F63-A88890F2D7B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904209-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "3F931502-8460-4373-92D7-CFD817F4A062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904210:*:*:*:*:*:*",
            "matchCriteriaId" : "B48B12F8-0B49-404E-A6B4-1F6108687C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904210-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "287D4E48-4890-46C2-8B9B-1CE484C9D30A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904211:*:*:*:*:*:*",
            "matchCriteriaId" : "8CED027A-5B1B-44CC-81DA-AAD00D551C84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904211-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "A916EB29-ADE4-4D65-BF8E-98B44E466AEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904212:*:*:*:*:*:*",
            "matchCriteriaId" : "94F87F69-37DD-4170-ACA0-742EE8CFD00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904212-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "BC024B88-DEDD-49E5-B668-5B00C212B6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904213:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC3D191-BB1B-4875-9A58-1E6D53128062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904213-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "DB9F131B-46BE-44F8-904B-FD0839926B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904214:*:*:*:*:*:*",
            "matchCriteriaId" : "BD858E05-6FDE-4EDE-95C7-CA16B66BE7F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904214-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "BA2195E5-3BAD-4E90-BE40-A59C0A6A9EBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904215:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCC4027-ED2E-4993-9C3E-FDEBF94EFF11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904215-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "1503D3D9-E1A7-41F9-B26D-0AED8ABE6FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904216:*:*:*:*:*:*",
            "matchCriteriaId" : "62772E13-0198-4021-9FB0-59124086B21C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904216-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "7BD28EE0-808D-4A76-B707-F163527608C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904217:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A565A1-E4F0-4683-9DD6-D3B595A0B2EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904217-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "79225541-575F-44FC-8ED6-24BA6A4128EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904218:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8868CD-EA52-438C-BFDD-EB41C98BA425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904218-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4A62CD-A46B-4612-9DC8-7744E6D5EA40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904219:*:*:*:*:*:*",
            "matchCriteriaId" : "2F42557E-2FB2-4902-A6E8-CDDDC5E6CAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904219-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "D526CE1D-ED76-44EB-9377-53EF7556E254"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904220:*:*:*:*:*:*",
            "matchCriteriaId" : "00ECE661-E187-4999-B2CC-CF0EBAE83253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904220-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E92A1C-40EB-441B-A634-42609527210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904221:*:*:*:*:*:*",
            "matchCriteriaId" : "6C225598-9636-4095-84FE-DD671F2D6000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904221-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "111A10BE-FC5A-4272-9719-1DED62694A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904222:*:*:*:*:*:*",
            "matchCriteriaId" : "58C577E8-4B2B-4D91-AFCA-81C7FA04B897"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904222-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "FC65FCFC-CD55-401A-8986-A1DBF544D228"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904223:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F8E29D-A3C1-4223-BDC3-CCED7C6FC86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904223-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBD3AEC-284C-44E1-A4CD-010787114737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904224:*:*:*:*:*:*",
            "matchCriteriaId" : "41DE747D-30C9-470D-8447-47B8C95311EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904224-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "42F87C20-5A00-43C9-A445-50AD716233D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904225:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4D1283-BEC0-4FFC-8DC1-812D7A069F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904225-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "C1412AFC-CBE8-4151-B01D-785F11ACAB85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904226:*:*:*:*:*:*",
            "matchCriteriaId" : "97F27723-5065-4A57-AF07-F9BD35B9B32C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904226-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "6431DD1F-2269-4AFB-B486-9B6373F41C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904227:*:*:*:*:*:*",
            "matchCriteriaId" : "94383F22-6A4B-43A5-BA4D-6D25698DFF00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904227-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "3BA5D0CB-E5B0-4C95-91A7-C662BAE01483"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904228:*:*:*:*:*:*",
            "matchCriteriaId" : "0F27B6FA-DFF5-4A67-BA3A-E34F38DC3D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904228-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "A86BDAB4-3924-45A8-9130-517DEA184FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904229:*:*:*:*:*:*",
            "matchCriteriaId" : "E58409B9-DCF2-4383-8A39-D7CE0136EFF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201904229-ug:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EAE07B-2849-4E3B-B8D0-F68E6440A9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201905001:*:*:*:*:*:*",
            "matchCriteriaId" : "00CF4E83-EA1C-4058-8BCC-09B495255F71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201906002:*:*:*:*:*:*",
            "matchCriteriaId" : "86626D15-8D73-48BA-970B-CE661D5BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908101:*:*:*:*:*:*",
            "matchCriteriaId" : "2308CED4-314E-4CFE-8B1F-7B6CAA637A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908102:*:*:*:*:*:*",
            "matchCriteriaId" : "9969057F-BD3A-474E-8A02-087575A8AA92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908103:*:*:*:*:*:*",
            "matchCriteriaId" : "7111974A-2A88-4209-8CBB-F872993AE4BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908104:*:*:*:*:*:*",
            "matchCriteriaId" : "35722902-3652-44F1-89C2-08EB51F2A1B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908201:*:*:*:*:*:*",
            "matchCriteriaId" : "E469AC46-D464-4960-8F23-CA59B3DCB7C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908202:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAD88F2-F1AA-4DDE-9E27-52090E2BD49A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908203:*:*:*:*:*:*",
            "matchCriteriaId" : "48F3D2BF-3A1D-4C49-94F5-EDB11E57821C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908204:*:*:*:*:*:*",
            "matchCriteriaId" : "739948F5-E005-49E3-B412-4E035C7D95E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908205:*:*:*:*:*:*",
            "matchCriteriaId" : "D1828A75-5088-4992-A06B-A58B62536F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908206:*:*:*:*:*:*",
            "matchCriteriaId" : "58030F5A-82E1-4D54-A8F0-30CAAD4C8402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908207:*:*:*:*:*:*",
            "matchCriteriaId" : "9A013753-5E40-4CD8-A649-6CD023E0A970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908208:*:*:*:*:*:*",
            "matchCriteriaId" : "F554BC79-A92C-4287-9D94-3657C48E36CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908209:*:*:*:*:*:*",
            "matchCriteriaId" : "F82710D4-3FAB-469F-B15C-F22B4786AE42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908210:*:*:*:*:*:*",
            "matchCriteriaId" : "BDE7B96D-AD37-406D-AF62-3797E7A55119"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908211:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C294EC-F0BE-44DA-9073-D29D693F0964"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908212:*:*:*:*:*:*",
            "matchCriteriaId" : "E05B6CD2-A581-46C2-AEA7-D8A6028FB466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908213:*:*:*:*:*:*",
            "matchCriteriaId" : "6CEC1380-E75E-40B5-BDE8-94E12317CCCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908214:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B7079D-785C-4941-929A-C82B54809728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908215:*:*:*:*:*:*",
            "matchCriteriaId" : "A1ADE91B-0682-4EF9-8724-E0AFFF3685C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908216:*:*:*:*:*:*",
            "matchCriteriaId" : "31F8FFF5-25BD-408D-9089-567AF16BA608"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908217:*:*:*:*:*:*",
            "matchCriteriaId" : "EE834CFD-5533-4989-8836-D0F07ED4919C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908218:*:*:*:*:*:*",
            "matchCriteriaId" : "092F9149-6B82-48CD-B90C-87DB36881F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908219:*:*:*:*:*:*",
            "matchCriteriaId" : "B2EA0EC1-0139-403C-AC9B-08D8530F4A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908220:*:*:*:*:*:*",
            "matchCriteriaId" : "5A3ADB57-5A7D-4B75-903C-FCBE1FAE9AA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201908221:*:*:*:*:*:*",
            "matchCriteriaId" : "755CCD27-3C87-497F-BDBB-48D3163909A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912001:*:*:*:*:*:*",
            "matchCriteriaId" : "2635673A-1F6B-4B8D-9C8D-F2FFB9644373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912101:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0DDCAC-576E-48B6-B67E-E74DBF6C5250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912102:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE71B5C-586B-4829-9A7E-3A008A1C1E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912401:*:*:*:*:*:*",
            "matchCriteriaId" : "802A1549-678C-4001-807B-97AD0953B5A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912402:*:*:*:*:*:*",
            "matchCriteriaId" : "A6024926-4AE4-4609-99DE-E3173A72058A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912403:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1CAAFF-616A-4455-86CA-0ED553D3D27F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912404:*:*:*:*:*:*",
            "matchCriteriaId" : "7C2C35E2-EDA5-4B0B-895B-09D2EE6A6B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-201912405:*:*:*:*:*:*",
            "matchCriteriaId" : "13C713B1-AEA0-40B0-829E-4D0A23808577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004001:*:*:*:*:*:*",
            "matchCriteriaId" : "4C501A11-EF97-4402-9366-E624F1CBEDEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004002:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE4120-4AAE-4F15-8575-4C480FBF7817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004301:*:*:*:*:*:*",
            "matchCriteriaId" : "04BAED99-1BF3-4089-B6E6-0BE505E6D846"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004401:*:*:*:*:*:*",
            "matchCriteriaId" : "F318EA34-1EB7-484D-B016-3173683B0823"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004402:*:*:*:*:*:*",
            "matchCriteriaId" : "08254171-3483-4796-AD29-8C8A66BEA7A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004403:*:*:*:*:*:*",
            "matchCriteriaId" : "BB87B220-ED25-4818-8E70-A9663CCEF005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004404:*:*:*:*:*:*",
            "matchCriteriaId" : "1275D19D-05C0-42F8-8402-647E512DAC72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004405:*:*:*:*:*:*",
            "matchCriteriaId" : "7D919EB9-F45B-4A4B-9887-7DE98065B766"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004406:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB29FBD-2AD3-49D0-9F49-AE4DD9192C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004407:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ACA3A8-5B40-45C4-B47F-0DCF04D6700F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202004408:*:*:*:*:*:*",
            "matchCriteriaId" : "92E98665-4919-4D45-88CF-28835DADD6E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202006001:*:*:*:*:*:*",
            "matchCriteriaId" : "C0A275B7-DBF3-4332-8B5F-C9CAD84229B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202008001:*:*:*:*:*:*",
            "matchCriteriaId" : "497F58A2-0A2C-4A59-A73B-31C956EF3CD9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202010001:*:*:*:*:*:*",
            "matchCriteriaId" : "18E8632C-E442-4F18-BFE2-96AE5C839F0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202011001:*:*:*:*:*:*",
            "matchCriteriaId" : "13D69B99-CB36-45DD-9FD9-C58186998200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202011002:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0BC157-1834-46D8-9BF9-0CE9648C7D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:6.7:670-202102001:*:*:*:*:*:*",
            "matchCriteriaId" : "728136B6-47A7-42BC-9464-7745E4F2B4FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:7.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70F4DA98-C1D3-489E-958C-B466BEAD772B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:7.0.0:b:*:*:*:*:*:*",
            "matchCriteriaId" : "BC6F088D-0404-4588-9788-7A5903C5BC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:7.0.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "18371326-D0DD-4E7B-AF9E-5963C73FB5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:7.0.0:update_1a:*:*:*:*:*:*",
            "matchCriteriaId" : "A785B3DD-929D-4F2F-829D-89F231EC2A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:vmware:esxi:7.0.0:update_1b:*:*:*:*:*:*",
            "matchCriteriaId" : "CA82984F-607E-4A81-ACDC-8DED0D45F14F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162957/VMware-ESXi-OpenSLP-Heap-Overflow.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0002.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-250/",
        "source" : "security@vmware.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162957/VMware-ESXi-OpenSLP-Heap-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-250/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22667",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-24T17:15:16.093",
      "lastModified" : "2024-11-21T05:50:26.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BB-ESWGP506-2SFP-T versions 1.01.09 and prior is vulnerable due to the use of hard-coded credentials, which may allow an attacker to gain unauthorized access and permit the execution of arbitrary code on the BB-ESWGP506-2SFP-T (versions 1.01.01 and prior)."
      }, {
        "lang" : "es",
        "value" : "BB-ESWGP506-2SFP-T versiones 1.01.09 y anteriores, es vulnerable debido al uso de credenciales embebidas, lo que puede permitir a un atacante conseguir acceso no autorizado y permitir una ejecución de código arbitraria en BB-ESWGP506-2SFP-T (versiones 1.01.01 y anteriores)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:advantech:bb-eswgp506-2sfp-t_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.01.09",
            "matchCriteriaId" : "1EE14DFD-D313-4D6F-8997-8DF6ED72BFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:advantech:bb-eswgp506-2sfp-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDA90009-EF6A-4608-AC73-C009F160C288"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-054-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-593/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-054-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-593/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1227",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:12.410",
      "lastModified" : "2024-11-21T05:43:52.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the NX-API on an affected device. An attacker could exploit this vulnerability by persuading a user of the NX-API to follow a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. The attacker could view and modify the device configuration. Note: The NX-API feature is disabled by default."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad NX-API del software Cisco NX-OS podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo cross-site request forgery (CSRF) en un sistema afectado.&#xa0;Esta vulnerabilidad es debido a las protecciones CSRF insuficientes para la NX-API en un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario de la NX-API para que siga un enlace malicioso.&#xa0;Una explotación con éxito podría permitir al atacante llevar a cabo acciones arbitrarias con el nivel de privilegio del usuario afectado.&#xa0;El atacante podría visualizar  y modificar la configuración del dispositivo.&#xa0;Nota: La funcionalidad NX-API está desactivada por defecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9E85905-A3F0-43C0-A578-6E9C14033D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D725607-74D5-4700-B4B7-0C35D119F9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(3\\)s19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B15BFF7-F074-4FE9-ACB6-CC82D9D226C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9148s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25FA4A8-408B-4E94-B7D9-7DC54B61322F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9250i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD5738-029B-43AA-9342-63719DC16138"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9706:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182CB50-4D32-4835-B1A8-817D989F919F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B3B617-7554-4C36-9B41-19AA3BD2F6E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:9.3\\(3\\)idi9\\(0.569\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F7158A-AFAC-4E2A-84FD-426FC44AC452"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pv-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34855-D8D2-4114-80D2-A4D159C62458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4226DA0-9371-401C-8247-E6E636A116C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3293438-3D18-45A2-B093-2C3F65783336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED628B5-97A8-4B26-AA40-BEC854982157"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9DD73-E31D-4921-A6D6-E14E04703588"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652A2849-668D-4156-88FB-C19844A59F33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F80A72-AD54-4699-B8AE-82715F0B58E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB4002-7636-4382-B33E-FBA060A13C34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57572E4A-78D5-4D1A-938B-F05F01759612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "532CE4B0-A3C9-4613-AAAF-727817D06FB4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92E2CB2B-DA11-4CF7-9D57-3D4D48990DC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63BE0266-1C00-4D6A-AD96-7F82532ABAA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(8\\)n1\\(0.809\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DE5E39F-ECE1-44E6-9CFE-FEF903317E46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-csrf-wRMzWL9z",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-nxapi-csrf-wRMzWL9z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1228",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:12.613",
      "lastModified" : "2024-11-21T05:43:52.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the fabric infrastructure VLAN connection establishment of Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) Mode could allow an unauthenticated, adjacent attacker to bypass security validations and connect an unauthorized server to the infrastructure VLAN. This vulnerability is due to insufficient security requirements during the Link Layer Discovery Protocol (LLDP) setup phase of the infrastructure VLAN. An attacker could exploit this vulnerability by sending a crafted LLDP packet on the adjacent subnet to an affected device. A successful exploit could allow the attacker to connect an unauthorized server to the infrastructure VLAN, which is highly privileged. With a connection to the infrastructure VLAN, the attacker can make unauthorized connections to Cisco Application Policy Infrastructure Controller (APIC) services or join other host endpoints."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el establecimiento de la conexión VLAN de la infraestructura de estructura de Cisco Nexus 9000 Series Fabric Switches en Application Centric Infrastructure (ACI) Mode podría permitir que un atacante adyacente no autenticado omitir las comprobaciones de seguridad y conectar un servidor no autorizado a la VLAN de infraestructura.&#xa0;Esta vulnerabilidad es debido a requisitos de seguridad insuficientes durante la fase de configuración del Link Layer Discovery Protocol (LLDP) de la VLAN de infraestructura.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete LLDP diseñado en la subred adyacente a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante conectar un servidor no autorizado a la infraestructura VLAN, que tiene muchos privilegios.&#xa0;Con una conexión a la infraestructura VLAN, el atacante puede llevar a cabo conexiones no autorizadas a los servicios Cisco Application Policy Infrastructure Controller (APIC) o unirse a otros endpoints del host"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64CC640-B37D-4064-8946-B8CCCDE1A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8983275-20C6-487E-A265-3836F06AB226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCA0A4F-D475-405C-B9A7-EBB0A816B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0E0039-23E1-425B-8B2C-DFE2C185CC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3FB2AC-934D-4F12-9E9B-EA5F0731DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE91F5-EC9B-4486-80F1-CFC3DA570B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C60E5B9-10AB-4A69-B28D-0D526756E6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "979FEE23-2C28-4212-9DA5-10A0EAFE1668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B610400-181F-4621-B27B-18C2609990DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4585B70C-E162-42FA-9CB8-42C1F34017AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC3F541-E417-4FC1-8C35-5B162F35F4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "627482D8-0464-4B96-B36A-25D151F1525E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "788E6471-F000-45A7-9829-71F7AE5ED1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD04718-6743-40A1-9115-A172D1C37835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0277D6FD-2A73-45E9-ADA3-64998B7E4668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA00485-725D-467C-9152-DF325507E248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7ED5D0-12BD-483C-902B-CF1AE23611E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "582C120A-DFA9-40F8-875A-C7875D9D93F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "040EFFE2-EE24-46EA-B77B-7FDCCF66923D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB814B0-24AE-4C62-9CCE-5D572D0FC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FAEF9F-724D-43E9-8916-BEF64A9B8F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA448665-A433-4C40-940D-1165C6A2777F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "061AC794-EDA5-4166-85D1-EA827685C0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE372D3-4978-4C78-AE1A-14E29ED00D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A11D005-53E4-4575-8EAC-86F9DDB62FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "952CC9AA-D03C-44F5-8600-78C1E20D0F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F6CC3C-BFCB-4CD6-830E-6A2C29EB0923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C3B5E-AD72-4A32-BE7B-885AE8DFB480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C5F386-C135-4AED-9F96-388E324F09BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "669CF375-763C-4B83-8291-85F7CE8297F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9188E945-D4A9-47A7-8588-302762510C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A00C1F-7270-4E2F-8420-8567336AD1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EE58D9-D1BF-41BD-B331-A3472D38B1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B28302-6700-4B2C-9531-6BECA5113D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C470740F-386B-472E-AD18-D8954AD5BE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34C017B-E9C3-48B8-AB7E-0A8C6CD8788B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0CF9B2-356D-45C5-BFCD-94155E1A2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2478A831-330D-4526-8A2C-DC8C0F6973ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB57FD7-4350-4BFD-A6CF-EDA674AD31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B4FF76-FBC5-4742-B784-90AFBE8E2767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28328D72-D898-48C4-B7A9-D97E321C9D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1569E0F4-33D1-408D-88DC-26822447F325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF454C26-1558-405A-B99C-ADF7A9E91B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA86F8E0-58FB-4CA5-9541-E9D55BED533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F031ABAD-3D20-4374-ABBE-24D5C01BE910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F227E127-08EE-4A86-956C-BBBDB49925A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CD7AC4-58DD-4795-AB15-EFA214111B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "64581189-9370-487A-9196-D0421CB3636E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE5B22-F9D3-4EAA-A552-7F0271080632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DB471F-43AF-4E94-99B0-7D38CB3F5943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9217FBFE-2708-440A-90F9-0562C159DE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5F46C-3172-4509-856F-703E0B517E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07DC9A1-E4BA-474C-96C2-0B73704628AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "027DCF27-E201-4713-A1AC-526C6CA04343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B05631-0319-4AFA-867A-2AECEAD449CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "771CD71E-4F24-4ACC-8D86-11429379093B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "906C7861-3266-445E-BBAB-64B757229A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "782E194A-E91E-4C72-A86A-5BD2B9CE19BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE062A4-FD32-41E5-A5B2-06BED72140E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52016BB9-A37D-4F3A-BEB4-77CF84193652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8D042D-35C6-4BDF-9CD7-9125B19DC415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F91C27-4625-4CCD-B2EB-7F34F286AB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65D3CE3-CA53-4A13-AD86-E59196B586FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4633AD-6CBA-4E7B-BC9D-DCCBE1F2C7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B6FAA5-D3CF-4463-9DE9-6F472DC78B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A8E4CF-2EF7-45E8-A4FE-5BEA54617D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A7F045-BE20-4B1D-8A0D-38A651B77EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DB4683-C8B2-4013-85C5-A1B5F01790B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF031A0E-9C92-4931-8433-EAF9F9BA0DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B8A3B-AE6E-4876-9C14-54B24F91229C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B9178C-DD7F-4FE4-BC24-7025F90A4E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5288A19-E08E-4748-A6F8-C095746D8B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBC06D8-E9B3-4400-A7E5-7EE6A3B8C9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5D5D2-B2B9-4A9A-84D5-6F04E3F8694F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA97CC-F9AD-42A8-8FBE-D986E729336C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DCFBB0-E1DA-4F4D-877A-BC6075775EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02BE71-98EB-494D-A808-42A3B2A0A72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B74C309-446F-4EAC-939E-43BC8167FE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA38368-8EE4-4480-9A9A-D12992108475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCAE710-1789-4D3A-AC2E-E6A523037172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7A6830-C15E-4690-8C1A-5044A3B01C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69051EB0-D60F-4E30-8939-088E50422A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5135CDF-5991-4CC9-9C4C-CC0DADEA8C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DF4FCE-1B71-4A28-989C-AE4C5F2B3343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6049CBB-7445-4A77-867B-5D59DF0C9332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE5188-775E-42A9-BCCF-0DBACDDFC045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "762B4A37-3D8C-4172-A8FF-14F470CBDBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BCF174-6D01-4C1A-AF7F-B91EDD16E010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E4F174-8F51-41AF-82C7-0CA577753191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "353FD814-0812-4B90-B8F0-D372E85CF40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF6628-3E98-4D66-B4A9-9EA16519719A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B312E-9C91-40F7-BACB-1550D6632477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D1151-BEC2-4404-A7CF-651D8BFA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE3E73-8EC6-49D1-837F-2FBFDD51802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774106E-DC00-4F79-A5F9-390483A9FBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "26676350-6635-4B97-8A1E-250E06A177CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA426885-C1FB-4DB5-900A-7C7882956BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C1581-9C53-4093-BBCA-67F57CE24C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D548C85A-F98B-49BF-A6C3-ADEB60124822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "970718D9-4789-414B-8ED2-FBF914B4047C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C45D91E-5AA4-46B4-9A87-75480AC04732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "973B7EE9-6B18-4D1D-8DEE-3C43D0CEB89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32083CFE-1DAE-4BE2-AFB9-B2806F809191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D61DA2-28B2-49E5-8739-38113455BD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E20496D-D83C-4CD3-B1A3-EEE0D165F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2u\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71425F24-4C89-49C1-9B5E-68FAFE04F89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2v\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310CF610-34E9-45F2-B01A-76DDEC40A040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A32C04-1467-4564-A18E-EF2AAEF64244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED378075-D761-4D0D-8852-93616EA2F9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(2l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9BD58D-3AE9-49C7-AE94-74878CD109B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D16C20-D68E-4118-B8D4-D6A2044DCD32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCDA33D-8576-4DF6-90A1-710CA3F78F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D302931B-4425-40A6-BF7E-97FAB43D0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBC0A74-551B-4BD1-A59A-80C119362D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36E0CC9-7DD7-439B-B83F-F96DEF5B2A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F50E84B-7CAC-4832-96C5-9885F0F9DFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB8A917-6F49-4636-AF8C-8C18BAACE661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(4d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "79ECC89F-7F84-42E0-AF0F-4C9A609131E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9AC0D9-D8D4-480F-B1B7-84D17AF4ABC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A0A2C2-6E9F-4A08-9ED8-6FD4E8203053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE26439-5B15-48F4-8E02-CC45A76297A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8744322-4D27-44BB-9573-BDEC9E8F6B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(6i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C1841C-9D9B-4A22-9080-724BC75A004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(7f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E54C78E-93FE-4E22-A37A-25D07AF7C7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(7k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED709475-D435-492E-A295-3F3202CB6CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(8d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DBADBC-106E-4D0D-B6F1-F5859AD84DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B226BA8E-FC1E-44FF-9A91-837F355E53B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA59F5B-43FE-4051-9D27-F83A7A39141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3883FD9C-0BCB-4865-81B6-854C8C4EC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(41d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A52F12E-8EAD-40B8-BB6D-54FAD8718AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F75D6B-D48A-4B5E-A1DF-EEBFEBFE6073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1B81AF-FC0F-42B6-98C0-BEC432C7BAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C5BB7A-3B2B-4AE3-A626-04FD1BB1E9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEB393A-9687-4E52-9837-B2C9E8F22D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1BE98A-95AE-4D11-B427-68D25FE60720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61CB15-1955-4A81-9F8E-02F207094260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "455F4A6C-428C-494F-B70C-A891B83EBEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "322088F6-DF10-4C58-92F3-0FFBF469A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BFA5E5-0ECC-4A1F-A936-1F325A810334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECA1140-9DE0-4BC9-A381-A8DCB5BEA4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5FCA86-82A3-4540-B827-BD752D9E0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DE7D4-EFEC-487B-8250-251F9EA36BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2u\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EA47AA-6F3B-4A48-81A0-2CA8D6696B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2w\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "89662D5F-AEEC-4DEB-AB8B-6A95D0A4B1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2x\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D5076C-6C6F-44F9-91D7-D8F2FEB21310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BA2854-BE27-45F8-AF6E-CF6C474CF15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8296DD01-9CE0-4734-97A1-43250AD87453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FC6FCC-9C86-43CB-A008-82E5C3E5B791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD71858-CA76-4BE3-8B4F-626959F6A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F4C42B-D975-46B5-8A18-1D6F72A294F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6354B7-3CBA-4E09-93F6-B49717B2A78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C693C8FA-3324-4439-B177-6FAE387DB23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "949C0F31-77ED-49CC-870D-70104AA908A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "007BDA28-37AD-4F37-B351-C3BE0B8418F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9563DBDC-D2C0-4C7C-A246-EC95DC4581CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CF92FC-B053-4234-830F-683E06807545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DF8B69-D0B7-455F-A50E-5930948BED49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "724603DA-06C9-4E64-B495-A90AD9BF31E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(5k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1255013-E3BC-4048-BD50-4641C0048FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBAFC12-85C7-4FD1-B46E-D8268D00DEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F988380-7BAE-4E9C-B1E2-D3F7389E2FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A5C1D4-EAE5-4E3F-AFCC-96B1ECDA91EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-unauth-access-5PWzDx2w",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-unauth-access-5PWzDx2w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1229",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:12.707",
      "lastModified" : "2024-11-21T05:43:52.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in ICMP Version 6 (ICMPv6) processing in Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a slow system memory leak, which over time could lead to a denial of service (DoS) condition. This vulnerability is due to improper error handling when an IPv6-configured interface receives a specific type of ICMPv6 packet. An attacker could exploit this vulnerability by sending a sustained rate of crafted ICMPv6 packets to a local IPv6 address on a targeted device. A successful exploit could allow the attacker to cause a system memory leak in the ICMPv6 process on the device. As a result, the ICMPv6 process could run out of system memory and stop processing traffic. The device could then drop all ICMPv6 packets, causing traffic instability on the device. Restoring device functionality would require a device reboot."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento de ICMP versión 6 (ICMPv6) en el software Cisco NX-OS podría permitir a un atacante remoto no autenticado causar una pérdida lenta de memoria del sistema, que con el tiempo podría conllevar a una condición de denegación de servicio (DoS).&#xa0;Esta vulnerabilidad es debido a un manejo inapropiado de errores cuando una interfaz configurada con IPv6 recibe un tipo específico de paquete ICMPv6.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una tasa sostenida de paquetes ICMPv6 diseñados a una dirección IPv6 local en un dispositivo de destino.&#xa0;Una explotación con éxito podría permitir al atacante causar una pérdida de memoria del sistema en el proceso ICMPv6 del dispositivo.&#xa0;Como resultado, el proceso ICMPv6 podría quedarse sin memoria del sistema y dejar de procesar el tráfico.&#xa0;El dispositivo podría eliminar todos los paquetes ICMPv6, lo que provocaría inestabilidad del tráfico en el dispositivo.&#xa0;Restaurar la funcionalidad del dispositivo requeriría un reinicio del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:5.2\\(1\\)sv5\\(1.3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A10E56A-7137-47B9-A4E1-3CE0CF59CFE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000_virtual_edge_for_vmware_vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A5183A-5509-4179-946C-47967769FEA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000v_switch_for_microsoft_hyper-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9825E54D-DA3D-4A1C-A962-8CB005A4DE50"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_1000v_switch_for_vmware_vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111F9653-1C50-4ACC-ADB2-509DCD68A83B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(3.53\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4101B4-5150-41A7-96BC-F5506C513B3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9148s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25FA4A8-408B-4E94-B7D9-7DC54B61322F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9250i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD5738-029B-43AA-9342-63719DC16138"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9706:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182CB50-4D32-4835-B1A8-817D989F919F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B3B617-7554-4C36-9B41-19AA3BD2F6E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pv-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34855-D8D2-4114-80D2-A4D159C62458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4226DA0-9371-401C-8247-E6E636A116C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3293438-3D18-45A2-B093-2C3F65783336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED628B5-97A8-4B26-AA40-BEC854982157"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9DD73-E31D-4921-A6D6-E14E04703588"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652A2849-668D-4156-88FB-C19844A59F33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F80A72-AD54-4699-B8AE-82715F0B58E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB4002-7636-4382-B33E-FBA060A13C34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57572E4A-78D5-4D1A-938B-F05F01759612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9221c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB9FDE8-8533-4F65-BF32-4066D042B2F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1127D2-12C0-454F-91EF-5EE334070D06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.1\\(2.31\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EFF4A24-B0A6-4702-9684-041F1A3E91A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9221c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB9FDE8-8533-4F65-BF32-4066D042B2F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1127D2-12C0-454F-91EF-5EE334070D06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-icmpv6-dos-YD55jVCq",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fxos-nxos-icmpv6-dos-YD55jVCq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1230",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:12.817",
      "lastModified" : "2024-11-21T05:43:53.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability with the Border Gateway Protocol (BGP) for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, remote attacker to cause a routing process to crash, which could lead to a denial of service (DoS) condition. This vulnerability is due to an issue with the installation of routes upon receipt of a BGP update. An attacker could exploit this vulnerability by sending a crafted BGP update to an affected device. A successful exploit could allow the attacker to cause the routing process to crash, which could cause the device to reload. This vulnerability applies to both Internal BGP (IBGP) and External BGP (EBGP). Note: The Cisco implementation of BGP accepts incoming BGP traffic from explicitly configured peers only. To exploit this vulnerability, an attacker would need to send a specific BGP update message over an established TCP connection that appears to come from a trusted BGP peer."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad con el protocolo Border Gateway Protocol (BGP) para Cisco Nexus 9000 Series Fabric Switches en modo Application Centric Infrastructure (ACI) podría permitir a un atacante remoto no autenticado causar la caída de un proceso de enrutamiento, lo que podría conllevar a una condición de denegación de servicio (DoS).&#xa0;Esta vulnerabilidad es debido a un problema con la instalación de rutas tras recibir una actualización de BGP.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una actualización de BGP diseñada a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el proceso de enrutamiento se bloquee, lo que podría hacer que el dispositivo se recargue.&#xa0;Esta vulnerabilidad se aplica tanto a Internal BGP (IBGP) como a External BGP (EBGP).&#xa0;Nota: La implementación de Cisco de BGP acepta tráfico BGP entrante solo de peers configurados explícitamente.&#xa0;Para explotar esta vulnerabilidad, un atacante necesitaría enviar un mensaje de actualización de BGP específico mediante una conexión TCP establecida que parece provenir de un peer de BGP confiable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-233"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE5B22-F9D3-4EAA-A552-7F0271080632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DB471F-43AF-4E94-99B0-7D38CB3F5943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9217FBFE-2708-440A-90F9-0562C159DE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5F46C-3172-4509-856F-703E0B517E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07DC9A1-E4BA-474C-96C2-0B73704628AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "027DCF27-E201-4713-A1AC-526C6CA04343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B05631-0319-4AFA-867A-2AECEAD449CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "771CD71E-4F24-4ACC-8D86-11429379093B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "906C7861-3266-445E-BBAB-64B757229A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "782E194A-E91E-4C72-A86A-5BD2B9CE19BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE062A4-FD32-41E5-A5B2-06BED72140E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52016BB9-A37D-4F3A-BEB4-77CF84193652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8D042D-35C6-4BDF-9CD7-9125B19DC415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F91C27-4625-4CCD-B2EB-7F34F286AB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65D3CE3-CA53-4A13-AD86-E59196B586FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4633AD-6CBA-4E7B-BC9D-DCCBE1F2C7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B6FAA5-D3CF-4463-9DE9-6F472DC78B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A8E4CF-2EF7-45E8-A4FE-5BEA54617D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A7F045-BE20-4B1D-8A0D-38A651B77EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DB4683-C8B2-4013-85C5-A1B5F01790B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF031A0E-9C92-4931-8433-EAF9F9BA0DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B8A3B-AE6E-4876-9C14-54B24F91229C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B9178C-DD7F-4FE4-BC24-7025F90A4E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5288A19-E08E-4748-A6F8-C095746D8B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBC06D8-E9B3-4400-A7E5-7EE6A3B8C9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5D5D2-B2B9-4A9A-84D5-6F04E3F8694F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA97CC-F9AD-42A8-8FBE-D986E729336C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DCFBB0-E1DA-4F4D-877A-BC6075775EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02BE71-98EB-494D-A808-42A3B2A0A72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B74C309-446F-4EAC-939E-43BC8167FE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA38368-8EE4-4480-9A9A-D12992108475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCAE710-1789-4D3A-AC2E-E6A523037172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7A6830-C15E-4690-8C1A-5044A3B01C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69051EB0-D60F-4E30-8939-088E50422A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5135CDF-5991-4CC9-9C4C-CC0DADEA8C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DF4FCE-1B71-4A28-989C-AE4C5F2B3343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6049CBB-7445-4A77-867B-5D59DF0C9332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE5188-775E-42A9-BCCF-0DBACDDFC045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "762B4A37-3D8C-4172-A8FF-14F470CBDBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BCF174-6D01-4C1A-AF7F-B91EDD16E010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E4F174-8F51-41AF-82C7-0CA577753191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "353FD814-0812-4B90-B8F0-D372E85CF40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF6628-3E98-4D66-B4A9-9EA16519719A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B312E-9C91-40F7-BACB-1550D6632477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D1151-BEC2-4404-A7CF-651D8BFA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE3E73-8EC6-49D1-837F-2FBFDD51802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774106E-DC00-4F79-A5F9-390483A9FBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "26676350-6635-4B97-8A1E-250E06A177CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA426885-C1FB-4DB5-900A-7C7882956BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C1581-9C53-4093-BBCA-67F57CE24C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D548C85A-F98B-49BF-A6C3-ADEB60124822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "970718D9-4789-414B-8ED2-FBF914B4047C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C45D91E-5AA4-46B4-9A87-75480AC04732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "973B7EE9-6B18-4D1D-8DEE-3C43D0CEB89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32083CFE-1DAE-4BE2-AFB9-B2806F809191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D61DA2-28B2-49E5-8739-38113455BD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E20496D-D83C-4CD3-B1A3-EEE0D165F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2u\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71425F24-4C89-49C1-9B5E-68FAFE04F89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2v\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310CF610-34E9-45F2-B01A-76DDEC40A040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A32C04-1467-4564-A18E-EF2AAEF64244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED378075-D761-4D0D-8852-93616EA2F9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(2l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9BD58D-3AE9-49C7-AE94-74878CD109B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D16C20-D68E-4118-B8D4-D6A2044DCD32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCDA33D-8576-4DF6-90A1-710CA3F78F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D302931B-4425-40A6-BF7E-97FAB43D0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBC0A74-551B-4BD1-A59A-80C119362D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36E0CC9-7DD7-439B-B83F-F96DEF5B2A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F50E84B-7CAC-4832-96C5-9885F0F9DFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB8A917-6F49-4636-AF8C-8C18BAACE661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(4d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "79ECC89F-7F84-42E0-AF0F-4C9A609131E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9AC0D9-D8D4-480F-B1B7-84D17AF4ABC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A0A2C2-6E9F-4A08-9ED8-6FD4E8203053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE26439-5B15-48F4-8E02-CC45A76297A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8744322-4D27-44BB-9573-BDEC9E8F6B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(6i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C1841C-9D9B-4A22-9080-724BC75A004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(7f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E54C78E-93FE-4E22-A37A-25D07AF7C7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(7k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED709475-D435-492E-A295-3F3202CB6CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(8d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DBADBC-106E-4D0D-B6F1-F5859AD84DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B226BA8E-FC1E-44FF-9A91-837F355E53B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA59F5B-43FE-4051-9D27-F83A7A39141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3883FD9C-0BCB-4865-81B6-854C8C4EC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(41d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A52F12E-8EAD-40B8-BB6D-54FAD8718AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F75D6B-D48A-4B5E-A1DF-EEBFEBFE6073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1B81AF-FC0F-42B6-98C0-BEC432C7BAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C5BB7A-3B2B-4AE3-A626-04FD1BB1E9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEB393A-9687-4E52-9837-B2C9E8F22D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1BE98A-95AE-4D11-B427-68D25FE60720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61CB15-1955-4A81-9F8E-02F207094260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "455F4A6C-428C-494F-B70C-A891B83EBEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "322088F6-DF10-4C58-92F3-0FFBF469A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BFA5E5-0ECC-4A1F-A936-1F325A810334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECA1140-9DE0-4BC9-A381-A8DCB5BEA4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5FCA86-82A3-4540-B827-BD752D9E0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DE7D4-EFEC-487B-8250-251F9EA36BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2u\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EA47AA-6F3B-4A48-81A0-2CA8D6696B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2w\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "89662D5F-AEEC-4DEB-AB8B-6A95D0A4B1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2x\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D5076C-6C6F-44F9-91D7-D8F2FEB21310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BA2854-BE27-45F8-AF6E-CF6C474CF15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8296DD01-9CE0-4734-97A1-43250AD87453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FC6FCC-9C86-43CB-A008-82E5C3E5B791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD71858-CA76-4BE3-8B4F-626959F6A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F4C42B-D975-46B5-8A18-1D6F72A294F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58277DB8-BBC7-4639-8967-FCBAB029641E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-n9kaci-bgp-De9dPKSK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1231",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.193",
      "lastModified" : "2024-11-21T05:43:53.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Link Layer Discovery Protocol (LLDP) for Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an unauthenticated, adjacent attacker to disable switching on a small form-factor pluggable (SFP) interface. This vulnerability is due to incomplete validation of the source of a received LLDP packet. An attacker could exploit this vulnerability by sending a crafted LLDP packet on an SFP interface to an affected device. A successful exploit could allow the attacker to disable switching on the SFP interface, which could disrupt network traffic."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el protocolo Link Layer Discovery Protocol (LLDP) para Nexus 9000 Series Fabric Switches en modo Application Centric Infrastructure (ACI) podría permitir a un atacante adyacente no autenticado deshabilitar la conmutación en una interfaz small form-factor pluggable (SFP).&#xa0;Esta vulnerabilidad es debido a una comprobación incompleta del origen de un paquete LLDP recibido.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete LLDP diseñado en una interfaz SFP a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante deshabilitar la conmutación en la interfaz SFP, lo que podría interrumpir el tráfico de la red"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C64CC640-B37D-4064-8946-B8CCCDE1A6EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8983275-20C6-487E-A265-3836F06AB226"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBCA0A4F-D475-405C-B9A7-EBB0A816B9C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0E0039-23E1-425B-8B2C-DFE2C185CC8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C3FB2AC-934D-4F12-9E9B-EA5F0731DA4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE91F5-EC9B-4486-80F1-CFC3DA570B9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C60E5B9-10AB-4A69-B28D-0D526756E6B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "979FEE23-2C28-4212-9DA5-10A0EAFE1668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B610400-181F-4621-B27B-18C2609990DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4585B70C-E162-42FA-9CB8-42C1F34017AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(3o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC3F541-E417-4FC1-8C35-5B162F35F4F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "627482D8-0464-4B96-B36A-25D151F1525E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "788E6471-F000-45A7-9829-71F7AE5ED1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCD04718-6743-40A1-9115-A172D1C37835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.0\\(4q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0277D6FD-2A73-45E9-ADA3-64998B7E4668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA00485-725D-467C-9152-DF325507E248"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7ED5D0-12BD-483C-902B-CF1AE23611E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "582C120A-DFA9-40F8-875A-C7875D9D93F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(1s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "040EFFE2-EE24-46EA-B77B-7FDCCF66923D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FB814B0-24AE-4C62-9CCE-5D572D0FC0A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FAEF9F-724D-43E9-8916-BEF64A9B8F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(3f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA448665-A433-4C40-940D-1165C6A2777F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "061AC794-EDA5-4166-85D1-EA827685C0F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFE372D3-4978-4C78-AE1A-14E29ED00D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A11D005-53E4-4575-8EAC-86F9DDB62FF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "952CC9AA-D03C-44F5-8600-78C1E20D0F9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F6CC3C-BFCB-4CD6-830E-6A2C29EB0923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.1\\(4m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27C3B5E-AD72-4A32-BE7B-885AE8DFB480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C5F386-C135-4AED-9F96-388E324F09BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "669CF375-763C-4B83-8291-85F7CE8297F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9188E945-D4A9-47A7-8588-302762510C2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "36A00C1F-7270-4E2F-8420-8567336AD1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EE58D9-D1BF-41BD-B331-A3472D38B1D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58B28302-6700-4B2C-9531-6BECA5113D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C470740F-386B-472E-AD18-D8954AD5BE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E34C017B-E9C3-48B8-AB7E-0A8C6CD8788B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0CF9B2-356D-45C5-BFCD-94155E1A2F14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2478A831-330D-4526-8A2C-DC8C0F6973ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.2\\(3m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAB57FD7-4350-4BFD-A6CF-EDA674AD31BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71B4FF76-FBC5-4742-B784-90AFBE8E2767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28328D72-D898-48C4-B7A9-D97E321C9D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1569E0F4-33D1-408D-88DC-26822447F325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF454C26-1558-405A-B99C-ADF7A9E91B69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA86F8E0-58FB-4CA5-9541-E9D55BED533D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F031ABAD-3D20-4374-ABBE-24D5C01BE910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F227E127-08EE-4A86-956C-BBBDB49925A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CD7AC4-58DD-4795-AB15-EFA214111B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:11.3\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "64581189-9370-487A-9196-D0421CB3636E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BEE5B22-F9D3-4EAA-A552-7F0271080632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74DB471F-43AF-4E94-99B0-7D38CB3F5943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9217FBFE-2708-440A-90F9-0562C159DE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA5F46C-3172-4509-856F-703E0B517E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E07DC9A1-E4BA-474C-96C2-0B73704628AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(1r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "027DCF27-E201-4713-A1AC-526C6CA04343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40B05631-0319-4AFA-867A-2AECEAD449CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "771CD71E-4F24-4ACC-8D86-11429379093B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "906C7861-3266-445E-BBAB-64B757229A4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "782E194A-E91E-4C72-A86A-5BD2B9CE19BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CE062A4-FD32-41E5-A5B2-06BED72140E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52016BB9-A37D-4F3A-BEB4-77CF84193652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.0\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8D042D-35C6-4BDF-9CD7-9125B19DC415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "50F91C27-4625-4CCD-B2EB-7F34F286AB2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65D3CE3-CA53-4A13-AD86-E59196B586FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4633AD-6CBA-4E7B-BC9D-DCCBE1F2C7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B6FAA5-D3CF-4463-9DE9-6F472DC78B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1A8E4CF-2EF7-45E8-A4FE-5BEA54617D71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A7F045-BE20-4B1D-8A0D-38A651B77EA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DB4683-C8B2-4013-85C5-A1B5F01790B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF031A0E-9C92-4931-8433-EAF9F9BA0DE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.1\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66B8A3B-AE6E-4876-9C14-54B24F91229C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57B9178C-DD7F-4FE4-BC24-7025F90A4E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5288A19-E08E-4748-A6F8-C095746D8B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBC06D8-E9B3-4400-A7E5-7EE6A3B8C9BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5D5D2-B2B9-4A9A-84D5-6F04E3F8694F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDFA97CC-F9AD-42A8-8FBE-D986E729336C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "49DCFBB0-E1DA-4F4D-877A-BC6075775EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E02BE71-98EB-494D-A808-42A3B2A0A72A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B74C309-446F-4EAC-939E-43BC8167FE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(2q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EA38368-8EE4-4480-9A9A-D12992108475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCAE710-1789-4D3A-AC2E-E6A523037172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E7A6830-C15E-4690-8C1A-5044A3B01C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69051EB0-D60F-4E30-8939-088E50422A0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5135CDF-5991-4CC9-9C4C-CC0DADEA8C5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(3t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "00DF4FCE-1B71-4A28-989C-AE4C5F2B3343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6049CBB-7445-4A77-867B-5D59DF0C9332"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58BE5188-775E-42A9-BCCF-0DBACDDFC045"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "762B4A37-3D8C-4172-A8FF-14F470CBDBFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.2\\(4r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9BCF174-6D01-4C1A-AF7F-B91EDD16E010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E4F174-8F51-41AF-82C7-0CA577753191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "353FD814-0812-4B90-B8F0-D372E85CF40B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71AF6628-3E98-4D66-B4A9-9EA16519719A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E52B312E-9C91-40F7-BACB-1550D6632477"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D1151-BEC2-4404-A7CF-651D8BFA3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:12.3\\(1p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CE3E73-8EC6-49D1-837F-2FBFDD51802C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B774106E-DC00-4F79-A5F9-390483A9FBEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "26676350-6635-4B97-8A1E-250E06A177CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA426885-C1FB-4DB5-900A-7C7882956BFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.0\\(2n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5C1581-9C53-4093-BBCA-67F57CE24C67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D548C85A-F98B-49BF-A6C3-ADEB60124822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "970718D9-4789-414B-8ED2-FBF914B4047C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C45D91E-5AA4-46B4-9A87-75480AC04732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "973B7EE9-6B18-4D1D-8DEE-3C43D0CEB89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32083CFE-1DAE-4BE2-AFB9-B2806F809191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D61DA2-28B2-49E5-8739-38113455BD09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E20496D-D83C-4CD3-B1A3-EEE0D165F609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2u\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71425F24-4C89-49C1-9B5E-68FAFE04F89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.1\\(2v\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310CF610-34E9-45F2-B01A-76DDEC40A040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A32C04-1467-4564-A18E-EF2AAEF64244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(1m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED378075-D761-4D0D-8852-93616EA2F9BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(2l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9BD58D-3AE9-49C7-AE94-74878CD109B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46D16C20-D68E-4118-B8D4-D6A2044DCD32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABCDA33D-8576-4DF6-90A1-710CA3F78F68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D302931B-4425-40A6-BF7E-97FAB43D0778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEBC0A74-551B-4BD1-A59A-80C119362D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F36E0CC9-7DD7-439B-B83F-F96DEF5B2A37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F50E84B-7CAC-4832-96C5-9885F0F9DFC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB8A917-6F49-4636-AF8C-8C18BAACE661"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(4d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "79ECC89F-7F84-42E0-AF0F-4C9A609131E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(4e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A9AC0D9-D8D4-480F-B1B7-84D17AF4ABC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "28A0A2C2-6E9F-4A08-9ED8-6FD4E8203053"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE26439-5B15-48F4-8E02-CC45A76297A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(5f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8744322-4D27-44BB-9573-BDEC9E8F6B00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(6i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83C1841C-9D9B-4A22-9080-724BC75A004E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(7f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E54C78E-93FE-4E22-A37A-25D07AF7C7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(7k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED709475-D435-492E-A295-3F3202CB6CC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(8d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20DBADBC-106E-4D0D-B6F1-F5859AD84DE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B226BA8E-FC1E-44FF-9A91-837F355E53B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA59F5B-43FE-4051-9D27-F83A7A39141E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(9h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3883FD9C-0BCB-4865-81B6-854C8C4EC7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:13.2\\(41d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A52F12E-8EAD-40B8-BB6D-54FAD8718AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(1h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4F75D6B-D48A-4B5E-A1DF-EEBFEBFE6073"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1B81AF-FC0F-42B6-98C0-BEC432C7BAC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "87C5BB7A-3B2B-4AE3-A626-04FD1BB1E9C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.0\\(3d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDEB393A-9687-4E52-9837-B2C9E8F22D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1BE98A-95AE-4D11-B427-68D25FE60720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD61CB15-1955-4A81-9F8E-02F207094260"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "455F4A6C-428C-494F-B70C-A891B83EBEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "322088F6-DF10-4C58-92F3-0FFBF469A6B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "20BFA5E5-0ECC-4A1F-A936-1F325A810334"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2m\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ECA1140-9DE0-4BC9-A381-A8DCB5BEA4A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5FCA86-82A3-4540-B827-BD752D9E0465"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8DE7D4-EFEC-487B-8250-251F9EA36BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2u\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83EA47AA-6F3B-4A48-81A0-2CA8D6696B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2w\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "89662D5F-AEEC-4DEB-AB8B-6A95D0A4B1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.1\\(2x\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "40D5076C-6C6F-44F9-91D7-D8F2FEB21310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8BA2854-BE27-45F8-AF6E-CF6C474CF15B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8296DD01-9CE0-4734-97A1-43250AD87453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FC6FCC-9C86-43CB-A008-82E5C3E5B791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AD71858-CA76-4BE3-8B4F-626959F6A342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2f\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "38F4C42B-D975-46B5-8A18-1D6F72A294F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(2g\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58277DB8-BBC7-4639-8967-FCBAB029641E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3j\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E6354B7-3CBA-4E09-93F6-B49717B2A78E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C693C8FA-3324-4439-B177-6FAE387DB23D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3n\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "949C0F31-77ED-49CC-870D-70104AA908A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(3q\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "007BDA28-37AD-4F37-B351-C3BE0B8418F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9563DBDC-D2C0-4C7C-A246-EC95DC4581CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "09CF92FC-B053-4234-830F-683E06807545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4o\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DF8B69-D0B7-455F-A50E-5930948BED49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(4p\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "724603DA-06C9-4E64-B495-A90AD9BF31E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:14.2\\(5k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1255013-E3BC-4048-BD50-4641C0048FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(1k\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBAFC12-85C7-4FD1-B46E-D8268D00DEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(1l\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F988380-7BAE-4E9C-B1E2-D3F7389E2FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "11E2E40A-CCD5-4CA7-826E-10923BED72E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:15.0\\(2h\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "95A5C1D4-EAE5-4E3F-AFCC-96B1ECDA91EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-lldap-dos-WerV9CFj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apic-lldap-dos-WerV9CFj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1361",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.287",
      "lastModified" : "2024-11-21T05:44:10.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite arbitrary files with root privileges on the device. This vulnerability exists because TCP port 9075 is incorrectly configured to listen and respond to external connection requests. An attacker could exploit this vulnerability by sending crafted TCP packets to an IP address that is configured on a local interface on TCP port 9075. A successful exploit could allow the attacker to create, delete, or overwrite arbitrary files, including sensitive files that are related to the device configuration. For example, the attacker could add a user account without the device administrator knowing."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de un servicio de administración de archivos interno para Cisco Nexus 3000 Series Switches y Cisco Nexus 9000 Series Switches en modo NX-OS dedicado que ejecutan el software Cisco NX-OS podría permitir a un atacante remoto no autenticado crear, eliminar o sobrescribir archivos arbitrarios con privilegios de root en el dispositivo.&#xa0;Esta vulnerabilidad se presenta porque el puerto TCP 9075 está configurado incorrectamente para escuchar y responder a peticiones de conexión externa.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes TCP diseñados a una dirección IP configurada en una interfaz local en el puerto TCP 9075. Un ataque exitoso podría permitir al atacante crear, eliminar o sobrescribir archivos arbitrarios, incluidos archivos confidenciales relacionados a la configuración del dispositivo.&#xa0;Por ejemplo, el atacante podría agregar una cuenta de usuario sin que el administrador del dispositivo lo sepa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:9.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2F42DB-B22B-4880-BA73-D0E0295190DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:9.3\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "85A8B2D7-BCF2-4B2E-8208-7D2FDF717C65"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10FFC5E8-CC5A-4D31-A63A-19E72EC442AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41C14CC9-C244-4B86-AEA6-C50BAD5DA9A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14D4B4E-120E-4607-A4F1-447C7BF3052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15702ACB-29F3-412D-8805-E107E0729E35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A532C0-B0E3-484A-B356-88970E7D0248"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43913A0E-50D5-47DD-94D8-DD3391633619"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8E1073F-D374-4311-8F12-AD8C72FAA293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97217080-455C-48E4-8CE1-6D5B9485864F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-3000-9000-fileaction-QtLzDRy2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-3000-9000-fileaction-QtLzDRy2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1367",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.363",
      "lastModified" : "2024-11-21T05:44:11.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Protocol Independent Multicast (PIM) feature of Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted PIM packet to an affected device. A successful exploit could allow the attacker to cause a traffic loop, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad Protocol Independent Multicast (PIM) del software Cisco NX-OS, podría permitir a un atacante adyacente no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación de entrada insuficiente.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete PIM diseñado a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar un bucle de tráfico, lo que resultaría en una condición DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:9.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2F42DB-B22B-4880-BA73-D0E0295190DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33600D17-FBBD-4314-AAE6-95E78A5F32EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44BE8368-6B37-4C2C-980F-412CA6E87A2C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA5389A-8AD1-476E-983A-54DF573C30F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B1A8F1-45B1-4E64-A254-7191FA93CB6D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2749521-2922-4F15-9467-AFD8D9F15C91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FFD26-8255-4351-8594-29D2AEFC06EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61E10975-B47E-4F4D-8096-AEC7B7733612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "902F5C0B-F379-464C-8DED-C166004FE97B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C67B7A6-9BB2-41FC-8FA3-8D0DF67CBC68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75507216-258C-4501-AD98-CC9BB2EA5E14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1127D2-12C0-454F-91EF-5EE334070D06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768BE390-5ED5-48A7-9E80-C4DE8BA979B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02DC82-0D26-436F-BA64-73C958932B0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-pim-dos-Y8SjMz4",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-pim-dos-Y8SjMz4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1368",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.473",
      "lastModified" : "2024-11-21T05:44:11.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with administrative privileges or cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending crafted Cisco UDLD protocol packets to a directly connected, affected device. A successful exploit could allow the attacker to execute arbitrary code with administrative privileges or cause the Cisco UDLD process to crash and restart multiple times, causing the affected device to reload and resulting in a DoS condition. Note: The UDLD feature is disabled by default, and the conditions to exploit this vulnerability are strict. The attacker needs full control of a directly connected device. That device must be connected over a port channel that has UDLD enabled. To trigger arbitrary code execution, both the UDLD-enabled port channel and specific system conditions must exist. In the absence of either the UDLD-enabled port channel or the system conditions, attempts to exploit this vulnerability will result in a DoS condition. It is possible, but highly unlikely, that an attacker could control the necessary conditions for exploitation. The CVSS score reflects this possibility. However, given the complexity of exploitation, Cisco has assigned a Medium Security Impact Rating (SIR) to this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad Unidirectional Link Detection (UDLD) del Software Cisco FXOS y el Software Cisco NX-OS, podría permitir a un atacante adyacente no autenticado ejecutar código arbitrario con privilegios administrativos o causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación de entrada insuficiente.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes de protocolo Cisco UDLD diseñados a un dispositivo afectado directamente conectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario con privilegios administrativos o hacer que el proceso de UDLD de Cisco se bloquee y se reinicie varias veces, causando que el dispositivo afectado se recargue y resulte en una condición de DoS.&#xa0;Nota: La función UDLD está deshabilitada por defecto y las condiciones para explotar esta vulnerabilidad son estrictas.&#xa0;El atacante necesita el control total de un dispositivo conectado directamente.&#xa0;Ese dispositivo debe estar conectado a través de un canal de puerto que tenga UDLD habilitado.&#xa0;Para activar la ejecución de código arbitraria, deben existir tanto el canal de puerto habilitado para UDLD como las condiciones específicas del sistema.&#xa0;En ausencia del canal de puerto habilitado para UDLD o de las condiciones del sistema, los intentos de explotar esta vulnerabilidad resultarán en una condición de DoS.&#xa0;Es posible, pero muy poco probable, que un atacante pueda controlar las condiciones necesarias para la explotación.&#xa0;La puntuación CVSS refleja esta posibilidad.&#xa0;Sin embargo, dada la complejidad de la explotación, Cisco ha asignado una calificación de impacto de seguridad media (SIR) a esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(3.108\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1300F966-42F4-4F29-86C6-A11038B17D8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(3.117\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A2FFB0-D207-4682-AF8E-EE65812FE889"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9148s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D25FA4A8-408B-4E94-B7D9-7DC54B61322F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9250i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67CD5738-029B-43AA-9342-63719DC16138"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9706:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5182CB50-4D32-4835-B1A8-817D989F919F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:mds_9710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B3B617-7554-4C36-9B41-19AA3BD2F6E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEB5BAE-0BB6-4201-9229-47DE631AAF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C1BC928-7DB9-499A-8CF4-90C98218E9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:9.3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A2F42DB-B22B-4880-BA73-D0E0295190DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pv-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34855-D8D2-4114-80D2-A4D159C62458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4226DA0-9371-401C-8247-E6E636A116C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3293438-3D18-45A2-B093-2C3F65783336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED628B5-97A8-4B26-AA40-BEC854982157"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9DD73-E31D-4921-A6D6-E14E04703588"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652A2849-668D-4156-88FB-C19844A59F33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F80A72-AD54-4699-B8AE-82715F0B58E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB4002-7636-4382-B33E-FBA060A13C34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57572E4A-78D5-4D1A-938B-F05F01759612"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9221c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB9FDE8-8533-4F65-BF32-4066D042B2F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1127D2-12C0-454F-91EF-5EE334070D06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(8\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8D1718-F6B6-4AF6-86EE-0DFF5C6F5AEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(9\\)n1\\(0.823\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C25D897-0A4D-4FE8-864A-668CDC229CE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0\\(4i\\)",
            "matchCriteriaId" : "9EF9A844-F4E9-4EBD-A704-CE55BCC7A636"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(2c\\)",
            "matchCriteriaId" : "3721CBFD-3C90-4454-ACB0-57658D848DAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6248up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49112D3F-DFAD-4E71-992B-9E0640FA388C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6296up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A1D8F2-A4A6-4BAC-8326-9F9DE9572FA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6324:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B82093C6-B36D-4E4E-AD7F-8C107646B8D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6332:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E406DDCE-6753-43E9-B6F0-7A038DE84E41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6332-16up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054D8EB2-97A3-4725-9DFF-27A4D231D90A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04D48B-8B2F-45E1-A445-A87E92E790B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:firepower_extensible_operating_system:r231:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC52EFF8-C5A8-4530-B3F5-03BCC023D6AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CBC7F5-7767-43B6-9384-BE143FCDBD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957D64EB-D60E-4775-B9A8-B21CA48ED3B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A694AD51-9008-4AE6-8240-98B17AB527EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AE6DC0-2B03-4D36-9856-42530312CC46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DCEF22-ED20-4330-8502-EC2DD4C9838F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB2822B-B752-4CD9-A178-934957E306B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F4868A-6D62-479C-9C19-F9AABDBB6B24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65378F3A-777C-4AE2-87FB-1E7402F9EA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DAFDDA-718B-4B69-A524-B0CEB80FE960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-udld-rce-xetH6w35",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-udld-rce-xetH6w35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1387",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.567",
      "lastModified" : "2024-11-21T05:44:14.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the network stack of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability exists because the software improperly releases resources when it processes certain IPv6 packets that are destined to an affected device. An attacker could exploit this vulnerability by sending multiple crafted IPv6 packets to an affected device. A successful exploit could cause the network stack to run out of available buffers, impairing operations of control plane and management plane protocols and resulting in a DoS condition. Manual intervention would be required to restore normal operations on the affected device. For more information about the impact of this vulnerability, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la pila de red del software Cisco NX-OS podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad se presenta porque el software libera recursos inapropiadamente cuando procesa determinados paquetes IPv6 que están destinados a un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de varios paquetes IPv6 diseñados a un dispositivo afectado.&#xa0;Una explotación con éxito podría hacer que la pila de la red se quede sin búferes disponibles, lo que afectaría las operaciones del plano de control y los protocolos del plano de gestión y provocaría una condición DoS.&#xa0;Se necesitaría una intervención manual para restaurar las operaciones normales en el dispositivo afectado.&#xa0;Para obtener más información sobre el impacto de esta vulnerabilidad, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.0\\(4k\\)",
            "matchCriteriaId" : "8CC34964-74FD-4C42-9C0C-4B7DD0C7D439"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_computing_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "versionEndExcluding" : "4.1\\(1e\\)",
            "matchCriteriaId" : "CDA70855-5DC0-4240-895B-D3A77F964C63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_64108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC04D48B-8B2F-45E1-A445-A87E92E790B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_6454:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FD096B7-6F8E-4E48-9EC4-9A10AA7D9AA0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD613D8F-099C-43A1-BD29-A98250E1334A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "576B74DF-9527-4931-B1A3-8FEE1DB1AD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5B4FA9-E550-4C69-A4E7-A989BBCCF22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "63949081-E2F3-4EB4-BABC-270AAB19EE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58292522-F486-410D-AD99-DFD6EC0AA9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(4\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A462729A-720F-4180-96DD-713A70CEF494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB59A4B-3FCA-47F9-A4DB-D2B8ABAFB54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(5\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07ACF87-C694-41DB-B4BD-23CE72E32EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83C312B-0B0E-4A02-A9EE-F864EFBE60CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "832DE1DB-0D1C-4C24-8E2D-D182205C94B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36EDD5-4408-4BD0-A75A-AFFD5BF44D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(4s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FBFB9B-703D-42F8-93BA-969AB7284106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47E0A4D-4033-43A8-9A50-E1A2BD7B419C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C95519E-7536-4EF7-8222-D4089500F826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F56568-57E6-4C1C-AC8A-D96E097E449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(8\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631EAC6-1D33-485E-9E00-8572FA015C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(8\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAE9E-DD9B-41E2-BC39-3332F428B489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE199525-4C2D-48C2-A76C-BD14BF2851F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3644F66-F964-4D50-A6E0-EE8784490BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AD166D-7CBF-4A4D-A376-907DDA1BB504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A20D72B-E2C6-47B6-A54D-FA435F29D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C801D4A-E604-49CA-8D14-13622E85C563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D9EEFA-D652-45D2-8AF5-8A72825E7ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC78BEB7-47D1-4544-BC40-AB5D73B93D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEB91EC-E548-4C53-920F-C4871BC464B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0282F963-2C1F-44F7-A0D0-4929685051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F519D0-64BC-4862-8894-4F6C248253C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A247A8-E918-4757-9ADE-251B027CD307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "195CD630-4949-4B52-B9FF-94F3DEFB47AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "225E5070-B635-4752-B771-0E721C96C2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9103A92E-C9F3-401B-AE30-66466210ADED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5CD729-234E-43C0-A6A3-A3E0983A6605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A30E576-56F8-4EBA-AADE-C70655DE6E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74415A0A-A3F4-43BB-B609-B6641771D655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5ED7424-EB12-4C21-97C8-082156716C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(5\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16359104-2DB6-41D6-97A8-8CA1C3AB5688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E485E99D-F421-487D-86E7-A2D119623D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AA886F-7BD1-4699-B1D3-E495EFCA2812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "569B3CE7-CA06-4636-8043-7ED7635195A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A683FE-68AF-43E4-B846-2E82ACDD5E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8B149C-D842-496A-BE21-41920F95139C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D72F0B8-D229-4995-A053-62FA6591DCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8025943-EA09-47E6-9109-7DAF078F8F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A727000-44CC-461C-A7D6-0B9A99CB974A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "105B6601-D756-4B76-9554-5B6E027A5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE35B51-2D13-4A8B-BFF5-0596DBDCD261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FE85C9-A0AC-4FD4-A6EE-F0868B69503B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1340D1-8EE8-484F-979A-AB9E34D35EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1257BF-D534-4899-937F-DCBD033A7D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CF27-5661-41DF-B339-740718760AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE0D110-D8D7-4D50-A599-618A5120EDD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD2D0D-7A38-4FCD-9E24-5588BACF8DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "586E9024-C983-4CFF-9A3F-A39256E09910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B7951C-8376-49C3-BF50-E6B65909A739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5519EA9-1236-4F51-9974-E3FC1B26B5D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0A3B06-8B25-4CD3-AFA9-5F928B1042F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1766443C-1C5A-486E-A36F-D3045F364D78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4D4403-F93B-4CC8-B75F-7A5B03FEDD85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_56128p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABB6E612-4246-4408-B3F6-B31E771F5ACB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5624q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B129B2-2B31-4DE0-9F83-CC6E0C8729A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5648q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CBD3CD0-B542-4B23-9C9D-061643BE44E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22A2647-A4C0-4681-BBC5-D95ADBAA0457"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5672up-16g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "367C2A49-4C4D-471B-9B34-AFAFA5AE9503"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_5696q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2BB1A3A-668C-4B0D-8AC2-6B4758B3420B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF658ED7-F77C-405B-B06A-74B46FBDAD98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F0FDDF2-912C-4900-B0B7-20AF5D2F1B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7295EC54-FA19-4658-8510-3C072804D9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31E39D5-147B-4965-ACB6-34F1244143F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D672928-6AE8-488B-A2A5-257074BAB2D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C928C35-4E24-4DBE-ADEA-D449B88ECB6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64D8992-CA79-4ADF-BF3B-A76E944EC740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "11A35378-54EB-422F-B0DD-211B214803D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a4\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E46D326-665C-4DB7-89A0-0F1B987D4A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B9FE4E-0C82-4511-9A4A-DCBFEB93DE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8F0200-7BCA-49E9-98E0-D825630D77FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "61FCA143-FDAB-472D-B9E1-F7CB4041BBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "61F736DD-44FE-4A20-AF89-4B29725608A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8844860D-427F-4B01-980A-59B082F26034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCA96B43-0793-4784-A971-DD442EBFF6BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B13305C9-008F-488A-ADC7-0724AFB313DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DFAF49-0688-4A5A-9023-E2543164D89C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46376F5C-2CF0-46F1-ADCF-870065A24D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB6C0E3-9B92-4768-93BB-8B8626EB164A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4EA572E-5F4F-45F1-B7A1-346F723C2BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EA3CBB-EAF7-4837-96AF-0258220C4A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6FB730-84CD-496D-9140-BC9375548D14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a6\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD712B88-298A-4488-A053-67CB45190F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED5F397-D3E6-4A4A-BF38-6B295A6AB9BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D98EBD-9D82-492E-A3A6-62D95404D5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "56D91C38-76AB-47F5-BDDE-E940D87C34F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a7\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF78015A-5C28-4FD2-915E-EC343201A9D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "31308B18-062C-4DB8-9241-F15661C06398"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED17D340-9C18-4B1E-BA15-CAE2ADAAD38E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "310856A9-CA62-4C1A-A4C9-B6EECC36F496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D295366-662E-4C8E-9758-3DB801E0ABA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09360A9-3FB1-465F-977E-643942D01FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A97A6BE-A27A-4D53-AB63-2A2631F20EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F034BF4-31E6-46FB-B082-EA22FFE51AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "063BB311-EC8D-43E5-9B9D-56C96121EB9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(7a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "003AAC03-306E-4D12-B4C7-7ECA4ED88884"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(7b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0DAA33-3841-4C14-A137-93E1810CC866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACD5B480-2780-48EB-B361-4EF4833D97E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0500999-E48F-4FE1-9B92-C1E179651CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "629488D4-D8A4-4152-A4D3-E951F199C6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(10a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8F0A63-8229-46E8-94A6-CDBB1E8F91E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD3C773-0B71-4FF2-9DCD-2875CFDE3308"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(11a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B07F6A0D-82C3-4C2C-9715-3D07083E6F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)a8\\(11b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "03901678-2CCB-4ED5-AF04-D8469BF12804"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "618861BD-8FEE-4EF8-BFFB-A5BCBA8EA3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6459DD6B-6DC1-4C14-A8E7-4503ED5F69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA600413-FC70-4776-99DF-180C96D4FD24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC9066F-3082-48A0-BA52-9ED9420EA47A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "78611E25-E33E-4C88-A681-97B5A2A01B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u2\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "780B04ED-412E-441F-8717-D8F9257F5699"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6A3647-2AF0-4D45-BCC9-24618B43ACBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD2AABBD-8680-4615-A4E2-B607CB1B0979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "693F444B-FA34-489C-BB45-E9185DE47816"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "13669043-3F12-4439-812F-6DE35F70B159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A8BDE0-2F73-4E0C-B73A-918DB3352067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC4DC15-3045-4CE3-A7B5-4E6ED35BF51F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "625BE6B1-12A7-4A8A-A816-E82C026E0457"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EAC2920-462B-44F0-8E93-7875C2F74592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u3\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "35957A41-D8F2-4BC1-986B-C3E271327D64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "10BFAE68-01C5-4EF8-8B86-F470092E9034"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D02FC11-EB21-45CD-A070-89C4862240BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C67AE59-380A-402B-9B2A-F595E001637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4301927C-7A6D-4DA9-9470-9182E7FB234A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C71ED401-6786-4AAE-A98F-BE4732256A7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B5EC76-A4A7-41C0-9F37-5EC85FD1EB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BC7FC9-1167-41C5-9B0E-7D68400F3C39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u5\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6EB46CC-2939-4326-8CB9-504D7C7EF05E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8845147E-D3B1-41B9-BBD2-77B2823F3AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F7B2F23-F532-40D2-884E-D86785B33296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FC4F349-9E1C-4DD8-BC07-6CB67053BCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D498C133-AA11-49C4-B065-F27CE776D318"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "08032AAC-F094-4717-A56F-89289FBD1F3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5ADD4D3-206C-4609-AB2A-F6945D56627B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "07645F73-AC79-4BB8-A98E-1740F7D6EC5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(4a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC56869-4665-49D1-89F2-8ED97727BD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "147D1A4A-6404-47E3-B1A6-4C001C8DD9E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1162691A-6C92-448A-8F1B-2DEFB623F1ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(5b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "57524BA3-CF08-4F0F-95C9-F1417B4B83E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(5c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0E214C2-24CF-43EC-BC27-2E6AA77254DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0D74A0-C4B2-46EC-A9FF-562A997E3150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "817A45B4-7C79-4D1A-B889-18A937CF8361"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "155F3CB7-A85B-4897-A4E2-F485FDF44AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D34CAB5-0832-45B1-B13F-49B763AFB74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(10\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C0DB182-F37A-4230-BD6F-461C3195FAF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:6.0\\(2\\)u6\\(10a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "065A0E6C-E0BD-4BD1-97EB-723EC4BDFA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DD2941-AD1E-4C13-8DAA-C5524B96AAB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A37F82-44B3-426C-A344-9054599BB426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "907A3DEC-27F8-4D0A-9EE4-4681B6D9BADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53378B5F-4A5B-425D-B8BE-455FAF924551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6C744-6501-4FAD-AF4F-12D3EA8F5BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "076216C6-C115-4C7C-A9E3-46A3986DA2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819AE96-3933-4AD2-AF30-36E199393E01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8C0FF6-E9E5-4191-8C21-E8CB3F6BF7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BA7EF9-FDA1-4A2D-88B2-67042367C90C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FBF6CB-DE31-453D-BF47-89D0766D3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "046E260B-F842-41BA-914B-ACD7B71AB62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF537FC-B681-4F52-9324-9A4AC29651AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B2E736-F9D2-453A-9998-38800CC875F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8CEAC9-1C53-46A6-A18A-2A970D587C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "851E1B4E-40C4-4639-8FC6-C9DEC6FB2744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C24518B-D2D5-471A-BB19-B839792607D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D93FA53-ADC0-4031-B693-84111E1EEDC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2v\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3E4490-6DD8-44BE-A681-105F526AE6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2w\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02F54C2-C551-4FC4-A6FF-737CFD465D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2x\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C98C47-688B-404B-A6CD-96AD5C0FD7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2y\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D20DDF8-145B-443D-8D92-404F574929F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5FED85-FDCD-44BE-9C38-53F6EF6212EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4C8DC0-0DBF-410E-ABC7-53CD5AD04EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA776A7-40B3-4104-8F55-1B905D36653A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC49A1-91FC-4D55-BD74-42C918CCFDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4142F873-0492-4ACC-88F9-3A243128D0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(1t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEFC7FE-718E-4544-A86B-3243C2C14EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CD31FC-C2D0-4B29-90D5-7C3CB218DF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A500F4-1899-4F96-98E3-9330146A7963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE52C974-3930-4AC9-907B-8E6B325D6A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD07DE9-5C98-4A63-A741-8E69E9F125D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DA113F-3706-4FF3-88F9-5D3CD48F8CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(6t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1D8118-6E39-44B5-ABD7-B7ED3A80766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBE1B1-062A-4D00-B646-FAB4BA85BF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A35B6DA-BF07-4579-8D6A-65CD8E052482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0B3DB8-8121-4FDC-8A11-42AB619101EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70830AB5-C86B-4726-A982-6F104910153E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8z\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EB3AE2-8A92-4B16-8A22-A0F5B55D12E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0904B27-2FA3-4B8D-9706-98B0376B5FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D86994-83EE-4D09-B79A-70CB22C077C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEB5BAE-0BB6-4201-9229-47DE631AAF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "654694A7-394C-4843-9197-91FC00445E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1798EAC2-026C-4757-860F-D7417A2BA881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD83DA54-DF65-4837-90AD-837F75412E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "00953B63-7DBB-4A67-B41D-321C2ECDE79A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B2E7F6-9641-4B55-8B7D-6B0E020DD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9388C2C-75F4-487F-A7D8-4E17FD39A166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B54786-DA2A-4E2D-9835-6A7939931928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7688EC58-4647-4A08-9E86-A71EA7C41B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(3z\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7DA901-990A-4388-9B72-943E77269B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AD2254-158D-4BEE-B36C-242813F4BA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4480D800-595F-44CB-85ED-7E17A34A5BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7AB4C3-54E0-4445-974C-4AE337B7B7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD015889-3893-4781-B18D-6125A9B6CE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(6z\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E355839-76C1-4D48-9892-53EEADD2B629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "89541F84-0C10-4757-8D25-80FC4464EC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "371AEAF3-39CA-4837-BA5A-D80826933C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)ic4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "259F3DCA-D218-4CF1-9CB4-23ECB070719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)im7\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EB01A2-9A00-4EFF-80F0-D192C79B1489"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "528ED62B-D739-4E06-AC64-B506FD73BBAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3016q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D402AB0-BCFB-4F42-8C50-5DC930AEEC8B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-32t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09AC2BAD-F536-48D0-A2F0-D4E290519EB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65CB7F6D-A82B-4A31-BFAC-FF4A4B8DF9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC4FFCC-E886-49BC-9737-5B5BA2AAB14B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4E8EE4-031D-47D3-A12E-EE5F792172EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00CDD8C3-67D5-4E9F-9D48-A77B55DB0AB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FF2EC4-0C09-4C00-9956-A2A4A894F63D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14D4B4E-120E-4607-A4F1-447C7BF3052E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3100v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15702ACB-29F3-412D-8805-E107E0729E35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E930332-CDDD-48D5-93BC-C22D693BBFA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108pv-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29B34855-D8D2-4114-80D2-A4D159C62458"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4226DA0-9371-401C-8247-E6E636A116C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DBBFE9-835C-4411-8492-6006E74BAC65"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3293438-3D18-45A2-B093-2C3F65783336"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97C29EE-9426-4BBE-8D84-AB5FF748703D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7817F4E6-B2DA-4F06-95A4-AF329F594C02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED628B5-97A8-4B26-AA40-BEC854982157"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB9DD73-E31D-4921-A6D6-E14E04703588"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4532F513-0543-4960-9877-01F23CA7BA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq-32t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B43502B-FD53-465A-B60F-6A359C6ACD99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3172tq-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3229124-B097-4AAC-8ACD-2F9C89DCC3AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652A2849-668D-4156-88FB-C19844A59F33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_34200yc-sm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA52D5C1-13D8-4D23-B022-954CCEF491F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF5AF71-15DF-4151-A1CF-E138A7103FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F80A72-AD54-4699-B8AE-82715F0B58E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "088C0323-683A-44F5-8D42-FF6EC85D080E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74CB4002-7636-4382-B33E-FBA060A13C34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57572E4A-78D5-4D1A-938B-F05F01759612"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD613D8F-099C-43A1-BD29-A98250E1334A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "576B74DF-9527-4931-B1A3-8FEE1DB1AD99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5B4FA9-E550-4C69-A4E7-A989BBCCF22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "63949081-E2F3-4EB4-BABC-270AAB19EE78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "58292522-F486-410D-AD99-DFD6EC0AA9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(4\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A462729A-720F-4180-96DD-713A70CEF494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEB59A4B-3FCA-47F9-A4DB-D2B8ABAFB54D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(5\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A07ACF87-C694-41DB-B4BD-23CE72E32EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83C312B-0B0E-4A02-A9EE-F864EFBE60CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "832DE1DB-0D1C-4C24-8E2D-D182205C94B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(3s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD36EDD5-4408-4BD0-A75A-AFFD5BF44D38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(6\\)n1\\(4s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FBFB9B-703D-42F8-93BA-969AB7284106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47E0A4D-4033-43A8-9A50-E1A2BD7B419C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C95519E-7536-4EF7-8222-D4089500F826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(7\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "71F56568-57E6-4C1C-AC8A-D96E097E449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(8\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F631EAC6-1D33-485E-9E00-8572FA015C26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(8\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "25CEAE9E-DD9B-41E2-BC39-3332F428B489"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE199525-4C2D-48C2-A76C-BD14BF2851F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3644F66-F964-4D50-A6E0-EE8784490BD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(0\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AD166D-7CBF-4A4D-A376-907DDA1BB504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A20D72B-E2C6-47B6-A54D-FA435F29D7F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(1\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C801D4A-E604-49CA-8D14-13622E85C563"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D9EEFA-D652-45D2-8AF5-8A72825E7ED0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(2\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC78BEB7-47D1-4544-BC40-AB5D73B93D78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEB91EC-E548-4C53-920F-C4871BC464B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0282F963-2C1F-44F7-A0D0-4929685051AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F519D0-64BC-4862-8894-4F6C248253C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94A247A8-E918-4757-9ADE-251B027CD307"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "195CD630-4949-4B52-B9FF-94F3DEFB47AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(3\\)n1\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "225E5070-B635-4752-B771-0E721C96C2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9103A92E-C9F3-401B-AE30-66466210ADED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5CD729-234E-43C0-A6A3-A3E0983A6605"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A30E576-56F8-4EBA-AADE-C70655DE6E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(4\\)n1\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "74415A0A-A3F4-43BB-B609-B6641771D655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5ED7424-EB12-4C21-97C8-082156716C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.1\\(5\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "16359104-2DB6-41D6-97A8-8CA1C3AB5688"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E485E99D-F421-487D-86E7-A2D119623D47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "94AA886F-7BD1-4699-B1D3-E495EFCA2812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "569B3CE7-CA06-4636-8043-7ED7635195A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A683FE-68AF-43E4-B846-2E82ACDD5E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C8B149C-D842-496A-BE21-41920F95139C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D72F0B8-D229-4995-A053-62FA6591DCBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8025943-EA09-47E6-9109-7DAF078F8F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A727000-44CC-461C-A7D6-0B9A99CB974A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)n1\\(1c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "105B6601-D756-4B76-9554-5B6E027A5E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(3\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE35B51-2D13-4A8B-BFF5-0596DBDCD261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FE85C9-A0AC-4FD4-A6EE-F0868B69503B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B1340D1-8EE8-484F-979A-AB9E34D35EB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(5\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF1257BF-D534-4899-937F-DCBD033A7D94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E5CF27-5661-41DF-B339-740718760AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AE0D110-D8D7-4D50-A599-618A5120EDD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)n1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ACD2D0D-7A38-4FCD-9E24-5588BACF8DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)n1\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "586E9024-C983-4CFF-9A3F-A39256E09910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(7\\)n1\\(1b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B7951C-8376-49C3-BF50-E6B65909A739"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9662D6B-AF0F-45C8-B7CD-AE7C76593FDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAD169-9036-496E-B740-45D79546F6D6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6001t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E01F0DE-EA8A-451F-BADF-1A7A48B0C633"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F557E38-09F6-42C6-BABA-3C3168B38BBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_6004x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F182AD1-6E51-456A-A8F7-8F3B92DBE4D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(0\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF973CD-3315-4D86-8F89-05DC97C736AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(1\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18A0045-87F3-4782-81C5-0BF615EA9346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(2\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2768DEF1-3DFA-4683-9D8D-C5915D8E7365"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(2\\)d1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD05045-E867-4B7E-ACE4-7B6EA69971AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(2\\)d1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9B10D1-29C0-4B16-813A-B535C4C64E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.2\\(2\\)d1\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "84551391-3A13-42EC-855F-FBB3453F65D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD733DD-EC40-48EC-A8A6-AE09657EEFC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(0\\)dx\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "18CE33FF-6C81-4B38-8C47-6DEBD4D4223C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(1\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7B0A8C-ED8F-411C-843F-B801CBBBB6C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FADC755B-3AB3-43D6-8495-1FABCBD548E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)d1\\(1d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "42D84BD8-D76B-422E-9E46-4A667A981FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)d1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "03607526-7F9E-43F5-94ED-3ED0B4D29DF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)d1\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8890C4B8-2E5C-46D6-80DE-6B5256FA1CAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(2\\)d1\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F8A3FFE-D017-43F7-B481-AF25B8B2BE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(3\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FC292D-27D3-40CF-98C5-AF47686FC134"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(4\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C23B353-3500-4FA4-90CE-624A29B1048F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(5\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "29002523-6405-4198-A5E5-630A4B661767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.3\\(6\\)d1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0DFA7E-9B40-4E82-9EB9-886C79B2D61C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.0\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C83E090-7C99-465A-A477-C2949B137720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB556839-151C-492E-B4C3-C024276D5AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "298709C4-69BF-48BA-A317-4251B5461A0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.1\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF15089-A16E-47CC-AB52-78AB85F681BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB0B238-4F3A-4569-89B0-ED80533D87C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF90B861-F48B-45DF-ACB8-F91030106181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB301FC-988F-4FC3-A097-E926E541F098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CFA19E0-0121-4422-83AF-94039520A0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "03201B37-841C-432F-8643-352833381373"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B8E31F-6B33-43E0-9585-5736D54FE876"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C828C0E-99E6-4DEF-9EB3-672DEB61F479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2636B1F1-8C40-44A4-B96B-C84EC244685E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:8.4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "411B58EB-2BCD-47CA-AB5A-538BCEAEF75F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12180BEB-7F21-4FA7-ABD2-E9A8EA7340F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36145717-6348-466D-87B4-B1A19F17BA55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7009:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4831C5F4-AF09-4951-B7AC-9DAF1C7045B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6BBDCF9-562C-44BA-B709-F91346F6F99F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "276BD181-125C-48EC-984C-29BAE20C21F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD7A4B4B-3BB1-4A4D-911E-C4EEF01BBC45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7702:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7596B885-5312-489B-BBDB-A5374E525DE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7706:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42EC10DA-FE01-4BA3-B49F-B164F697D4BA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE1655CC-9BD5-4BD5-B113-776E4335D556"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_7718:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA6F9ED-50A1-4D61-BC83-438585646856"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f1\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "21F43A5A-52A2-4094-8D36-39450B8F0E0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "674D15C8-3946-4C2F-9B62-BC6E5BC67673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "990FA11F-5158-4717-B716-C5D6D2D23D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5DD2941-AD1E-4C13-8DAA-C5524B96AAB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "907A3DEC-27F8-4D0A-9EE4-4681B6D9BADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "53378B5F-4A5B-425D-B8BE-455FAF924551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(3c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F6C744-6501-4FAD-AF4F-12D3EA8F5BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "076216C6-C115-4C7C-A9E3-46A3986DA2AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)f3\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A819AE96-3933-4AD2-AF30-36E199393E01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8C0FF6-E9E5-4191-8C21-E8CB3F6BF7D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(1a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BA7EF9-FDA1-4A2D-88B2-67042367C90C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2FBF6CB-DE31-453D-BF47-89D0766D3020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "046E260B-F842-41BA-914B-ACD7B71AB62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF537FC-B681-4F52-9324-9A4AC29651AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2c\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6B2E736-F9D2-453A-9998-38800CC875F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2d\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E8CEAC9-1C53-46A6-A18A-2A970D587C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2e\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "851E1B4E-40C4-4639-8FC6-C9DEC6FB2744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2r\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C24518B-D2D5-471A-BB19-B839792607D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2s\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D93FA53-ADC0-4031-B693-84111E1EEDC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2v\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B3E4490-6DD8-44BE-A681-105F526AE6E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2w\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E02F54C2-C551-4FC4-A6FF-737CFD465D37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2x\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "77C98C47-688B-404B-A6CD-96AD5C0FD7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(2y\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D20DDF8-145B-443D-8D92-404F574929F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E5FED85-FDCD-44BE-9C38-53F6EF6212EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4C8DC0-0DBF-410E-ABC7-53CD5AD04EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i2\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AA776A7-40B3-4104-8F55-1B905D36653A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBAC49A1-91FC-4D55-BD74-42C918CCFDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4142F873-0492-4ACC-88F9-3A243128D0EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(1t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAEFC7FE-718E-4544-A86B-3243C2C14EDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CD31FC-C2D0-4B29-90D5-7C3CB218DF9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "30A500F4-1899-4F96-98E3-9330146A7963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE52C974-3930-4AC9-907B-8E6B325D6A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD07DE9-5C98-4A63-A741-8E69E9F125D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DA113F-3706-4FF3-88F9-5D3CD48F8CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(6t\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D1D8118-6E39-44B5-ABD7-B7ED3A80766D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3BBE1B1-062A-4D00-B646-FAB4BA85BF6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A35B6DA-BF07-4579-8D6A-65CD8E052482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF0B3DB8-8121-4FDC-8A11-42AB619101EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "70830AB5-C86B-4726-A982-6F104910153E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(8z\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EB3AE2-8A92-4B16-8A22-A0F5B55D12E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i4\\(9\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0904B27-2FA3-4B8D-9706-98B0376B5FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D86994-83EE-4D09-B79A-70CB22C077C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEB5BAE-0BB6-4201-9229-47DE631AAF3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "654694A7-394C-4843-9197-91FC00445E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(3a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "1798EAC2-026C-4757-860F-D7417A2BA881"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i5\\(3b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD83DA54-DF65-4837-90AD-837F75412E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i6\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "00953B63-7DBB-4A67-B41D-321C2ECDE79A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i6\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B2E7F6-9641-4B55-8B7D-6B0E020DD4A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9388C2C-75F4-487F-A7D8-4E17FD39A166"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B54786-DA2A-4E2D-9835-6A7939931928"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7688EC58-4647-4A08-9E86-A71EA7C41B88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(3z\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7DA901-990A-4388-9B72-943E77269B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5AD2254-158D-4BEE-B36C-242813F4BA37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "4480D800-595F-44CB-85ED-7E17A34A5BEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(5a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7AB4C3-54E0-4445-974C-4AE337B7B7DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(6\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD015889-3893-4781-B18D-6125A9B6CE39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(7\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "89541F84-0C10-4757-8D25-80FC4464EC23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)i7\\(8\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "371AEAF3-39CA-4837-BA5A-D80826933C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)ia7\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C474B035-BFDC-4617-9285-D10C970342A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)ia7\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9DD45-8C38-4753-9168-0E5BF96146DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)ic4\\(4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "259F3DCA-D218-4CF1-9CB4-23ECB070719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)im3\\(1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55F18EF-F751-400F-88DD-76ADD2B60BE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)im3\\(2\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1D0444-6A5E-4252-B761-28FEFAEE8BAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)im3\\(2a\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "578691EB-19D3-4B75-9783-B6D4F0FE1CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)im3\\(2b\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C89EAEB-1944-4082-B1AF-CEAC39BE762A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:nx-os:7.0\\(3\\)im3\\(3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8BA29C-7F6E-492A-8EB1-A2D6391C5120"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4283E433-7F8C-4410-B565-471415445811"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92160yc_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9147C9-5D8B-40F5-9AAA-66A3495A0AD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9221c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB9FDE8-8533-4F65-BF32-4066D042B2F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11411BFD-3F4D-4309-AB35-A3629A360FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40E40F42-632A-47DF-BE33-DC25B826310B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C47F6BF9-2ADB-41A4-8D7D-8BB00141BB23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93108tc-fx3p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEF7F26-BB47-44BD-872E-130820557C23"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F309E7B9-B828-4CD2-9D2B-8966EE5B9CC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9316d-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102F91CD-DFB6-43D4-AE5B-DA157A696230"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E952A96A-0F48-4357-B7DD-1127D8827650"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180tc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DB6FC5-762A-4F16-AE8C-69330EFCF640"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F70D81F1-8B12-4474-9060-B4934D8A3873"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-ex-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5394DE31-3863-4CA9-B7B1-E5227183100D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7349D69B-D8FA-4462-AA28-69DD18A652D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx-24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE4BB834-2C00-4384-A78E-AF3BCDDC58AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D30D52-837F-4FDA-B8E5-A9066E9C6D2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93180yc-fx3s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE49B45-F2E9-491D-9C29-1B46E9CE14E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91231DC6-2773-4238-8C14-A346F213B5E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "113772B6-E9D2-4094-9468-3F4E1A87D07D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FC2B1F-232E-4754-8076-CC82F3648730"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336c-fx2-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CDD27C9-5EAF-4956-8AB7-740C84C9D4FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9336pq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F1127D2-12C0-454F-91EF-5EE334070D06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_93600cd-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF467E2-4567-426E-8F48-39669E0F514C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9364c-gx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68EA1FEF-B6B6-49FE-A0A4-5387F76303F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4364ADB9-8162-451D-806A-B98924E6B2CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53BCB42-ED61-4FCF-8068-CB467631C63C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49E0371B-FDE2-473C-AA59-47E1269D050F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA022E77-6557-4A33-9A3A-D028E2DB669A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9500r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04484DA-AA59-4833-916E-6A8C96D34F0D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768BE390-5ED5-48A7-9E80-C4DE8BA979B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E02DC82-0D26-436F-BA64-73C958932B0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipv6-netstack-edXPGV7K",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nxos-ipv6-netstack-edXPGV7K",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1388",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.660",
      "lastModified" : "2024-11-21T05:44:14.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is due to improper token validation on a specific API endpoint. An attacker could exploit this vulnerability by sending a crafted request to the affected API. A successful exploit could allow the attacker to receive a token with administrator-level privileges that could be used to authenticate to the API on affected MSO and managed Cisco Application Policy Infrastructure Controller (APIC) devices."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un endpoint de la API de Cisco ACI Multi-Site Orchestrator (MSO) instalado en Application Services Engine, podría permitir a un atacante remoto no autenticado omitir la autenticación en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación de token incorrecta en un endpoint de la API específico.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición diseñada a la API afectada.&#xa0;Una explotación con éxito podría permitir que el atacante reciba un token con privilegios de nivel de administrador que podría ser usado para autenticarse en la API en un MSO afectado y dispositivos Cisco Application Policy Infrastructure Controller (APIC) administrados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aci_multi-site_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0\\(3m\\)",
            "matchCriteriaId" : "F9FC308E-D642-497A-9A64-A07420420D5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:3.0\\(3i\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C3C663-2309-4217-85A0-46B5667D8498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-authbyp-bb5GmBQv",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-mso-authbyp-bb5GmBQv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1393",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.753",
      "lastModified" : "2024-11-21T05:44:15.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Application Services Engine podrían permitir a un atacante remoto no autenticado conseguir acceso privilegiado a operaciones a nivel de host o aprender información específica del dispositivo, crear archivos de diagnóstico y realizar cambios de configuración limitados.&#xa0;Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_services_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1",
            "versionEndExcluding" : "1.1\\(3e\\)",
            "matchCriteriaId" : "03DEA082-C42C-47E3-8C70-5421507041F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:c:*:*:*:*:*:*",
            "matchCriteriaId" : "151373A7-1DFA-4D05-BA2E-A34B9E695761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:d:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9BD501-B15F-48E5-AC4D-7BBF5122D9CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1396",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.847",
      "lastModified" : "2024-11-21T05:44:15.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Application Services Engine could allow an unauthenticated, remote attacker to gain privileged access to host-level operations or to learn device-specific information, create diagnostic files, and make limited configuration changes. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Application Services Engine podrían permitir a un atacante remoto no autenticado conseguir acceso privilegiado a operaciones a nivel de host o aprender información específica del dispositivo, crear archivos de diagnóstico y realizar cambios de configuración limitados.&#xa0;Para más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_services_engine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1",
            "versionEndExcluding" : "1.1\\(3e\\)",
            "matchCriteriaId" : "03DEA082-C42C-47E3-8C70-5421507041F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:c:*:*:*:*:*:*",
            "matchCriteriaId" : "151373A7-1DFA-4D05-BA2E-A34B9E695761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:application_policy_infrastructure_controller:1.1.3:d:*:*:*:*:*:*",
            "matchCriteriaId" : "5E9BD501-B15F-48E5-AC4D-7BBF5122D9CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-case-mvuln-dYrDPC6w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1450",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-02-24T20:15:13.957",
      "lastModified" : "2024-11-21T05:44:23.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to cause a denial of service (DoS) condition on an affected device. To exploit this vulnerability, the attacker would need to have valid credentials on the device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending one or more crafted IPC messages to the AnyConnect process on an affected device. A successful exploit could allow the attacker to stop the AnyConnect process, causing a DoS condition on the device. Note: The process under attack will automatically restart so no action is needed by the user or admin."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el canal de comunicación entre procesos (IPC) de Cisco AnyConnect Secure Mobility Client podría permitir que un atacante local autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante debería tener credenciales válidas en el dispositivo.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de uno o más mensajes IPC diseñados al proceso AnyConnect en un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante detener el proceso de AnyConnect, causando una condición de DoS en el dispositivo.&#xa0;Nota: El proceso bajo ataque se reiniciará automáticamente, por lo que el usuario o el administrador no deben realizar ninguna acción"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:4.9\\(5086\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E93E4C4-83B5-45E3-AF08-389494096EFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dos-55AYyxYr",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-dos-55AYyxYr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-25T01:15:13.163",
      "lastModified" : "2024-11-21T05:58:24.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter."
      }, {
        "lang" : "es",
        "value" : "Appspace versión 6.2.4, permite un SSRF a través del parámetro url del archivo api/v1/core/proxy/jsonprequest"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appspace:appspace:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD7EBEE-1FA6-4C7D-ACE7-B3D7D62373EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/h3110mb/PoCSSrfApp",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/h3110mb/PoCSSrfApp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-25T01:15:13.243",
      "lastModified" : "2024-11-21T05:58:24.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the comrak crate before 0.9.1 for Rust. XSS can occur because the protection mechanism for data: and javascript: URIs is case-sensitive, allowing (for example) Data: to be used in an attack."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate comrak versiones anteriores a 0.9.1 para Rust.&#xa0;Un XSS puede ocurrir porque el mecanismo de protección de los URI data: y javascript: distingue entre mayúsculas y minúsculas, lo que permite (por ejemplo) que Data: sea usado en un ataque"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:comrak_project:comrak:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.9.1",
            "matchCriteriaId" : "8900A2D9-4AC2-4EC7-A941-2D9EC408905A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0026.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0026.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21064",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-25T14:15:12.143",
      "lastModified" : "2024-11-21T05:47:29.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the upload feature. An attacker could potentially exploit this vulnerability to upload a malicious YAML file that can contain instructions which allows reading arbitrary files from the remote server. Access to the admin console is required for successful exploitation."
      }, {
        "lang" : "es",
        "value" : "Magento UPWARD-php versiones 1.1.4 (y anteriores) está afectado por una vulnerabilidad de salto de ruta en Magento UPWARD Connector versiones  1.1.2 (y anteriores) debido a la funcionalidad de carga.&#xa0;Un atacante podría explotar esta vulnerabilidad para cargar un archivo YAML malicioso que puede contener instrucciones que permitan leer archivos arbitrarios desde el servidor remoto.&#xa0;Es requerido un acceso a la consola de administración para una explotación con éxito"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:upward_connector:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "CAEA972B-F347-475A-A9F6-50EA96057A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magento:upward_php:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.4",
            "matchCriteriaId" : "A39164F3-FA7D-408D-A7CD-225C3BA16D74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/magento/upward-php/security",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magento/upward-php/security/advisories/GHSA-p4pw-hpjx-5685",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magento/upward-php/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/magento/upward-php/security/advisories/GHSA-p4pw-hpjx-5685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21065",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-25T14:15:12.317",
      "lastModified" : "2024-11-21T05:47:30.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 11.0 (y anteriores) está afectada por una vulnerabilidad de escritura fuera de límites al analizar archivos TTF que podría resultar en una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "D750F071-FF16-4700-9A74-25629D1681D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21066",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-02-25T14:15:12.423",
      "lastModified" : "2024-11-21T05:47:30.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge version 11.0 (and earlier) is affected by an out-of-bounds write vulnerability when parsing TTF files that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 11.0 (y anteriores) está afectada por una vulnerabilidad de escritura fuera de límites al analizar archivos TTF que podría resultar en una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "D750F071-FF16-4700-9A74-25629D1681D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-07.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-07.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3273",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-25T14:15:12.517",
      "lastModified" : "2024-11-21T06:21:11.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nagios XI below 5.7 is affected by code injection in the /nagiosxi/admin/graphtemplates.php component. To exploit this vulnerability, someone must have an admin user account in Nagios XI's web system."
      }, {
        "lang" : "es",
        "value" : "Nagios XI versiones por debajo de 5.7, está afectado por una inyección de código en el componente /nagiosxi/admin/graphtemplates.php.&#xa0;Para explotar esta vulnerabilidad, alguien debe tener una cuenta de usuario administrador en el sistema web de Nagios XI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:nagios_xi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.7",
            "matchCriteriaId" : "A4A42520-79F7-49E9-8AC8-CC87B485DF07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/leommxj/93edce6f8572cefe79a3d7da4389374e",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nagios.com/downloads/nagios-xi/change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/leommxj/93edce6f8572cefe79a3d7da4389374e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nagios.com/downloads/nagios-xi/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-25T15:15:12.217",
      "lastModified" : "2024-11-21T06:20:56.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting (XSS) in form field in robust.systems product Custom Global Variables v 1.0.5 allows a remote attacker to inject arbitrary code via the vars[0][name] field."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en el campo de formulario en el producto robust.systems Custom Global Variables versión v 1.0.5, permiten a un atacante remoto inyectar código arbitrario por medio del campo vars[0][name]"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newtarget:custom_global_variables:1.0.5:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "6FC1CA02-1C30-43B1-844B-18F992221FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://db.threatpress.com/vulnerability/custom-global-variables/wordpress-custom-global-variables-plugin-1-0-5-stored-cross-site-scripting-xss-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49406",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://db.threatpress.com/vulnerability/custom-global-variables/wordpress-custom-global-variables-plugin-1-0-5-stored-cross-site-scripting-xss-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27330",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-25T16:15:12.260",
      "lastModified" : "2024-11-21T05:57:48.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser history, directory listings, and file contents."
      }, {
        "lang" : "es",
        "value" : "Triconsole Datepicker Calendar versiones anteriores a 3.77, está afectado por un ataque de tipo cross-site scripting (XSS) en el archivo calendar_form.php.&#xa0;Unos atacantes pueden leer las cookies de autenticación que aún están activas, que pueden ser usadas para llevar a cabo más ataques, como leer el historial del navegador, listados de directorios y contenido de archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:triconsole:datepicker_calendar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.77",
            "matchCriteriaId" : "3CB783C8-EE47-4889-BB33-9CDADB6C5786"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161570/Triconsole-3.75-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.triconsole.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://www.triconsole.com/php/calendar_datepicker.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49597",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161570/Triconsole-3.75-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.triconsole.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://www.triconsole.com/php/calendar_datepicker.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20327",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2021-02-25T17:15:28.160",
      "lastModified" : "2024-11-21T05:46:23.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A specific version of the Node.js mongodb-client-encryption module does not perform correct validation of the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Node.js driver and the KMS service rendering client-side field level encryption (CSFLE) ineffective. This issue was discovered during internal testing and affects mongodb-client-encryption module version 1.2.0, which was available from 2021-Jan-29 and deprecated in the NPM Registry on 2021-Feb-04. This vulnerability does not impact driver traffic payloads with CSFLE-supported key services from applications residing inside the AWS, GCP, and Azure nework fabrics due to compensating controls in these environments. This issue does not impact driver workloads that don’t use Field Level Encryption. This issue affect MongoDB Node.js Driver mongodb-client-encryption module version 1.2.0"
      }, {
        "lang" : "es",
        "value" : "Una versión específica del módulo mongodb-client-encryption de Node.js no lleva a cabo una comprobación correcta del certificado del servidor KMS. Esta vulnerabilidad, en combinación con un ataque MITM activo en una posición de red privilegiada, podría resultar en la interceptación del tráfico entre el controlador de Node.js y el servicio KMS, haciendo ineficaz el cifrado a nivel de campo del lado del cliente (CSFLE). Este problema se detectó durante las pruebas internas y afecta a la versión 1.2.0 del módulo mongodb-client-encryption, que estaba disponible desde el 29 de Enero de 2021 y que fue obsoleto en el Registro NPM el 04 de Febrero de 2021. Esta vulnerabilidad no afecta a las cargas útiles de tráfico de los controladores con servicios clave compatibles con CSFLE de las aplicaciones que residen dentro de los tejidos de trabajo de AWS, GCP y Azure debido a los controles de compensación en estos entornos. Este problema no afecta a las cargas de trabajo de los controladores que no usan Field Level Encryption"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:libmongocrypt:1.2.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8D8F8927-1BA6-41A4-B469-212EF19AD4C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/NODE-3125",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.mongodb.org/browse/NODE-3125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20328",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2021-02-25T17:15:28.303",
      "lastModified" : "2024-11-21T05:46:23.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Specific versions of the Java driver that support client-side field level encryption (CSFLE) fail to perform correct host name verification on the KMS server’s certificate. This vulnerability in combination with a privileged network position active MITM attack could result in interception of traffic between the Java driver and the KMS service rendering Field Level Encryption ineffective. This issue was discovered during internal testing and affects all versions of the Java driver that support CSFLE. The Java async, Scala, and reactive streams drivers are not impacted. This vulnerability does not impact driver traffic payloads with CSFLE-supported key services originating from applications residing inside the AWS, GCP, and Azure network fabrics due to compensating controls in these environments. This issue does not impact driver workloads that don’t use Field Level Encryption."
      }, {
        "lang" : "es",
        "value" : "Las versiones específicas del controlador de Java que soportan el client-side field level encryption (CSFLE) presentan un fallo al realizar una comprobación correcta del nombre del host en el certificado del servidor KMS. Esta vulnerabilidad, en combinación con un ataque MITM activo en una posición de red privilegiada, podría resultar en una interceptación del tráfico entre el controlador de Java y el servicio KMS, haciendo que el cifrado a nivel de campo sea ineficaz. Este problema se detectó durante las pruebas internas y afecta a todas las versiones del controlador de Java que soportan CSFLE. Los controladores Java async, Scala y flujos reactivos no están afectados. Esta vulnerabilidad no afecta a las cargas de tráfico del controlador con servicios clave compatibles con CSFLE que se originan en aplicaciones que residen dentro de los tejidos de red de AWS, GCP y Azure debido a los controles de compensación en estos entornos. Este problema no afecta a las cargas de trabajo de los controladores que no usan Field Level Encryption"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:mongodb:*:*",
            "versionStartIncluding" : "3.11.0",
            "versionEndExcluding" : "3.11.3",
            "matchCriteriaId" : "A7269E59-8D72-4459-92D0-C7B725ED290A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:mongodb:*:*",
            "versionStartIncluding" : "3.12.0",
            "versionEndExcluding" : "3.12.8",
            "matchCriteriaId" : "564EEC7B-9969-45F8-A358-8034DCEDCE5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:mongodb:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.6",
            "matchCriteriaId" : "97F149A2-F169-40CB-974D-91C6AB2D49DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:mongodb:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "B7E4EF7D-C0F9-4B91-B7FE-5295F91AA108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:java_driver:*:*:*:*:*:mongodb:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "482332D0-4581-459D-A187-063F5BDEA2FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.3",
            "matchCriteriaId" : "DA5D8178-3D1D-4AFE-80A3-7B68BF24E420"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:1.13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EEC47CA-B2E0-437D-B8BF-C0DA5713BFB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/JAVA-4017",
        "source" : "cna@mongodb.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.mongodb.org/browse/JAVA-4017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20203",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-25T20:15:11.597",
      "lastModified" : "2024-11-21T05:46:07.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An integer overflow issue was found in the vmxnet3 NIC emulator of the QEMU for versions up to v5.2.0. It may occur if a guest was to supply invalid values for rx/tx queue size or other NIC parameters. A privileged guest user may use this flaw to crash the QEMU process on the host resulting in DoS scenario."
      }, {
        "lang" : "es",
        "value" : "Se encontró un problema de desbordamiento de enteros en el emulador de NIC vmxnet3 de QEMU para versiones hasta v5.2.0.&#xa0;Puede ocurrir si un invitado estaba suministrando valores no válidos para el tamaño de la cola rx/tx u otros parámetros de NIC.&#xa0;Un usuario invitado privilegiado puede usar este fallo para bloquear el proceso QEMU en el host, resultando en un escenario de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "326C44E5-259C-47D1-B540-E153CD7C907C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/qemu/+bug/1913873",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922441",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/qemu/+bug/1913873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3406",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-02-25T20:15:11.707",
      "lastModified" : "2024-11-21T06:21:25.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in keylime 5.8.1 and older. The issue in the Keylime agent and registrar code invalidates the cryptographic chain of trust from the Endorsement Key certificate to agent attestations."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en keylime versiones 5.8.1 y anteriores.&#xa0;El problema en el agente de Keylime y el código registrar invalida la cadena criptográfica confiable desde el certificado Endorsement Key hasta las atestaciones del agente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:keylime:keylime:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.8.1",
            "matchCriteriaId" : "893BA97F-D9D8-4E80-BB65-11BE070C79E1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1932469",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keylime/keylime/security/advisories/GHSA-78f8-6c68-375m",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QAT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1932469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keylime/keylime/security/advisories/GHSA-78f8-6c68-375m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YAWKEF2LVXUME266T6RNRVBGAD375QAT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1639",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.053",
      "lastModified" : "2024-11-21T05:44:47.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.9",
            "matchCriteriaId" : "CE03B37D-72FE-4C25-BE62-9C422AEFC80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.8",
            "matchCriteriaId" : "FD824DE6-3564-4B7D-B45C-2EEE1F84C9D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF33086-D7CC-44D1-A347-9F3EB50F74A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1639",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1698",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.133",
      "lastModified" : "2024-11-21T05:44:55.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Win32k de Windows. Este ID de CVE es diferente de CVE-2021-1732"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1698",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1721",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.210",
      "lastModified" : "2024-11-21T05:44:58.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Core and Visual Studio Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de .NET Core y Visual Studio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "8797E7EA-A66B-4B9C-AA2A-DAB08A8A16DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndIncluding" : "2.1.24",
            "matchCriteriaId" : "7C5D87DA-378D-4457-986B-8A0796ED00EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.11",
            "matchCriteriaId" : "1B672ED7-CB65-4D0E-AD4B-4508C4FA8C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powershell_core:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A812D8D-C6DA-473E-A604-988BCDA26CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powershell_core:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFBD34E-F04C-4B1B-AFD4-0D926BC30609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.9",
            "matchCriteriaId" : "CE03B37D-72FE-4C25-BE62-9C422AEFC80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.8",
            "matchCriteriaId" : "FD824DE6-3564-4B7D-B45C-2EEE1F84C9D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1722",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.413",
      "lastModified" : "2024-11-21T05:44:58.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Fax Service Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del Fax Service de Windows. Este ID de CVE es diferente de CVE-2021-24077"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1722",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1724",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.493",
      "lastModified" : "2024-11-21T05:44:58.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dynamics Business Central Cross-site Scripting Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de tipo Cross-site Scripting de Microsoft Dynamics Business Central"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365_business_central:2019:release_wave_2:*:*:on-premise:*:*:*",
            "matchCriteriaId" : "3972FED2-131E-447F-B0D7-86BFEC57F018"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365_business_central:2020:release_wave_1:*:*:*:*:*:*",
            "matchCriteriaId" : "F51A2D68-9B05-4565-8677-82761652876F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365_business_central:2020:release_wave_2:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA207FC-8ADA-4DA9-BCE5-5ABB51B1C2C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_nav:2015:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1684AB88-6210-4136-9F46-7ECA54DC1745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_nav:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8981A2-51D0-4FCC-8326-F807E2CC0D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_nav:2017:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C147B08-82DF-4051-ACA4-B1ACEDB15FC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_nav:2018:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8EA7FF-BEE3-47A5-B711-83191CBFCE40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1724",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1726",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.553",
      "lastModified" : "2024-11-21T05:44:58.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Microsoft SharePoint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81443CAD-F47E-4FD1-8E0E-8D646C90E4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1726",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1726",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1727",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.647",
      "lastModified" : "2024-11-21T05:44:59.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Installer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1727",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1728",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.710",
      "lastModified" : "2024-11-21T05:44:59.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "System Center Operations Manager Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios de System Center Operations Manager"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_operations_manager:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E44E616-AD2A-4568-BB07-CF32E4AE30D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1728",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1730",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.790",
      "lastModified" : "2026-02-24T15:19:37.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "<p>A spoofing vulnerability exists in Microsoft Exchange Server which could result in an attack that would allow a malicious actor to impersonate the user.</p>\n<p>This update addresses this vulnerability.</p>\n<p>To prevent these types of attacks, Microsoft recommends customers to download inline images from different DNSdomains than the rest of OWA. Please see further instructions in the FAQ to put in place this mitigations.</p>"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-24085"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1730",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1730",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1731",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.850",
      "lastModified" : "2024-11-21T05:44:59.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PFX Encryption Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de la Característica de Seguridad de PFX Encryption"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1731",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1731",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1732",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.930",
      "lastModified" : "2025-10-30T19:56:14.803",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Win32k de Windows. Este ID de CVE es diferente de CVE-2021-1698"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Win32k Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00345596-E9E0-4096-8DC6-0212F4747A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E332666-2E03-468E-BC30-299816D6E8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B570A8-ED1A-46B6-B8AB-064445F8FC4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DBE5B2-AE10-4251-BCDA-DC5EDEE6EE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE7E7B1-64AC-4986-A50B-0918A42C05BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62224791-644C-4D1F-AD77-56B16CF27630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F9B6B1-4FEE-4D4B-B35F-B07822CCD669"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161880/Win32k-ConsoleControl-Offset-Confusion.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/166169/Win32k-ConsoleControl-Offset-Confusion-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1732",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1733",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:13.993",
      "lastModified" : "2024-11-21T05:44:59.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sysinternals PsExec Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Sysinternals PsExec"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:psexec:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08709DCE-ECAC-4E39-BB77-074B72E0D5FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1733",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1734",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.070",
      "lastModified" : "2024-11-21T05:45:00.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Remote Procedure Call Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Remote Procedure Call de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1734",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24066",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.117",
      "lastModified" : "2024-11-21T05:52:16.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft SharePoint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81443CAD-F47E-4FD1-8E0E-8D646C90E4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24066",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24067",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.180",
      "lastModified" : "2024-11-21T05:52:16.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-24068, CVE-2021-24069, CVE-2021-24070"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24067",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24068",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.243",
      "lastModified" : "2024-11-21T05:52:16.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-24067, CVE-2021-24069, CVE-2021-24070"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24068",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24068",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24069",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.290",
      "lastModified" : "2024-11-21T05:52:17.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-24067, CVE-2021-24068, CVE-2021-24070"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24069",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24070",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.350",
      "lastModified" : "2024-11-21T05:52:17.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-24067, CVE-2021-24068, CVE-2021-24069"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24070",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24071",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.413",
      "lastModified" : "2024-11-21T05:52:17.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Microsoft SharePoint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81443CAD-F47E-4FD1-8E0E-8D646C90E4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24071",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24071",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24072",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.477",
      "lastModified" : "2024-11-21T05:52:17.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24072",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24073",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.540",
      "lastModified" : "2024-11-21T05:52:17.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skype for Business and Lync Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Skype for Business y Lync"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D4F3D-1374-4F6F-B69E-7F9F507D18A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business_server:2015:cu8:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FA3DB5-0651-4E17-B162-250122E4016C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24073",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24073",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24074",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.600",
      "lastModified" : "2024-11-21T05:52:17.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows TCP/IP Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de TCP/IP de Windows. Este ID de CVE es diferente de CVE-2021-24094"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24074",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24075",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.647",
      "lastModified" : "2024-11-21T05:52:17.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows VMSwitch Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio del Network File System de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24075",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24076",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.710",
      "lastModified" : "2024-11-21T05:52:17.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows VMSwitch Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de VMSwitch de Microsoft Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "21074553-EDF2-468D-8E79-C39851B5BC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "1981BA0D-0920-40C0-8A6A-5D5A1B221560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CF580BA-6938-40F6-9D86-F43044A6BACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "61F0792D-7587-4297-8EE7-D4DC3A30EE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "09D9A720-8D3C-4699-AC57-CB4531E5BFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24076",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24077",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.773",
      "lastModified" : "2024-11-21T05:52:18.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Fax Service Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del Fax Service de Windows. Este ID de CVE es diferente de CVE-2021-1722"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24078",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.837",
      "lastModified" : "2024-11-21T05:52:18.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DNS Server de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24078",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24079",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.897",
      "lastModified" : "2024-11-21T05:52:18.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Backup Engine Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información del Backup Engine de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24080",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:14.947",
      "lastModified" : "2024-11-21T05:52:18.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Trust Verification API Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de la API Trust Verification de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24081",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.007",
      "lastModified" : "2024-11-21T05:52:18.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Codecs Library Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Windows Codecs Library de Microsoft"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24081",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24082",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.053",
      "lastModified" : "2024-11-21T05:52:18.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft.PowerShell.Utility Module WDAC Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de la Característica de Seguridad WDAC del módulo Microsoft.PowerShell.Utility"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24083",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.117",
      "lastModified" : "2024-11-21T05:52:19.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Address Book Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Windows Address Book"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24083",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24084",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.180",
      "lastModified" : "2024-11-21T05:52:19.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Mobile Device Management Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Mobile Device Management de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24084",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24085",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.243",
      "lastModified" : "2024-11-21T05:52:19.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-1730"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24085",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24086",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.320",
      "lastModified" : "2024-11-21T05:52:19.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows TCP/IP Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de TCP/IP de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163499/Windows-TCP-IP-Denial-Of-Service.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24086",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163499/Windows-TCP-IP-Denial-Of-Service.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24087",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.397",
      "lastModified" : "2024-11-21T05:52:19.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure IoT CLI extension Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios en la extensión de la CLI Azure IoT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:azure-iot-cli-extension:-:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.2",
            "versionEndIncluding" : "0.10.6",
            "matchCriteriaId" : "5619F822-DC78-434C-A4F3-670E86F7D423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24087",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24087",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24088",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.460",
      "lastModified" : "2024-11-21T05:52:19.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Local Spooler Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Local Spooler de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24088",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24091",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.540",
      "lastModified" : "2024-11-21T05:52:20.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Camera Codec Pack Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Camera Codec Pack de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161713/Microsoft-Windows-WindowsCodecsRaw-COlympusE300LoadRaw-Out-Of-Bounds-Write.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24091",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161713/Microsoft-Windows-WindowsCodecsRaw-COlympusE300LoadRaw-Out-Of-Bounds-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24092",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.600",
      "lastModified" : "2024-11-21T05:52:20.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Defender Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Microsoft Defender"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_defender:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794244D1-F317-44C8-8338-3DA74E71D4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC297F51-9742-43A2-8783-53B7E4D5E435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:security_essentials:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20FBA682-B703-4590-98E4-8897EED11DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194DE421-9536-4001-9A27-6C88805421EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:-:*:*:*:*:*:*",
            "matchCriteriaId" : "410C8132-8953-4A2E-AF04-BBB4044BA64C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:system_center_endpoint_protection:2012:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D1AAB8-A55D-404A-A431-7F4A0201F488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24092",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24093",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.663",
      "lastModified" : "2024-11-21T05:52:20.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Windows Graphics Component"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6437F9-6631-49D3-A6C2-62329E278E31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161582/Microsoft-DirectWrite-fsg_ExecuteGlyph-Buffer-Overflow.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24093",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161582/Microsoft-DirectWrite-fsg_ExecuteGlyph-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24094",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.757",
      "lastModified" : "2024-11-21T05:52:20.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows TCP/IP Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de TCP/IP de Windows. Este ID de CVE es diferente de CVE-2021-24074"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24096",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.837",
      "lastModified" : "2024-11-21T05:52:20.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del kernel de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24096",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24098",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.897",
      "lastModified" : "2024-11-21T05:52:21.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Console Driver Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio del Console Driver de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24098",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24099",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:15.977",
      "lastModified" : "2024-11-21T05:52:21.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skype for Business and Lync Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de Skype para Business y Lync"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:lync_server:2013:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677D4F3D-1374-4F6F-B69E-7F9F507D18A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business_server:2015:cu8:*:*:*:*:*:*",
            "matchCriteriaId" : "A9FA3DB5-0651-4E17-B162-250122E4016C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:skype_for_business_server:2019:cu2:*:*:*:*:*:*",
            "matchCriteriaId" : "7991B16E-78CE-4EBF-B552-9B8EC53D615E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24099",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24100",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.040",
      "lastModified" : "2024-11-21T05:52:21.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge for Android Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Microsoft Edge para Android"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:android:*:*",
            "matchCriteriaId" : "8336D506-F4DE-42AE-809A-ABA67C92079C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24100",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24101",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.100",
      "lastModified" : "2024-11-21T05:52:21.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Dataverse Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Microsoft Dataverse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:8.2:*:*:*:on-premises:*:*:*",
            "matchCriteriaId" : "35F5B093-A1FC-4448-B40B-8FBD689BF6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:dynamics_365:9.0:*:*:*:on-premises:*:*:*",
            "matchCriteriaId" : "80B785B7-053B-4A3B-9586-D3FC48A5D51D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24101",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24102",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.180",
      "lastModified" : "2024-11-21T05:52:21.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios en Event Tracing de Windows. Este ID de CVE es diferente de CVE-2021-24103"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24102",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24103",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.243",
      "lastModified" : "2024-11-21T05:52:21.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Event Tracing de Windows. Este ID de CVE es diferente de CVE-2021-24102"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24103",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24105",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.303",
      "lastModified" : "2026-02-24T16:20:12.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "<p>Depending on configuration of various package managers it is possible for an attacker to insert a malicious package into a package manager's repository which can be retrieved and used during development, build, and release processes. This insertion could lead to remote code execution. We believe this vulnerability affects multiple package managers across multiple languages, including but not limited to: Python/pip, .NET/NuGet, Java/Maven, JavaScript/npm.</p>\n<p><strong>Attack scenarios</strong></p>\n<p>An attacker could take advantage of this ecosystem-wide issue to cause harm in a variety of ways. The original attack scenarios were discovered by Alex Birsan and are detailed in their whitepaper, <a href=\"https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610\">Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies</a>.</p>\n<ul>\n<li><p>With basic knowledge of the target ecosystems, an attacker could create an empty shell for a package and insert malicious code in the install scripts, give it a high version, and publish it to the public repository. Vulnerable victim machines will download the higher version of the package between the public and private repositories and attempt to install it. Due to code incompatibility it will probably error out upon import or upon compilation, making it easier to detect; however the attacker would have gained code execution by that point.</p>\n</li>\n<li><p>An advanced attacker with some inside knowledge of the target could take a copy of a working package, insert the malicious code (in the package itself or in the install), and then publish it to a public repository. The package will likely install and import correctly, granting the attacker an initial foothold and persistence.</p>\n</li>\n</ul>\n<p>These two methods could affect target organizations at any of these various levels:</p>\n<ul>\n<li>Developer machines</li>\n<li>An entire team if the configuration to import the malicious package is uploaded to a code repository</li>\n<li>Continuous integration pipelines if they pull the malicious packages during the build, test, and/or deploy stages</li>\n<li>Customers, download servers, production services if the malicious code has not been detected</li>\n</ul>\n<p>This remote code execution vulnerability can only be addressed by reconfiguring installation tools and workflows, and not by correcting anything in the package repositories themselves. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota en Package Managers Configurations"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:package_manager_configurations:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71D274DE-99A4-4FC3-A43B-53A2D68A0E09"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24105",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24106",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.367",
      "lastModified" : "2024-11-21T05:52:22.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DirectX Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información en DirectX de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24106",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24109",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.447",
      "lastModified" : "2024-11-21T05:52:22.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Microsoft Azure Kubernetes Service"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_kubernetes_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934ECDD0-31D7-409A-A1BD-0743E24BFE8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24109",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24111",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.507",
      "lastModified" : "2024-11-21T05:52:22.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Framework Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de .NET Framework"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B0E40A-84EF-4099-A395-75D6B8CDA196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280FE663-23BE-45D2-9B31-5F577E390B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0B660D-1F30-4D45-B98B-726EDB8CB90F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A16AD2B0-2189-4E8E-B7FC-CE598CA1CB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "734112B3-1383-4BE3-8721-C0F84566B764"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B0E40A-84EF-4099-A395-75D6B8CDA196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF7A75E-EE27-4AA7-8D84-9D696728A4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_framework:4.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3F18AF-84ED-473B-A8DF-65EB23C475AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24111",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24111",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24112",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.570",
      "lastModified" : "2024-11-21T05:52:22.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Core Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de .NET Core. Este ID de CVE es diferente de CVE-2021-26701"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.2",
            "matchCriteriaId" : "8797E7EA-A66B-4B9C-AA2A-DAB08A8A16DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndIncluding" : "2.1.24",
            "matchCriteriaId" : "7C5D87DA-378D-4457-986B-8A0796ED00EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndIncluding" : "3.1.11",
            "matchCriteriaId" : "1B672ED7-CB65-4D0E-AD4B-4508C4FA8C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:mono:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.12.0",
            "versionEndExcluding" : "6.12.0.122",
            "matchCriteriaId" : "B46EB9C9-0D62-4F64-9C74-1F372F1543A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:-:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "21FE380F-7A47-4C72-8F07-526226531175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24112",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24112",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24113",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.633",
      "lastModified" : "2024-11-21T05:52:22.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad de Microsoft Edge (basada en Chromium)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge_chromium:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "173E41C2-EF19-44E1-B452-43AAA49BCB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24113",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24114",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.710",
      "lastModified" : "2024-11-21T05:52:23.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Teams iOS Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información del iOS de Microsoft Teams"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:teams:-:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "B039BCD1-9945-4A0F-817B-D12EDD35E692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24114",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25195",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.773",
      "lastModified" : "2024-11-21T05:54:31.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows PKU2U Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de PKU2U de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-25195",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-25195",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26700",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.850",
      "lastModified" : "2025-07-16T13:01:53.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code npm-script Extension Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de la Extensión npm-script de Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:npm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.15",
            "matchCriteriaId" : "E250AAE1-7D5F-440F-A972-1C582556936A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26700",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26700",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26701",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-02-25T23:15:16.913",
      "lastModified" : "2024-11-21T05:56:41.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : ".NET Core Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de .NET Core. Este ID de CVE es diferente de CVE-2021-24112"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "74874B42-850B-437F-92C8-7FED4FF5FC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.28",
            "matchCriteriaId" : "E640EFC6-AC25-4F4E-9E8D-B46DEE56CC51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:.net_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.15",
            "matchCriteriaId" : "7A13EB41-E11C-473B-82C7-D693121F8AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powershell_core:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A812D8D-C6DA-473E-A604-988BCDA26CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powershell_core:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAFBD34E-F04C-4B1B-AFD4-0D926BC30609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.9",
            "matchCriteriaId" : "9E7A027C-A6FD-4330-B5DA-338B96E8C60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:-:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "21FE380F-7A47-4C72-8F07-526226531175"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2AZOUKMCHT2WBHR7MYDTYXWOBHZW5P5/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3ZSJTTMZAFKGW7NJWTVVFZUYYU2SJZ/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBOSSX7U6BSHV5RI74FCOW4ITJ5RRJR5/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WA5WQJVHUL5C4XMJTLY3C67R4WP35EF4/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPUKFHIGP5YNJRRFWKDJ2XRS4WTFJNNK/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLFATXASXW4OV2ZBSRP4G55HJH73QPBP/",
        "source" : "secure@microsoft.com"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26701",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S2AZOUKMCHT2WBHR7MYDTYXWOBHZW5P5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TW3ZSJTTMZAFKGW7NJWTVVFZUYYU2SJZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBOSSX7U6BSHV5RI74FCOW4ITJ5RRJR5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WA5WQJVHUL5C4XMJTLY3C67R4WP35EF4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XPUKFHIGP5YNJRRFWKDJ2XRS4WTFJNNK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YLFATXASXW4OV2ZBSRP4G55HJH73QPBP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21328",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T02:15:12.713",
      "lastModified" : "2024-11-21T05:48:01.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vapor is a web framework for Swift. In Vapor before version 4.40.1, there is a DoS attack against anyone who Bootstraps a metrics backend for their Vapor app. The following is the attack vector: 1. send unlimited requests against a vapor instance with different paths. this will create unlimited counters and timers, which will eventually drain the system. 2. downstream services might suffer from this attack as well by being spammed with error paths. This has been patched in 4.40.1. The `DefaultResponder` will rewrite any undefined route paths for to `vapor_route_undefined` to avoid unlimited counters."
      }, {
        "lang" : "es",
        "value" : "Vapor es un framework para Swift.&#xa0;En Vapor versiones anteriores a 4.40.1, se presenta un ataque DoS contra cualquiera que inicie un backend de métricas para su aplicación Vapor.&#xa0;El siguiente es el vector de ataque: 1. Enviar peticiones ilimitadas contra una instancia de vapor con diferentes rutas,&#xa0;esto creará contadores y temporizadores ilimitados, que eventualmente agotarán el sistema.&#xa0;2. Los servicios aguas abajo también pueden sufrir este ataque al recibir spam con rutas de error.&#xa0;Esto ha sido parcheado en versión 4.40.1.&#xa0;El \"DefaultResponder\" reescribirá cualquier ruta de rutas no definida para \"vapor_route_undefined\" para evitar contadores ilimitados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vapor_project:vapor:*:*:*:*:*:swift:*:*",
            "versionEndExcluding" : "4.40.1",
            "matchCriteriaId" : "32D3906C-9106-4D07-8096-CE037C320D7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vapor/vapor/commit/e3aa712508db2854ac0ab905696c65fd88fa7e23",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vapor/vapor/releases/tag/4.40.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vapor/vapor/security/advisories/GHSA-gcj9-jj38-hwmc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vapor.codes/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/vapor/vapor/commit/e3aa712508db2854ac0ab905696c65fd88fa7e23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vapor/vapor/releases/tag/4.40.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vapor/vapor/security/advisories/GHSA-gcj9-jj38-hwmc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vapor.codes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23968",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:12.820",
      "lastModified" : "2024-11-21T05:52:07.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8."
      }, {
        "lang" : "es",
        "value" : "Si la Política de Seguridad de Contenido bloqueaba la navegación de tramas, el destino completo de un redireccionamiento servido en la trama se reportaba en el informe de infracción;&#xa0;a diferencia del URI de la trama original.&#xa0;Esto podría ser usado para filtrar información confidencial contenida en dichos URI.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86, Thunderbird versiones anteriores a 78,8 y Firefox ESR versiones anteriores a 78,8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "6A523AED-F145-4D51-BF78-95B61B8A0B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "3ABA16AF-38C2-4445-B41F-9228C97A89C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1687342",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1687342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23969",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:12.947",
      "lastModified" : "2024-11-21T05:52:07.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "As specified in the W3C Content Security Policy draft, when creating a violation report, \"User agents need to ensure that the source file is the URL requested by the page, pre-redirects. If that’s not possible, user agents need to strip the URL down to an origin to avoid unintentional leakage.\" Under certain types of redirects, Firefox incorrectly set the source file to be the destination of the redirects. This was fixed to be the redirect destination's origin. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8."
      }, {
        "lang" : "es",
        "value" : "Como se especifica en el borrador de la Política de Seguridad de Contenido W3C, cuando se crea un informe de infracción, \"Los agentes de usuario necesitan asegurar que el archivo de origen sea la URL solicitada por la página, redireccionamientos previos. Si eso no es posible, los agentes de usuario deben reducir la URL a un origen para evitar fugas involuntarias\". Bajo determinados tipos de redireccionamientos, Firefox ajustó incorrectamente el archivo de origen como el destino de los redireccionamientos.&#xa0;Se corrigió que este fuera el origen del destino de redireccionamiento.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86, Thunderbird versiones anteriores a 78,8 y Firefox ESR versiones anteriores a 78,8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "6A523AED-F145-4D51-BF78-95B61B8A0B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "3ABA16AF-38C2-4445-B41F-9228C97A89C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1542194",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1542194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23970",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.007",
      "lastModified" : "2024-11-21T05:52:07.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Context-specific code was included in a shared jump table; resulting in assertions being triggered in multithreaded wasm code. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "Un código específico de contexto en una tabla de salto compartido;&#xa0;resultando en afirmaciones que se desencadenan en código wasm multi-hilo (multi-subproceso).&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1681724",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1681724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23971",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.103",
      "lastModified" : "2024-11-21T05:52:07.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When processing a redirect with a conflicting Referrer-Policy, Firefox would have adopted the redirect's Referrer-Policy. This would have potentially resulted in more information than intended by the original origin being provided to the destination of the redirect. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "Cuando se procesa un redireccionamiento con una Política de Referencia en conflicto, Firefox habría adoptado la Política de Referencia de redireccionamiento.&#xa0;Esto podría haber conllevado a que se proporcionara más información de la que pretendía mediante la fuente original hacia el destino del redireccionamiento.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1678545",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1678545",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23972",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.180",
      "lastModified" : "2024-11-21T05:52:07.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "One phishing tactic on the web is to provide a link with HTTP Auth. For example 'https://www.phishingtarget.com@evil.com'. To mitigate this type of attack, Firefox will display a warning dialog; however, this warning dialog would not have been displayed if evil.com used a redirect that was cached by the browser. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "Una táctica de phishing en la web es proporcionar un enlace con Autenticación HTTP .&#xa0;Por ejemplo, \"https://www.phishingtarget.com@evil.com\".&#xa0;Para mitigar este tipo de ataque, Firefox mostrará un cuadro de diálogo de advertencia;&#xa0;sin embargo, este cuadro de diálogo de advertencia no habría sido mostrado si evil.com hubiera usado un redireccionamiento almacenado en caché por el navegador.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1683536",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1683536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23973",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.243",
      "lastModified" : "2024-11-21T05:52:07.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When trying to load a cross-origin resource in an audio/video context a decoding error may have resulted, and the content of that error may have revealed information about the resource. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8."
      }, {
        "lang" : "es",
        "value" : "Cuando se intenta cargar un recurso de origen cruzado en un contexto de audio y video, puede haber resultado un error de decodificación, y el contenido de ese error puede haber divulgado información sobre el recurso.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86, Thunderbird versiones anteriores a 78,8 y Firefox ESR versiones anteriores a 78,8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "6A523AED-F145-4D51-BF78-95B61B8A0B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "3ABA16AF-38C2-4445-B41F-9228C97A89C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1690976",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1690976",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23974",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.320",
      "lastModified" : "2024-11-21T05:52:07.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DOMParser API did not properly process '<noscript>' elements for escaping. This could be used as an mXSS vector to bypass an HTML Sanitizer. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "La API DOMParser no procesó apropiadamente los elementos \"(noscript)\" para escapar.&#xa0;Esto podría ser usado como un vector mXSS para omitir un Sanitizador HTML.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1528997%2C1683627",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1528997%2C1683627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23975",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.383",
      "lastModified" : "2024-11-21T05:52:08.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The developer page about:memory has a Measure function for exploring what object types the browser has allocated and their sizes. When this function was invoked we incorrectly called the sizeof function, instead of using the API method that checks for invalid pointers. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "La página del desarrollador about:memory presenta una función Measure para explorar qué tipos de objetos ha asignado el navegador y sus tamaños.&#xa0;Cuando esta función era invocada, llamamos incorrectamente a la función sizeof, en lugar de usar el método API que comprueba punteros no válidos.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1685145",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1685145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23976",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T02:15:13.463",
      "lastModified" : "2024-11-21T05:52:08.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When accepting a malicious intent from other installed apps, Firefox for Android accepted manifests from arbitrary file paths and allowed declaring webapp manifests for other origins. This could be used to gain fullscreen access for UI spoofing and could also lead to cross-origin attacks on targeted websites. Note: This issue is a different issue from CVE-2020-26954 and only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "Cuando se acepta una intención maliciosa de otras aplicaciones instaladas, Firefox para Android aceptó manifiestos de rutas de archivos arbitrarias y permitió declarar manifiestos de aplicaciones web para otros orígenes.&#xa0;Esto podría usarse para conseguir acceso a pantalla completa para la suplantación de la interfaz de usuario y también podría conllevar a ataques de origen cruzado en sitios web específicos.&#xa0;Nota: Este problema es diferente de CVE-2020-26954 y solo afecta a Firefox para Android.&#xa0;Otros sistemas operativos no están afectados.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "E4B5344A-208A-4D52-8CB9-B140D5556C04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684627",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684627",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21330",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T03:15:12.840",
      "lastModified" : "2024-11-21T05:48:02.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. In aiohttp before version 3.7.4 there is an open redirect vulnerability. A maliciously crafted link to an aiohttp-based web-server could redirect the browser to a different website. It is caused by a bug in the `aiohttp.web_middlewares.normalize_path_middleware` middleware. This security problem has been fixed in 3.7.4. Upgrade your dependency using pip as follows \"pip install aiohttp >= 3.7.4\". If upgrading is not an option for you, a workaround can be to avoid using `aiohttp.web_middlewares.normalize_path_middleware` in your applications."
      }, {
        "lang" : "es",
        "value" : "aiohttp es un framework cliente/servidor HTTP asincrónico para asyncio y Python.&#xa0;En aiohttp versiones anteriores a 3.7.4, se presenta una vulnerabilidad de redireccionamiento abierto.&#xa0;Un enlace diseñado malicioso en un servidor web basado en aiohttp podría redireccionar el navegador a un sitio web diferente.&#xa0;Es causado por un error en el middleware \"aiohttp.web_middlewares.normalize_path_middleware\".&#xa0;Este problema de seguridad ha sido corregido en versión 3.7.4.&#xa0;Actualice su dependencia usando pip de la siguiente manera \"pip install aiohttp versiones posteriores o incluyendo a 3.7.4\".&#xa0;Si la actualización no es una opción para usted, una solución alternativa puede ser evitar el uso de \"aiohttp.web_middlewares.normalize_path_middleware\" en sus aplicaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aiohttp:aiohttp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.4",
            "matchCriteriaId" : "85039D6B-2E1A-4679-8345-BD3804144EAC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst#374-2021-02-25",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aio-libs/aiohttp/commit/2545222a3853e31ace15d87ae0e2effb7da0c96b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://pypi.org/project/aiohttp/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4864",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst#374-2021-02-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aio-libs/aiohttp/commit/2545222a3853e31ace15d87ae0e2effb7da0c96b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FU7ENI54JNEK3PHEFGCE46DGMFNTVU6L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN3V7CZJRT4QFCVXB6LDPCJH7NAOFCA5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pypi.org/project/aiohttp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21724",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-02-26T03:15:12.963",
      "lastModified" : "2024-11-21T05:48:53.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ZTE product has a memory leak vulnerability. Due to the product's improper handling of memory release in certain scenarios, a local attacker with device permissions repeatedly attenuated the optical signal to cause memory leak and abnormal service. This affects: ZXR10 8900E, all versions up to V3.03.20R2B30P1."
      }, {
        "lang" : "es",
        "value" : "Un producto ZTE presenta una vulnerabilidad de pérdida de la memoria.&#xa0;Debido al manejo inapropiado de liberación de la memoria del producto en determinados escenarios, un atacante local con permisos de dispositivo atenuó repetidamente la señal óptica para causar pérdida de la memoria y un servicio anormal.&#xa0;Esto afecta a: ZXR10 8900E, todas las versiones hasta V3.03.20R2B30P1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxr10_8900e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.03.20r2b30p1",
            "matchCriteriaId" : "2C146C38-AD84-44EE-BE6D-B70B0727DA35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxr10_8900e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5526FC8B-9FB3-4618-BEEC-724210483383"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014584",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23953",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.433",
      "lastModified" : "2024-11-21T05:52:05.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If a user clicked into a specifically crafted PDF, the PDF reader could be confused into leaking cross-origin information, when said information is served as chunked data. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7."
      }, {
        "lang" : "es",
        "value" : "Si un usuario hace clic en un PDF diseñado específicamente, el lector de PDF podría confundirse y filtrar información de origen cruzado, cuando dicha información es servida como datos fragmentados.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85, Thunderbird versiones anteriores a 78,7 y Firefox ESR versiones anteriores a 78,7"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "0D2BEE15-C7C8-4C7C-A4A1-EFB496D75197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "80722896-DAE4-42FB-BF86-D609EEDEE5B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1683940",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1683940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23954",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.510",
      "lastModified" : "2024-11-21T05:52:05.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using the new logical assignment operators in a JavaScript switch statement could have caused a type confusion, leading to a memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7."
      }, {
        "lang" : "es",
        "value" : "Usando los nuevos operadores de asignación lógica en una declaración de cambio de JavaScript podría haber causado una confusión de tipos, conllevando a una corrupción de la memoria y un bloqueo potencialmente explotable.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85, Thunderbird versiones anteriores a 78,7 y Firefox ESR versiones anteriores a 78,7"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "0D2BEE15-C7C8-4C7C-A4A1-EFB496D75197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "80722896-DAE4-42FB-BF86-D609EEDEE5B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684020",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23955",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.573",
      "lastModified" : "2024-11-21T05:52:05.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser could have been confused into transferring a pointer lock state into another tab, which could have lead to clickjacking attacks. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "El navegador podría haber sido confundido al transferir un estado de bloqueo del puntero a otra pestaña, lo que podría haber conllevado a ataques de secuestro de clics.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684837",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23956",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.637",
      "lastModified" : "2024-11-21T05:52:06.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An ambiguous file picker design could have confused users who intended to select and upload a single file into uploading a whole directory. This was addressed by adding a new prompt. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Un diseño de selector de archivos ambiguos podría haber confundido a usuarios que pretendían seleccionar y cargar un solo archivo para cargar un directorio completo.&#xa0;Esto se solucionó al agregar un nuevo aviso.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1338637",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1338637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23957",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.713",
      "lastModified" : "2024-11-21T05:52:06.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Navigations through the Android-specific `intent` URL scheme could have been misused to escape iframe sandbox. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Las navegaciones por medio del esquema de URL \"intent\" específico de Android podrían haber sido usado inapropiadamente para escapar del sandbox de iframe.&#xa0;Nota: este problema solo afectó a Firefox para Android.&#xa0;Otros sistemas operativos no están afectados.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "91252996-1CD9-46A1-ACA1-320919EE98DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1584582",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1584582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23958",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.777",
      "lastModified" : "2024-11-21T05:52:06.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The browser could have been confused into transferring a screen sharing state into another tab, which would leak unintended information. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "El navegador podría haber sido confundido en transferir un estado de pantalla compartida a otra pestaña, lo que filtraría información no deseada.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1642747",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1642747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23959",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.853",
      "lastModified" : "2024-11-21T05:52:06.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS bug in internal error pages could have led to various spoofing attacks, including other error pages and the address bar. Note: This issue only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Un bug de tipo XSS en las páginas de error internas podría conllevar a varios ataques de suplantación de identidad, incluyendo otras páginas de error y la barra de direcciones.&#xa0;Nota: este problema solo afectó a Firefox para Android.&#xa0;Otros sistemas operativos no están afectados.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "91252996-1CD9-46A1-ACA1-320919EE98DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1659035",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1659035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23960",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.917",
      "lastModified" : "2024-11-21T05:52:06.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Performing garbage collection on re-declared JavaScript variables resulted in a user-after-poison, and a potentially exploitable crash. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7."
      }, {
        "lang" : "es",
        "value" : "Realizar una recolección de basura en variables de JavaScript declaradas nuevamente resultó en un usuario después del envenenamiento y un bloqueo potencialmente explotable.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85, Thunderbird versiones anteriores a 78,7 y Firefox ESR versiones anteriores a 78,7"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "0D2BEE15-C7C8-4C7C-A4A1-EFB496D75197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "80722896-DAE4-42FB-BF86-D609EEDEE5B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1675755",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1675755",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23961",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:13.997",
      "lastModified" : "2024-11-21T05:52:06.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as well as services running on the user's local machine. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Otras técnicas que se basaron en la investigación de slipstream combinada con una página web maliciosa podrían haber expuesto tanto los hosts de una red interna como los servicios que se ejecutan en la máquina local del usuario.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1677940",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00019.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00020.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4895",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4897",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1677940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23962",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:14.073",
      "lastModified" : "2024-11-21T05:52:06.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect use of the '<RowCountChanged>' method could have led to a user-after-poison and a potentially exploitable crash. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Un uso incorrecto del método \"(RowCountChanged)\" podría conllevar a un uso posterior al envenenamiento y un bloqueo potencialmente explotable.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1677194",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1677194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23963",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:14.137",
      "lastModified" : "2024-11-21T05:52:06.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Cuando se comparten la geolocalización durante un recurso compartido de WebRTC activo, Firefox podría haber restablecido el estado del intercambio de webRTC en la interfaz de usuario, conllevando a una pérdida de control sobre el permiso otorgado actualmente.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1680793",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1680793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23977",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T03:15:14.213",
      "lastModified" : "2024-11-21T05:52:08.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Firefox for Android suffered from a time-of-check-time-of-use vulnerability that allowed a malicious application to read sensitive data from application directories. Note: This issue is only affected Firefox for Android. Other operating systems are unaffected. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "Firefox para Android sufrió una vulnerabilidad de tipo time-of-check-time-of-use que permitía a una aplicación maliciosa leer datos confidenciales desde los directorios de la  aplicación.&#xa0;Nota: este problema solo afecta a Firefox para Android.&#xa0;Otros sistemas operativos no están afectados.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "E4B5344A-208A-4D52-8CB9-B140D5556C04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684761",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1684761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22661",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-02-26T15:15:12.040",
      "lastModified" : "2024-11-21T05:50:25.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior)."
      }, {
        "lang" : "es",
        "value" : "Cambiando la contraseña en la página web del módulo no requiere que un usuario escriba primero la contraseña actual.&#xa0;Por lo tanto, la contraseña puede ser cambiada por un usuario o un proceso externo sin el conocimiento de la contraseña actual en el ICX35-HWC-A e ICX35-HWC-E (Versiones 1.9.62 y anteriores)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prosoft-technology:icx35-hwc-a_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.62",
            "matchCriteriaId" : "D49F345E-9803-49EE-9495-2D7D04AAEDC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prosoft-technology:icx35-hwc-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1852B82B-AEE4-4EB4-8754-D7357E94D828"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:prosoft-technology:icx35-hwc-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.62",
            "matchCriteriaId" : "0D64FE20-077D-4A12-B270-F3D8C16C8251"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:prosoft-technology:icx35-hwc-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5E7073-BD2B-424C-A67F-C27620DC300C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-04",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26903",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-26T15:15:12.257",
      "lastModified" : "2024-11-21T05:57:00.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LMA ISIDA Retriever 5.2 is vulnerable to XSS via query['text']."
      }, {
        "lang" : "es",
        "value" : "LMA ISIDA Retriever versión 5.2, es vulnerable a un ataque de tipo XSS por medio de query['text']"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isida:retriever:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F78CC-63FC-4DA5-82B3-B0E27FB9B39F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Security-AVS/CVE-2021-26903",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.isida.by/category/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Security-AVS/CVE-2021-26903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.isida.by/category/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-26T15:15:12.447",
      "lastModified" : "2024-11-21T05:57:00.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LMA ISIDA Retriever 5.2 allows SQL Injection."
      }, {
        "lang" : "es",
        "value" : "LMA ISIDA Retriever versión 5.2, permite una inyección SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isida:retriever:5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C0F78CC-63FC-4DA5-82B3-B0E27FB9B39F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Security-AVS/-CVE-2021-26904",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.isida.by/category/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Security-AVS/-CVE-2021-26904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.isida.by/category/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-26T15:15:12.617",
      "lastModified" : "2024-11-21T06:20:44.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There are multiple persistent cross-site scripting (XSS) vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized."
      }, {
        "lang" : "es",
        "value" : "Se presenta múltiples vulnerabilidades de tipo cross-site scripting (XSS) persistentes en la interfaz web de OpenText Content Server Versión 20.3.&#xa0;La aplicación permite a un atacante remoto introducir JavaScript arbitrario diseñando valores de formulario maliciosos que luego no son saneados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opentext:content_server:20.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381F5D1E-6D69-48F5-9779-DF2E8FD7F104"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49578",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.opentext.com/products-and-solutions/products/enterprise-content-management/content-management",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.opentext.com/products-and-solutions/products/enterprise-content-management/content-management",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23964",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T16:15:12.483",
      "lastModified" : "2024-11-21T05:52:06.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla developers reported memory safety bugs present in Firefox 84 and Firefox ESR 78.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 85, Thunderbird < 78.7, and Firefox ESR < 78.7."
      }, {
        "lang" : "es",
        "value" : "Los desarrolladores de Mozilla reportaron bugs de seguridad de la memoria presentes en Firefox versión 84 y Firefox ESR versión 78.6.&#xa0;Algunos de estos bugs mostraron evidencia de corrupción de la memoria y suponemos que con esfuerzo suficiente algunos de ellos podrían haber sido explotado para ejecutar código arbitrario.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85, Thunderbird versiones anteriores a 78,7 y Firefox ESR versiones anteriores a 78,7"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "0D2BEE15-C7C8-4C7C-A4A1-EFB496D75197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.7",
            "matchCriteriaId" : "80722896-DAE4-42FB-BF86-D609EEDEE5B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1662507%2C1666285%2C1673526%2C1674278%2C1674835%2C1675097%2C1675844%2C1675868%2C1677590%2C1677888%2C1680410%2C1681268%2C1682068%2C1682938%2C1683736%2C1685260%2C1685925",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1662507%2C1666285%2C1673526%2C1674278%2C1674835%2C1675097%2C1675844%2C1675868%2C1677590%2C1677888%2C1680410%2C1681268%2C1682068%2C1682938%2C1683736%2C1685260%2C1685925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-04/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-05/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23965",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T16:15:12.590",
      "lastModified" : "2024-11-21T05:52:07.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla developers reported memory safety bugs present in Firefox 84. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 85."
      }, {
        "lang" : "es",
        "value" : "Los desarrolladores de Mozilla reportaron bugs de seguridad de la memoria presentes en Firefox versión 84. Algunos de estos bugs mostraron evidencia de corrupción de la memoria y suponemos que con esfuerzo suficiente algunos de ellos podrían haber sido explotados para ejecutar código arbitrario.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 85"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "85.0",
            "matchCriteriaId" : "403EA47E-6B2D-4082-BFF2-E764C8356854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1670378%2C1673555%2C1676812%2C1678582%2C1684497",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1670378%2C1673555%2C1676812%2C1678582%2C1684497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-03/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23978",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T16:15:12.673",
      "lastModified" : "2024-11-21T05:52:08.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla developers reported memory safety bugs present in Firefox 85 and Firefox ESR 78.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8."
      }, {
        "lang" : "es",
        "value" : "Los desarrolladores de Mozilla reportaron bugs de seguridad de la memoria presentes en Firefox versión 85 y Firefox ESR versión 78.7.&#xa0;Algunos de estos bugs mostraron evidencia de corrupción de la memoria y suponemos que con esfuerzo suficiente algunos de ellos podrían haber sido explotado para ejecutar código arbitrario.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86, Thunderbird versiones anteriores a 78,8 y Firefox ESR versiones anteriores a 78,8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "6A523AED-F145-4D51-BF78-95B61B8A0B34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.8",
            "matchCriteriaId" : "3ABA16AF-38C2-4445-B41F-9228C97A89C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=786797%2C1682928%2C1687391%2C1687597",
        "source" : "security@mozilla.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "security@mozilla.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "security@mozilla.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=786797%2C1682928%2C1687391%2C1687597",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-09/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23979",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-02-26T16:15:12.810",
      "lastModified" : "2024-11-21T05:52:08.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla developers reported memory safety bugs present in Firefox 85. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 86."
      }, {
        "lang" : "es",
        "value" : "Los desarrolladores de Mozilla reportaron bugs de seguridad de la memoria presentes en Firefox 85. Algunos de estos bugs mostraron evidencia de corrupción de la memoria y suponemos que con esfuerzo suficiente algunos de ellos podrían haber sido explotado para ejecutar código arbitrario.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 86"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "86.0",
            "matchCriteriaId" : "89580DC6-183F-46F0-A27E-4E16D6B10EB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1663222%2C1666607%2C1672120%2C1678463%2C1678927%2C1679560%2C1681297%2C1681684%2C1683490%2C1684377%2C1684902",
        "source" : "security@mozilla.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "security@mozilla.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1663222%2C1666607%2C1672120%2C1678463%2C1678927%2C1679560%2C1681297%2C1681684%2C1683490%2C1684377%2C1684902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21297",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T17:15:12.210",
      "lastModified" : "2024-11-21T05:47:58.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier contains a Prototype Pollution vulnerability in the admin API. A badly formed request can modify the prototype of the default JavaScript Object with the potential to affect the default behaviour of the Node-RED runtime. The vulnerability is patched in the 1.2.8 release. A workaround is to ensure only authorized users are able to access the editor url."
      }, {
        "lang" : "es",
        "value" : "Node-Red es una programación de low-code para aplicaciones basadas en eventos diseñadas usando nodejs.&#xa0;Node-RED versiones 1.2.7 y anteriores contienen, una vulnerabilidad de Contaminación de Prototipos en la API de administración.&#xa0;Una petición mal formada puede modificar el prototipo del Objeto JavaScript predeterminado con el potencial de afectar el comportamiento predeterminado del tiempo de ejecución de Node-RED.&#xa0;La vulnerabilidad está parcheada en versión 1.2.8.&#xa0;Una solución alternativa es asegurarse de que solo los usuarios autorizados puedan ser capaces de acceder a la URL de editor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        }, {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodered:node-red:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.2.8",
            "matchCriteriaId" : "FD380E45-4954-4427-90D5-66896B983B30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-red/node-red/releases/tag/1.2.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red/security/advisories/GHSA-xp9c-82x8-7f67",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40node-red/editor-api",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40node-red/runtime",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/node-red/node-red/releases/tag/1.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red/security/advisories/GHSA-xp9c-82x8-7f67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40node-red/editor-api",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40node-red/runtime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21298",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T17:15:12.337",
      "lastModified" : "2024-11-21T05:47:58.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path traversal via the Projects API. If the Projects feature is enabled, a user with `projects.read` permission is able to access any file via the Projects API. The issue has been patched in Node-RED 1.2.8. The vulnerability applies only to the Projects feature which is not enabled by default in Node-RED. The primary workaround is not give untrusted users read access to the Node-RED editor."
      }, {
        "lang" : "es",
        "value" : "Node-Red es una programación de low-code para aplicaciones basadas en eventos diseñadas usando nodejs.&#xa0;Node-RED versiones 1.2.7 y anteriores, presentan una vulnerabilidad que permite un salto de ruta arbitrario por medio de la API Projects.&#xa0;Si la funcionalidad Proyects está habilitada, un usuario con el permiso \"projects.read\" puede acceder a cualquier archivo por medio de la API Proyects.&#xa0;El problema ha sido parcheado en Node-RED versión 1.2.8.&#xa0;La vulnerabilidad se aplica solo a la funcionalidad Proyects que no está habilitada por defecto en Node-RED.&#xa0;La solución alternativa principal es no dar acceso de lectura al editor de Node-RED para usuarios que no son confiables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodered:node-red:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.2.8",
            "matchCriteriaId" : "FD380E45-4954-4427-90D5-66896B983B30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/node-red/node-red/commit/74db3e17d075f23d9c95d7871586cf461524c456",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red/releases/tag/1.2.8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red/security/advisories/GHSA-m33v-338h-4v9f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40node-red/runtime",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/node-red/node-red/commit/74db3e17d075f23d9c95d7871586cf461524c456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red/releases/tag/1.2.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/node-red/node-red/security/advisories/GHSA-m33v-338h-4v9f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40node-red/runtime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21273",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T18:15:12.143",
      "lastModified" : "2024-11-21T05:47:54.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, requests to user provided domains were not restricted to external IP addresses when calculating the key validity for third-party invite events and sending push notifications. This could cause Synapse to make requests to internal infrastructure. The type of request was not controlled by the user, although limited modification of request bodies was possible. For the most thorough protection server administrators should remove the deprecated `federation_ip_range_blacklist` from their settings after upgrading to Synapse v1.25.0 which will result in Synapse using the improved default IP address restrictions. See the new `ip_range_blacklist` and `ip_range_whitelist` settings if more specific control is necessary."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para VoIP y mensajería instantánea federada abierta.&#xa0;En Synapse versiones anteriores a 1.25.0, las peticiones a los dominios proporcionados por el usuario no estaban restringidas para direcciones IP externas al calcular la validez de la clave para eventos de invitación de terceros y enviar notificaciones automáticas.&#xa0;Esto podría causar que Synapse realice peticiones a la infraestructura interna.&#xa0;El tipo de petición no era controlada por el usuario, aunque una modificación limitada de los cuerpos de petición era posible.&#xa0;Para obtener la protección más completa, los administradores del servidor deben eliminar la obsoleta \"federation_ip_range_blacklist\" de su configuración después de actualizar a Synapse versión v1.25.0, lo que resultará en que Synapse use las restricciones de dirección IP predeterminadas mejoradas. Consulte la nueva configuración de \"ip_range_blacklist\" e \"ip_range_whitelist\" si es necesario un control más específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.25.0",
            "matchCriteriaId" : "FA128314-E450-4224-B186-05303E6AB495"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/commit/30fba6210834a4ecd91badf0c8f3eb278b72e746",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/8821",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.25.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-v936-j8gp-9q3p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/matrix-org/synapse/commit/30fba6210834a4ecd91badf0c8f3eb278b72e746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/8821",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.25.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-v936-j8gp-9q3p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21274",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T18:15:12.237",
      "lastModified" : "2024-11-21T05:47:54.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.25.0, a malicious homeserver could redirect requests to their .well-known file to a large file. This can lead to a denial of service attack where homeservers will consume significantly more resources when requesting the .well-known file of a malicious homeserver. This affects any server which accepts federation requests from untrusted servers. Issue is resolved in version 1.25.0. As a workaround the `federation_domain_whitelist` setting can be used to restrict the homeservers communicated with over federation."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para VoIP y mensajería instantánea federada abierta.&#xa0;En Synapse versiones anteriores a 1.25.0, un servidor doméstico malicioso podía redireccionar las peticiones para su archivo .well-known a un archivo grande.&#xa0;Esto puede conllevar a un ataque de denegación de servicio en el que los servidores domésticos consumirán significativamente más recursos al solicitar el archivo .well-known de un servidor doméstico malicioso.&#xa0;Esto afecta a cualquier servidor que acepte peticiones de federación desde servidores que no sean confiables.&#xa0;El problema es resuelto en versión 1.25.0.&#xa0;Como solución alternativa, el ajuste de \"federation_domain_whitelist\" puede ser usado para restringir los servidores domésticos que se comunican con la federación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.99.0",
            "versionEndExcluding" : "1.25.0",
            "matchCriteriaId" : "6C16EE11-380E-400F-9A55-6068AAF132D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/commit/ff5c4da1289cb5e097902b3e55b771be342c29d6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/8950",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.25.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-2hwx-mjrm-v3g8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/matrix-org/synapse/commit/ff5c4da1289cb5e097902b3e55b771be342c29d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/8950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.25.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-2hwx-mjrm-v3g8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23345",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-02-26T18:15:12.330",
      "lastModified" : "2024-11-21T05:51:32.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of package github.com/thecodingmachine/gotenberg are vulnerable to Server-side Request Forgery (SSRF) via the /convert/html endpoint when the src attribute of an HTML element refers to an internal system file, such as <iframe src='file:///etc/passwd'>."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete github.com/thecodingmachine/gotenberg son vulnerables a un ataque de tipo Server-side Request Forgery (SSRF) por medio del endpoint  /convert/html cuando el atributo src de un elemento HTML referencia a un archivo interno del sistema, como (iframe src=\"archivo:///etc/passwd\")"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thecodingmachine:gotenberg:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B8DDEA-4AE8-45F2-9FF8-77E45DACD9A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thecodingmachine/gotenberg/issues/261",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTHECODINGMACHINEGOTENBERG-1062043",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thecodingmachine/gotenberg/issues/261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTHECODINGMACHINEGOTENBERG-1062043",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21302",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T20:15:12.217",
      "lastModified" : "2024-11-21T05:47:58.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2"
      }, {
        "lang" : "es",
        "value" : "PrestaShop es una solución de comercio electrónico de código abierto totalmente escalable. En PrestaShop versiones anteriores a 1.7.2, se presenta una posible vulnerabilidad de inyección de CSV al usar de palabras clave de búsqueda de la tienda por medio del panel de administración. El problema es corregido en versión 1.7.7.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "1.5.0.0",
            "versionEndExcluding" : "1.7.7.2",
            "matchCriteriaId" : "EC809966-E71A-48D8-AE01-571CC59B9254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/782b1368aa4e94dafe28f57485bffbd8893fbb1e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-2rw4-2p99-cmx9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/782b1368aa4e94dafe28f57485bffbd8893fbb1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-2rw4-2p99-cmx9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21308",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T20:15:12.313",
      "lastModified" : "2024-11-21T05:47:59.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 the soft logout system is not complete and an attacker is able to foreign request and executes customer commands. The problem is fixed in 1.7.7.2"
      }, {
        "lang" : "es",
        "value" : "PrestaShop es una solución de comercio electrónico de código abierto totalmente escalable. En PrestaShop versiones anteriores a 1.7.2, el sistema de cierre de sesión suave no está completo y un atacante puede realizar peticiones externas y ejecutar comandos del cliente. El problema es corregido en versión 1.7.7.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "1.5.0.0",
            "versionEndExcluding" : "1.7.7.2",
            "matchCriteriaId" : "EC809966-E71A-48D8-AE01-571CC59B9254"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/2f673bd93e313f08c35e74decc105f40dc0b7dee",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-557h-hf3c-whcg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/2f673bd93e313f08c35e74decc105f40dc0b7dee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-557h-hf3c-whcg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0366",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.353",
      "lastModified" : "2024-11-21T05:42:35.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379093."
      }, {
        "lang" : "es",
        "value" : "En vpu, se presenta una posible corrupción de la memoria debido a una condición de carrera.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID del Parche: ALPS05371580;&#xa0;ID del Problema: ALPS05379093"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0367",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.447",
      "lastModified" : "2024-11-21T05:42:35.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vpu, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05371580; Issue ID: ALPS05379085."
      }, {
        "lang" : "es",
        "value" : "En vpu, se presenta una posible corrupción de la memoria debido a una condición de carrera.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID del Parche: ALPS05371580;&#xa0;ID del Problema: ALPS05379085"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0401",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.493",
      "lastModified" : "2024-11-21T05:42:39.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In vow, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05418265."
      }, {
        "lang" : "es",
        "value" : "En vow, se presenta una posible corrupción de la memoria debido a una condición de carrera.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución SYSTEM necesarios.&#xa0;Es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID del Parche: ALPS05418265"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0402",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.557",
      "lastModified" : "2024-11-21T05:42:39.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In jpeg, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05433311."
      }, {
        "lang" : "es",
        "value" : "En jpeg, se presenta una posible escritura fuera de límites debido a una comprobación inapropiada de la entrada.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05433311"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0403",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.633",
      "lastModified" : "2024-11-21T05:42:39.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In netdiag, there is a possible information disclosure due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05475124."
      }, {
        "lang" : "es",
        "value" : "En netdiag, se presenta una posible divulgación de información debido a una falta de comprobación de permiso.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05475124"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0404",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.727",
      "lastModified" : "2024-11-21T05:42:39.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mobile_log_d, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457039."
      }, {
        "lang" : "es",
        "value" : "En mobile_log_d, se presenta una posible divulgación de información debido a una comprobación inapropiada de la entrada.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-11;&#xa0;ID del Parche: ALPS05457039"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0405",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.820",
      "lastModified" : "2024-11-21T05:42:39.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In performance driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05466547."
      }, {
        "lang" : "es",
        "value" : "En el controlador de desempeño, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID del Parche: ALPS05466547"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0406",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-02-26T21:15:12.977",
      "lastModified" : "2024-11-21T05:42:39.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In cameraisp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-10, Android-11; Patch ID: ALPS05471418."
      }, {
        "lang" : "es",
        "value" : "En cameraisp, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución SYSTEM necesarios.&#xa0;No es requerida una interacción del usuario para su explotación.&#xa0;Producto: Android;&#xa0;Versiones: Android-10, Android-11;&#xa0;ID del Parche: ALPS05471418"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://corp.mediatek.com/product-security-acknowledgements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21309",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-02-26T22:15:19.457",
      "lastModified" : "2024-11-21T05:47:59.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an open-source, in-memory database that persists on disk. In affected versions of Redis an integer overflow bug in 32-bit Redis version 4.0 or newer could be exploited to corrupt the heap and potentially result with remote code execution. Redis 4.0 or newer uses a configurable limit for the maximum supported bulk input size. By default, it is 512MB which is a safe value for all platforms. If the limit is significantly increased, receiving a large request from a client may trigger several integer overflow scenarios, which would result with buffer overflow and heap corruption. We believe this could in certain conditions be exploited for remote code execution. By default, authenticated Redis users have access to all configuration parameters and can therefore use the “CONFIG SET proto-max-bulk-len” to change the safe default, making the system vulnerable. **This problem only affects 32-bit Redis (on a 32-bit system, or as a 32-bit executable running on a 64-bit system).** The problem is fixed in version 6.2, and the fix is back ported to 6.0.11 and 5.0.11. Make sure you use one of these versions if you are running 32-bit Redis. An additional workaround to mitigate the problem without patching the redis-server executable is to prevent clients from directly executing `CONFIG SET`: Using Redis 6.0 or newer, ACL configuration can be used to block the command. Using older versions, the `rename-command` configuration directive can be used to rename the command to a random string unknown to users, rendering it inaccessible. Please note that this workaround may have an additional impact on users or operational systems that expect `CONFIG SET` to behave in certain ways."
      }, {
        "lang" : "es",
        "value" : "Redis es una base de datos en memoria de código abierto que persiste en el disco.&#xa0;En las versiones afectadas de Redis, un error de desbordamiento de enteros en Redis de 32 bits versión 4.0 o más reciente podría ser explotada para corromper la pila y potencialmente resultar en una ejecución de código remota.&#xa0;Redis versiones 4.0 o posteriores, usa un límite configurable para el tamaño máximo de la entrada masiva admitida.&#xa0;Por defecto, es de 512 MB, que es un valor seguro para todas las plataformas.&#xa0;Si el límite aumenta significativamente, recibir una petición grande de un cliente puede desencadenar varios escenarios de desbordamiento de enteros, que podría resultar en un desbordamiento del búfer y una corrupción de la pila.&#xa0;Creemos que, en determinadas condiciones, esta podría ser explotada para una ejecución de código remota.&#xa0;Por defecto,  usuarios de Redis autenticados poseen acceso a todos los parámetros de configuración y, por lo tanto, pueden usar \"CONFIG SET proto-max-bulk-len\" para cambiar el valor predeterminado seguro,&#xa0;haciendo que el sistema sea vulnerable.** Este problema solo afecta a Redis de 32 bits (en un sistema de 32 bits o como un ejecutable de 32 bits que se ejecuta en un sistema de 64 bits). ** El problema se corrigió en la versión 6.2 y la solución se ha modificado a versiones  6.0.11 y 5.0.11.&#xa0;Asegúrese de usar una de estas versiones si está ejecutando Redis de 32 bits.&#xa0;Una solución alternativa para mitigar el problema sin parchear el ejecutable de redis-server es impedir que los clientes ejecuten directamente `CONFIG SET`: Con Redis versiones 6.0 o más recientes, la configuración de ACL puede ser usada para bloquear el comando.&#xa0;Utilizando versiones anteriores, la directiva de configuración \"rename-command\" puede ser usada para cambiar el nombre del comando a una cadena aleatoria desconocida para usuarios, haciéndolo inaccesible.&#xa0;Tome en cuenta que esta solución puede tener un impacto adicional en los usuarios o los sistemas operativos que esperan que \"CONFIG SET\" se comporte de determinadas formas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "5.0.11",
            "matchCriteriaId" : "366C8910-66E7-4AB6-873C-70595AD42ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.11",
            "matchCriteriaId" : "C345BCBB-EB73-4DA5-93F0-42AB9E903CE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/commit/c992857618db99776917f10bf4f2345a5fdc78b0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/pull/8522",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-hgj8-vff2-7cjf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-02",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/commit/c992857618db99776917f10bf4f2345a5fdc78b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/pull/8522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-hgj8-vff2-7cjf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26560",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:19.643",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext transmission of sensitive information vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad transmisión de información confidencial en texto sin cifrar en synoagentregisterd en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes de tipo man-in-the-middle falsificar servidores por medio de una sesión HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26561",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:19.877",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento del búfer en la región stack de la memoria en synoagentregisterd en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes de tipo man-in-the-middle ejecutar código arbitrario por medio del encabezado HTTP syno_finder_site"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26562",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:20.003",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds write vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary code via syno_finder_site HTTP header."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escritura fuera de límites en synoagentregisterd en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes de tipo man-in-the-middle ejecutar código arbitrario por medio del encabezado HTTP syno_finder_site"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26563",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:20.143",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autorización incorrecta en synoagentregisterd en Synology DiskStation Manager (DSM) antes de 6.2.4-25553 permite a los usuarios locales ejecutar código arbitrario a través de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.4-25553",
            "matchCriteriaId" : "A6EC7AE5-71BB-409F-B4CA-3EAFBF30ABC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_21_03",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1158",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_21_03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26564",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:20.300",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to spoof servers via an HTTP session."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de transmisión de información confidencial en texto sin cifrar en synorelayd en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes de tipo man-in-the-middle falsificar servidores por medio de una sesión HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26565",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:20.427",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext transmission of sensitive information vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to obtain sensitive information via an HTTP session."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de transmisión de información confidencial en texto sin cifrar en synorelayd en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes de tipo man-in-the-middle obtener información confidencial por medio de una sesión HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26566",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:20.567",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insertion of sensitive information into sent data vulnerability in synorelayd in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows man-in-the-middle attackers to execute arbitrary commands via inbound QuickConnect traffic."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inserción de información confidencial en datos enviados en synorelayd en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes de tipo man-in-the-middle ejecutar comandos arbitrarios por medio del tráfico entrante QuickConnect"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-201"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160",
        "source" : "security@synology.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2020-1160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26567",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-02-26T22:15:20.707",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stack-based buffer overflow vulnerability in frontend/main.c in faad2 before 2.2.7.1 allow local attackers to execute arbitrary code via filename and pathname options."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de desbordamiento de búfer basada en la pila en frontend/main.c en faad2 versiones anteriores a 2.2.7.1 permite a los atacantes locales ejecutar código arbitrario a través de las opciones de nombre de archivo y ruta."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:vs960hd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D0C5120-B961-440F-B454-584BC54B549C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:vs960hd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCBDFF9-AF42-4681-879B-CF789EBAD130"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:skynas_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53EF087B-D7E9-4F9A-803A-B0260C495C67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:skynas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A88A76-CF8A-4D29-B480-E5317219072D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager_unified_controller:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B04366E-B5F8-4835-B1FB-106AFD3D3785"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:synology:uc3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1100D972-198E-45F9-8F04-763F6FE88377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faad2_project:faad2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.7.1",
            "matchCriteriaId" : "201E5CDD-7F7D-44BB-80F8-C23DF44C2AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa",
        "source" : "security@synology.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/knik0/faad2/commit/720f7004d6c4aabee19aad16e7c456ed76a3ebfa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27799",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-26T22:15:20.847",
      "lastModified" : "2024-11-21T05:58:35.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ean_leading_zeroes in backend/upcean.c in Zint Barcode Generator 2.9.1 has a stack-based buffer overflow that is reachable from the C API through an application that includes the Zint Barcode Generator library code."
      }, {
        "lang" : "es",
        "value" : "La función ean_leading_zeroes en el archivo backend/upcean.c en Zint Barcode Generator versión 2.19.1, presenta un desbordamiento del búfer en la región stack de la memoria que es accesible desde la API C por medio de una aplicación que incluye el código de la biblioteca Zint Barcode Generator"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zint:barcode_generator:2.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B2F0DF-8C6E-487A-AE06-4EBBA3ED17DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://zint.org.uk/Manual.aspx?type=p&page=3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zint.org.uk/Manual.aspx?type=p&page=4",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zint.org.uk/Manual.aspx?type=p&page=5",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/zint/tickets/218/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://zint.org.uk/Manual.aspx?type=p&page=3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zint.org.uk/Manual.aspx?type=p&page=4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://zint.org.uk/Manual.aspx?type=p&page=5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/zint/code/ci/7f8c8114f31c09a986597e0ba63a49f96150368a/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/zint/tickets/218/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27198",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-26T23:15:11.263",
      "lastModified" : "2024-11-21T05:57:33.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Java and is thus cross-platform. The Windows installation runs as SYSTEM, which means that exploitation gives one Administrator privileges on the target system."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en Visualware MyConnection Server antes de la versión 11.1a. La ejecución remota de código no autenticada puede ocurrir a través de la carga arbitraria de archivos en el servicio web cuando se utiliza un URI myspeed/sf?filename=. Esta aplicación está escrita en Java y, por tanto, es multiplataforma. La instalación de Windows se ejecuta como SYSTEM, lo que significa que la explotación otorga privilegios de administrador en el sistema de destino"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:visualware:myconnection_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.1a",
            "matchCriteriaId" : "6B4A44BD-EAFE-431A-B899-33F71929BAE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161571/VisualWare-MyConnection-Server-11.x-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/81",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://myconnectionserver.visualware.com/download.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://myconnectionserver.visualware.com/support/newrelease.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securifera.com/advisories/cve-2021-27198/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161571/VisualWare-MyConnection-Server-11.x-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Feb/81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://myconnectionserver.visualware.com/download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://myconnectionserver.visualware.com/support/newrelease.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.securifera.com/advisories/cve-2021-27198/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-26T23:15:11.340",
      "lastModified" : "2025-12-18T15:15:48.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in how p2p/p2p_pd.c in wpa_supplicant before 2.10 processes P2P (Wi-Fi Direct) provision discovery requests. It could result in denial of service or other impact (potentially execution of arbitrary code), for an attacker within radio range."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en la manera en que el archivo p2p/p2p_pd.c en wpa_supplicant versiones anteriores a  2.10, procesa unas peticiones de detección de aprovisionamiento P2P (Wi-Fi Direct).&#xa0;Podría resultar en una denegación de servicio u otro impacto (potencialmente una ejecución de código arbitraria), para un atacante dentro del alcance del radio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndExcluding" : "2.10",
            "matchCriteriaId" : "28E6B937-278A-4604-B342-2C458AE97C3C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/27/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4898",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/25/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/02/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IZGUR5XFHATVXTRAEJMODS7ROYHA56NX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KOGP2VIVVXXQ6CZ2HU4DKGPDB4WR24XF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SEHS2CFGH3KCSNPHBHNGN5SGV6QPMLZ4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://w1.fi/security/2021-1/0001-P2P-Fix-a-corner-case-in-peer-addition-based-on-PD-R.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://w1.fi/security/2021-1/wpa_supplicant-p2p-provision-discovery-processing-vulnerability.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/25/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25281",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:13.847",
      "lastModified" : "2024-11-21T05:54:40.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema por medio de SaltStack Salt versiones anteriores a 3002.5.&#xa0;salt-api no respeta las credenciales de eauth para el cliente wheel_async.&#xa0;Por lo tanto, un atacante puede ejecutar remotamente cualquier módulo wheel en el maestro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.saltstack.com/blog/active-saltstack-cve-announced-2021-jan-21/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25282",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:13.910",
      "lastModified" : "2024-11-21T05:54:40.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema por medio de SaltStack Salt versiones anteriores a 3002.5.&#xa0;El método salt.wheel.pillar_roots.write es vulnerable a un salto de directorios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162058/SaltStack-Salt-API-Unauthenticated-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25283",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:13.973",
      "lastModified" : "2024-11-21T05:54:40.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema por medio de SaltStack Salt versiones anteriores a 3002.5.&#xa0;El renderizador jinja no protege contra ataques de inyección de plantilla del lado del servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25284",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:14.037",
      "lastModified" : "2024-11-21T05:54:40.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in through SaltStack Salt before 3002.5. salt.modules.cmdmod can log credentials to the info or error log level."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema por medio de SaltStack Salt versiones anteriores a 3002.5.&#xa0;salt.modules.cmdmod puede registrar credenciales para el nivel de registro de información o error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        }, {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:14.113",
      "lastModified" : "2024-11-21T06:20:58.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SaltStack Salt before 3002.5, eauth tokens can be used once after expiration. (They might be used to run command against the salt master or minions.)"
      }, {
        "lang" : "es",
        "value" : "En SaltStack Salt versiones anteriores a 3002.5, los tokens de eauth pueden ser usados una vez después de su vencimiento.&#xa0;(Pueden ser usados para ejecutar un comando contra el maestro de sal o los minions)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:14.190",
      "lastModified" : "2024-11-21T06:20:59.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SaltStack Salt before 3002.5. Sending crafted web requests to the Salt API can result in salt.utils.thin.gen_thin() command injection because of different handling of single versus double quotes. This is related to salt/utils/thin.py."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SaltStack Salt versiones anteriores a 3002.5.&#xa0;El envío de peticiones web diseñadas a la API de Salt puede resultar en una inyección del comando de la función salt.utils.thin.gen_thin() debido al manejo diferente de las comillas simples y las dobles.&#xa0;Esto está relacionado con el archivo salt/utils/thin.py"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:14.253",
      "lastModified" : "2024-11-21T06:21:00.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "i-doit before 1.16.0 is affected by Stored Cross-Site Scripting (XSS) issues that could allow remote authenticated attackers to inject arbitrary web script or HTML via C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, or SM2__C__MONITORING__CONFIG__ADDRESS."
      }, {
        "lang" : "es",
        "value" : "i-doit versiones anteriores a 1.16.0 está afectada por problemas de tipo Cross-Site Scripting (XSS) almacenado que podrían permitir a atacantes remotos autenticados inyectar script web o HTML por medio de C__MONITORING__CONFIG__TITLE, SM2__C__MONITORING__CONFIG__TITLE, C__MONITORING__CONFIG__PATH, SM2__C__MONITORING__CONFIG__PATH, C__MONITORING__CONFIG__ADDRESS, o SM2__C__MONITORING__CONFIG__ADDRESS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:i-doit:i-doit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "C2201218-5955-4820-9B07-B9430FBBD9AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162815/i-doit-1.15.2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.i-doit.org/news/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-056",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162815/i-doit-1.15.2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.i-doit.org/news/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3197",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T05:15:14.317",
      "lastModified" : "2024-11-21T06:21:07.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SaltStack Salt versiones anteriores a 3002.5.&#xa0;El cliente ssh de salt-api es vulnerable a una inyección de shell al incluir ProxyCommand en un argumento, o por medio de ssh_options proporcionadas en una petición de API"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2015.8.10",
            "matchCriteriaId" : "0F9405E3-F2B0-41BA-A39D-61BB38475A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015.8.11",
            "versionEndExcluding" : "2015.8.13",
            "matchCriteriaId" : "A35C23D3-82D4-46E7-BF08-9229C04C0C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.0",
            "versionEndExcluding" : "2016.3.4",
            "matchCriteriaId" : "B4741BD5-4C40-48BC-A2C1-E6AB33818201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.5",
            "versionEndExcluding" : "2016.3.6",
            "matchCriteriaId" : "7D28A2B5-316A-45DC-AC85-A0F743C4B3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.7",
            "versionEndExcluding" : "2016.3.8",
            "matchCriteriaId" : "17C96153-85C1-45DC-A48B-46A3900246E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.3.9",
            "versionEndExcluding" : "2016.11.3",
            "matchCriteriaId" : "67FBC561-336A-4F25-B347-C4CA029B6E30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.4",
            "versionEndExcluding" : "2016.11.5",
            "matchCriteriaId" : "A5E17739-655C-4FAC-A73B-985132B32C73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.11.7",
            "versionEndExcluding" : "2016.11.10",
            "matchCriteriaId" : "11D84847-0C8A-473A-9186-46FABD7BB59A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2017.5.0",
            "versionEndExcluding" : "2017.7.8",
            "matchCriteriaId" : "3721B047-2595-4E79-8FDD-B1224FC0DD2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.2.0",
            "versionEndIncluding" : "2018.3.5",
            "matchCriteriaId" : "EB8FA088-6AAD-46DF-884C-7362CB4BE430"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.0",
            "versionEndExcluding" : "2019.2.5",
            "matchCriteriaId" : "F7A2912C-7F48-465D-B7F2-93ECD0D0CB74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.2.6",
            "versionEndExcluding" : "2019.2.8",
            "matchCriteriaId" : "40369149-A5C3-4759-844F-3510559397C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3000",
            "versionEndExcluding" : "3000.6",
            "matchCriteriaId" : "906D2835-186A-455E-84EB-E982564B9CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3001",
            "versionEndExcluding" : "3001.4",
            "matchCriteriaId" : "5F0E0DA3-49F7-4938-9FBD-F3680B1BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3002",
            "versionEndExcluding" : "3002.5",
            "matchCriteriaId" : "6B757DF0-6490-4FE7-9C98-5D8C700A4377"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/saltstack/salt/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7GRVZ5WAEI3XFN2BDTL6DDXFS5HYSDVB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FUGLOJ6NXLCIFRD2JTXBYQEMAEF2B6XH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YOGNT2XWPOYV7YT75DN7PS4GIYWFKOK5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://saltproject.io/security_announcements/active-saltstack-cve-release-2021-feb-25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-02-27T06:15:12.493",
      "lastModified" : "2024-11-21T05:57:23.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos SerComm AG Combo VD625 versión AGSOT_2.1.0, permiten una inyección CRLF (para la inyección del encabezado HTTP) en la función download por medio del encabezado Content-Disposition"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sercomm:agcombo_vd625_firmware:agsot_2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D10ACE6-DEF8-404E-9224-FE32A4E68F7F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sercomm:agcombo_vd625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "230B02A1-F952-494D-8C13-789687827D4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sercomm.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cybertuz.com/blog/post/crlf-injection-CVE-2021-27132",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://sercomm.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://cybertuz.com/blog/post/crlf-injection-CVE-2021-27132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27225",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T01:15:12.467",
      "lastModified" : "2024-11-21T05:57:38.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users (who have coding permissions) to read and overwrite notebooks in projects that they are not authorized to access."
      }, {
        "lang" : "es",
        "value" : "En Dataiku DSS versiones anteriores a 8.0.6, un control de acceso insuficiente en la integración de cuadernos Jupyter permite a usuarios (que poseen permisos de codificación) leer y sobrescribir cuadernos en proyectos que no están autorizados a acceder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dataiku:data_science_studio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.0.6",
            "matchCriteriaId" : "B6BF81EE-32FF-428A-92CB-A153EC9973AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://doc.dataiku.com/dss/8.0/security/advisories/cve-2021-27225.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://doc.dataiku.com/dss/latest/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://doc.dataiku.com/dss/8.0/security/advisories/cve-2021-27225.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://doc.dataiku.com/dss/latest/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25122",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-01T12:15:13.793",
      "lastModified" : "2024-11-21T05:54:23.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request."
      }, {
        "lang" : "es",
        "value" : "Cuando se responde a nuevas peticiones de conexión h2c, Apache Tomcat versiones 10.0.0-M1 hasta 10.0.0, versiones 9.0.0.M1 hasta 9.0.41 y versiones 8.5.0 hasta 8.5.61, podrían duplicar los encabezados de petición y una cantidad limitada del cuerpo de petición de una petición a otra, lo que significa que el usuario A y el usuario B podrían visualizar los resultados de la petición del usuario A"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0",
            "versionEndIncluding" : "8.5.61",
            "matchCriteriaId" : "B4ABB491-6750-457E-B5A4-67C1146CB15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.0.41",
            "matchCriteriaId" : "A9DFCBAF-1583-4C2F-8776-76F4DCB582B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "EF411DDA-2601-449A-9046-D250419A0E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4FBF97-DE16-4E5E-BE19-471E01818D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "3B266B1E-24B5-47EE-A421-E0E3CC0C7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "29614C3A-6FB3-41C7-B56E-9CC3F45B04F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AB156C-8FF6-4727-AF75-590D0DCB3F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7CC5E9-3631-4073-84C8-2C12D90686CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "90CD7E85-4FF9-4158-AC78-4BFCBC882A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9FF07-1B93-4F8C-AC56-7CA74E61B724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA56B52-1015-40CD-B10C-393768094269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "501B0D4A-D636-4736-979B-D5023599CEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "94E7764F-BF9E-463E-B446-A9A8DB92BB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9F7EE-AF2A-43E5-B708-0198784AB45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "AC872C5F-63AF-4BB8-8629-334FC9704AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "94B95C95-DF3E-49C1-9CA0-4474DD7EF7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "310B0163-01DE-40DA-A2EA-FFA4A6100037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "75420449-A951-4133-A5F1-4C01F2DF843B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14ABF04-E460-4911-9C6C-B7BCEFE68E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E5C9B0-AB25-4744-88E4-FD0C4A853001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A94B36-479F-48F2-9B9E-ACEA2589EF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "46E7237C-00BD-4490-96C3-A8EAE4CE2C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "02E34416-E767-4F61-8D2C-0D0202351F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.3.0",
            "matchCriteriaId" : "38532AE4-9C9F-4182-A791-FCD2BE27DEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graph_server_and_client:21.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715F9279-F31E-4CC0-A105-95A008EACBA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F69B9A5-F21B-4904-9F27-95C0F7A628E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E3E923-E2AD-400D-A618-26ADF7F841A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB58D27-37F2-4A32-B786-3490024290A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "F48F2267-61EA-4F12-ADE9-85CB6F6B290E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.9",
            "matchCriteriaId" : "90605BF7-9C9B-4AC2-83B6-3666C5A15D43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/01/1",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-34",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4891",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b95bc248603360501f18c8eb03bb6001ec0ee3296205b34b07105b7%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd90bf36b1877e1310b87ecd14ed7bbb15da52b297efd9f0e7253a3b%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0463f9a5cbc02a485404c4b990f0da452e5ac5c237808edba11c947%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25329",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-01T12:15:14.280",
      "lastModified" : "2024-11-21T05:54:45.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue."
      }, {
        "lang" : "es",
        "value" : "La corrección para el CVE-2020-9484 estaba incompleta.&#xa0;Cuando se usa Apache Tomcat versiones 10.0.0-M1 hasta 10.0.0, versiones 9.0.0.M1 hasta 9.0.41, versiones 8.5.0 hasta 8.5.61 o versiones 7.0.0.&#xa0;hasta 7.0.107, con un caso de borde de configuración que era muy poco probable que se usara, la instancia de Tomcat seguía siendo vulnerable a CVE-2020-9494.&#xa0;Tome en cuenta que tanto los requisitos previos publicados anteriormente para CVE-2020-9484 como las mitigaciones publicadas anteriormente para CVE-2020-9484 también se aplican a este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.107",
            "matchCriteriaId" : "1E998F73-DAF4-46E6-A766-EEA9FE9ABA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0",
            "versionEndIncluding" : "8.5.61",
            "matchCriteriaId" : "B4ABB491-6750-457E-B5A4-67C1146CB15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.0.41",
            "matchCriteriaId" : "A9DFCBAF-1583-4C2F-8776-76F4DCB582B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "9D0689FE-4BC0-4F53-8C79-34B21F9B86C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "89B129B2-FB6F-4EF9-BF12-E589A87996CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone11:*:*:*:*:*:*",
            "matchCriteriaId" : "8B6787B6-54A8-475E-BA1C-AB99334B2535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone12:*:*:*:*:*:*",
            "matchCriteriaId" : "EABB6FBC-7486-44D5-A6AD-FFF1D3F677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone13:*:*:*:*:*:*",
            "matchCriteriaId" : "E10C03BC-EE6B-45B2-83AE-9E8DFB58D7DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone14:*:*:*:*:*:*",
            "matchCriteriaId" : "8A6DA0BE-908C-4DA8-A191-A0113235E99A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone15:*:*:*:*:*:*",
            "matchCriteriaId" : "39029C72-28B4-46A4-BFF5-EC822CFB2A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone16:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2E05A3-014F-4C4D-81E5-88E725FBD6AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone17:*:*:*:*:*:*",
            "matchCriteriaId" : "166C533C-0833-41D5-99B6-17A4FAB3CAF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone18:*:*:*:*:*:*",
            "matchCriteriaId" : "D3768C60-21FA-4B92-B98C-C3A2602D1BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone19:*:*:*:*:*:*",
            "matchCriteriaId" : "DDD510FA-A2E4-4BAF-A0DE-F4E5777E9325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "9F542E12-6BA8-4504-A494-DA83E7E19BD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone20:*:*:*:*:*:*",
            "matchCriteriaId" : "C2409CC7-6A85-4A66-A457-0D62B9895DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone21:*:*:*:*:*:*",
            "matchCriteriaId" : "B392A7E5-4455-4B1C-8FAC-AE6DDC70689E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone22:*:*:*:*:*:*",
            "matchCriteriaId" : "EF411DDA-2601-449A-9046-D250419A0E1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone23:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D8F2F4-AFE2-47EA-A3FD-79B54324DE02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone24:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4FBF97-DE16-4E5E-BE19-471E01818D40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone25:*:*:*:*:*:*",
            "matchCriteriaId" : "3B266B1E-24B5-47EE-A421-E0E3CC0C7471"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone26:*:*:*:*:*:*",
            "matchCriteriaId" : "29614C3A-6FB3-41C7-B56E-9CC3F45B04F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone27:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AB156C-8FF6-4727-AF75-590D0DCB3F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "C0C5F004-F7D8-45DB-B173-351C50B0EC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "D1902D2E-1896-4D3D-9E1C-3A675255072C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "49AAF4DF-F61D-47A8-8788-A21E317A145D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "454211D0-60A2-4661-AECA-4C0121413FEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "0686F977-889F-4960-8E0B-7784B73A7F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "558703AE-DB5E-4DFF-B497-C36694DD7B24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:9.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6273F2-1165-47A4-8DD7-9E9B2472941B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7CC5E9-3631-4073-84C8-2C12D90686CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "90CD7E85-4FF9-4158-AC78-4BFCBC882A65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone10:*:*:*:*:*:*",
            "matchCriteriaId" : "83B9FF07-1B93-4F8C-AC56-7CA74E61B724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7EA56B52-1015-40CD-B10C-393768094269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "501B0D4A-D636-4736-979B-D5023599CEFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "94E7764F-BF9E-463E-B446-A9A8DB92BB97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "53A9F7EE-AF2A-43E5-B708-0198784AB45A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "AC872C5F-63AF-4BB8-8629-334FC9704AE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "94B95C95-DF3E-49C1-9CA0-4474DD7EF7B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "310B0163-01DE-40DA-A2EA-FFA4A6100037"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tomcat:10.0.0:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "75420449-A951-4133-A5F1-4C01F2DF843B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D14ABF04-E460-4911-9C6C-B7BCEFE68E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_security_edge_protection_proxy:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45E5C9B0-AB25-4744-88E4-FD0C4A853001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_instant_messaging_server:10.0.1.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A94B36-479F-48F2-9B9E-ACEA2589EF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "46E7237C-00BD-4490-96C3-A8EAE4CE2C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:21c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "02E34416-E767-4F61-8D2C-0D0202351F91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.3.0",
            "matchCriteriaId" : "38532AE4-9C9F-4182-A791-FCD2BE27DEA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EA4BA7-C38B-4AF3-8914-9E3D089EBDD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9C9BC66-FA5F-4774-9BDA-7AB88E2839C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F69B9A5-F21B-4904-9F27-95C0F7A628E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E3E923-E2AD-400D-A618-26ADF7F841A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:managed_file_transfer:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB58D27-37F2-4A32-B786-3490024290A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "F48F2267-61EA-4F12-ADE9-85CB6F6B290E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.9",
            "matchCriteriaId" : "D2B15024-E757-443B-8424-BBF0A28C3753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_ui_framework:21.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E0A69B-9039-4405-8E87-928DB998E6EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/01/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r732b2ca289dc02df2de820e8775559abd6c207f159e39f559547a085%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-34",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4891",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/01/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r11ce01e8a4c7269b88f88212f21830edf73558997ac7744f37769b77%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r732b2ca289dc02df2de820e8775559abd6c207f159e39f559547a085%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8a2ac0e476dbfc1e6440b09dcc782d444ad635d6da26f0284725a5dc%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb51ccd58b2152fc75125b2406fc93e04ca9d34e737263faa6ff0f41f%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6d5d57b114678d8898005faef31e9fd6d7c981fcc4ccfc3bc272fc9%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cannounce.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cdev.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfe62fbf9d4c314f166fe8c668e50e5d9dd882a99447f26f0367474bf%40%3Cusers.tomcat.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T16:15:14.150",
      "lastModified" : "2024-11-21T05:55:29.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper binary stream data handling issue was found in the [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. Using this bug, an attacker is able to produce a denial of service attack that can eventually shut down the target server."
      }, {
        "lang" : "es",
        "value" : "Se encontró un problema de manejo inapropiado de datos de flujo binario en el módulo [core] de ONLYOFFICE DocumentServer versiones v4.0.0-9-v5.6.3. Al usar este bug, un atacante es capaz de producir un ataque de denegación de servicio que eventualmente puede apagar el servidor de destino"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0-9",
            "versionEndIncluding" : "5.6.3",
            "matchCriteriaId" : "076102C8-B582-4304-AD4E-0CDAE6DF191A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Comments.h#L299",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Core.h#L161",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/NotesMaster.h#L148",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/NotesSlide.h#L141",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Presentation.h#L277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Theme.h#L277",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.10/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1722",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25829",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Comments.h#L299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Core.h#L161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/NotesMaster.h#L148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/NotesSlide.h#L141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Presentation.h#L277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/c1e4a2ce33bdcfab29d670f5fdb10fc63cf5fd6a/ASCOfficePPTXFile/PPTXFormat/Theme.h#L277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.10/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T16:15:14.293",
      "lastModified" : "2024-11-21T05:55:29.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.2.0.236-v5.6.4.13. An attacker must request the conversion of the crafted file from DOCT into DOCX format. Using the chain of two other bugs related to improper string handling, an attacker can achieve remote code execution on DocumentServer."
      }, {
        "lang" : "es",
        "value" : "Se encontró un problema de manejo de extensiones de archivo en el módulo [core] de ONLYOFFICE DocumentServer versiones v4.2.0.236-v5.6.4.13.&#xa0;Un atacante debe pedir la conversión del archivo diseñado de DOCT al formato DOCX.&#xa0;Al usar la cadena de otros dos bugs relacionados con el manejo inapropiado de cadenas, un atacante puede lograr una ejecución de código remota en DocumentServer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0.236",
            "versionEndIncluding" : "5.6.4.13",
            "matchCriteriaId" : "6B7DFCC7-0208-4A3F-8D64-96188179A17F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1918",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L241",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/PPTXFormat/Logic/UniFill.cpp#L343",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25830",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/PPTXFormat/Logic/UniFill.cpp#L343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25830",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T16:15:14.353",
      "lastModified" : "2024-11-21T05:55:29.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A file extension handling issue was found in [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v5.6.3. An attacker must request the conversion of the crafted file from PPTT into PPTX format. Using the chain of two other bugs related to improper string handling, a remote attacker can obtain remote code execution on DocumentServer."
      }, {
        "lang" : "es",
        "value" : "Se encontró un problema de manejo de extensiones de archivo en el módulo [core] de ONLYOFFICE DocumentServer versiones v4.0.0-9-v5.6.3.&#xa0;Un atacante debe pedir la conversión del archivo diseñado de PPTT a formato PPTX.&#xa0;Al Usar la cadena de otros dos bugs relacionados con el manejo inapropiado de cadenas, un atacante remoto puede obtener una ejecución de código remota en DocumentServer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0-9",
            "versionEndIncluding" : "5.6.3",
            "matchCriteriaId" : "076102C8-B582-4304-AD4E-0CDAE6DF191A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1918",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L241",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/PPTXFormat/Logic/Fills/BlipFill.cpp#L328",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25831",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L1918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v5.6.4.13/ASCOfficePPTXFile/PPTXFormat/Logic/Fills/BlipFill.cpp#L328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T16:15:14.433",
      "lastModified" : "2024-11-21T05:55:29.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap buffer overflow vulnerability inside of BMP image processing was found at [core] module of ONLYOFFICE DocumentServer v4.0.0-9-v6.0.0. Using this vulnerability, an attacker is able to gain remote code executions on DocumentServer."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de desbordamiento del búfer de la pila dentro del procesamiento de imágenes BMP en el módulo [core] de ONLYOFFICE DocumentServer versiones v4.0.0-9-v6.0.0.&#xa0;Con esta vulnerabilidad, un atacante puede conseguir ejecuciones de código remota en DocumentServer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0-9",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "3C5F2057-EA98-491B-A990-DA671ED4B84B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L424",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L428",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L354",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L358",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25832",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L424",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/ASCOfficePPTXFile/Editor/BinaryFileReaderWriter.cpp#L428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/core/blob/v6.0.1.15/DesktopEditor/cximage/CxImage/ximabmp.cpp#L358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T16:15:14.510",
      "lastModified" : "2024-11-21T05:55:29.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code execution on DocumentServer."
      }, {
        "lang" : "es",
        "value" : "Se encontró un problema de manejo de extensiones de archivo en el módulo [server] de ONLYOFFICE DocumentServer versiones v4.2.0.71-v5.6.0.21.&#xa0;La extensión del archivo está controlada por un atacante por medio de los datos de una petición y conlleva a una sobrescritura arbitraria del archivo.&#xa0;Con esta vulnerabilidad, un atacante remoto puede obtener una ejecución de código remota en DocumentServer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onlyoffice:document_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0.71",
            "versionEndIncluding" : "5.6.0.21",
            "matchCriteriaId" : "44FEDB54-DC75-4509-BBC1-1D2342FA95D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server/blob/v5.6.0.21/DocService/sources/converterservice.js#L200",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server/blob/v5.6.0.21/FileConverter/sources/converter.js#L283",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server/blob/v5.6.0.21/FileConverter/sources/converter.js#L593",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25833",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/DocumentServer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server/blob/v5.6.0.21/DocService/sources/converterservice.js#L200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server/blob/v5.6.0.21/FileConverter/sources/converter.js#L283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ONLYOFFICE/server/blob/v5.6.0.21/FileConverter/sources/converter.js#L593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/merrychap/poc_exploits/tree/master/ONLYOFFICE/CVE-2021-25833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22114",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-03-01T18:15:19.690",
      "lastModified" : "2024-11-21T05:49:32.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder."
      }, {
        "lang" : "es",
        "value" : "Aborda la corrección parcial en el CVE-2018-1263.&#xa0;Spring-integration-zip, versiones anteriores a 1.0.4, expone una vulnerabilidad de escritura de archivo arbitraria, que puede ser lograda usando un archivo zip especialmente diseñado (también afecta a otros archivos, bzip2, tar, xz, war, cpio, 7z), que contiene nombres de archivo de salto de ruta.&#xa0;Entonces, cuando el nombre de archivo se concatena al directorio de extracción de destino, la ruta final termina fuera de la carpeta de destino"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_integration_zip:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4",
            "matchCriteriaId" : "D402FDCB-C91F-4BDE-88F7-062F0F1CEF08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tanzu.vmware.com/security/cve-2021-22114",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tanzu.vmware.com/security/cve-2021-22114",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25914",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-01T18:15:19.957",
      "lastModified" : "2025-04-30T18:15:32.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'object-collider' versions 1.0.0 through 1.0.3 allows attacker to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contaminación de prototipo en \"object-collider\" versiones 1.0.0 hasta 1.0.3, permite al atacante causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fireblink:object-collider:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.0.3",
            "matchCriteriaId" : "66A8479E-39A6-469A-84AF-9C6916493CEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FireBlinkLTD/object-collider/commit/321f75a7f8e7b3393e5b7dd6dd9ab26ede5906e5",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25914",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FireBlinkLTD/object-collider/commit/321f75a7f8e7b3393e5b7dd6dd9ab26ede5906e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21515",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-01T21:15:13.957",
      "lastModified" : "2024-11-21T05:48:30.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC SourceOne, versions 7.2SP10 and prior, contain a Stored Cross-Site Scripting vulnerability. A remote low privileged attacker may potentially exploit this vulnerability, to hijack user sessions or to trick a victim application user to unknowingly send arbitrary requests to the server."
      }, {
        "lang" : "es",
        "value" : "Dell EMC SourceOne, versiones 7.2SP10 y anteriores, contienen una vulnerabilidad de tipo Cross-Site Scripting almacenado.&#xa0;Un atacante remoto poco privilegiado puede explotar esta vulnerabilidad para secuestrar sesiones de usuario o engañar a un usuario de la aplicación víctima para que, sin saberlo, envíe peticiones arbitrarias al servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.2",
            "matchCriteriaId" : "D9E8FCF9-784C-455D-8DE6-94DD68592B4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "78352AD1-92DC-43D8-9200-6125DF04A51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "4091F5F1-A616-46C9-871A-E1EB0E7F6C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F4863595-10CD-4F4A-A9F4-BB48E32C90CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "B35C81BC-3CC2-4A6A-8C90-64D7A9A756E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp4:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0CBB46-3A9A-4C28-AB65-A4F8533C909B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "6E97B769-1BC9-416F-BAE5-DBF46B430364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp6:*:*:*:*:*:*",
            "matchCriteriaId" : "1ED1553F-CF49-40B1-B4DB-76ACFD469FC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp7:*:*:*:*:*:*",
            "matchCriteriaId" : "CE7D3E3D-3CEA-44C1-A06C-14739116C1AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp8:*:*:*:*:*:*",
            "matchCriteriaId" : "10ABB9CB-5C5F-4238-BB41-F1E491C8BD89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_sourceone:7.2:sp9:*:*:*:*:*:*",
            "matchCriteriaId" : "330A1037-01CA-45B1-BD24-B07AABF14AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183430/dsa-2021-043-dell-emc-sourceone-java-script-xss-stored-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183430/dsa-2021-043-dell-emc-sourceone-java-script-xss-stored-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21517",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-01T21:15:14.350",
      "lastModified" : "2024-11-21T05:48:30.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SRS Policy Manager 6.X is affected by an XML External Entity Injection (XXE) vulnerability due to a misconfigured XML parser that processes user-supplied DTD input without sufficient validation. A remote unauthenticated attacker can potentially exploit this vulnerability to read system files as a non-root user and may be able to temporarily disrupt the ESRS service."
      }, {
        "lang" : "es",
        "value" : "SRS Policy Manager versiones 6.X, está afectado por una vulnerabilidad de Inyección de XML External Entity (XXE) debido a un analizador XML configurado inapropiadamente que procesa una entrada DTD proporcionada por el usuario sin una suficiente comprobación.&#xa0;Un atacante remoto no autenticado puede explotar esta vulnerabilidad para leer archivos de sistema como un usuario no root y puede ser capaz de interrumpir temporalmente el servicio ESRS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_srs_policy_manager:6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543F5FCD-47FD-4F6E-A260-551C02331ED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_srs_policy_manager:6.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E937A556-06B5-4C73-9218-1CC88A18CDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:emc_srs_policy_manager:6.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A03C721-72B7-4353-9645-08AC4F7907C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183576/dsa-2021-045-dell-emc-srs-policy-manager-security-update-for-external-entity-injection-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183576/dsa-2021-045-dell-emc-srs-policy-manager-security-update-for-external-entity-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27317",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T21:15:14.520",
      "lastModified" : "2024-11-21T05:57:47.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the comment parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el archivo contactus.php en Doctor Appointment System versión 1.0, permite a atacantes remotos inyectar un script web o HTML arbitrario por medio del parámetro comment"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161574/Doctor-Appointment-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161574/Doctor-Appointment-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27318",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T21:15:14.600",
      "lastModified" : "2024-11-21T05:57:47.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in contactus.php in Doctor Appointment System 1.0 allows remote attackers to inject arbitrary web script or HTML via the lastname parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el archivo contactus.php en Doctor Appointment System versión 1.0, permite a atacantes remotos inyectar un script web o HTML arbitrario por medio del parámetro lastname"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161574/Doctor-Appointment-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161574/Doctor-Appointment-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3332",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T21:15:14.660",
      "lastModified" : "2024-11-21T06:21:19.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WPS Hide Login 1.6.1 allows remote attackers to bypass a protection mechanism via post_password."
      }, {
        "lang" : "es",
        "value" : "WPS Hide Login versión 1.6.1, permite a atacantes remotos omitir un mecanismo de protección por medio de post_password"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpserveur:wps_hide_login:1.6.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "0E08DD01-15BD-435F-B3D7-A73E8710A624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sebastianschmitt.eu/security/wps-hide-login-1-6-1-protection-bypass-cve-2021-3332",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sebastianschmitt.eu/security/wps-hide-login-1-6-1-protection-bypass-cve-2021-3332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26475",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:13.973",
      "lastModified" : "2024-11-21T05:56:25.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPrints 3.4.2 exposes a reflected XSS opportunity in the via a cgi/cal URI."
      }, {
        "lang" : "es",
        "value" : "EPrints versión 3.4.2, expone una oportunidad de XSS reflejado por medio de un URI cgi/cal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eprints:eprints:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC28A4A1-740F-407D-BDEE-4B0141510B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://files.eprints.org/2548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.053",
      "lastModified" : "2024-11-21T05:56:25.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPrints 3.4.2 allows remote attackers to execute OS commands via crafted LaTeX input to a cgi/cal?year= URI."
      }, {
        "lang" : "es",
        "value" : "EPrints versión 3.4.2, permite a los atacantes remotos ejecutar comandos del sistema operativo por medio de la entrada LaTeX diseñada a un URI cgi/cal?year="
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eprints:eprints:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC28A4A1-740F-407D-BDEE-4B0141510B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://files.eprints.org/2548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26702",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.117",
      "lastModified" : "2024-11-21T05:56:42.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI."
      }, {
        "lang" : "es",
        "value" : "EPrints versión 3.4.2, expone una oportunidad de XSS reflejado en el parámetro dataset en el URI cgi/dataset_dictionary"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eprints:eprints:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC28A4A1-740F-407D-BDEE-4B0141510B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://files.eprints.org/2548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26703",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.177",
      "lastModified" : "2024-11-21T05:56:42.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted JSON/XML input to a cgi/ajax/phrase URI."
      }, {
        "lang" : "es",
        "value" : "EPrints versión 3.4.2, permite a los atacantes remotos leer archivos arbitrarios y posiblemente ejecutar comandos por medio de una entrada JSON/XML diseñada en un URI cgi/ajax/phrase"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eprints:eprints:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC28A4A1-740F-407D-BDEE-4B0141510B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://files.eprints.org/2548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2549/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26704",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.270",
      "lastModified" : "2024-11-21T05:56:42.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI."
      }, {
        "lang" : "es",
        "value" : "EPrints versión 3.4.2, permite a atacantes remotos ejecutar comandos arbitrarios por medio de la entrada diseñada en el parámetro verb en un URI cgi/toolbox/toolbox"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eprints:eprints:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC28A4A1-740F-407D-BDEE-4B0141510B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://files.eprints.org/2548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2549/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.350",
      "lastModified" : "2025-11-03T15:16:19.523",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. By using crafted input parameters in one of these commands, an attacker can access an arbitrary file on the system using System privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Veritas Backup Exec versiones anteriores a 21.2.&#xa0;La comunicación entre un cliente y un agente requiere una autenticación con éxito, que generalmente se completa por medio de una comunicación TLS segura.&#xa0;Sin embargo, debido a una vulnerabilidad en el esquema de autenticación SHA, un atacante puede conseguir acceso no autorizado y completar el proceso de autenticación.&#xa0;Posteriormente, el cliente puede ejecutar comandos de protocolo de gestión de datos en la conexión autenticada.&#xa0;Mediante el uso de parámetros de entrada diseñados en uno de estos comandos, un atacante puede acceder a un archivo arbitrario en el sistema utilizando privilegios system"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:P/A:N",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-04-07",
      "cisaActionDue" : "2023-04-28",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Veritas Backup Exec Agent File Access Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "2E6F2EEE-7E5A-4EA1-87F2-97C26EAE8FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS21-001#issue2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS21-001#issue2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27876",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.460",
      "lastModified" : "2025-11-03T15:16:26.793",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This authentication scheme is no longer used in current versions of the product, but hadn't yet been disabled. An attacker could remotely exploit this scheme to gain unauthorized access to an Agent and execute privileged commands."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Veritas Backup Exec versiones anteriores a 21.2.&#xa0;Admite múltiples esquemas de autenticación: la autenticación SHA es uno de ellos.&#xa0;Este esquema de autenticación ya no se utiliza en las versiones actuales del producto, pero aún no se ha desactivado.&#xa0;Un atacante podría explotar este esquema remotamente para conseguir acceso no autorizado a un agente y ejecutar comandos privilegiados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-04-07",
      "cisaActionDue" : "2023-04-28",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Veritas Backup Exec Agent Improper Authentication Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "2E6F2EEE-7E5A-4EA1-87F2-97C26EAE8FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS21-001#issue1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS21-001#issue1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27877",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.537",
      "lastModified" : "2025-11-03T15:16:31.977",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is typically completed over a secure TLS communication. However, due to a vulnerability in the SHA Authentication scheme, an attacker is able to gain unauthorized access and complete the authentication process. Subsequently, the client can execute data management protocol commands on the authenticated connection. The attacker could use one of these commands to execute an arbitrary command on the system using system privileges."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Veritas Backup Exec versiones anteriores a 21.2.&#xa0;La comunicación entre un cliente y un agente requiere una autenticación con éxito, que generalmente se completa por medio de una comunicación TLS segura.&#xa0;Sin embargo, debido a una vulnerabilidad en el esquema de autenticación SHA, un atacante puede conseguir acceso no autorizado y completar el proceso de autenticación.&#xa0;Posteriormente, el cliente puede ejecutar comandos de protocolo de gestión de datos en la conexión autenticada.&#xa0;El atacante podría usar uno de estos comandos para ejecutar un comando arbitrario en el sistema usando privilegios system"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-04-07",
      "cisaActionDue" : "2023-04-28",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Veritas Backup Exec Agent Command Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritas:backup_exec:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "2E6F2EEE-7E5A-4EA1-87F2-97C26EAE8FCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS21-001#issue3",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/168506/Veritas-Backup-Exec-Agent-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.veritas.com/content/support/en_US/security/VTS21-001#issue3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27878",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3342",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T22:15:14.630",
      "lastModified" : "2024-11-21T06:21:20.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EPrints 3.4.2 allows remote attackers to read arbitrary files and possibly execute commands via crafted LaTeX input to a cgi/latex2png?latex= URI."
      }, {
        "lang" : "es",
        "value" : "EPrints versiones 3.4.2, permite a los atacantes remotos leer archivos arbitrarios y posiblemente ejecutar comandos por medio de la entrada LaTeX diseñada en un URI cgi/latex2png?latex="
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eprints:eprints:3.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC28A4A1-740F-407D-BDEE-4B0141510B58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://files.eprints.org/2548/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2549/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2548/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://files.eprints.org/2549/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/grymer/CVE/blob/master/eprints_security_review.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27884",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-01T23:15:13.267",
      "lastModified" : "2024-11-21T05:58:41.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs because Math.random in Node.js is used."
      }, {
        "lang" : "es",
        "value" : "La generación de secretos de firma débil de JSON Web Token (JWT) en YMFE YApi versiones hasta 1.9.2, permite la recreación de los tokens JWT de otros usuarios.&#xa0;Esto ocurre porque se usa Math.random en Node.js"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ymfe:yapi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.2",
            "matchCriteriaId" : "D457FF7A-2FFE-425F-A0B8-C6F292C4DA10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/YMFE/yapi/issues/2117",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2020-228-YMFE-yapi",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/YMFE/yapi/issues/2117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://securitylab.github.com/advisories/GHSL-2020-228-YMFE-yapi",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27886",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T00:15:18.097",
      "lastModified" : "2024-11-21T05:58:41.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rakibtg Docker Dashboard before 2021-02-28 allows command injection in backend/utilities/terminal.js via shell metacharacters in the command parameter of an API request. NOTE: this is NOT a Docker, Inc. product."
      }, {
        "lang" : "es",
        "value" : "rakibtg Docker Dashboard antes del 28 de febrero de 2021, permite la inyección de comandos en el archivo backend/utilities/terminal.js por medio de metacaracteres de shell en el parámetro del comando de una petición de la API.&#xa0;NOTA: este NO es un producto de Docker, Inc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docker_dashboard_project:docker_dashboard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-02-28",
            "matchCriteriaId" : "44392BD7-3321-4E6C-AF23-CFE01B6FE298"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163416/Docker-Dashboard-Remote-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rakibtg/docker-web-gui/commit/79cdc41809f2030fce21a1109898bd79e4190661",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rakibtg/docker-web-gui/issues/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.docker.com/legal/trademark-guidelines",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163416/Docker-Dashboard-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/rakibtg/docker-web-gui/commit/79cdc41809f2030fce21a1109898bd79e4190661",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rakibtg/docker-web-gui/issues/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.docker.com/legal/trademark-guidelines",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T01:15:12.617",
      "lastModified" : "2024-11-21T05:54:42.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow vulnerability in the AT command interface of Gigaset DX600A v41.00-175 devices allows remote attackers to force a device reboot by sending relatively long AT commands."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desbordamiento del búfer en la interfaz de comando AT de los dispositivos Gigaset DX600A v41.00-175, permite a los atacantes remotos forzar el reinicio del dispositivo mediante el envío de comandos AT relativamente largos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigaset:dx600a_firmware:v41.00-175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2901068-0F89-4C0A-BF34-022FF692511B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gigaset:dx600a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B1ABF1-D851-438F-903A-EA0F36D74B35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2021/02/28/technical-advisory-administrative-passcode-recovery-and-authenticated-remote-buffer-overflow-vulnerabilities-in-gigaset-dx600a-handset-cve-2021-25309-cve-2021-25306/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2021/02/28/technical-advisory-administrative-passcode-recovery-and-authenticated-remote-buffer-overflow-vulnerabilities-in-gigaset-dx600a-handset-cve-2021-25309-cve-2021-25306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T01:15:12.697",
      "lastModified" : "2024-11-21T05:54:43.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The telnet administrator service running on port 650 on Gigaset DX600A v41.00-175 devices does not implement any lockout or throttling functionality. This situation (together with the weak password policy that forces a 4-digit password) allows remote attackers to easily obtain administrative access via brute-force attacks."
      }, {
        "lang" : "es",
        "value" : "El servicio de administrador de telnet que se ejecuta en el puerto 650 en los dispositivos Gigaset DX600A versión v41.00-175, no implementa ninguna funcionalidad de bloqueo o limitación.&#xa0;Esta situación (junto con la política de contraseña débil que forza una contraseña de 4 dígitos) permite a los atacantes remotos obtener fácilmente acceso administrativo por medio de ataques de fuerza bruta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        }, {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:gigaset:dx600a_firmware:v41.00-175:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2901068-0F89-4C0A-BF34-022FF692511B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:gigaset:dx600a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38B1ABF1-D851-438F-903A-EA0F36D74B35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.nccgroup.com/2021/02/28/technical-advisory-administrative-passcode-recovery-and-authenticated-remote-buffer-overflow-vulnerabilities-in-gigaset-dx600a-handset-cve-2021-25309-cve-2021-25306/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://research.nccgroup.com/2021/02/28/technical-advisory-administrative-passcode-recovery-and-authenticated-remote-buffer-overflow-vulnerabilities-in-gigaset-dx600a-handset-cve-2021-25309-cve-2021-25306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27731",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T01:15:12.757",
      "lastModified" : "2024-11-21T05:58:28.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accellion FTA 9_12_432 and earlier is affected by stored XSS via a crafted POST request to a user endpoint. The fixed version is FTA_9_12_444 and later."
      }, {
        "lang" : "es",
        "value" : "Accellion FTA versiones 9_12_432 y anteriores, está afectado por una vulnerabilidad de tipo XSS almacenado por medio de una petición POST diseñada para un endpoint de usuario.&#xa0;La versión corregida es FTA _9_12_444 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:fta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_432",
            "matchCriteriaId" : "4BDE3544-2C79-4D8C-90B9-79FB424A2105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27731.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27731.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T01:15:12.853",
      "lastModified" : "2024-11-21T05:58:35.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "JPEG XL (aka jpeg-xl) through 0.3.2 allows writable memory corruption."
      }, {
        "lang" : "es",
        "value" : "JPEG XL (también se conoce como jpeg-xl) hasta versión 0.3.2, permite la corrupción de la memoria grabable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libjxl_project:libjxl:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.3.2",
            "matchCriteriaId" : "1E5AB915-CE12-4D2B-8BC4-C1C5FFF48297"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161623/jpeg-xl-0.3.1-Memory-Corruption.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/01/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wg1/jpeg-xl/-/tags",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161623/jpeg-xl-0.3.1-Memory-Corruption.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/01/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wg1/jpeg-xl/-/tags",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27888",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T01:15:12.930",
      "lastModified" : "2024-11-21T05:58:42.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZendTo before 6.06-4 Beta allows XSS during the display of a drop-off in which a filename has unexpected characters."
      }, {
        "lang" : "es",
        "value" : "ZendTo versiones anteriores a 6.06-4 Beta, permite un ataque de tipo XSS durante el despliegue de una entrega en la que un nombre de archivo tiene caracteres no previstos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zendto:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.05-4",
            "matchCriteriaId" : "6CE643BC-F0D2-4213-992F-91D77B8130DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zendto:6.06-1:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "09903718-8703-454A-B8A5-6BC8F5DCB5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zendto:6.06-2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "113516D5-D9B8-4C56-BC57-38F0C0114A0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zend:zendto:6.06-3:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "60DE9A57-FF0A-41FA-9834-88B36DBE343E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://zend.to/changelog.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://zend.to/changelog.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27730",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T02:15:13.510",
      "lastModified" : "2024-11-21T05:58:28.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Accellion FTA 9_12_432 and earlier is affected by argument injection via a crafted POST request to an admin endpoint. The fixed version is FTA_9_12_444 and later."
      }, {
        "lang" : "es",
        "value" : "Accellion FTA versiones 9_12_432 y anteriores, está afectado por una inyección de argumentos por medio de una petición POST diseñada para un endpoint de administración.&#xa0;La versión fija es FTA_9_12_444 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accellion:fta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9_12_432",
            "matchCriteriaId" : "4BDE3544-2C79-4D8C-90B9-79FB424A2105"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27730.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/accellion/CVEs/blob/main/CVE-2021-27730.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21320",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-02T03:15:13.213",
      "lastModified" : "2024-11-21T05:48:00.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "matrix-react-sdk is an npm package which is a Matrix SDK for React Javascript. In matrix-react-sdk before version 3.15.0, the user content sandbox can be abused to trick users into opening unexpected documents. The content is opened with a `blob` origin that cannot access Matrix user data, so messages and secrets are not at risk. This has been fixed in version 3.15.0."
      }, {
        "lang" : "es",
        "value" : "matrix-react-sdk es un paquete npm que es un Matrix SDK para React Javascript.&#xa0;En matrix-react-sdk anterior a la versión 3.15.0, el sandbox del contenido del usuario puede ser abusado para engañar a los usuarios para que abran documentos inesperados.&#xa0;El contenido es abierto con un origen \"blob\" que no puede acceder a los datos del usuario de Matrix, por lo que los mensajes y secretos no están en riesgo.&#xa0;Esto ha sido corregido en la versión 3.15.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix-react-sdk_project:matrix-react-sdk:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.15.0",
            "matchCriteriaId" : "AFAB6F64-94AF-40C9-9D0F-960483AED3F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/commit/b386f0c73b95ecbb6ea7f8f79c6ff5171a8dedd1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/pull/5657",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-52mq-6jcv-j79x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/matrix-react-sdk",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/commit/b386f0c73b95ecbb6ea7f8f79c6ff5171a8dedd1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/pull/5657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/matrix-react-sdk/security/advisories/GHSA-52mq-6jcv-j79x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/matrix-react-sdk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21321",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-02T04:15:12.487",
      "lastModified" : "2024-11-21T05:48:01.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-reply-from before version 4.0.2, by crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is \"/pub/\", a user expect that accessing \"/priv\" on the target service would not be possible. In affected versions, it is possible. This is fixed in version 4.0.2."
      }, {
        "lang" : "es",
        "value" : "fastify-reply-from es un paquete npm que es un plugin fastify para reenviar la petición http actual a otro servidor.&#xa0;En fastify-reply-from anterior a la versión 4.0.2, al diseñar una URL específica, es posible escapar del prefijo del servicio de backend proxy.&#xa0;Si la URL base del servidor proxy es \"/pub/\", el usuario espera que no sea posible acceder a \"/priv\" en el servicio de destino.&#xa0;En versiones afectadas, es posible.&#xa0;Esto se corrige en la versión 4.0.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify-reply-from_project:fastify-reply-from:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.2",
            "matchCriteriaId" : "FABC1851-154A-4609-849E-ED8D1903E530"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/fastify-reply-from/commit/dea227dda606900cc01870d08541b4dcc69d3889",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-qmw8-3v4g-gwj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/fastify-reply-from",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-reply-from/commit/dea227dda606900cc01870d08541b4dcc69d3889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-reply-from/security/advisories/GHSA-qmw8-3v4g-gwj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/fastify-reply-from",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21322",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-02T04:15:12.597",
      "lastModified" : "2024-11-21T05:48:01.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fastify-http-proxy is an npm package which is a fastify plugin for proxying your http requests to another server, with hooks. By crafting a specific URL, it is possible to escape the prefix of the proxied backend service. If the base url of the proxied server is `/pub/`, a user expect that accessing `/priv` on the target service would not be possible. In affected versions, it is possible. This is fixed in version 4.3.1."
      }, {
        "lang" : "es",
        "value" : "fastify-http-proxy es un paquete npm que es un plugin fastify para enviar sus peticiones http a otro servidor, con hooks.&#xa0;Al diseñar una URL específica, es posible escapar el prefijo del servicio del backend proxy.&#xa0;Si la URL base del servidor proxy es \"/pub/\", un usuario espera que no sea posible acceder a \"/priv\" en el servicio objetivo.&#xa0;En versiones afectadas, es posible.&#xa0;Esto es corregido en la versión 4.3.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fastify-http-proxy_project:fastify-http-proxy:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.3.1",
            "matchCriteriaId" : "28A04538-96DA-4BA0-8426-63EA334430C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/fastify/fastify-http-proxy/commit/02d9b43c770aa16bc44470edecfaeb7c17985016",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-c4qr-gmr9-v23w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/fastify-http-proxy",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-http-proxy/commit/02d9b43c770aa16bc44470edecfaeb7c17985016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fastify/fastify-http-proxy/security/advisories/GHSA-c4qr-gmr9-v23w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/fastify-http-proxy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27901",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T06:15:14.297",
      "lastModified" : "2024-11-21T05:58:44.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG mobile devices with Android OS 11 software. They mishandle fingerprint recognition because local high beam mode (LHBM) does not function properly during bright illumination. The LG ID is LVE-SMP-210001 (March 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en dispositivos móviles LG con software Android OS versión 11.&#xa0;Manejan inapropiadamente el reconocimiento de huellas dactilares porque local high beam mode (LHBM) no funciona apropiadamente durante la iluminación brillante.&#xa0;El ID de LG es LVE-SMP-210001 (Marzo de 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27904",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T07:15:12.760",
      "lastModified" : "2024-11-21T05:58:44.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in app/Model/SharingGroupServer.php in MISP 2.4.139. In the implementation of Sharing Groups, the \"all org\" flag sometimes provided view access to unintended actors."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo app/Model/SharingGroupServer.php en MISP versión 2.4.139.&#xa0;En la implementación de Sharing Groups, el flag \"all org\" algunas veces proporcionaba acceso de visualización a actores no deseados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.139",
            "matchCriteriaId" : "D2C49507-C086-4DDC-9361-1A6A2DE9753C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/ca13fee271ad126832c88896776f3050a6c06e64",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/ca13fee271ad126832c88896776f3050a6c06e64",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21513",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-02T16:15:12.817",
      "lastModified" : "2024-11-21T05:48:30.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC OpenManage Server Administrator (OMSA) version 9.5 Microsoft Windows installations with Distributed Web Server (DWS) enabled configuration contains an authentication bypass vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain admin access on the affected system."
      }, {
        "lang" : "es",
        "value" : "Las instalaciones de Microsoft Windows de Dell EMC OpenManage Server Administrator (OMSA) versión 9.5, con configuración habilitada de Distributed Web Server (DWS) contienen una vulnerabilidad de omisión de autenticación.&#xa0;Un atacante remoto no autenticado podría potencialmente explotar esta vulnerabilidad para conseguir acceso de administrador en el sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4.0.3",
            "matchCriteriaId" : "BEDA83EB-FBB0-479E-88BC-21A3CFB5B068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0.0",
            "versionEndExcluding" : "9.5.0.1",
            "matchCriteriaId" : "B600F2C4-37A8-4B2C-84EA-4DCFB1F48C82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-07",
        "source" : "security_alert@emc.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21514",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-02T16:15:12.987",
      "lastModified" : "2024-11-21T05:48:30.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potentially exploit this vulnerability to view arbitrary files on the target system by sending a specially crafted URL request."
      }, {
        "lang" : "es",
        "value" : "Dell EMC OpenManage Server Administrator (OMSA) versiones 9.5 y anteriores, contienen una vulnerabilidad de salto de ruta.&#xa0;Un usuario remoto con privilegios de administrador podría explotar esta vulnerabilidad para visualizar archivos arbitrarios en el sistema de destino por medio del envío de una petición de URL especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:openmanage_server_administrator:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.5.0",
            "matchCriteriaId" : "91F40141-2692-4207-AE06-38A788F6E518"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183670/dsa-2021-040-dell-emc-openmanage-server-administrator-omsa-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25330",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-02T18:15:15.193",
      "lastModified" : "2024-11-21T05:54:46.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calling of non-existent provider in MobileWips application prior to SMR Feb-2021 Release 1 allows unauthorized actions including denial of service attack by hijacking the provider."
      }, {
        "lang" : "es",
        "value" : "Una llamada a un proveedor inexistente en la aplicación MobileWips versiones anteriores a SMR Feb-2021 Release 1, permite acciones no autorizadas, incluyendo un ataque de denegación de servicio por medio del secuestro del proveedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3384",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T18:15:15.977",
      "lastModified" : "2024-11-21T06:21:23.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.4, and 4.0.0 to 4.1.5. Fixed in versions 2.7.8, 3.7.17, 3.11.5, and 4.2.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Stormshield Network Security, podría permitir a un atacante desencadenar una protección relacionada a una administración de tablas ARP/NDP, lo que impediría temporalmente al sistema comunicarse con nuevos hosts por medio de IPv4 o IPv6.&#xa0;Esto afecta a versiones 2.0.0 hasta 2.7.7, versiones 2.8.0 hasta 2.16.0, versiones 3.0.0 hasta 3.7.16, versiones 3.8.0 hasta 3.11.4 y versiones 4.0.0 hasta 4.1.5.&#xa0;Corregido en versiones 2.7.8, 3.7.17, 3.11.5 y 4.2.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.7.8",
            "matchCriteriaId" : "1963DE20-CE8C-4776-B355-541A682B32A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.8.0",
            "versionEndIncluding" : "2.16.0",
            "matchCriteriaId" : "EBAB743F-89C0-4152-A4E7-1633E4492B51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.7.17",
            "matchCriteriaId" : "A7C6C367-2B85-4F65-8E36-E9F791DE3256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndIncluding" : "3.11.5",
            "matchCriteriaId" : "6B359EE3-CFBF-4F12-9E07-FCBCEB41CAB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.1.5",
            "matchCriteriaId" : "268FCC1D-500C-4F39-B688-96130AA60D16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.stormshield.eu/2020-049/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisories.stormshield.eu/2020-049/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22187",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-02T19:15:12.957",
      "lastModified" : "2024-11-21T05:49:40.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions of Gitlab EE/CE before 13.6.7. A potential resource exhaustion issue that allowed running or pending jobs to continue even after project was deleted."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones de Gitlab EE/CE anteriores a 13.6.7. Un posible problema de agotamiento de los recursos que permitía que los trabajos en ejecución o pendientes continuaran incluso después de eliminar el proyecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "9076F10B-CB03-48F3-A973-26318C55E912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "387DD48F-9C0A-40DA-9628-057C606A13BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "13.7",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "CABA0E78-399E-4030-918A-6DF11945CD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartExcluding" : "13.7",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "7C31673F-2649-4471-BD20-E237DA2FC70D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartExcluding" : "13.8",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "F57F2103-8262-44C4-AFEA-4F4DCF541BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartExcluding" : "13.8",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "B664E39E-647A-46FD-92BC-537AABD0F101"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22187.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/300452",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22187.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/300452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22294",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-02T19:15:13.083",
      "lastModified" : "2024-11-21T05:49:51.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources."
      }, {
        "lang" : "es",
        "value" : "Un componente API de HarmonyOS versión 2.0 presenta una vulnerabilidad de omisión de permisos.&#xa0;Los atacantes locales pueden explotar esta vulnerabilidad para emitir comandos repetidamente, agotando los recursos de servicio del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2021/2021-03.md",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2021/2021-03.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22296",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-02T19:15:13.207",
      "lastModified" : "2024-11-21T05:49:51.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system."
      }, {
        "lang" : "es",
        "value" : "Un componente de HarmonyOS versión 2.0, presenta una vulnerabilidad de DoS. Los atacantes locales pueden explotar esta vulnerabilidad para montar un sistema de archivos en el dispositivo objetivo, provocando una DoS del sistema de archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://device.harmonyos.com/cn/console/safetyDetail?id=9145efa5d9064d94a7fc3968b6054d83&pageSize=10&pageIndex=1",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2021/2021-03.md",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/cve/CVE-2021-22296",
        "source" : "psirt@huawei.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://device.harmonyos.com/cn/console/safetyDetail?id=9145efa5d9064d94a7fc3968b6054d83&pageSize=10&pageIndex=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitee.com/openharmony/security/blob/master/zh/security-disclosure/2021/2021-03.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/cve/CVE-2021-22296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27885",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-02T19:15:13.380",
      "lastModified" : "2024-11-21T05:58:41.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism."
      }, {
        "lang" : "es",
        "value" : "El archivo usersettings.php en e107 hasta la versión 2.3.0, carece de cierto mecanismo de protección e_TOKEN"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:e107:e107:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.0",
            "matchCriteriaId" : "A949387D-E5D5-4F96-93E5-F53496F7D159"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161651/e107-CMS-2.3.0-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/e107inc/e107/commit/d9efdb9b5f424b4996c276e754a380a5e251f472",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/e107inc/e107/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161651/e107-CMS-2.3.0-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/e107inc/e107/commit/d9efdb9b5f424b4996c276e754a380a5e251f472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/e107inc/e107/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21255",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-02T20:15:14.537",
      "lastModified" : "2024-11-21T05:47:52.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI version 9.5.3, it was possible to switch entities with IDOR from a logged in user. This is fixed in version 9.5.4."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software de gestión de activos y TI de código abierto que proporciona funciones de ITIL Service Desk, seguimiento de licencias y auditoría de software.&#xa0;En GLPI versión 9.5.3, era posible cambiar entidades con IDOR desde un usuario que había iniciado sesión.&#xa0;Esto es corregido en la versión 9.5.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:9.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BAC9566-70F6-42A1-AED5-08499316477C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/commit/aade65b7f67d46f23d276a8acb0df70651c3b1dc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-v3m5-r3mx-ff9j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/commit/aade65b7f67d46f23d276a8acb0df70651c3b1dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-v3m5-r3mx-ff9j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21258",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-02T20:15:14.707",
      "lastModified" : "2024-11-21T05:47:52.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI from version 9.5.0 and before version 9.5.4, there is a cross-site scripting injection vulnerability when using ajax/kanban.php. This is fixed in version 9.5.4."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software de gestión de activos y TI de código abierto que proporciona funciones de ITIL Service Desk, seguimiento de licencias y auditoría de software.&#xa0;En GLPI desde la versión 9.5.0 y anterior a la versión 9.5.4, se presenta una vulnerabilidad de inyección de tipo cross-site scripting cuando se usa el archivo ajax/kanban.php.&#xa0;Esto es corregido en la versión 9.5.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.5.0",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "931A739B-FA74-4532-9526-BAAB5FBA00DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/commit/e7802fc051696de1f76108ea8dc3bd4e2c880f15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-j4xj-4qmc-mmmx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/commit/e7802fc051696de1f76108ea8dc3bd4e2c880f15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-j4xj-4qmc-mmmx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26412",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:11.853",
      "lastModified" : "2024-11-21T05:56:19.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26412",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26412",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26854",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:12.040",
      "lastModified" : "2024-11-21T05:56:53.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26412, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26854",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26855",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:12.103",
      "lastModified" : "2025-12-18T02:00:02.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26412, CVE-2021-26854, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "B560F8FD-068E-4A16-A37F-A62DCE88FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*",
            "matchCriteriaId" : "751FD35F-2ECD-4B75-9589-988CC6AD3058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "63E362CB-CF75-4B7E-A4B1-D6D84AFCBB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE04790-85A2-4078-88CE-1787BC5172E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF101BE-27FD-4E2D-A694-C606BD3D1ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF5BDB5-205D-4B64-A49A-0152AFCF4A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "55284CF7-0D04-4216-83FE-4B1F9CA94207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CE223-AA49-49E6-AC32-59270EFF55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "4830D6A9-AF74-480C-8F69-8648CD619980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "079E1E3F-FF25-4B0D-AC98-191D6455A014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "075E907F-AF2F-4C31-86C7-51972BE412A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "69AF19DC-3D65-49A8-A85F-511085CDF27B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A6DB-9225-4A3F-AD76-192F6CCCF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "051DE6C4-7456-4C42-BC51-253208AADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE320413-D2C9-4B28-89BF-361B44A3F0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "104F96DC-E280-4E0A-8586-B043B55888C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "73B3B3FE-7E85-4B86-A983-2C410FFEF4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FB275-7F17-48B2-B528-BE89309D2AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB3C25-CEA8-4D66-AEE4-953C8B17911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161846/Microsoft-Exchange-2019-SSRF-Arbitrary-File-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162610/Microsoft-Exchange-2019-Unauthenticated-Email-Download.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26855",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26855",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26857",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:12.167",
      "lastModified" : "2025-12-18T02:00:02.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26858, CVE-2021-27065, CVE-2021-27078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EA9AD-1E84-4AB5-A1EF-3B9F2AC84755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*",
            "matchCriteriaId" : "751FD35F-2ECD-4B75-9589-988CC6AD3058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "63E362CB-CF75-4B7E-A4B1-D6D84AFCBB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE04790-85A2-4078-88CE-1787BC5172E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF101BE-27FD-4E2D-A694-C606BD3D1ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF5BDB5-205D-4B64-A49A-0152AFCF4A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "55284CF7-0D04-4216-83FE-4B1F9CA94207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CE223-AA49-49E6-AC32-59270EFF55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "4830D6A9-AF74-480C-8F69-8648CD619980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "079E1E3F-FF25-4B0D-AC98-191D6455A014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "075E907F-AF2F-4C31-86C7-51972BE412A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "69AF19DC-3D65-49A8-A85F-511085CDF27B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A6DB-9225-4A3F-AD76-192F6CCCF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "051DE6C4-7456-4C42-BC51-253208AADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE320413-D2C9-4B28-89BF-361B44A3F0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "104F96DC-E280-4E0A-8586-B043B55888C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "73B3B3FE-7E85-4B86-A983-2C410FFEF4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FB275-7F17-48B2-B528-BE89309D2AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB3C25-CEA8-4D66-AEE4-953C8B17911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26857",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26857",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26857",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26858",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:12.227",
      "lastModified" : "2025-12-18T02:00:02.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-27065, CVE-2021-27078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EA9AD-1E84-4AB5-A1EF-3B9F2AC84755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_22:*:*:*:*:*:*",
            "matchCriteriaId" : "751FD35F-2ECD-4B75-9589-988CC6AD3058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "63E362CB-CF75-4B7E-A4B1-D6D84AFCBB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE04790-85A2-4078-88CE-1787BC5172E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF101BE-27FD-4E2D-A694-C606BD3D1ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF5BDB5-205D-4B64-A49A-0152AFCF4A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "55284CF7-0D04-4216-83FE-4B1F9CA94207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CE223-AA49-49E6-AC32-59270EFF55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "4830D6A9-AF74-480C-8F69-8648CD619980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "079E1E3F-FF25-4B0D-AC98-191D6455A014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "075E907F-AF2F-4C31-86C7-51972BE412A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "69AF19DC-3D65-49A8-A85F-511085CDF27B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A6DB-9225-4A3F-AD76-192F6CCCF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "051DE6C4-7456-4C42-BC51-253208AADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE320413-D2C9-4B28-89BF-361B44A3F0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "104F96DC-E280-4E0A-8586-B043B55888C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "73B3B3FE-7E85-4B86-A983-2C410FFEF4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FB275-7F17-48B2-B528-BE89309D2AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB3C25-CEA8-4D66-AEE4-953C8B17911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26858",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26858",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26858",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27065",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:12.307",
      "lastModified" : "2025-12-18T02:00:02.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27078"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Exchange Server Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_21:*:*:*:*:*:*",
            "matchCriteriaId" : "B560F8FD-068E-4A16-A37F-A62DCE88FCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C21F84B-E99C-451D-9EAF-6352FD2B0EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "63E362CB-CF75-4B7E-A4B1-D6D84AFCBB68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_11:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE04790-85A2-4078-88CE-1787BC5172E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_12:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF101BE-27FD-4E2D-A694-C606BD3D1ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_13:*:*:*:*:*:*",
            "matchCriteriaId" : "4DF5BDB5-205D-4B64-A49A-0152AFCF4A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_14:*:*:*:*:*:*",
            "matchCriteriaId" : "55284CF7-0D04-4216-83FE-4B1F9CA94207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_15:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2CE223-AA49-49E6-AC32-59270EFF55AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_16:*:*:*:*:*:*",
            "matchCriteriaId" : "4830D6A9-AF74-480C-8F69-8648CD619980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_17:*:*:*:*:*:*",
            "matchCriteriaId" : "079E1E3F-FF25-4B0D-AC98-191D6455A014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "075E907F-AF2F-4C31-86C7-51972BE412A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "40D8A6DB-9225-4A3F-AD76-192F6CCCF002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "051DE6C4-7456-4C42-BC51-253208AADB4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "EE320413-D2C9-4B28-89BF-361B44A3F0FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "104F96DC-E280-4E0A-8586-B043B55888C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "73B3B3FE-7E85-4B86-A983-2C410FFEF4B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FB275-7F17-48B2-B528-BE89309D2AF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "D4AB3C25-CEA8-4D66-AEE4-953C8B17911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27065",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161938/Microsoft-Exchange-ProxyLogon-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162736/Microsoft-Exchange-ProxyLogon-Collector.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27065",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27065",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27078",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-03T00:15:12.383",
      "lastModified" : "2024-11-21T05:57:18.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de código remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-26412, CVE-2021-26854, CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_18:*:*:*:*:*:*",
            "matchCriteriaId" : "29805EC7-6403-44B9-91EC-109C087E98EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "36CE5C6D-9A04-41F5-AE7C-265779833649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27078",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27078",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21352",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-03T01:15:13.427",
      "lastModified" : "2024-11-21T05:48:05.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In TimeTracker before version 1.19.24.5415 tokens used in password reset feature in Time Tracker are based on system time and, therefore, are predictable. This opens a window for brute force attacks to guess user tokens and, once successful, change user passwords, including that of a system administrator. This vulnerability is pathced in version 1.19.24.5415 (started to use more secure tokens) with an additional improvement in 1.19.24.5416 (limited an available window for brute force token guessing)."
      }, {
        "lang" : "es",
        "value" : "Anuko Time Tracker es una aplicación de seguimiento de tiempo de código abierto basada en la web escrita en PHP.&#xa0;En TimeTracker anterior a la versión 1.19.24.5415, los tokens usados en la funcionalidad de restablecimiento de contraseña en Time Tracker se basan en la hora del sistema y, por lo tanto, son predecibles.&#xa0;Esto abre una ventana para que los ataques de fuerza bruta adivinen los tokens de los usuarios y, una vez exitosos, cambien las contraseñas de los usuarios, incluyendo la de un administrador del sistema.&#xa0;Esta vulnerabilidad es parcheada en la versión 1.19.24.5415 (comenzó a usar tokens más seguros) con una mejora adicional en la versión 1.19.24.5416 (una ventana disponible limitada para adivinar tokens por fuerza bruta)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anuko:time_tracker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.24.5415",
            "matchCriteriaId" : "3F8654E7-D4A3-483D-8F9E-B0AEEF90DBE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anuko/timetracker/commit/40f3d9345adc20e6f28eb9f59e2489aff87fecf5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/security/advisories/GHSA-43c9-rx4h-4gqq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.anuko.com/time-tracker/index.htm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/commit/40f3d9345adc20e6f28eb9f59e2489aff87fecf5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/security/advisories/GHSA-43c9-rx4h-4gqq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.anuko.com/time-tracker/index.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21353",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-03T02:15:13.143",
      "lastModified" : "2025-05-27T21:08:34.550",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pug is an npm package which is a high-performance template engine.  In pug before version 3.0.1, if a remote attacker was able to control the `pretty` option of the pug compiler, e.g. if you spread a user provided object such as the query parameters of a request into the pug template inputs, it was possible for them to achieve remote code execution on the node.js backend. This is fixed in version 3.0.1.  This advisory applies to multiple pug packages including \"pug\", \"pug-code-gen\".  pug-code-gen has a backported fix at version 2.0.3. This advisory is not exploitable if there is no way for un-trusted input to be passed to pug as the `pretty` option, e.g. if you compile templates in advance before applying user input to them, you do not need to upgrade."
      }, {
        "lang" : "es",
        "value" : "Pug es un paquete npm que es un motor de plantillas de alto rendimiento. En pug antes de la versión 3.0.1, si un atacante remoto era capaz de controlar la opción `pretty` del compilador de pug, por ejemplo, si extendía un objeto proporcionado por el usuario, como los parámetros de consulta de una solicitud, en las entradas de la plantilla de pug, era posible que lograra la ejecución remota de código en el backend de node.js. Esto se ha corregido en la versión 3.0.1. Este aviso se aplica a varios paquetes de pug, incluyendo \"pug\", \"pug-code-gen\". pug-code-gen tiene una corrección con soporte en la versión 2.0.3. Este aviso no es explotable si no hay forma de pasar a pug entradas no confiables como la opción `pretty`, por ejemplo, si compila las plantillas por adelantado antes de aplicarles las entradas del usuario, no necesita actualizar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pugjs:pug:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "AE43CE50-8DE8-4487-BCCB-9E3931241EB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pugjs:pug-code-gen:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "F0CD8CA7-F670-4B0A-9639-E7D60F401DBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pugjs:pug-code-gen:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "55FCB9F1-8C93-474D-9137-CB14C8F9F05E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pugjs/pug/commit/991e78f7c4220b2f8da042877c6f0ef5a4683be0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/issues/3312",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/pull/3314",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/releases/tag/pug%403.0.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/security/advisories/GHSA-p493-635q-r6gr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/pug",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/pug-code-gen",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/commit/991e78f7c4220b2f8da042877c6f0ef5a4683be0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/issues/3312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/pull/3314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/releases/tag/pug%403.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pugjs/pug/security/advisories/GHSA-p493-635q-r6gr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/pug",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/pug-code-gen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22861",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2021-03-03T04:15:13.070",
      "lastModified" : "2024-11-21T05:50:47.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability was identified in GitHub Enterprise Server that allowed authenticated users of the instance to gain write access to unauthorized repositories via specifically crafted pull requests and REST API requests. An attacker would need to be able to fork the targeted repository, a setting that is disabled by default for organization owned private repositories. Branch protections such as required pull request reviews or status checks would prevent unauthorized commits from being merged without further review or validation. This vulnerability affected all versions of GitHub Enterprise Server since 2.4.21 and was fixed in versions 2.20.24, 2.21.15, 2.22.7 and 3.0.1. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de control de acceso inadecuada en GitHub Enterprise Server que permitía a los usuarios autenticados de la instancia obtener acceso de escritura a repositorios no autorizados a través de solicitudes de extracción y solicitudes de API REST específicamente diseñadas. Un atacante tendría que ser capaz de bifurcar el repositorio objetivo, una configuración que está desactivada por defecto para los repositorios privados propiedad de la organización. Las protecciones de la rama, como las revisiones requeridas de las solicitudes de extracción o las comprobaciones de estado, evitarían que las confirmaciones no autorizadas se fusionaran sin una revisión o validación adicional. Esta vulnerabilidad afectaba a todas las versiones de GitHub Enterprise Server desde la versión 2.4.21 y fue corregida en las versiones 2.20.24, 2.21.15, 2.22.7 y 3.0.1. Esta vulnerabilidad fue reportada a través del programa GitHub Bug Bounty"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.4.21",
            "versionEndExcluding" : "2.20.24",
            "matchCriteriaId" : "C6B741E9-F328-4CD0-B82C-A8A4E26A1894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.21.0",
            "versionEndExcluding" : "2.21.15",
            "matchCriteriaId" : "33F7B688-318D-452D-A804-49984D527FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "2.22.7",
            "matchCriteriaId" : "5333B472-BF06-4427-9344-72CD5B2429CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "6929FFB5-AC83-412F-A6FF-0593F64A0688"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22862",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2021-03-03T04:15:13.163",
      "lastModified" : "2024-11-21T05:50:47.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with the ability to fork a repository to disclose Actions secrets for the parent repository of the fork. This vulnerability existed due to a flaw that allowed the base reference of a pull request to be updated to point to an arbitrary SHA or another pull request outside of the fork repository. By establishing this incorrect reference in a PR, the restrictions that limit the Actions secrets sent a workflow from forks could be bypassed. This vulnerability affected GitHub Enterprise Server version 3.0.0, 3.0.0.rc2, and 3.0.0.rc1. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de control de acceso inadecuada en GitHub Enterprise Server que permitía a un usuario autenticado con la capacidad de bifurcar un repositorio revelar los secretos de las acciones para el repositorio padre de la bifurcación. Esta vulnerabilidad existía debido a un fallo que permitía actualizar la referencia base de un pull request para que apuntara a un SHA arbitrario o a otro pull request fuera del repositorio fork. Al establecer esta referencia incorrecta en un PR, las restricciones que limitan las Acciones secretas enviadas a un flujo de trabajo desde los forks podían ser eludidas. Esta vulnerabilidad afectaba a las versiones 3.0.0, 3.0.0.rc2 y 3.0.0.rc1 de GitHub Enterprise Server. Esta vulnerabilidad fue reportada a través del programa GitHub Bug Bounty"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:3.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "61ABB5BF-C578-403B-8EF9-A28274F486FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:3.0.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "634A0A6C-0F17-4DE2-B2D1-C3B0C5C8EDD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:3.0.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA74C51-5AB4-4B23-B24B-5629736B17E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22863",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2021-03-03T04:15:13.240",
      "lastModified" : "2024-11-21T05:50:47.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability was identified in the GitHub Enterprise Server GraphQL API that allowed authenticated users of the instance to modify the maintainer collaboration permission of a pull request without proper authorization. By exploiting this vulnerability, an attacker would be able to gain access to head branches of pull requests opened on repositories of which they are a maintainer. Forking is disabled by default for organization owned private repositories and would prevent this vulnerability. Additionally, branch protections such as required pull request reviews or status checks would prevent unauthorized commits from being merged without further review or validation. This vulnerability affected all versions of GitHub Enterprise Server since 2.12.22 and was fixed in versions 2.20.24, 2.21.15, 2.22.7 and 3.0.1. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de control de acceso inadecuada en la API GraphQL de GitHub Enterprise Server que permitía a los usuarios autenticados de la instancia modificar el permiso de colaboración del mantenedor de un pull request sin la autorización adecuada. Al explotar esta vulnerabilidad, un atacante podría obtener acceso a las ramas principales de los pull requests abiertos en los repositorios de los que es mantenedor. La bifurcación está deshabilitada por defecto para los repositorios privados propiedad de la organización y evitaría esta vulnerabilidad. Además, las protecciones de las ramas, como las revisiones requeridas de las solicitudes de extracción o las comprobaciones de estado, impedirían que los commits no autorizados se fusionaran sin más revisión o validación. Esta vulnerabilidad afectaba a todas las versiones de GitHub Enterprise Server desde la versión 2.12.22 y fue corregida en las versiones 2.20.24, 2.21.15, 2.22.7 y 3.0.1. Esta vulnerabilidad fue reportada a través del programa GitHub Bug Bounty"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.12.22",
            "versionEndExcluding" : "2.20.24",
            "matchCriteriaId" : "672A9206-E6DA-4137-8AB2-A047F700902A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.21.0",
            "versionEndExcluding" : "2.21.15",
            "matchCriteriaId" : "33F7B688-318D-452D-A804-49984D527FDA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "2.22.7",
            "matchCriteriaId" : "5333B472-BF06-4427-9344-72CD5B2429CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:github:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "6929FFB5-AC83-412F-A6FF-0593F64A0688"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.20/admin/release-notes#2.20.24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2138",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-03-03T06:15:15.017",
      "lastModified" : "2024-11-21T06:02:27.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Cloud Infrastructure Data Science Notebook Sessions. Easily exploitable vulnerability allows low privileged attacker with access to the physical communication segment attached to the hardware where the Oracle Cloud Infrastructure Data Science Notebook Sessions executes to compromise Oracle Cloud Infrastructure Data Science Notebook Sessions. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Cloud Infrastructure Data Science Notebook Sessions accessible data as well as unauthorized read access to a subset of Oracle Cloud Infrastructure Data Science Notebook Sessions accessible data. All affected customers were notified of CVE-2021-2138 by Oracle. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad en Oracle Cloud Infrastructure Data Science Notebook Sessions. La vulnerabilidad fácilmente explotable permite a un atacante con pocos privilegios y con acceso al segmento de comunicación física conectado al hardware donde se ejecuta Oracle Cloud Infrastructure Data Science Notebook Sessions comprometer Oracle Cloud Infrastructure Data Science Notebook Sessions. Los ataques exitosos de esta vulnerabilidad pueden dar lugar a la actualización no autorizada, insertar o eliminar algunos de los datos accesibles de Oracle Cloud Infrastructure Data Science Notebook Sessions, así como el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Cloud Infrastructure Data Science Notebook Sessions. Todos los clientes afectados fueron notificados de CVE-2021-2138 por Oracle. Puntuación base de CVSS 3.1: 4,6 (impactos en la confidencialidad y la integridad). Vector CVSS: (CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:cloud_infrastructure_data_science:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAAE264D-28AD-4C66-82E6-6258FA8EDAC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.oracle.com",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://support.oracle.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T09:15:14.170",
      "lastModified" : "2025-08-15T05:15:28.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempted memory allocation can be very large."
      }, {
        "lang" : "es",
        "value" : "Pillow versiones anteriores a 8.1.1, permite a atacantes causar una denegación de servicio (consumo de memoria) porque el tamaño informado de una imagen contenida no es comprobado apropiadamente para un contenedor BLP y, por lo tanto, un intento de asignación de memoria puede ser muy grande"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T09:15:14.233",
      "lastModified" : "2025-08-15T05:15:29.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attempted memory allocation can be very large."
      }, {
        "lang" : "es",
        "value" : "Pillow versiones anteriores a 8.1.1, permite a atacantes causar una denegación de servicio (consumo de la memoria) porque el tamaño reportado de una imagen contenida no es comprobado apropiadamente para un contenedor ICNS y, por lo tanto, un intento de asignación de la memoria puede ser muy grande"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T09:15:14.327",
      "lastModified" : "2025-08-15T05:15:29.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pillow before 8.1.2 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempted memory allocation can be very large."
      }, {
        "lang" : "es",
        "value" : "Pillow versiones anteriores a 8.1.1, permite a atacantes causar una denegación de servicio (consumo de la memoria) porque el tamaño reportado de una imagen contenida no es comprobado apropiadamente para un contenedor ICO y, por lo tanto, un intento de asignación de memoria puede ser muy grande"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.2.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S7G44Z33J4BNI2DPDROHWGVG2U7ZH5JU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TQQY6472RX4J2SUJENWDZAWKTJJGP2ML/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZTSY25UJU7NJUFHH3HWT575LT4TDFWBZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23347",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-03T10:15:13.753",
      "lastModified" : "2024-11-21T05:51:33.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package github.com/argoproj/argo-cd/cmd before 1.7.13, from 1.8.0 and before 1.8.6 are vulnerable to Cross-site Scripting (XSS) the SSO provider connected to Argo CD would have to send back a malicious error message containing JavaScript to the user."
      }, {
        "lang" : "es",
        "value" : "El paquete github.com/argoproj/argo-cd/cmd versiones anteriores a 1.7.13, versiones desde 1.8.0 y anteriores a 1.8.6, son vulnerables a un ataque de tipo Cross-site Scripting (XSS), el proveedor de SSO conectado a Argo CD tendría que devolver un mensaje de error malicioso que contiene JavaScript para el usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.13",
            "matchCriteriaId" : "A5B2A3E0-5E2F-487B-8614-A23B5C9277C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.6",
            "matchCriteriaId" : "B353C097-7262-4367-9281-F5F258738AA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/pull/5563",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMARGOPROJARGOCDCMD-1078291",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/pull/5563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMARGOPROJARGOCDCMD-1078291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25315",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2021-03-03T10:15:13.940",
      "lastModified" : "2024-11-21T05:54:43.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CWE - CWE-287: Improper Authentication vulnerability in SUSE Linux Enterprise Server 15 SP 3; openSUSE Tumbleweed allows local attackers to execute arbitrary code via salt without the need to specify valid credentials. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions. This issue affects: SUSE Linux Enterprise Server 15 SP 3 salt versions prior to 3002.2-3. openSUSE Tumbleweed salt version 3002.2-2.1 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Implementación Incorrecta del Algoritmo de Autenticación en SUSE SUSE Linux Enterprise Server versión 15 SP 3;&#xa0;openSUSE Tumbleweed, permite a atacantes locales ejecutar código arbitrario por medio de una  sal sin la necesidad de especificar credenciales válidas.&#xa0;Este problema afecta a: salt de SUSE SUSE Linux Enterprise Server versión 15 SP 3 versiones anteriores a 3002.2-3.&#xa0;salt de openSUSE Tumbleweed versión 3002.2-2.1 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3002.2",
            "matchCriteriaId" : "A696063D-82E2-4F3B-8E0F-CA7141CC6A22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:opensuse:tumbleweed:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "107C84EE-5E5C-4C36-A6DA-295144A527E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:suse_linux_enterprise_server:15:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "484ABC86-9E8B-4645-8A52-DB2343649E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182382",
        "source" : "meissner@suse.de",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25252",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-03-03T16:15:13.087",
      "lastModified" : "2024-11-21T05:54:38.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro's Virus Scan API (VSAPI) and Advanced Threat Scan Engine (ATSE) - are vulnerable to a memory exhaustion vulnerability that may lead to denial-of-service or system freeze if exploited by an attacker using a specially crafted file."
      }, {
        "lang" : "es",
        "value" : "La API Virus Scan (VSAPI) y el Advanced Threat Scan Engine (ATSE) de Trend Micro, son susceptibles a una vulnerabilidad de agotamiento de la memoria que puede conllevar a una denegación de servicio o a un congelamiento del sistema si es explotada por un atacante usando un archivo especialmente diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_central:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F1A4CE49-201A-4A47-A760-6463C454A6AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:-:*:*:*:*:*:*",
            "matchCriteriaId" : "219071B9-2D31-4E7F-A0AD-769FE0243B35"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:cloud_edge:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E326AF6-B46B-40BE-8CDF-0F94A99FAED6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:-:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E31C9ADB-D6BB-4C69-A6D6-DFFD2D2140D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_security:10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7E15DA-AE75-4CD7-AA71-A560A78D968C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_security:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8241E0BC-5DA9-4C60-B844-56FC23E47152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_security:12.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E49F38B-B210-49CB-9F76-B65CAB36BC74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_security:20.0:-:*:*:long_term_support:*:*:*",
            "matchCriteriaId" : "398B0CDB-03CB-434C-9650-24340C093C86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:control_manager:7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "165D2436-C6A3-47A9-9FE3-51628BF6C414"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_analyzer:5.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A31C0DF7-D04B-4BF6-8A9C-FD9AB7E68B0A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_email_inspector:2.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B664C78E-D12E-4405-A35F-54BD90437AD3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:deep_discovery_inspector:3.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D67DBF-FA30-44B7-9404-9C17EA72295B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_messaging_security_virtual_appliance:9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0429A7DF-3CB4-44BB-A26A-54DB9EE25ABD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:interscan_web_security_virtual_appliance:6.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "DFF71E3A-0C66-4FCC-AEEE-3CCFBDCF3ADD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3448C332-00D7-41B3-BD1A-9D665CED4F6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:portal_protect:2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3649712F-7311-453F-BC0B-6608F4750086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:scanmail:14.0:*:*:*:*:microsoft_exchange:*:*",
            "matchCriteriaId" : "37BCA3F5-0BC9-4287-A97F-F5E20465EF0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:scanmail_for_ibm_domino:5.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E45ABCCA-69AD-45B6-833C-06380C83702E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect_for_storage:6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3C44B160-E042-465C-9442-296202E9B750"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect:5.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "889BBE0A-A33B-4CF8-8801-DC1202621FAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:emc:celerra_network_attached_storage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FABC70E5-DC68-4538-B7AA-30385E54FC45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:novell:netware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61BD8560-99BE-46E5-8366-7CD9CD3427E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:serverprotect_for_network_appliance_filers:5.8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "60880631-D7EC-4F88-8C4C-9217861D2047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:netapp:cluster_data_ontap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D877693-7976-44ED-AE10-EADF8C98ACB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:safe_lock:1.1:-:*:*:txone:*:*:*",
            "matchCriteriaId" : "E82A9956-C47F-4AC2-BFAE-A12C496502A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:worry-free_business_security:10.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ED502EB1-F3E9-46B6-BE08-6FCCE0AE1E12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000285675",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000285675",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26813",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T16:15:13.197",
      "lastModified" : "2024-11-21T05:56:51.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "markdown2 >=1.0.1.18, fixed in 2.4.0, is affected by a regular expression denial of service vulnerability. If an attacker provides a malicious string, it can make markdown2 processing difficult or delayed for an extended period of time."
      }, {
        "lang" : "es",
        "value" : "markdown2 versiones anteriores a 1.0.1.18, corregido en 2.4.0, está afectado por una vulnerabilidad de denegación de servicio de expresión regular.&#xa0;Si un atacante proporciona una cadena maliciosa, puede dificultar el procesamiento de Markdown2 o retrasarlo durante un período de tiempo prolongado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:markdown2_project:markdown2:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.1.18",
            "versionEndExcluding" : "2.4.0",
            "matchCriteriaId" : "D10B7C6C-D334-4D26-B76F-76078B95A8B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/trentm/python-markdown2/pull/387",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRP5RN35JZTSJ3JT4722F447ZDK7LZS5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J752422YELXLMLZJPVJVKD2KKHHQRVEH/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTIX5UXRDJZJ57DO4V33ZNJTNKWGBQLY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/trentm/python-markdown2/pull/387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BRP5RN35JZTSJ3JT4722F447ZDK7LZS5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J752422YELXLMLZJPVJVKD2KKHHQRVEH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JTIX5UXRDJZJ57DO4V33ZNJTNKWGBQLY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T16:15:13.260",
      "lastModified" : "2024-11-21T05:57:36.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in genua genugate before 9.0 Z p19, 9.1.x through 9.6.x before 9.6 p7, and 10.x before 10.1 p4. The Web Interfaces (Admin, Userweb, Sidechannel) can use different methods to perform the authentication of a user. A specific authentication method during login does not check the provided data (when a certain manipulation occurs) and returns OK for any authentication request. This allows an attacker to login to the admin panel as a user of his choice, e.g., the root user (with highest privileges) or even a non-existing user."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en genua genugate versiones anteriores a 9.0 Z p19, versiones 9.1.x hasta 9.6.x anteriores a 9.6 p7 y versiones 10.x anteriores a 10.1 p4.&#xa0;Las interfaces web (Admin, Userweb, Sidechannel) pueden usar diferentes métodos para lleva a cabo la autenticación de un usuario.&#xa0;Un método de autenticación específico durante el inicio de sesión no comprueba los datos proporcionados (cuando ocurre una determinada manipulación) y devuelve OK para cualquier petición de autenticación.&#xa0;Esto permite a un atacante iniciar sesión en el panel de administración como un usuario de su elección, por ejemplo, el usuario root (con los privilegios más altos) o inclusive un usuario no existente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "9FADEEBC-C501-409B-854B-0CC58FE420A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1",
            "matchCriteriaId" : "32D923C1-C076-4B96-BA7E-E30680E8469C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4895F129-32DB-4BD9-A38E-F2913B49EACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "F8ECED92-CBF4-4F5C-85F9-2350489959FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "5CFCB610-61C8-4DB3-AFF9-FA0232311524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE8EEF8-6ACB-4A45-A387-A2C2CB8F01DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "21F545C1-584D-4685-8844-BEC0619E2CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "F003ECB8-2AA1-48F0-8154-EC3BC6302624"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "D7137C47-E0FE-4122-861C-5B8867C4B7BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "F67F0956-12D2-4F33-ACF5-46A66E97B127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "DC4F2F77-A34D-457D-B9CE-CD319ADBB0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "64E98FD2-C95B-46C6-ABA7-D431C215CEE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "553390E0-4076-49A2-A8D9-763700FC86E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "F1CB642E-33C7-43CE-8924-02F58AC72202"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFE58DE-FBA0-4A34-B564-6B79F3991212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "55DF78F2-1F8A-406B-B435-238D6B7FB6C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "24488A8B-9C74-4DD9-A8D4-D24B7F6334AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "D538E9D4-479E-4A83-9CB6-2572237AD246"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "76B327F2-4220-4336-A002-E5902A409D18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "73D9F4A7-650A-4A41-86DB-637C179A5627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "983A322D-6D93-457C-BB5A-404DE6BF64EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "12CD70FD-C653-46C5-8CDD-5CE31780A973"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "52E3918B-01B4-45C0-BBC3-233D02E7BB0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "36F405B7-D3B1-47DB-BE1F-5116D41324F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "2F2B4650-C51B-4BA5-9A31-0DCC595419C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6F7E68-43F4-442D-8516-A84AF3A7F736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "7AD71A26-EFCB-449A-89F0-947AA291EAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:9.6.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "8616E470-5887-4A2B-B11D-19EA460D5AC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:10.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB744C9-4562-4A77-98AD-99A0B24DABD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:10.1:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "002A422D-959E-491A-BB22-109177256903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:10.1:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "29B8F70C-C496-45C0-ABCD-85E7F1FA914C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genua:genuagate:10.1:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "3051E329-7A2F-4063-A162-B2646257D365"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kunde.genua.de/en/overview/genugate.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/authentication-bypass-genua-genugate/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.genua.de/en/it-security-solutions/high-resistance-firewall-genugate",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://kunde.genua.de/en/overview/genugate.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/authentication-bypass-genua-genugate/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.genua.de/en/it-security-solutions/high-resistance-firewall-genugate",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3419",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-03T16:15:13.323",
      "lastModified" : "2023-11-07T03:37:59.650",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20076",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-03-03T17:15:11.910",
      "lastModified" : "2024-11-21T05:45:52.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenable.sc and Tenable.sc Core versions 5.13.0 through 5.17.0 were found to contain a vulnerability that could allow an authenticated, unprivileged user to perform Remote Code Execution (RCE) on the Tenable.sc server via Hypertext Preprocessor unserialization."
      }, {
        "lang" : "es",
        "value" : "Se encontró Tenable.sc y Tenable.sc Core versiones 5.13.0 hasta 5.17.0, contienen una vulnerabilidad que podría permitir a un usuario autenticado y poco privilegiado llevar a cabo una ejecución de código remota  (RCE) en el servidor Tenable.sc por medio de una deserialización del Hypertext Preprocessor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13.0",
            "versionEndIncluding" : "5.17.0",
            "matchCriteriaId" : "AC1721B5-9FCD-47C3-8338-E02932CF2C05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2021-03",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20225",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-03T17:15:11.973",
      "lastModified" : "2024-11-21T05:46:09.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en grub2 en versiones anteriores a 2.06.&#xa0;El analizador de opciones permite a un atacante escribir más allá del final de un búfer asignado a la pila al llamar a determinados comandos con una gran cantidad de formularios de opciones cortos específicos.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.06",
            "matchCriteriaId" : "01F8D62F-70BB-4718-A095-D68540C17EEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6897676D-53F9-45B3-B27F-7FF9A4C58D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21690BAC-2129-4A33-9B48-1F3BF30072A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FF6D89-9361-45B9-ABCC-1A5E600BD63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09ACF2D-D83F-4A86-8185-9569605D8EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924696",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220325-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220325-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20233",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-03T17:15:12.037",
      "lastModified" : "2024-11-21T05:46:10.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in grub2 in versions prior to 2.06. Setparam_prefix() in the menu rendering code performs a length calculation on the assumption that expressing a quoted single quote will require 3 characters, while it actually requires 4 characters which allows an attacker to corrupt memory by one byte for each quote in the input. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en grub2 en versiones anteriores a  2.06.&#xa0;La función Setparam_prefix() en el código de renderización del menú lleva a cabo un cálculo de longitud asumiendo que expresar una comilla simple entre comillas requerirá 3 caracteres, mientras que actualmente requiere 4 caracteres, lo que permite a un atacante corromper la memoria por un byte para cada comilla en la entrada.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.06",
            "matchCriteriaId" : "01F8D62F-70BB-4718-A095-D68540C17EEA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D871B-AEA1-4407-AEE3-47EC782250FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98381E61-F082-4302-B51F-5648884F998B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A687E-EAE6-417E-A88E-D0082BC194CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B353CE99-D57C-465B-AAB0-73EF581127D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7431ABC1-9252-419E-8CC1-311B41360078"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_aus:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6897676D-53F9-45B3-B27F-7FF9A4C58D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF77CDCF-B9C9-427D-B2BF-36650FB2148C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21690BAC-2129-4A33-9B48-1F3BF30072A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_eus:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2FF6D89-9361-45B9-ABCC-1A5E600BD63C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F7E11E-FB34-4467-8919-2B6BEAABF665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B76AA310-FEC7-497F-AF04-C3EC1E76C4CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17F256A9-D3B9-4C72-B013-4EFD878BFEA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_server_tus:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09ACF2D-D83F-4A86-8185-9569605D8EE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825ECE2D-E232-46E0-A047-074B34DB1E97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1926263",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-05",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220325-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1926263",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZWZ36QK4IKU6MWDWNOOWKPH3WXZBHT2R/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220325-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20441",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-03T17:15:12.083",
      "lastModified" : "2024-11-21T05:46:35.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Bridge uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 196617."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Bridge usa algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial. IBM X-Force ID: 196617"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_bridge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "450B3F4F-77B1-462D-A0E8-10C8A6D51723"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196617",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6421023",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6421023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20442",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-03T17:15:12.207",
      "lastModified" : "2024-11-21T05:46:36.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Security Verify Bridge contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196618."
      }, {
        "lang" : "es",
        "value" : "IBM Security Verify Bridge contiene credenciales embebidas, como una contraseña o clave criptográfica, que usa para su propia autenticación de la entrada, comunicación saliente hacia componentes externos o cifrado de datos internos.&#xa0; IBM X-Force ID: 196618"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:security_verify_bridge:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "450B3F4F-77B1-462D-A0E8-10C8A6D51723"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196618",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6421025",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6421025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21979",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-03-03T17:15:12.270",
      "lastModified" : "2024-11-21T05:49:21.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Bitnami Containers, all Laravel container versions prior to: 6.20.0-debian-10-r107 for Laravel 6, 7.30.1-debian-10-r108 for Laravel 7 and 8.5.11-debian-10-r0 for Laravel 8, the file /tmp/app/.env is generated at the time that the docker image bitnami/laravel was built, and the value of APP_KEY is fixed under certain conditions. This value is crucial for the security of the application and must be randomly generated per Laravel installation. If your application's encryption key is in the hands of a malicious party, that party could craft cookie values using the encryption key and exploit vulnerabilities inherent to PHP object serialization / unserialization, such as calling arbitrary class methods within your application."
      }, {
        "lang" : "es",
        "value" : "En Bitnami Containers, todas las versiones de contenedores de Laravel anteriores a: 6.20.0-debian-10-r107 para Laravel 6, 7.30.1-debian-10-r108 para Laravel 7 y 8.5.11-debian-10-r0 para Laravel 8, el archivo /tmp/app/.env es generado en el momento en que se creó la imagen de docker bitnami/laravel, y el valor de APP_KEY es corregida bajo determinadas condiciones.&#xa0;Este valor es crucial para la seguridad de la aplicación y debe generarse aleatoriamente por la instalación de Laravel.&#xa0;Si la clave de cifrado de su aplicación está en manos de una parte maliciosa, esa parte podría diseñar valores de cookies usando la clave de cifrado y explotar las vulnerabilidades inherentes a una serialización y deserialización de objetos PHP, como llamar a métodos de clase arbitrarios dentro de su aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.0.2-debian-9-r0",
            "versionEndIncluding" : "6.0.2-debian-9-r22",
            "matchCriteriaId" : "1C7CED2A-9A85-419B-ADFE-F6AE73E1555B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.4.0-debian-9-r0",
            "versionEndIncluding" : "6.4.0-debian-9-r31",
            "matchCriteriaId" : "FCB1050D-3846-4787-8A7B-43A308E5C21A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.5.2-debian-9-r0",
            "versionEndIncluding" : "6.5.2-debian-9-r20",
            "matchCriteriaId" : "3E7032B5-FF3E-45D7-8F77-E678D93E7278"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.8.0-debian-9-r0",
            "versionEndIncluding" : "6.8.0-debian-9-r26",
            "matchCriteriaId" : "243D681C-4017-49CB-8059-EA8BE15A6056"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.12.0-debian-9-r0",
            "versionEndIncluding" : "6.12.0-debian-10-r33",
            "matchCriteriaId" : "04949BF0-3329-411A-9DCC-44143ADEF25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.18.0-debian-10-r0",
            "versionEndIncluding" : "6.18.0-debian-10-r21",
            "matchCriteriaId" : "CF1507FE-A93F-44E5-BB60-C88CD49EEA4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.18.3-debian-10-r0",
            "versionEndIncluding" : "6.18.3-debian-10-r22",
            "matchCriteriaId" : "4262A5D9-7BBD-4782-9260-486124D4A800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.18.8-debian-10-r0",
            "versionEndIncluding" : "6.18.8-debian-10-r110",
            "matchCriteriaId" : "4EA20993-0FF6-498D-90E0-9D48ECCE1E34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.18.35-debian-10-r0",
            "versionEndIncluding" : "6.18.35-debian-10-r66",
            "matchCriteriaId" : "01035E72-A4B1-4B66-AEBA-680D7D81B8D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "6.20.0-debian-10-r0",
            "versionEndExcluding" : "6.20.0-debian-10-r107",
            "matchCriteriaId" : "635AE898-5216-4F6D-8908-ADAD2053318F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.0.0-debian-10-r0",
            "versionEndIncluding" : "7.0.0-debian-10-r7",
            "matchCriteriaId" : "C5BC1638-AFC3-49BB-9888-D04E5EDD4106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.3.0-debian-10-r0",
            "versionEndIncluding" : "7.3.0-debian-10-r20",
            "matchCriteriaId" : "25B5235E-27DF-4032-94B7-ACD6CFA6F9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.6.0-debian-10-r0",
            "versionEndIncluding" : "7.6.0-debian-10-r38",
            "matchCriteriaId" : "B086553E-7236-4783-8C90-D876B35E1066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.12.0-debian-10-r0",
            "versionEndIncluding" : "7.12.0-debian-10-r72",
            "matchCriteriaId" : "BDFC7B0A-2D11-43AC-8493-2834C99049CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.25.0-debian-10-r0",
            "versionEndIncluding" : "7.25.0-debian-10-r16",
            "matchCriteriaId" : "5FBFEC8E-B9EC-45CF-870E-9EED6ECFC74C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.28.0-debian-10-r0",
            "versionEndIncluding" : "7.28.0-debian-10-r50",
            "matchCriteriaId" : "DC7AA5BC-9842-4C73-96E7-F819467B7ADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "7.30.1-debian-10-r0",
            "versionEndExcluding" : "7.30.1-debian-10-r108",
            "matchCriteriaId" : "AB4F98CC-3DE0-4D18-896A-13CFC35256EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.0.1-debian-10-r0",
            "versionEndIncluding" : "8.0.1-debian-10-r7",
            "matchCriteriaId" : "6B1F16C0-2044-4B62-9B19-43BBC2A47E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.0.3-debian-10-r0",
            "versionEndIncluding" : "8.0.3-debian-10-r18",
            "matchCriteriaId" : "EE8EB91F-033E-4479-8A36-F72FCC8F5DBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.1.0-debian-10-r0",
            "versionEndIncluding" : "8.1.0-debian-10-r7",
            "matchCriteriaId" : "7853E367-D088-4879-AB1A-80ADC8C2184B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.2.0-debian-10-r0",
            "versionEndIncluding" : "8.2.0-debian-10-r8",
            "matchCriteriaId" : "BA18569B-C219-4455-BF4C-46E414CE5432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.4.0-debian-10-r0",
            "versionEndIncluding" : "8.4.0-debian-10-r10",
            "matchCriteriaId" : "50931BC5-469F-48AD-82C1-DF6E3354B2CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.4.1-debian-10-r0",
            "versionEndIncluding" : "8.4.1-debian-10-r6",
            "matchCriteriaId" : "05D61B80-5874-440B-BD47-1FFA37A595C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.4.2-debian-10-r0",
            "versionEndIncluding" : "8.4.2-debian-10-r4",
            "matchCriteriaId" : "E1D840C7-6F4A-4BA9-9C3C-5499991051B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.4.3-debian-10-r0",
            "versionEndIncluding" : "8.4.3-debian-10-r6",
            "matchCriteriaId" : "A2CB8B4A-7676-486B-8D04-F10A5FCA864D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.4.4-debian-10-r0",
            "versionEndIncluding" : "8.4.4-debian-10-r6",
            "matchCriteriaId" : "9A8F496F-5FFA-4CCD-8DE9-A7750E2C93B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.5.5-debian-10-r0",
            "versionEndIncluding" : "8.5.5-debian-10-r11",
            "matchCriteriaId" : "AF0E5F60-33C6-42FB-8046-5F11904E1042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.5.6-debian-10-r0",
            "versionEndIncluding" : "8.5.6-debian-10-r13",
            "matchCriteriaId" : "096D7491-1E6D-4879-865C-1188D4DDBB28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.5.7-debian-10-r0",
            "versionEndIncluding" : "8.5.7-debian-10-r6",
            "matchCriteriaId" : "EA7227A6-F123-403C-BD15-3EB2189505FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.5.8-debian-10-r0",
            "versionEndIncluding" : "8.5.8-debian-10-r5",
            "matchCriteriaId" : "4BBC7AAA-1BB2-4B13-BF9F-AB4DC4AAE972"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.5.9-debian-10-r0",
            "versionEndIncluding" : "8.5.9-debian-10-r25",
            "matchCriteriaId" : "9B55A310-5C1C-4DA3-B618-146DA68B6F57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:*:*:*:*:*:laravel:*:*",
            "versionStartIncluding" : "8.5.10-debian-10-r0",
            "versionEndIncluding" : "8.5.10-debian-10-r6",
            "matchCriteriaId" : "2AC8F0ED-0AAF-48D8-9A43-6AB3D70AB991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:6.19.0-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "0441223A-AF20-402D-9953-2DB29FF07232"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:7.29.0-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "12D9A722-790F-4244-9209-19D61723AA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:7.30.0-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "888EAFDD-8BC1-4C92-9AD8-6302D72A3674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:8.3.0-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "640CB6F5-F58D-402D-8F11-786145B2F920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:8.5.2-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "A34EA38A-F55A-4448-9D2D-A89D816866EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:8.5.2-debian-10-r1:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "66151425-8125-4C52-9320-7C471A072436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:8.5.3-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "588EB5F3-7A30-4DD9-976E-5A00B151B48A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:8.5.4-debian-10-r0:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "849C9414-78C1-412C-91F3-43D3D3814FAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitnami:containers:8.5.4-debian-10-r1:*:*:*:*:laravel:*:*",
            "matchCriteriaId" : "1D9B42D4-4856-400D-9590-7EC976A915E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bitnami/bitnami-docker-laravel/issues/139",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bitnami/bitnami-docker-laravel/issues/139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22638",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-03T17:15:12.333",
      "lastModified" : "2024-11-21T05:50:21.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds read while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Fatek FvDesigner versiones 1.5.76 y anteriores, es vulnerable a una lectura fuera de límites mientras procesa archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatek:fvdesigner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.76",
            "matchCriteriaId" : "D0C97CA2-1BDE-448A-9654-6DF82B6D0DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22662",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-03T17:15:12.427",
      "lastModified" : "2024-11-21T05:50:25.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free issue has been identified in Fatek FvDesigner Version 1.5.76 and prior in the way the application processes project files, allowing an attacker to craft a special project file that may permit arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado un uso de la memoria previamente liberada en Fatek FvDesigner versiones 1.5.76 y anteriores, en la manera en que la aplicación procesa unos archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatek:fvdesigner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.76",
            "matchCriteriaId" : "D0C97CA2-1BDE-448A-9654-6DF82B6D0DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22666",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-03T17:15:12.473",
      "lastModified" : "2024-11-21T05:50:26.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fatek FvDesigner Version 1.5.76 and prior is vulnerable to a stack-based buffer overflow while project files are being processed, allowing an attacker to craft a special project file that may permit arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Fatek FvDesigner versión 1.5.76 y anteriores, es vulnerable a un desbordamiento del búfer en la región stack de la memoria mientras se procesan los archivos de proyecto, lo que permite a un atacante diseñar un archivo de proyecto especial que puede permitir la ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatek:fvdesigner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.76",
            "matchCriteriaId" : "D0C97CA2-1BDE-448A-9654-6DF82B6D0DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22670",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-03T17:15:12.550",
      "lastModified" : "2024-11-21T05:50:26.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uninitialized pointer may be exploited in Fatek FvDesigner Version 1.5.76 and prior while the application is processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Un puntero no inicializado puede ser explotado en Fatek FvDesigner versiones 1.5.76 y anteriores, mientras la aplicación está procesando archivos de proyecto, permitiendo a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatek:fvdesigner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.76",
            "matchCriteriaId" : "D0C97CA2-1BDE-448A-9654-6DF82B6D0DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22683",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-03T17:15:12.690",
      "lastModified" : "2024-11-21T05:50:28.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fatek FvDesigner Version 1.5.76 and prior is vulnerable to an out-of-bounds write while processing project files, allowing an attacker to craft a special project file that may permit arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Fatek FvDesigner versiones 1.5.76 y anteriores, es vulnerable a una escritura fuera de límites mientras procesa archivos de proyecto, lo que permite a un atacante diseñar un archivo de proyecto especial que puede permitir una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatek:fvdesigner:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.76",
            "matchCriteriaId" : "D0C97CA2-1BDE-448A-9654-6DF82B6D0DE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T17:15:12.753",
      "lastModified" : "2024-11-21T05:58:50.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Zabbix from 4.0.x before 4.0.28rc1, 5.0.0alpha1 before 5.0.10rc1, 5.2.x before 5.2.6rc1, and 5.4.0alpha1 before 5.4.0beta2, the CControllerAuthenticationUpdate controller lacks a CSRF protection mechanism. The code inside this controller calls diableSIDValidation inside the init() method. An attacker doesn't have to know Zabbix user login credentials, but has to know the correct Zabbix URL and contact information of an existing user with sufficient privileges."
      }, {
        "lang" : "es",
        "value" : "En Zabbix desde las versiones 4.0.x anteriores a 4.0.28rc1, versiones 5.0.0alpha1 anteriores a 5.0.10rc1, versiones 5.2.x anteriores a 5.2.6rc1, y versiones 5.4.0alpha1 anteriores a 5.4.0beta2, el controlador CControllerAuthenticationUpdate carece de un mecanismo de protección CSRF. El código dentro de este controlador llama a diableSIDValidation dentro del método init(). Un atacante no tiene que conocer las credenciales de inicio de sesión del usuario de Zabbix, pero tiene que conocer la URL correcta de Zabbix y la información de contacto de un usuario existente con suficientes privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.27",
            "matchCriteriaId" : "7DBC6970-CABB-481C-9797-A2C27DE6FCCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.9",
            "matchCriteriaId" : "BD1D7614-E9FA-4DED-BBFA-D872E75757B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zabbix:zabbix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndIncluding" : "5.2.3",
            "matchCriteriaId" : "5499DEBB-A4E5-4035-8F23-77C1AF3D34E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://support.zabbix.com/browse/ZBX-18942",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/04/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.zabbix.com/browse/ZBX-18942",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21978",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-03-03T18:15:14.177",
      "lastModified" : "2024-11-21T05:49:21.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could upload and execute a specially crafted file leading to remote code execution within the logupload container."
      }, {
        "lang" : "es",
        "value" : "VMware View Planner versión 4.x anterior a 4.6 Security Parche 1, contiene una vulnerabilidad de ejecución de código remota .&#xa0;Una comprobación inapropiada de la entrada y una falta de autorización conlleva a una carga de archivos arbitraria en una aplicación web logupload.&#xa0;Un atacante no autorizado con acceso de red a View Planner Harness podría cargar y ejecutar un archivo especialmente diseñado que conduzca a una ejecución de código remota dentro del contenedor logupload"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:view_planner:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.6",
            "matchCriteriaId" : "3BC2C971-8105-459B-AA0C-A028882AE46E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:view_planner:4.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F3BD451B-DE55-4089-8CAF-0A045C96CD53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161879/VMware-View-Planner-4.6-Remote-Code-Execution.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0003.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161879/VMware-View-Planner-4.6-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22182",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-03T18:15:14.237",
      "lastModified" : "2024-11-21T05:49:39.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting with 13.7. GitLab was vulnerable to a stored XSS in merge request."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones desde la versión 13.7.&#xa0;GitLab era vulnerable a un ataque de tipo XSS almacenado en una petición de fusión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "AC1152B0-9CC9-4AAB-B183-5B01A49E9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "6309AD47-AB37-45DB-B807-42EC523473D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0BE6D29D-CC1A-44D2-B91D-05396FE6F0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0EA203BF-FD91-40B7-800A-19259A37FFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22182.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/280779",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1030189",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22182.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/280779",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1030189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22188",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-03T18:15:14.550",
      "lastModified" : "2024-11-21T05:49:40.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting with 13.0. Confidential issue titles in Gitlab were readable by an unauthorised user via branch logs."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab, que afecta a todas las versiones desde la versión 13.0.&#xa0;Los títulos de problemas confidenciales en Gitlab eran legibles por un usuario no autorizado por medio de los registros de ramas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "DB80F7C8-5F75-458C-A879-0BB48554C572"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.0.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "5ADE6D80-B46F-4F13-849C-A220B7714877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "4BBAF21A-84DD-4987-B4BE-2A8CAA44210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "9AE735A5-FC67-4B16-B27B-86C51C8771C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "D3009669-C930-4517-914D-5DB9A0E40B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "9F7976E8-BDA5-4104-AC3E-38C02CC613A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22188.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/227040",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/916340",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22188.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/227040",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/916340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22681",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-03T18:15:14.643",
      "lastModified" : "2026-03-06T13:44:06.370",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rockwell Automation Studio 5000 Logix Designer Versions 21 and later, and RSLogix 5000 Versions 16 through 20 use a key to verify Logix controllers are communicating with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer Versions 21 and later and RSLogix 5000: Versions 16 through 20 are vulnerable because an unauthenticated attacker could bypass this verification mechanism and authenticate with Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580; DriveLogix 5560, 5730, 1794-L34; Compact GuardLogix 5370, 5380; GuardLogix 5570, 5580; SoftLogix 5800."
      }, {
        "lang" : "es",
        "value" : "Rockwell Automation Studio 5000 Logix Designer versiones 21 y posteriores, y RSLogix 5000 versiones 16 hasta 20, usan una clave para verificar que los controladores Logix se estén comunicando con Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550, 5560, 5570, 5580;&#xa0;DriveLogix 5560, 5730, 1794-L34;&#xa0;Compact GuardLogix 5370, 5380;&#xa0;GuardLogix 5570, 5580;&#xa0;SoftLogix 5800. Rockwell Automation Studio 5000 Logix Designer versiones 21 y posteriores y RSLogix 5000: Versiones 16 hasta 20, son vulnerables porque un atacante no autenticado podría pasar por alto este mecanismo de comprobación y autenticarse con Rockwell Automation CompactLogix 1768, 1769, 5370, 5380, 5480: ControlLogix 5550 , 5560, 5570, 5580;&#xa0;DriveLogix 5560, 5730, 1794-L34;&#xa0;Compact GuardLogix 5370, 5380;&#xa0;GuardLogix 5570, 5580;&#xa0;SoftLogix 5800"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2026-03-05",
      "cisaActionDue" : "2026-03-26",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "Rockwell Multiple Products Insufficient Protected Credentials Vulnerability",
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:factorytalk_services_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10",
            "matchCriteriaId" : "6755FCF6-4A0C-478A-AEFF-54E35C45149D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:rslogix_5000:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16",
            "versionEndIncluding" : "20",
            "matchCriteriaId" : "04C30129-3F03-4486-B181-EBDE29751372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:studio_5000_logix_designer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "matchCriteriaId" : "9C840463-A11F-43A0-AA45-1AC810713AB6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compact_guardlogix_5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F951670-AF4D-4429-8BC1-79BDEF83B2C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compact_guardlogix_5380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62414E65-73C7-4172-B7BF-F40A66AFBB90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compactlogix_1768:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5F100A-C8A3-49F2-B1D2-411432472B6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compactlogix_1769:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A690BC-4D7C-4B83-A9F6-F860445028A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compactlogix_5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12ADAE3-97B1-48BC-BE69-ED75667C1886"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compactlogix_5380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD040ED-B44C-47D0-B4D4-729C378C4F68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:compactlogix_5480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F4F5BE-07DF-402A-BF98-34FBA6A11968"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:controllogix_5550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13EE2216-F25F-44AB-A167-4EEA153C8F8D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:controllogix_5560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA25FF8D-51C5-4928-9B90-E4BD1476F50B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:controllogix_5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "482E2CD6-D484-486C-92F4-18432D107E30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:controllogix_5580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BB883B-B863-4D57-B1C0-FC7B3EBD1EA0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:drivelogix_1794-l34:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A75A0FD-C337-4264-B1E4-96701851D6FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:drivelogix_5560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDAAA77-6964-44FC-9FFB-ECDF71665965"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:drivelogix_5730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03E185C3-17CA-4E3F-863B-9F906C5C59EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:guardlogix_5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321AE938-192A-4342-8608-ADC81F0B6582"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:guardlogix_5580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "006B7683-9FDF-4748-BA28-2EA22613E092"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:softlogix_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDAB7B6D-CCAC-460B-8A88-3397A2397078"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-056-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22681",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22877",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-03T18:15:14.707",
      "lastModified" : "2024-11-21T05:50:49.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing user check in Nextcloud prior to 20.0.6 inadvertently populates a user's own credentials for other users external storage configuration when not already configured yet."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobación de usuario en Nextcloud versiones anteriores a 20.0.6, inadvertidamente llena las propias credenciales del usuario para la configuración del almacenamiento externo de otros usuarios cuando aún no están configuradas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.6",
            "matchCriteriaId" : "6FEA4E5F-306F-4E45-AB46-C232BCB0F4EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/server/issues/24600",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/25224",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1061591",
        "source" : "support@hackerone.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6BO6P6MP2MOWA6PZRXX32PLWPXN5O4S/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=NC-SA-2021-004",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/issues/24600",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/25224",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1061591",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6BO6P6MP2MOWA6PZRXX32PLWPXN5O4S/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=NC-SA-2021-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22878",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-03T18:15:14.817",
      "lastModified" : "2024-11-21T05:50:49.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Server prior to 20.0.6 is vulnerable to reflected cross-site scripting (XSS) due to lack of sanitization in `OC.Notification.show`."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Server versiones anteriores a 20.0.6, es vulnerable a un ataque de tipo cross-site scripting (XSS) reflejado debido a una falta de saneamiento en \"OC.Notification.show\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:nextcloud_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.6",
            "matchCriteriaId" : "6FEA4E5F-306F-4E45-AB46-C232BCB0F4EB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/server/pull/25234",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/896522",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6BO6P6MP2MOWA6PZRXX32PLWPXN5O4S/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=NC-SA-2021-005",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/server/pull/25234",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/896522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L6BO6P6MP2MOWA6PZRXX32PLWPXN5O4S/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=NC-SA-2021-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22883",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-03T18:15:14.893",
      "lastModified" : "2024-11-21T05:50:49.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an 'unknownProtocol' are established. This leads to a leak of file descriptors. If a file descriptor limit is configured on the system, then the server is unable to accept new connections and prevent the process also from opening, e.g. a file. If no file descriptor limit is configured, then this lead to an excessive memory usage and cause the system to run out of memory."
      }, {
        "lang" : "es",
        "value" : "Node.js versiones anteriores a 10.24.0, 12.21.0, 14.16.0 y 15.10.0, es vulnerable a un ataque de denegación de servicio cuando son establecidos demasiados intentos de conexión con un \"unknownProtocol\".&#xa0;Esto conlleva a una filtración de descriptores de archivos.&#xa0;Si es configurado un límite de descriptor de archivo en el sistema, entonces el servidor no puede aceptar nuevas conexiones e impide que el proceso también se abra, por ejemplo, un archivo.&#xa0;Si no es configurado ningún límite de descriptor de archivo, esto conllevará a un uso excesivo de la memoria y causará al sistema quedarse sin memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-772"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.24.0",
            "matchCriteriaId" : "0B8440E6-CAF3-456D-A9B4-4EBF33AC3F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.21.0",
            "matchCriteriaId" : "4533F19F-C946-4203-8331-0317A0544D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.16.0",
            "matchCriteriaId" : "EB0738FA-DE42-4E1A-A67D-4C6357C2D720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.10.0",
            "matchCriteriaId" : "E640EA36-17B2-4745-A831-AB8655F3579D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.25",
            "matchCriteriaId" : "1FD765AD-DEE4-41C5-9746-A2294D5F21C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3",
            "matchCriteriaId" : "D04565AE-D092-4AE0-8FEE-0E8114662A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1043360",
        "source" : "support@hackerone.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0001/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1043360",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22884",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-03T18:15:14.957",
      "lastModified" : "2024-11-21T05:50:50.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes “localhost6”. When “localhost6” is not present in /etc/hosts, it is just an ordinary domain that is resolved via DNS, i.e., over network. If the attacker controls the victim's DNS server or can spoof its responses, the DNS rebinding protection can be bypassed by using the “localhost6” domain. As long as the attacker uses the “localhost6” domain, they can still apply the attack described in CVE-2018-7160."
      }, {
        "lang" : "es",
        "value" : "Node.js versiones anteriores a 10.24.0, 12.21.0, 14.16.0 y 15.10.0, es vulnerable a unos ataques de reenlace de DNS, ya que la lista blanca incluye “localhost6”.&#xa0;Cuando “localhost6” no está presente en el archivo /etc/hosts, es solo un dominio ordinario que es resuelto por medio de DNS, es decir, a través de la red.&#xa0;Si el atacante controla el servidor DNS de la víctima o puede falsificar sus respuestas, la protección de reenlace de DNS se puede omitir usando el dominio \"localhost6\".&#xa0;Siempre que el atacante use el dominio \"localhost6\", aún puede aplicar el ataque descrito en el CVE-2018-7160"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-350"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.24.0",
            "matchCriteriaId" : "0B8440E6-CAF3-456D-A9B4-4EBF33AC3F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.21.0",
            "matchCriteriaId" : "4533F19F-C946-4203-8331-0317A0544D96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.16.0",
            "matchCriteriaId" : "EB0738FA-DE42-4E1A-A67D-4C6357C2D720"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.10.0",
            "matchCriteriaId" : "E640EA36-17B2-4745-A831-AB8655F3579D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.25",
            "matchCriteriaId" : "1FD765AD-DEE4-41C5-9746-A2294D5F21C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3",
            "matchCriteriaId" : "D04565AE-D092-4AE0-8FEE-0E8114662A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1069487",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/#node-js-inspector-dns-rebinding-vulnerability-cve-2018-7160",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0001/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210723-0001/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1069487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E4FRS5ZVK4ZQ7XIJQNGIKUXG2DJFHLO7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F45Y7TXSU33MTKB6AGL2Q5V5ZOCNPKOG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HSYFUGKFUSZ27M5TEZ3FKILWTWFJTFAZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/february-2021-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://nodejs.org/en/blog/vulnerability/march-2018-security-releases/#node-js-inspector-dns-rebinding-vulnerability-cve-2018-7160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210723-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T19:15:13.047",
      "lastModified" : "2024-11-21T05:58:37.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CSV injection vulnerability found in Online Invoicing System (OIS) 4.3 and below can be exploited by users to perform malicious actions such as redirecting admins to unknown or harmful websites, or disclosing other clients' details that the user did not have access to."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de CSV en Online Invoicing System (OIS) versiones 4.3 y anteriores, puede ser explotada por unos usuarios para llevar a cabo acciones maliciosas, como redireccionar a los administradores a sitios web desconocidos o dañinos, o revelar los detalles de otros clientes a los que el usuario no tuvo acceso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bigprof:online_invoicing_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.3",
            "matchCriteriaId" : "D2BAFA93-E56D-4057-8BE8-3E30D3FC433E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bigprof-software/online-invoicing-system/releases/tag/4.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jinsonvarghese.com/csv-injection-in-online-invoicing-system/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bigprof-software/online-invoicing-system/releases/tag/4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jinsonvarghese.com/csv-injection-in-online-invoicing-system/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21312",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-03T20:15:12.060",
      "lastModified" : "2024-11-21T05:47:59.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function (Home > Management > Documents > Add, or /front/document.form.php endpoint), indeed one of the form field: \"Web Link\" is not properly sanitized and a malicious user (who has document upload rights) can use it to deliver JavaScript payload. For example if you use the following payload: \" accesskey=\"x\" onclick=\"alert(1)\" x=\", the content will be saved within the database without any control. And then once you return to the summary documents page, by clicking on the \"Web Link\" of the newly created file it will create a new empty tab, but on the initial tab the pop-up \"1\" will appear."
      }, {
        "lang" : "es",
        "value" : "GLPI es un software de código abierto que significa Gestionnaire Libre de Parc Informatique y es un paquete gratuito de Software de Gestión de Activos y TI.&#xa0;En GLPI anterior a la versión 9.5.4, se presenta una vulnerabilidad dentro de la función de carga de documentos (Home ) Management ) Documents ) Add, o el archivo /front/document.form.php endpoint), de hecho, uno de los campos de formulario: \"Web Link\" es no está debidamente saneado y un usuario malicioso (que tiene derechos de carga de documentos) puede usarlo para entregar la carga útil de JavaScript.&#xa0;Por ejemplo, si usa la siguiente carga útil: \" accesskey=\"x\" onclick=\"alert(1)\" x=\", el contenido se guardará dentro de la base de datos sin ningún control.&#xa0;Y luego, una vez que regrese a la página de documentos resumen, al hacer clic en el \"Web Link\" del archivo recién creado, se creará una nueva pestaña vacía, pero en la pestaña inicial aparecerá la ventana emergente \"1\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-c7f6-3mr7-3rq2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-c7f6-3mr7-3rq2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21313",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-03T20:15:12.200",
      "lastModified" : "2024-11-21T05:48:00.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters _target and id are not properly sanitized. Here are two payloads (due to two different exploitations depending on which parameter you act) to exploit the vulnerability:/ajax/common.tabs.php?_target=javascript:alert(document.cookie)&_itemtype=DisplayPreference&_glpi_tab=DisplayPreference$2&id=258&displaytype=Ticket (Payload triggered if you click on the button). /ajax/common.tabs.php?_target=/front/ticket.form.php&_itemtype=Ticket&_glpi_tab=Ticket$1&id=(){};(function%20(){alert(document.cookie);})();function%20a&#."
      }, {
        "lang" : "es",
        "value" : "GLPI es un software de código abierto que significa Gestionnaire Libre de Parc Informatique y es un paquete gratuito de Software de Gestión de Activos y TI.&#xa0;En GLPI anterior a la versión 9.5.4, existe una vulnerabilidad en el endpoint /ajax/common.tabs.php, de hecho, al menos dos parámetros _target e id no están correctamente saneados.&#xa0;Aquí existen dos cargas útiles (debido a dos explotaciones diferentes según el parámetro que actúe) para explotar la vulnerabilidad: /ajax/common.tabs.php?_target=javascript:alert(document.cookie)&amp; _itemtype=DisplayPreference&amp;_glpi_tab=DisplayPreference$2&amp;id=258&amp;displaytype=Ticket (Carga útil que se activa si hace clic en el botón).&#xa0;/ajax/common.tabs.php?_target=/front/ticket.form.php&amp;_itemtype=Ticket&amp;_glpi_tab=Ticket$1&amp;id=(){}; (function%20(){alert(document.cookie);})(); function%20a&amp;#"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-h4hj-mrpg-xfgx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-h4hj-mrpg-xfgx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21314",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-03T20:15:12.280",
      "lastModified" : "2024-11-21T05:48:00.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket."
      }, {
        "lang" : "es",
        "value" : "GLPI es un software de código abierto que significa Gestionnaire Libre de Parc Informatique y es un paquete gratuito de Software de Gestión de Activos y TI.&#xa0;En GLPI anterior a la versión 9.5.4, existe una vulnerabilidad de tipo XSS que involucra a un usuario que ha iniciado sesión mientras actualiza un ticket"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-2w7j-xgj7-3xgg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-2w7j-xgj7-3xgg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T20:15:12.357",
      "lastModified" : "2024-11-21T05:58:50.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service."
      }, {
        "lang" : "es",
        "value" : "LumisXP (también se conoce como como Lumis Experience Platform) anterior a versión 10.0.0, permite un XXE ciego no autenticado a través de una petición de API en el archivo PageControllerXml.jsp.&#xa0;Se puede enviar una petición diseñada con una carga útil XXE y lograr resultados como una lectura de archivos del servidor local o una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lumis:lumis_experience_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.0",
            "matchCriteriaId" : "91BFAF78-AE50-41C7-A706-F6B56E225C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sl4cky/LumisXP-XXE---POC/blob/main/poc.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sl4cky/LumisXP-XXE---POC/blob/main/poc.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T20:15:12.437",
      "lastModified" : "2024-11-21T05:58:51.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en AdGuard anterior a la versión 0.105.2.&#xa0;Un atacante capaz de obtener la cookie del usuario puede forzar su contraseña fuera de línea, porque el hash de la contraseña es almacenado en la cookie"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adguard:adguard_home:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.105.2",
            "matchCriteriaId" : "8978CCDB-CABE-49C9-A3B7-9F55F8AF474F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AdguardTeam/AdGuardHome/issues/2470",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AdguardTeam/AdGuardHome/issues/2470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-03T22:15:12.503",
      "lastModified" : "2024-11-21T05:58:52.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "resources/public/js/orchestrator.js in openark orchestrator before 3.2.4 allows XSS via the orchestrator-msg parameter."
      }, {
        "lang" : "es",
        "value" : "El archivo resources/public/js/orchestrator.js en openark orchestrator anterior a versión 3.2.4, permite un XSS por medio del parámetro orchestrator-msg"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openark:orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.4",
            "matchCriteriaId" : "47674EAC-81F7-4D71-B99A-FD2DE2212E50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openark/orchestrator/pull/1313",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openark/orchestrator/releases/tag/v3.2.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=DOYm0DIS3Us",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openark/orchestrator/pull/1313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openark/orchestrator/releases/tag/v3.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=DOYm0DIS3Us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21331",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-03T23:15:11.463",
      "lastModified" : "2024-11-21T05:48:02.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive information downloaded via the API using the API Client. The Datadog API is executed on a unix-like system with multiple users. The API is used to download a file containing sensitive information. This sensitive information is exposed locally to other users. This vulnerability exists in the API Client for version 1 and 2. The method `prepareDownloadFilecreates` creates a temporary file with the permissions bits of `-rw-r--r--` on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file downloaded via the `downloadFileFromResponse` method will be visible to all other users on the local system. Analysis of the finding determined that the affected code was unused, meaning that the exploitation likelihood is low. The unused code has been removed, effectively mitigating this issue. This issue has been patched in version 1.0.0-beta.9. As a workaround one may specify `java.io.tmpdir` when starting the JVM with the flag `-Djava.io.tmpdir`, specifying a path to a directory with `drw-------` permissions owned by `dd-agent`."
      }, {
        "lang" : "es",
        "value" : "El cliente Java para la API Datadog anterior a la versión 1.0.0-beta.9, presenta una divulgación de información local de información confidencial descargada por medio de la API mediante la API Client.&#xa0;La API Datadog se ejecuta en un sistema similar a Unix con múltiples usuarios.&#xa0;La API se usa para descargar un archivo que contiene información confidencial.&#xa0;Esta información confidencial está expuesta localmente a otros usuarios.&#xa0;Esta vulnerabilidad existe en la API Client para versión 1 y 2. El método \"prepareDownloadFilecreates\" crea un archivo temporal con los bits de permisos de \"-rw-r--r--\" en sistemas similares a Unix.&#xa0;En sistemas similares a Unix, el directorio temporal del sistema se comparte entre los usuarios.&#xa0;Como tal, el contenido del archivo descargado a través del método \"downloadFileFromResponse\" será visible para todos los demás usuarios en el sistema local.&#xa0;El análisis del hallazgo determinó que el código afectado no se usó,&#xa0;lo que significa que la probabilidad de explotación es baja.&#xa0;El código no usado se ha eliminado, lo que mitiga de forma eficaz este problema.&#xa0;Este problema se ha corregido en la versión 1.0.0-beta.9.&#xa0;Como solución alternativa, se puede especificar \"java.io.tmpdir\" al iniciar la JVM con el indicador \"-Djava.io.tmpdir\", especificando una ruta a un directorio con permisos \"drw-------\" propiedad de \"dd-agent\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 3.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "862C1FF5-6E2A-4AD0-8B5E-2EF7BAFE955B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "210F0D80-D9EA-44DC-BF98-B20B660EE8AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7C2D40-9723-4D3C-8EA0-619AF04E8817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "E0989A33-823A-4D35-AEED-298E8D0912E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta5:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA97CE4-F6DA-4758-BCBA-546D7F6EE8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta6:*:*:*:*:*:*",
            "matchCriteriaId" : "1703268E-6342-4EBD-9B4A-7D6341ADE3B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta7:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC9A8D9-3777-4DA4-B66F-2671C96877AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:datadoghq:datadog-api-client-java:1.0.0:beta8:*:*:*:*:*:*",
            "matchCriteriaId" : "A7B8A90C-759D-40B9-BF6A-D8337541B910"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DataDog/datadog-api-client-java/releases/tag/datadog-api-client-1.0.0-beta.9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DataDog/datadog-api-client-java/security/advisories/GHSA-2cxf-6567-7pp6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DataDog/datadog-api-client-java/releases/tag/datadog-api-client-1.0.0-beta.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DataDog/datadog-api-client-java/security/advisories/GHSA-2cxf-6567-7pp6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22183",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-04T15:15:13.157",
      "lastModified" : "2024-11-21T05:49:39.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting with 11.8. GitLab was vulnerable to a stored XSS in the epics page, which could be exploited with user interactions."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 11.8.&#xa0;GitLab era vulnerable a un XSS almacenado en la página epics, que podría haber sido explotado con las interacciones del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.8",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "359C600F-1715-4882-A852-07C19802E1B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.8",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "3C3DAEDC-3DFB-4450-A946-7C29D94DE5CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "AC1152B0-9CC9-4AAB-B183-5B01A49E9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "6309AD47-AB37-45DB-B807-42EC523473D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0BE6D29D-CC1A-44D2-B91D-05396FE6F0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0EA203BF-FD91-40B7-800A-19259A37FFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22183.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/294176",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1055814",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22183.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/294176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1055814",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22189",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-04T15:15:13.283",
      "lastModified" : "2024-11-21T05:49:40.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Starting with version 13.7 the Gitlab CE/EE editions were affected by a security issue related to the validation of the certificates for the Fortinet OTP that could result in authentication issues."
      }, {
        "lang" : "es",
        "value" : "A partir de la versión 13.7, las ediciones de Gitlab CE/EE, estaban afectadas por un problema de seguridad relacionado a la comprobación de los certificados para Fortinet OTP que podría resultar en problemas de autenticación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "9076F10B-CB03-48F3-A973-26318C55E912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "387DD48F-9C0A-40DA-9628-057C606A13BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "4BBAF21A-84DD-4987-B4BE-2A8CAA44210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "9AE735A5-FC67-4B16-B27B-86C51C8771C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "D3009669-C930-4517-914D-5DB9A0E40B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "9F7976E8-BDA5-4104-AC3E-38C02CC613A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22189.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/296557",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22189.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/296557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23344",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-04T17:15:13.153",
      "lastModified" : "2024-11-21T05:51:32.683",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package total.js before 3.4.8 are vulnerable to Remote Code Execution (RCE) via set."
      }, {
        "lang" : "es",
        "value" : "El paquete total.js versiones anteriores a 3.4.8, es vulnerable a una ejecución de código remota (RCE) por medio de set"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:totaljs:total.js:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.4.8",
            "matchCriteriaId" : "903890AB-2DE4-4BA4-83F0-AC47EEF03AFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/totaljs/framework/commit/c812bbcab8981797d3a1b9993fc42dad3d246f04",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-TOTALJS-1077069",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/totaljs/framework/commit/c812bbcab8981797d3a1b9993fc42dad3d246f04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-TOTALJS-1077069",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23346",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-04T17:15:13.700",
      "lastModified" : "2024-11-21T05:51:32.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package html-parse-stringify before 2.0.1; all versions of package html-parse-stringify2. Sending certain input could cause one of the regular expressions that is used for parsing to backtrack, freezing the process."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete html-parse-stringify versiones anteriores a 2.0.1;&#xa0;todas las versiones del paquete html-parse-stringify2.&#xa0;Enviando determinada entrada podría causar que una de las expresiones regulares que son usadas para analizar el retroceso, congele el proceso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:html-parse-stringify_project:html-parse-stringify:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "DA04DAE6-E193-476E-8EB7-58DA48AE1E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/HenrikJoreteg/html-parse-stringify/blob/master/lib/parse.js%23L2",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/HenrikJoreteg/html-parse-stringify/commit/c7274a48e59c92b2b7e906fedf9065159e73fe12",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rayd/html-parse-stringify2/blob/master/lib/parse.js%23L2",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1080633",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HTMLPARSESTRINGIFY-1079306",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HTMLPARSESTRINGIFY2-1079307",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/HenrikJoreteg/html-parse-stringify/blob/master/lib/parse.js%23L2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/HenrikJoreteg/html-parse-stringify/commit/c7274a48e59c92b2b7e906fedf9065159e73fe12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rayd/html-parse-stringify2/blob/master/lib/parse.js%23L2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1080633",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HTMLPARSESTRINGIFY-1079306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HTMLPARSESTRINGIFY2-1079307",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22128",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2021-03-04T18:15:13.130",
      "lastModified" : "2024-11-21T05:49:33.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in FortiProxy SSL VPN portal 2.0.0, 1.2.9 and below versions may allow an authenticated, remote attacker to access internal service such as the ZebOS Shell on the FortiProxy appliance through the Quick Connection functionality."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en el portal FortiProxy SSL VPN versiones 2.0.0, 1.2.9 y anteriores, puede permitir a un atacante remoto autenticado acceder a servicios internos como ZebOS Shell en el dispositivo FortiProxy por medio de la funcionalidad Quick Connection"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.2.9",
            "matchCriteriaId" : "204BD02A-F191-4760-8541-8C95E161C364"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiproxy:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3DD97EA-92AD-4EB1-B731-261F40BFC4BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/advisory/FG-IR-20-235",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-20-235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23126",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.207",
      "lastModified" : "2024-11-21T05:51:15.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of the insecure rand() function within the process of generating the 2FA secret."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.2.0 hasta 3.9.24.&#xa0;Uso de la función no segura rand() dentro del proceso de generación del secreto 2FA"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "A02A2FBC-42A3-42A1-B06A-CC676094F7C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/841-20210301-core-insecure-randomness-within-2fa-secret-generation.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/841-20210301-core-insecure-randomness-within-2fa-secret-generation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23127",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.287",
      "lastModified" : "2024-11-21T05:51:15.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.2.0 through 3.9.24. Usage of an insufficient length for the 2FA secret accoring to RFC 4226 of 10 bytes vs 20 bytes."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.2.0 hasta 3.9.24.&#xa0;El uso de una longitud insuficiente para el secreto 2FA según RFC 4226 de 10 bytes frente a 20 bytes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "A02A2FBC-42A3-42A1-B06A-CC676094F7C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/841-20210301-core-insecure-randomness-within-2fa-secret-generation.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/841-20210301-core-insecure-randomness-within-2fa-secret-generation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23128",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.363",
      "lastModified" : "2024-11-21T05:51:15.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.2.0 through 3.9.24. The core shipped but unused randval implementation within FOF (FOFEncryptRandval) used an potential insecure implemetation. That has now been replaced with a call to 'random_bytes()' and its backport that is shipped within random_compat."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.2.0 hasta 3.9.24.&#xa0;La implementación de randval enviada pero no usada dentro de FOF (FOFEncryptRandval) usó una implementación no segura potencial.&#xa0;Eso ahora ha sido reemplazado con una llamada a la función \"random_bytes()\" y su backport que es enviado dentro de random_compat"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "A02A2FBC-42A3-42A1-B06A-CC676094F7C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/842-20210302-core-potential-insecure-fofencryptrandval.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/842-20210302-core-potential-insecure-fofencryptrandval.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23129",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.440",
      "lastModified" : "2024-11-21T05:51:15.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of messages showed to users that could lead to xss issues."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 2.5.0 hasta 3.9.24.&#xa0;Una falta de filtrado de mensajes mostrados a usuarios podría conllevar a problemas de tipo xss"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "34285F76-9429-4AE2-9D1F-F45F97C264F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/843-20210303-core-xss-within-alert-messages-showed-to-users.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/843-20210303-core-xss-within-alert-messages-showed-to-users.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23130",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.503",
      "lastModified" : "2024-11-21T05:51:15.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 2.5.0 through 3.9.24. Missing filtering of feed fields could lead to xss issues."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 2.5.0 hasta 3.9.24.&#xa0;Una falta de filtrado de campos feed podría conllevar a problemas de tipo xss"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "34285F76-9429-4AE2-9D1F-F45F97C264F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/844-20210304-core-xss-within-the-feed-parser-library.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/844-20210304-core-xss-within-the-feed-parser-library.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23131",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.597",
      "lastModified" : "2024-11-21T05:51:15.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.2.0 through 3.9.24. Missing input validation within the template manager."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.2.0 hasta 3.9.24.&#xa0;Una falta de comprobación de entrada en el administrador de plantillas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "A02A2FBC-42A3-42A1-B06A-CC676094F7C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/845-20210305-core-input-validation-within-the-template-manager.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/845-20210305-core-input-validation-within-the-template-manager.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23132",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.660",
      "lastModified" : "2024-11-21T05:51:15.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.0.0 through 3.9.24. com_media allowed paths that are not intended for image uploads"
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.0.0 hasta 3.9.24. com_media permitió rutas que no están destinadas a una carga de imágenes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "4CF63EE1-BB31-4FA3-92C9-DEE16081A60C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/846-20210306-core-com-media-allowed-paths-that-are-not-intended-for-image-uploads.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/846-20210306-core-com-media-allowed-paths-that-are-not-intended-for-image-uploads.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26027",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.833",
      "lastModified" : "2024-11-21T05:55:46.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.0.0 through 3.9.24. Incorrect ACL checks could allow unauthorized change of the category for an article."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.0.0 hasta 3.9.24.&#xa0;Las comprobaciones incorrectas de ACL podrían permitir cambios no autorizados de la categoría de un artículo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "4CF63EE1-BB31-4FA3-92C9-DEE16081A60C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/847-20210307-core-acl-violation-within-com-content-frontend-editing.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/847-20210307-core-acl-violation-within-com-content-frontend-editing.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26028",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.910",
      "lastModified" : "2024-11-21T05:55:46.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.0.0 hasta 3.9.24.&#xa0;Extrayendo un paquete zip específicamente diseñado podría escribir archivos fuera de la ruta prevista"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "4CF63EE1-BB31-4FA3-92C9-DEE16081A60C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/848-20210308-core-path-traversal-within-joomla-archive-zip-class.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/848-20210308-core-path-traversal-within-joomla-archive-zip-class.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26029",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-03-04T18:15:13.973",
      "lastModified" : "2024-11-21T05:55:46.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 1.6.0 through 3.9.24. Inadequate filtering of form contents could allow to overwrite the author field."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 1.6.0 hasta 3.9.24.&#xa0;Un filtrado Inadecuado del contenido del formulario podría permitir sobrescribir el campo author"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "3.9.25",
            "matchCriteriaId" : "6D3B74FE-A140-4E3B-A531-66E35B340AFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/849-20210309-core-inadequate-filtering-of-form-contents-could-allow-to-overwrite-the-author-field.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/849-20210309-core-inadequate-filtering-of-form-contents-could-allow-to-overwrite-the-author-field.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27217",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-04T18:15:14.050",
      "lastModified" : "2024-11-21T05:57:37.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the _send_secure_msg() function of Yubico yubihsm-shell through 2.0.3. The function does not correctly validate the embedded length field of an authenticated message received from the device. Out-of-bounds reads performed by aes_remove_padding() can crash the running process, depending on the memory layout. This could be used by an attacker to cause a client-side denial of service. The yubihsm-shell project is included in the YubiHSM 2 SDK product."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la función _send_secure_msg() de Yubico yubihsm-shell versiones hasta de 2.0.3.&#xa0;La función no comprueba correctamente el campo de longitud insertado de un mensaje autenticado recibido del dispositivo.&#xa0;Lecturas fuera de límites llevadas a cabo por la función aes_remove_padding() pueden bloquear el proceso en ejecución, dependiendo del diseño de la memoria.&#xa0;Esto podría ser usado por un atacante para conllevar una denegación de servicio del lado del cliente.&#xa0;El proyecto yubihsm-shell está incluido en el producto YubiHSM 2 SDK"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yubico:yubihsm-shell:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0.3",
            "matchCriteriaId" : "9F7C9BAC-A77B-4333-A29C-4EABAF1B7003"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.inhq.net/posts/yubico-libyubihsm-vuln2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yubico/yubihsm-shell/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.yubico.com/support/security-advisories/ysa-2021-01/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.inhq.net/posts/yubico-libyubihsm-vuln2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yubico/yubihsm-shell/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.yubico.com/support/security-advisories/ysa-2021-01/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20340",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-04T19:15:13.500",
      "lastModified" : "2024-11-21T05:46:25.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451."
      }, {
        "lang" : "es",
        "value" : "Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 194451"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF77DC36-1B53-437D-B3D7-7FED92E967DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B31C8-6BB6-4C46-A836-2B029909B079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578775A7-94F0-4715-B239-5712B3726A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A44AB0-E777-48F4-AEE9-AD32397B7F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE002557-60D2-46E8-9E40-A8C3DF516C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96D318F-AF7A-4CD6-BC68-CBE808D41705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E72DED9-4D72-4AC9-962A-BC73A324A9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3E6C51-5565-40CA-86CB-8D5389D2C903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC281E37-FEF1-400D-8BD1-A59162FF533A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C61454F-7B98-4A67-B2E2-E0146F1F43D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:global_configuration_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1498109-7634-4258-B0EE-CA8A97334441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90791CAA-18B0-4A3F-A8FA-26E3C95E7852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170BA44A-DF05-41C4-92DA-A0E8544AED25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E17CB-517F-4976-BBBC-3CD0188710E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E698C1B9-529C-42A1-9C8D-8088A2C1FC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194451",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6417585",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6417585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20350",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-04T19:15:13.563",
      "lastModified" : "2024-11-21T05:46:26.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194707."
      }, {
        "lang" : "es",
        "value" : "Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 194707"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF77DC36-1B53-437D-B3D7-7FED92E967DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B31C8-6BB6-4C46-A836-2B029909B079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578775A7-94F0-4715-B239-5712B3726A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A44AB0-E777-48F4-AEE9-AD32397B7F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE002557-60D2-46E8-9E40-A8C3DF516C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96D318F-AF7A-4CD6-BC68-CBE808D41705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E72DED9-4D72-4AC9-962A-BC73A324A9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3E6C51-5565-40CA-86CB-8D5389D2C903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC281E37-FEF1-400D-8BD1-A59162FF533A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C61454F-7B98-4A67-B2E2-E0146F1F43D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:global_configuration_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1498109-7634-4258-B0EE-CA8A97334441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90791CAA-18B0-4A3F-A8FA-26E3C95E7852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170BA44A-DF05-41C4-92DA-A0E8544AED25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E17CB-517F-4976-BBBC-3CD0188710E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E698C1B9-529C-42A1-9C8D-8088A2C1FC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194707",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6417585",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6417585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20351",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-04T19:15:13.640",
      "lastModified" : "2024-11-21T05:46:26.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708."
      }, {
        "lang" : "es",
        "value" : "Los productos de IBM Engineering son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la Interfaz de Usuario Web, alterando así la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 194708"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF77DC36-1B53-437D-B3D7-7FED92E967DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B31C8-6BB6-4C46-A836-2B029909B079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578775A7-94F0-4715-B239-5712B3726A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A44AB0-E777-48F4-AEE9-AD32397B7F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE002557-60D2-46E8-9E40-A8C3DF516C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E96D318F-AF7A-4CD6-BC68-CBE808D41705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E72DED9-4D72-4AC9-962A-BC73A324A9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3E6C51-5565-40CA-86CB-8D5389D2C903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC281E37-FEF1-400D-8BD1-A59162FF533A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C61454F-7B98-4A67-B2E2-E0146F1F43D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:global_configuration_management:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1498109-7634-4258-B0EE-CA8A97334441"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "666FB9C2-4A39-4C21-B00B-3ABF4EE9805E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90791CAA-18B0-4A3F-A8FA-26E3C95E7852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_doors_next_generation:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "170BA44A-DF05-41C4-92DA-A0E8544AED25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E17CB-517F-4976-BBBC-3CD0188710E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E698C1B9-529C-42A1-9C8D-8088A2C1FC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194708",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6417585",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6417585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24031",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-03-04T21:15:12.743",
      "lastModified" : "2024-11-21T05:52:14.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Zstandard command-line utility prior to v1.4.1, output files were created with default permissions. Correct file permissions (matching the input) would only be set at completion time. Output files could therefore be readable or writable to unintended parties."
      }, {
        "lang" : "es",
        "value" : "En la utilidad Zstandard command-line versiones anteriores a v1.4.1, los archivos de salida se creaban con permisos predeterminados.&#xa0;Los permisos de archivo correctos (que coincidan con la entrada) solo se establecerán en el momento de la completación.&#xa0;Por lo tanto, los archivos de salida podrían ser leídos o escribibles para personas no deseadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-277"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:zstandard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "7BB54F72-0467-43BC-B73A-DA6DC8A55FD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981404",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/facebook/zstd/issues/1630",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24031",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=981404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/facebook/zstd/issues/1630",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24032",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-03-04T21:15:12.963",
      "lastModified" : "2024-11-21T05:52:14.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Beginning in v1.4.1 and prior to v1.4.9, due to an incomplete fix for CVE-2021-24031, the Zstandard command-line utility created output files with default permissions and restricted those permissions immediately afterwards. Output files could therefore momentarily be readable or writable to unintended parties."
      }, {
        "lang" : "es",
        "value" : "A partir de la versión v1.4.1 y anterior a la v1.4.9, debido a una solución incompleta para el CVE-2021-24031, la utilidad de línea de comandos Zstandard creó archivos de salida con permisos predeterminados y restringió esos permisos inmediatamente después.&#xa0;Por lo tanto, los archivos de salida podrían ser momentáneamente legibles o escribibles para personas no deseadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-277"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:zstandard:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.1",
            "versionEndExcluding" : "1.4.9",
            "matchCriteriaId" : "D09560DA-1F1B-41AA-B96F-DABEE82C04D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982519",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/facebook/zstd/issues/2491",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24032",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=982519",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/facebook/zstd/issues/2491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25331",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.057",
      "lastModified" : "2024-11-21T05:54:46.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen in specific condition."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en la aplicación Samsung Pay mini versión anterior a v4.0.14, permite el acceso no autorizado a la información del saldo en la pantalla de bloqueo en condiciones específicas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:pay_mini:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.14",
            "matchCriteriaId" : "8682C73B-FDE2-44DD-9DD4-AC1F3A4AEF5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25332",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.260",
      "lastModified" : "2024-11-21T05:54:46.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to contacts information over the lockscreen in specific condition."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en la aplicación Samsung Pay mini anterior a la v4.0.14 permite el acceso no autorizado a la información de los contactos por medio de la pantalla de bloqueo en condiciones específicas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:pay_mini:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.14",
            "matchCriteriaId" : "8682C73B-FDE2-44DD-9DD4-AC1F3A4AEF5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25333",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.337",
      "lastModified" : "2024-11-21T05:54:46.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Samsung Pay mini application prior to v4.0.14 allows unauthorized access to balance information over the lockscreen via scanning specific QR code."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en la aplicación Samsung Pay mini anterior a la v4.0.14 permite el acceso no autorizado a la información del saldo en la pantalla de bloqueo mediante el escaneo de un código QR específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:pay_mini:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.14",
            "matchCriteriaId" : "8682C73B-FDE2-44DD-9DD4-AC1F3A4AEF5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25334",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.417",
      "lastModified" : "2024-11-21T05:54:46.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input check in wallpaper service in Samsung mobile devices prior to SMR Feb-2021 Release 1 allows untrusted application to cause permanent denial of service."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de entrada inapropiada en el servicio de fondo de pantalla en dispositivos móviles Samsung anteriores a SMR Feb-2021 Release 1, permite que una aplicación no confiable cause una denegación del servicio permanente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25335",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.493",
      "lastModified" : "2024-11-21T05:54:46.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper lockscreen status check in cocktailbar service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows unauthenticated users to access hidden notification contents over the lockscreen in specific condition."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada del estado de la pantalla de bloqueo en el servicio cocktailbar en dispositivos móviles Samsung anteriores a SMR Mar-2021 Release 1, permite a los usuarios no autenticados acceder a los contenidos de notificación ocultos por medio de la pantalla de bloqueo en condiciones específicas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:one_ui:2.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5923B81A-5451-41C4-9187-9A9A6F508E20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25336",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.587",
      "lastModified" : "2024-11-21T05:54:46.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in NotificationManagerService in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to acquire notification access via sending a crafted malicious intent."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en NotificationManagerService en los dispositivos móviles Samsung anteriores a SMR Mar-2021 Release 1, permite que las aplicaciones no confiables obtengan acceso a notificaciones mediante el envío de un intent malicioso diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25337",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.667",
      "lastModified" : "2025-10-30T15:37:12.737",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en el servicio clipboard en los dispositivos móviles Samsung anteriores a SMR Mar-2021 Release 1, permite que las aplicaciones no confiables lean o escriban ciertos archivos locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-11-08",
      "cisaActionDue" : "2022-11-29",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Samsung Mobile Devices Improper Access Control Vulnerability",
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858555E6-5D30-4BBF-A5CD-FD1882209ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18D4924F-44AB-4E63-8040-D0B96F147BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8150E4FA-8F29-4974-BDE8-ED192879DEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D021B217-C481-43D1-A3E6-375E40BD4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72145BA5-C781-4E36-BB39-33DD92B2F801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E3ED73-5CF8-451F-914B-123B2312110D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6986831F-0AF0-4719-BA45-4485D44D6707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "08E7C018-1293-4E29-83EB-AF177CA6B179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB1563D-A951-4A9C-B348-0684DA242B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D52A71AE-3D39-4F29-806B-603FE098510A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "10C1DF2B-8371-4259-9139-7260EACEE98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B93A5F5F-BF53-44D3-9583-811CC284DF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E1950A-282D-4065-AAA5-9BBB7F8D2C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4996EB5E-1FAB-4799-AE46-8176D74C49D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28950DDB-004F-4E01-9BBD-F5A320556D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "48B55CF5-CF20-48F7-A806-1234436566E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3FE371-E773-4AF6-A8DC-0FD9EF615647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "45104240-9D60-47EA-8582-1F912FE7A1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7D7092-5423-4CD1-819D-B784106D1342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA7EA43-3CD8-4529-9071-3FB14EE30F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9693C8-FE11-4E03-8D4A-0D6FE77627DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4561F7F-6B1F-412D-A174-5F9709ACF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A54F7006-979F-4DF5-A350-77DC3A68536E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9282540E-26C5-4140-9074-480DB7F5DE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB304E43-DCCB-42E1-8B44-0825C9C437FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "59BF1A24-8AC5-482F-B872-38D625FC669F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7719C-8C21-4203-9ED9-E4C048FA5CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2427A8F0-035E-4DB5-8B91-EBD8E826F6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25337",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25338",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.727",
      "lastModified" : "2024-11-21T05:54:47.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper memory access control in RKP in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to write certain part of RKP EL2 memory region."
      }, {
        "lang" : "es",
        "value" : "El control de acceso a la memoria inadecuado en RKP en los dispositivos móviles Samsung anteriores a SMR Mar-2021 Release 1, permite a un atacante, dado un kernel comprometido, escribir determinada parte de la región de memoria EL2 de RKP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC599902-095F-411E-B112-1BA9A643C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25339",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T21:15:13.823",
      "lastModified" : "2024-11-21T05:54:47.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper address validation in HArx in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows an attacker, given a compromised kernel, to corrupt EL2 memory."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de direcciones inapropiada en HArx en los dispositivos móviles Samsung anteriores a SMR Mar-2021 Release 1, permite que un atacante, dado un kernel comprometido, corrompa la memoria EL2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:H/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC599902-095F-411E-B112-1BA9A643C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-04T21:15:13.883",
      "lastModified" : "2024-11-21T05:56:02.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an executable file under the web root). This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en AfterLogic Aurora versiones hasta 8.5.3 y WebMail Pro versiones hasta 8.5.3, cuando DAV está habilitado.&#xa0;Permiten saltar directorios para crear nuevos archivos (como un archivo ejecutable en la root web).&#xa0;Esto está relacionado con el archivo DAVServer.php en versión 8.x y el archivo DAV/Server.php en versión 7.x"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.3",
            "matchCriteriaId" : "ED26BD57-AB19-4C1E-9D6C-31DEF0219C02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afterlogic:webmail_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.3",
            "matchCriteriaId" : "6AF76616-C15F-4553-A037-84BA1CB13AF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://auroramail.wordpress.com/2021/02/03/addressing-dav-related-vulnerability-in-webmail-and-aurora/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://auroramail.wordpress.com/2021/02/03/addressing-dav-related-vulnerability-in-webmail-and-aurora/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26988",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2021-03-04T21:15:13.947",
      "lastModified" : "2024-11-21T05:57:08.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P8 and 9.8 are susceptible to a vulnerability which could allow unauthorized tenant users to discover information related to converting a 7-Mode directory to Cluster-mode such as Storage Virtual Machine (SVM) names, volume names, directory paths and Job IDs."
      }, {
        "lang" : "es",
        "value" : "Clustered Data ONTAP versiones anteriores a 9.3P21, 9.5P16, 9.6P12, 9.7P8 y 9.8, son susceptibles a una vulnerabilidad que podría permitir a los usuarios invitados no autorizados detectar información relacionada con la conversión de un directorio 7-Mode a Cluster-mode, como Storage Virtual Machine (SVM), nombres de volumen, rutas de directorio y ID de trabajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEC5101-670D-4F01-A388-74272316EC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BCD26C-1768-471E-B800-7778D68E0E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "6101ACF8-3D93-49EA-A603-DB32CA26BDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "C49F40F4-27DA-434E-8522-83C3D1A327C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "36AD0CBC-2D46-48DA-A3F2-65BC9F56CAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "E785BFE7-5BE1-418F-9AD8-5FFE892BFB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "741A1EFA-3A52-4F91-92B3-31D4E5007026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE7A114-6F5A-43A8-8C12-7F92EC274D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "68DDF63E-B63B-4C13-AFFF-7A426F76121F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE596FF-8EC9-4D14-A55B-763E769A8ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E87F46-4265-4A30-B353-4AC8EF97E180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "06B78F0B-8923-426A-A1EE-FDD1D1E44A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B67B4E-A125-49BF-9AC2-1CF5F48CE738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "290B8746-9651-4DC4-8683-B990F33781FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDC247F-1144-4E56-8DA6-C6EBB2EAC2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFE9204-8E81-493E-9C01-F0E83257688D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "A25A4FF8-D296-4786-BA5E-A72EFFBD108A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "53EFE61D-6B27-4536-B153-979C0EB9F60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D9CF7-38C2-4B9C-A0D9-4C06998FD877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "50314453-FAF4-4936-8C54-4600E44C1F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "FB31C47F-A27A-4926-9EC7-10C4BF5B9E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F6F98-A754-4BBA-9D86-4A0E5B6AAB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "42F29C47-17E9-47B7-AB5E-CABA24B2EAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE59E7E-C281-4EC3-9717-AEA7C821AE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7A126F-2A70-47A7-9324-27C51AD15F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "79F57E15-4244-4B0D-AFB5-BBEA9BC4B3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B72E-E339-4B66-BF5E-5E4271C8266F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF4256-0971-4A7B-8466-54DCE2E0C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EB144-22E6-421E-B994-FA274525E939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "84AA2BAD-4415-4F78-8902-BC8155642D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "35991FCD-795E-4575-8D82-4645F7974C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB69541-55F8-42E7-98FD-340E377586BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "E8063EC2-2A7F-4731-B963-FE9264812109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "9820E003-B2FE-4F35-9A84-2AD57BE2A181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8CD422-4A61-4663-B612-7B3624F43F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2E86F1D9-802D-41E7-8F6C-B84B8386C424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B67F1A-036C-4FB6-A0B8-23FF047039A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CBC17B-E704-4ED0-9039-B36DAB82DF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B43376D4-F7DB-41D2-8B80-3CDA6CA46CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "65738ADA-7C9A-46BA-812D-FC8DDF4D7B16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "387A9333-587B-48E5-A629-A8772EA17294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "45C35A9A-3C9C-4F1F-8D0A-DB1FEFCE9B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0A57F0-B7BE-4E68-89FA-F83A4FA3C1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "395B8C05-1E47-4A94-93B3-BE5ACD63C1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "35EE9C90-358F-486B-B01E-1EC4118F7188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "56B2EA2E-0ACF-4C45-AB01-3668944DE752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA3D0E5-DA7D-4BF1-A148-1BC0CEE5A107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEBBBD6-E0C6-4CAB-8384-2C9B272824F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "95137AE6-5CA2-439D-BE46-22106478FDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C5726207-4774-4417-BC35-B77F79851579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EB0865-6ED4-4794-9E3B-24663708F502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E69DC9C-D08C-4F31-B708-7253CB115B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "499EA5F0-C7E9-4C92-8831-B5B45B848EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "75A1717C-A1B8-46E8-9AD8-68C2E3A7A8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "EA76E433-1322-49B9-A823-51A317710671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AD0FE3-5C42-46A5-90CD-DB9CD0F4EA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "08FD58E1-D2DE-44CA-9579-0DBFDD9D8ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C4BDA-E02A-48C3-B1E7-EDC502783E7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20210303-0001",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/NTAP-20210303-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26989",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2021-03-04T21:15:14.040",
      "lastModified" : "2024-11-21T05:57:09.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clustered Data ONTAP versions prior to 9.3P21, 9.5P16, 9.6P12, 9.7P9 and 9.8 are susceptible to a vulnerability which could allow a remote authenticated attacker to cause a Denial of Service (DoS) on clustered Data ONTAP configured for SMB access."
      }, {
        "lang" : "es",
        "value" : "Clustered Data ONTAP versiones anteriores a 9.3P21, 9.5P16, 9.6P12, 9.7P9 y 9.8, son susceptibles a una vulnerabilidad que podría permitir a un atacante autenticado remotamente causar una Denegación de Servicio (DoS) en Clustered Data ONTAP configurado para acceso SMB"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BFEC5101-670D-4F01-A388-74272316EC86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "C1BCD26C-1768-471E-B800-7778D68E0E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "6101ACF8-3D93-49EA-A603-DB32CA26BDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "C49F40F4-27DA-434E-8522-83C3D1A327C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "36AD0CBC-2D46-48DA-A3F2-65BC9F56CAA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "E785BFE7-5BE1-418F-9AD8-5FFE892BFB59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "741A1EFA-3A52-4F91-92B3-31D4E5007026"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "6BE7A114-6F5A-43A8-8C12-7F92EC274D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p16:*:*:*:*:*:*",
            "matchCriteriaId" : "68DDF63E-B63B-4C13-AFFF-7A426F76121F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p17:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE596FF-8EC9-4D14-A55B-763E769A8ACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p18:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E87F46-4265-4A30-B353-4AC8EF97E180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p19:*:*:*:*:*:*",
            "matchCriteriaId" : "06B78F0B-8923-426A-A1EE-FDD1D1E44A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B67B4E-A125-49BF-9AC2-1CF5F48CE738"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p20:*:*:*:*:*:*",
            "matchCriteriaId" : "290B8746-9651-4DC4-8683-B990F33781FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DDC247F-1144-4E56-8DA6-C6EBB2EAC2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFE9204-8E81-493E-9C01-F0E83257688D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "A25A4FF8-D296-4786-BA5E-A72EFFBD108A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "53EFE61D-6B27-4536-B153-979C0EB9F60D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D9CF7-38C2-4B9C-A0D9-4C06998FD877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "50314453-FAF4-4936-8C54-4600E44C1F31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.3.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "FB31C47F-A27A-4926-9EC7-10C4BF5B9E6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A17F6F98-A754-4BBA-9D86-4A0E5B6AAB94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "42F29C47-17E9-47B7-AB5E-CABA24B2EAE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "EBE59E7E-C281-4EC3-9717-AEA7C821AE1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "4A7A126F-2A70-47A7-9324-27C51AD15F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p12:*:*:*:*:*:*",
            "matchCriteriaId" : "79F57E15-4244-4B0D-AFB5-BBEA9BC4B3F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p13:*:*:*:*:*:*",
            "matchCriteriaId" : "0357B72E-E339-4B66-BF5E-5E4271C8266F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p14:*:*:*:*:*:*",
            "matchCriteriaId" : "AADF4256-0971-4A7B-8466-54DCE2E0C5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p15:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EB144-22E6-421E-B994-FA274525E939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "84AA2BAD-4415-4F78-8902-BC8155642D74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "35991FCD-795E-4575-8D82-4645F7974C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB69541-55F8-42E7-98FD-340E377586BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "E8063EC2-2A7F-4731-B963-FE9264812109"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "9820E003-B2FE-4F35-9A84-2AD57BE2A181"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8CD422-4A61-4663-B612-7B3624F43F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "2E86F1D9-802D-41E7-8F6C-B84B8386C424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.5.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "B4B67F1A-036C-4FB6-A0B8-23FF047039A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CBC17B-E704-4ED0-9039-B36DAB82DF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "B43376D4-F7DB-41D2-8B80-3CDA6CA46CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p10:*:*:*:*:*:*",
            "matchCriteriaId" : "65738ADA-7C9A-46BA-812D-FC8DDF4D7B16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p11:*:*:*:*:*:*",
            "matchCriteriaId" : "387A9333-587B-48E5-A629-A8772EA17294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "45C35A9A-3C9C-4F1F-8D0A-DB1FEFCE9B87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0A57F0-B7BE-4E68-89FA-F83A4FA3C1F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "395B8C05-1E47-4A94-93B3-BE5ACD63C1C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "35EE9C90-358F-486B-B01E-1EC4118F7188"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "56B2EA2E-0ACF-4C45-AB01-3668944DE752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA3D0E5-DA7D-4BF1-A148-1BC0CEE5A107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p8:*:*:*:*:*:*",
            "matchCriteriaId" : "7FEBBBD6-E0C6-4CAB-8384-2C9B272824F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.6.0:p9:*:*:*:*:*:*",
            "matchCriteriaId" : "95137AE6-5CA2-439D-BE46-22106478FDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C5726207-4774-4417-BC35-B77F79851579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EB0865-6ED4-4794-9E3B-24663708F502"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E69DC9C-D08C-4F31-B708-7253CB115B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "499EA5F0-C7E9-4C92-8831-B5B45B848EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "75A1717C-A1B8-46E8-9AD8-68C2E3A7A8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "EA76E433-1322-49B9-A823-51A317710671"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p6:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AD0FE3-5C42-46A5-90CD-DB9CD0F4EA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.7.0:p7:*:*:*:*:*:*",
            "matchCriteriaId" : "08FD58E1-D2DE-44CA-9579-0DBFDD9D8ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:data_ontap:9.8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4C4BDA-E02A-48C3-B1E7-EDC502783E7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20210303-0002",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/NTAP-20210303-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25340",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:13.703",
      "lastModified" : "2024-11-21T05:54:47.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Samsung keyboard version prior to SMR Feb-2021 Release 1 allows physically proximate attackers to change in arbitrary settings during Initialization State."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control de acceso inapropiado en el teclado Samsung versiones anteriores a SMR Feb-2021 Release 1, permite a los atacantes físicamente próximos cambiar en configuraciones arbitrarias durante el Estado de Inicialización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25341",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:13.813",
      "lastModified" : "2024-11-21T05:54:47.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider."
      }, {
        "lang" : "es",
        "value" : "Llamar a un proveedor inexistente en S Assistant anterior a la versión 6.5.01.22, permite acciones no autorizadas, incluyendo el ataque de denegación de servicio mediante el secuestro del proveedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:s_assistant:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.01.22",
            "matchCriteriaId" : "5979A654-7A02-4415-A5AE-41F5B6CCFC5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25342",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:13.890",
      "lastModified" : "2024-11-21T05:54:47.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider."
      }, {
        "lang" : "es",
        "value" : "Llamar a un proveedor inexistente en SMP sdk anterior a la versión 3.0.9, permite acciones no autorizadas, incluyendo el ataque de denegación de servicio mediante el secuestro del proveedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.81.13",
            "matchCriteriaId" : "50C3D506-D9E0-4E6A-AA75-CE95468ED32D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0721FD34-5F94-4828-A8AA-EF70FAB71FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CA4D29-321A-41ED-A75A-1EBB14A771C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702B40EB-76BC-4686-A46E-D02DBE3A86E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4685EA90-1E01-4FFB-AE31-91FD5D69E2D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938DC86D-C783-4EFA-9AB6-3ADC8CD7BB41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A33DBF65-09A6-4149-BABE-2FFFBF10C31D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B69434-13B2-4A43-AEB0-55E0ED403E54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1755B91-1B6B-4A9E-BB6B-22B399A6DD02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A92E88F-CCED-41D7-AFB7-CE1F9265E546"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13D3A00-27A0-4635-9D50-05CA81950691"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB959DB-AFE7-4667-9662-949ADAB81CE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18669EEC-ABB9-4CE4-8C0E-A88BE08EC368"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D64B87-F1F1-4E52-86AE-F28E2C43A9A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB2497-59DE-4253-A758-A3D03FAEB913"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E197EC0-82DF-49D5-BD1A-7EA22EC0B806"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286EED24-E011-4009-BC2E-B63CA06072CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D634E2E3-4E8A-4C88-A6BF-DBE7439EB3B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E6F4DF-F80F-4A9B-871E-155C0D3DD449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC08431-C70E-4964-B7C0-C9C45F70DCD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2A79C6-A7BD-46C2-8320-B9652135F3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6997F035-D2F5-4174-B979-5D42FF69D9AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FD2E59-59BF-4611-B65B-A2981127CAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BFE05E-9749-43AA-8DB6-E2F13C2E1759"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCE4AD-D629-4F0B-AFA8-6CAD061D5FA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAB25F-26E4-4493-B3DA-F87240633031"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CD6B49-B9D4-493E-902D-B4EF48260BB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB73EBA4-A9BE-4C40-9E6D-649E89D2C3F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BBFD29-6A53-4B1E-9611-680442CD04EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.00.13",
            "matchCriteriaId" : "300CCE1C-5047-418F-81E2-B9E5842ED8B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25343",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:13.970",
      "lastModified" : "2024-11-21T05:54:47.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider."
      }, {
        "lang" : "es",
        "value" : "Llamar a un proveedor inexistente en Samsung Members anterior a la versión 2.4.81.13 (en Android O(8.1) y por debajo) y 3.8.00.13 (en Android P(9.0) y por encima), permite acciones no autorizadas, incluyendo el ataque de denegación de servicio al secuestrar el proveedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.81.13",
            "matchCriteriaId" : "50C3D506-D9E0-4E6A-AA75-CE95468ED32D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0721FD34-5F94-4828-A8AA-EF70FAB71FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CA4D29-321A-41ED-A75A-1EBB14A771C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702B40EB-76BC-4686-A46E-D02DBE3A86E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4685EA90-1E01-4FFB-AE31-91FD5D69E2D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938DC86D-C783-4EFA-9AB6-3ADC8CD7BB41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A33DBF65-09A6-4149-BABE-2FFFBF10C31D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B69434-13B2-4A43-AEB0-55E0ED403E54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1755B91-1B6B-4A9E-BB6B-22B399A6DD02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A92E88F-CCED-41D7-AFB7-CE1F9265E546"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13D3A00-27A0-4635-9D50-05CA81950691"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB959DB-AFE7-4667-9662-949ADAB81CE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18669EEC-ABB9-4CE4-8C0E-A88BE08EC368"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D64B87-F1F1-4E52-86AE-F28E2C43A9A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB2497-59DE-4253-A758-A3D03FAEB913"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E197EC0-82DF-49D5-BD1A-7EA22EC0B806"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286EED24-E011-4009-BC2E-B63CA06072CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D634E2E3-4E8A-4C88-A6BF-DBE7439EB3B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E6F4DF-F80F-4A9B-871E-155C0D3DD449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC08431-C70E-4964-B7C0-C9C45F70DCD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2A79C6-A7BD-46C2-8320-B9652135F3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6997F035-D2F5-4174-B979-5D42FF69D9AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FD2E59-59BF-4611-B65B-A2981127CAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BFE05E-9749-43AA-8DB6-E2F13C2E1759"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCE4AD-D629-4F0B-AFA8-6CAD061D5FA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAB25F-26E4-4493-B3DA-F87240633031"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CD6B49-B9D4-493E-902D-B4EF48260BB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB73EBA4-A9BE-4C40-9E6D-649E89D2C3F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BBFD29-6A53-4B1E-9611-680442CD04EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.00.13",
            "matchCriteriaId" : "300CCE1C-5047-418F-81E2-B9E5842ED8B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25344",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:14.063",
      "lastModified" : "2024-11-21T05:54:48.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing permission check in knox_custom service prior to SMR Mar-2021 Release 1 allows attackers to gain access to device's serial number without permission."
      }, {
        "lang" : "es",
        "value" : "La falta de comprobación de permisos en el servicio knox_custom anterior a SMR Mar-2021 Release 1, permite a los atacantes obtener acceso al número de serie del dispositivo sin permiso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25345",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:14.140",
      "lastModified" : "2024-11-21T05:54:48.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Graphic format mismatch while converting video format in hwcomposer prior to SMR Mar-2021 Release 1 results in kernel panic due to unsupported format."
      }, {
        "lang" : "es",
        "value" : "La falta de coincidencia del formato gráfico al convertir el formato de video en hwcomposer anterior a SMR Mar-2021 Release 1, resulta en un pánico del kernel debido a un formato no compatible"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E04D5D21-1755-4766-8302-A0BE61EE9F43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25346",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:14.220",
      "lastModified" : "2024-11-21T05:54:48.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Una posible vulnerabilidad de sobrescritura de memoria arbitraria en la biblioteca quram versión anterior a SMR Jan-2021 Release 1, permite una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-342/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-342/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25347",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:14.297",
      "lastModified" : "2024-11-21T05:54:48.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hijacking vulnerability in Samsung Email application version prior to SMR Feb-2021 Release 1 allows attackers to intercept when the provider is executed."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de secuestro en la aplicación Samsung Email versión anterior a SMR Feb-2021 Release 1, permite a los atacantes interceptar cuando el proveedor es ejecutado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25348",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-04T22:15:14.377",
      "lastModified" : "2024-11-21T05:54:48.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper permission grant check in Samsung Internet prior to version 13.0.1.60 allows access to files in internal storage without authorized STORAGE permission."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de otorgamiento de permisos inapropiada en Samsung Internet anterior a la versión 13.0.1.60, permite el acceso a archivos en el almacenamiento interno sin permiso de ALMACENAMIENTO autorizado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.1,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:internet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.0.1.60",
            "matchCriteriaId" : "C37BFA9E-ED3D-4C9B-9E51-8482D402B79C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3403",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-04T22:15:14.577",
      "lastModified" : "2024-11-21T06:21:25.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.3, the TNEFSubjectHandler function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a double free which can be triggered via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef versión 1.9.3, la función TNEFSubjectHandler en la biblioteca lib/ytnef.c permite a atacantes remotos causar una denegación de servicio (y potencialmente la ejecución de código) debido a una doble liberación que puede desencadenarse por medio de un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0801E2DD-1A5E-47C8-8CF3-4B41CDE4B5D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1926967",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/85",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1926967",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3404",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-04T22:15:14.657",
      "lastModified" : "2024-11-21T06:21:25.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ytnef 1.9.3, the SwapWord function in lib/ytnef.c allows remote attackers to cause a denial-of-service (and potentially code execution) due to a heap buffer overflow which can be triggered via a crafted file."
      }, {
        "lang" : "es",
        "value" : "En ytnef  versión 1.9.3, la función SwapWord en la biblioteca lib/ytnef.c permite a atacantes remotos provocar una denegación de servicio (y potencialmente la ejecución de código) debido a un desbordamiento del búfer de pila que puede activarse por medio de un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ytnef_project:ytnef:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0801E2DD-1A5E-47C8-8CF3-4B41CDE4B5D9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1926965",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/86",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1926965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Yeraze/ytnef/issues/86",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27314",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T00:15:12.577",
      "lastModified" : "2024-11-21T05:57:46.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection in admin.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via username parameter at login page."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL en el archivo admin.php en doctor appointment system versión 1.0, permite que un atacante no autenticado insertar consultas SQL maliciosas por medio del parámetro username en la página de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T02:15:12.457",
      "lastModified" : "2024-11-21T05:58:55.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or session header."
      }, {
        "lang" : "es",
        "value" : "SonLogger versiones anteriores a 6.4.1, está afectado por la creación de usuarios con cualquier perfil de permisos de usuario (por ejemplo, SuperAdmin).&#xa0;Un usuario anónimo puede enviar una petición POST al archivo /User/saveUser sin ninguna autenticación o encabezado de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sfcyazilim:sonlogger:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.1",
            "matchCriteriaId" : "83817A66-F198-42AE-BE13-2C71BBEDC420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/erberkan/SonLogger-vulns",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sonlogger.com/releasenotes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/erberkan/SonLogger-vulns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sonlogger.com/releasenotes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T02:15:12.520",
      "lastModified" : "2024-11-21T05:58:55.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file."
      }, {
        "lang" : "es",
        "value" : "SonLogger versiones anteriores a 6.4.1, está afectado por una Carga de Archivos Arbitraria No Autenticada.&#xa0;Un atacante puede enviar una petición POST al archivo /Config/SaveUploadedHotspotLogoFile sin ninguna autenticación o encabezado de sesión.&#xa0;No se comprueba la extensión del archivo ni el contenido del archivo cargado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sfcyazilim:sonlogger:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.1",
            "matchCriteriaId" : "83817A66-F198-42AE-BE13-2C71BBEDC420"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161793/SonLogger-4.2.3.3-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/erberkan/SonLogger-vulns",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sonlogger.com/releasenotes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161793/SonLogger-4.2.3.3-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/erberkan/SonLogger-vulns",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sonlogger.com/releasenotes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T02:15:12.583",
      "lastModified" : "2024-11-21T05:58:55.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IOCTL request."
      }, {
        "lang" : "es",
        "value" : "El controlador MsIo64.sys versiones anteriores a 1.1.19.1016 en MSI Dragon Center versiones anteriores a 2.0.98.0, presenta un desbordamiento del búfer que permite una escalada de privilegios por medio de una petición diseñada de IOCTL 0x80102040, 0x80102044, 0x80102050 o 0x80102054"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msi:dragon_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.98.0",
            "matchCriteriaId" : "0E847D11-D006-40F6-93BF-DCA835D82930"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kronl/cve/tree/master/MSI_Dragon_Center",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.microsoft.com/en-us/p/msi-dragon-center/9nh7n2bv1cqq?activetab=pivot:overviewtab",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/kronl/cve/tree/master/MSI_Dragon_Center",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.microsoft.com/en-us/p/msi-dragon-center/9nh7n2bv1cqq?activetab=pivot:overviewtab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25313",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2021-03-05T09:15:13.503",
      "lastModified" : "2024-11-21T05:54:43.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rancher allows remote attackers to execute JavaScript via malicious links. This issue affects: SUSE Rancher Rancher versions prior to 2.5.6."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Neutralización Inapropiada de la Entrada Durante la Generación de Páginas Web (\"Cross-site Scripting\") en Rancher, permite a atacantes remotos ejecutar JavaScript por medio de enlaces maliciosos.&#xa0;Este problema afecta a: SUSE Rancher Rancher versiones anteriores a 2.5.6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:rancher:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.6",
            "matchCriteriaId" : "409DC667-DF62-4860-B9C1-F8060D93631D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1181852",
        "source" : "meissner@suse.de",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rancher/rancher/issues/31583",
        "source" : "meissner@suse.de",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rancher/rancher/releases/tag/v2.5.6",
        "source" : "meissner@suse.de",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1181852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rancher/rancher/issues/31583",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rancher/rancher/releases/tag/v2.5.6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:13.770",
      "lastModified" : "2024-11-21T05:58:59.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the bam crate before 0.1.3 for Rust. There is an integer underflow and out-of-bounds write during the loading of a bgzip block."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate bam versiones anteriores a 0.1.3 para Rust.&#xa0;Se presenta un subdesbordamiento de enteros y una escritura fuera de límites durante la carga de un bloque bgzip"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bam_project:bam:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.1.3",
            "matchCriteriaId" : "2A8778BA-3664-4DAF-979C-DBA0C86F9767"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0027.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:13.833",
      "lastModified" : "2024-11-21T05:59:00.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the toodee crate before 0.3.0 for Rust. Row insertion can cause a double free upon an iterator panic."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate toodee versiones anteriores a 0.3.0 para Rust.&#xa0;La inserción de filas puede causar una doble liberación tras un pánico del iterador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toodee_project:toodee:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "AAED5D7C-53C3-4144-96A5-A83A5A1431FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:13.880",
      "lastModified" : "2024-11-21T05:59:00.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the toodee crate before 0.3.0 for Rust. The row-insertion feature allows attackers to read the contents of uninitialized memory locations."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate toodee versiones anteriores a 0.3.0 para Rust.&#xa0;La funcionalidad row-insertion permite a atacantes leer el contenido de ubicaciones de memoria no inicializadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:toodee_project:toodee:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.3.0",
            "matchCriteriaId" : "AAED5D7C-53C3-4144-96A5-A83A5A1431FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:13.973",
      "lastModified" : "2024-11-21T05:59:00.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::take_bytes."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate truetype versiones anteriores a 0.30.1 para Rust.&#xa0;Los atacantes pueden leer el contenido de ubicaciones de memoria no inicializadas por medio de una operación Read proporcionada por el usuario dentro de la función Tape::take_bytes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:truetype_project:truetype:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.30.1",
            "matchCriteriaId" : "0BC31162-2B47-4E26-96F7-B4801D9D1C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0029.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.037",
      "lastModified" : "2024-11-21T05:59:00.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the scratchpad crate before 1.3.1 for Rust. The move_elements function can have a double-free upon a panic in a user-provided f function."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate scratchpad versiones anteriores a 1.3.1 para Rust.&#xa0;La función move_elements puede tener una doble liberación tras un pánico en una función f proporcionada por el usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scratchpad_project:scratchpad:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "29546679-340E-433E-965B-DBD0DC4B5D63"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0030.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.097",
      "lastModified" : "2024-11-21T05:59:00.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the nano_arena crate before 0.5.2 for Rust. There is an aliasing violation in split_at because two mutable references can exist for the same element, if Borrow<Idx> behaves in certain ways. This can have a resultant out-of-bounds write or use-after-free."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate nano_arena versiones anteriores a 0.5.2 para Rust.&#xa0;Se presenta una violación de alias en split_at porque pueden presentar dos referencias mutables para el mismo elemento, si Borrow(Idx) se comporta de determinadas maneras.&#xa0;Esto puede tener como resultado una escritura fuera de límites o un uso de la memoria previamente liberada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nano_arena_project:nano_arena:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.5.2",
            "matchCriteriaId" : "B1399267-5267-4D07-A727-C68B2D855573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.160",
      "lastModified" : "2024-11-21T05:59:00.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the byte_struct crate before 0.6.1 for Rust. There can be a drop of uninitialized memory if a certain deserialization method panics."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate byte_struct versiones anteriores a 0.6.1 para Rust.&#xa0;Puede haber una perdida de la memoria no inicializada si determinado método de deserialización entra en pánico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:byte_struct_project:byte_struct:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "01B83F71-A60A-458B-BCB5-0EDEAC90327A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0032.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0032.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.253",
      "lastModified" : "2024-11-21T05:59:00.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a double free can occur upon a val.clone() panic."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate stack_dst versiones anteriores a 0.6.1 para Rust.&#xa0;Debido al comportamiento de push_inner, puede ocurrir una doble liberación tras un pánico de la función val.clone()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stack_dst_project:stack_dst:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "481A4F5B-7A06-4888-8FD8-AB533061CB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28035",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.317",
      "lastModified" : "2024-11-21T05:59:00.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the stack_dst crate before 0.6.1 for Rust. Because of the push_inner behavior, a drop of uninitialized memory can occur upon a val.clone() panic."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate stack_dst versiones anteriores a 0.6.1 para Rust.&#xa0;Debido al comportamiento de push_inner, puede ocurrir una pérdida de memoria no inicializada tras un pánico de la función val.clone()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stack_dst_project:stack_dst:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "481A4F5B-7A06-4888-8FD8-AB533061CB32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0033.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0033.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28036",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.380",
      "lastModified" : "2024-11-21T05:59:01.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the quinn crate before 0.7.0 for Rust. It may have invalid memory access for certain versions of the standard library because it relies on a direct cast of std::net::SocketAddrV4 and std::net::SocketAddrV6 data structures."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate quinn versiones anteriores a 0.7.0 para Rust.&#xa0;Puede presentar un acceso a la memoria no válido para determinadas versiones de la biblioteca estándar porque se basa en una transmisión directa de las estructuras de datos en las funciones std::net::SocketAddrV4 y std::net::SocketAddrV6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quinn_project:quinn:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.5.4",
            "matchCriteriaId" : "B8C60AF1-5F0F-4BA1-B269-5B2019FDD6E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quinn_project:quinn:*:*:*:*:*:rust:*:*",
            "versionStartIncluding" : "0.6.0",
            "versionEndExcluding" : "0.6.2",
            "matchCriteriaId" : "0DEC30CE-E420-4E06-861C-E68AF5A5FFE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28037",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T09:15:14.440",
      "lastModified" : "2024-11-21T05:59:01.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the internment crate before 0.4.2 for Rust. There is a data race that can cause memory corruption because of the unconditional implementation of Sync for Intern<T>."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate internment versiones anteriores a 0.4.2 para Rust.&#xa0;Se presenta una carrera de datos que puede causar una corrupción en la memoria debido a la implementación incondicional de Sync para Intern(T)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:internment_project:internment:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.4.2",
            "matchCriteriaId" : "E426FE70-5ED4-48BF-86CB-5D3A63DD47D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20663",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-05T10:15:12.627",
      "lastModified" : "2024-11-21T05:46:58.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in in Role authority setting screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting en la pantalla de configuración de autoridad Role de Movable Type 7 r.4705 y anteriores (Movable Type 7 Series), Movable Type Advanced 7 r.4705 y anteriores (Movable Type Advanced 7 Series), Movable Type versiones 6.7.5 y anteriores (Movable Type 6.7 Series), Movable Type Premium versiones 1.39 y anteriores, y Movable Type Premium Advanced versiones 1.39 y anteriores, permiten a atacantes remotos inyectar script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.5",
            "matchCriteriaId" : "1E6A3188-DAC7-4AF9-9CEC-503A1AF0AC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0000",
            "versionEndIncluding" : "7.4705",
            "matchCriteriaId" : "698F51C3-0429-4431-88A5-728A3069D02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4705",
            "matchCriteriaId" : "00880E0E-D684-4CEB-8456-0974C050C57A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_premium:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39",
            "matchCriteriaId" : "00701C5D-F374-4FE2-8617-9EE8708308C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_premium_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39",
            "matchCriteriaId" : "F76DB403-8212-43C2-B82D-C045306F3C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN66542874/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://movabletype.org/news/2021/02/mt-760-676-released.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN66542874/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://movabletype.org/news/2021/02/mt-760-676-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20664",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-05T10:15:12.783",
      "lastModified" : "2024-11-21T05:46:58.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in in Asset registration screen of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type 6.7.5 and earlier (Movable Type 6.7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting en la pantalla de registro Asset de Movable Type 7 r.4705 y anteriores (Movable Type 7 Series), Movable Type Advanced 7 r.4705 y anteriores (Movable Type Advanced 7 Series), Movable Type versiones 6.7.5 y anteriores (Movable Type 6.7 Series), Movable Type Premium versiones 1.39 y anteriores, y Movable Type Premium Advanced versiones 1.39 y anteriores, permiten a atacantes remotos inyectar script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.7.5",
            "matchCriteriaId" : "1E6A3188-DAC7-4AF9-9CEC-503A1AF0AC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0000",
            "versionEndIncluding" : "7.4705",
            "matchCriteriaId" : "698F51C3-0429-4431-88A5-728A3069D02B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4705",
            "matchCriteriaId" : "00880E0E-D684-4CEB-8456-0974C050C57A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_premium:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39",
            "matchCriteriaId" : "00701C5D-F374-4FE2-8617-9EE8708308C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_premium_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39",
            "matchCriteriaId" : "F76DB403-8212-43C2-B82D-C045306F3C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN66542874/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://movabletype.org/news/2021/02/mt-760-676-released.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN66542874/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://movabletype.org/news/2021/02/mt-760-676-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20665",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-05T10:15:12.847",
      "lastModified" : "2024-11-21T05:46:58.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in in Add asset screen of Contents field of Movable Type 7 r.4705 and earlier (Movable Type 7 Series), Movable Type Advanced 7 r.4705 and earlier (Movable Type Advanced 7 Series), Movable Type Premium 1.39 and earlier, and Movable Type Premium Advanced 1.39 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting en la pantalla de activo Add del campo Contents de Movable Type 7 r.4705 y anteriores (Movable Type 7 Series), Movable Type Advanced 7 r.4705 y anteriores (Movable Type Advanced 7 Series), Movable Type Premium versiones 1.39 y anteriores, y Movable Type Premium Advanced versiones 1.39 y anteriores, permiten a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4705",
            "matchCriteriaId" : "A4E348C5-DD83-420E-B3ED-255BA0B63EAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.4705",
            "matchCriteriaId" : "00880E0E-D684-4CEB-8456-0974C050C57A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_premium:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39",
            "matchCriteriaId" : "00701C5D-F374-4FE2-8617-9EE8708308C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:movabletype:movable_type_premium_advanced:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.39",
            "matchCriteriaId" : "F76DB403-8212-43C2-B82D-C045306F3C69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN66542874/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://movabletype.org/news/2021/02/mt-760-676-released.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN66542874/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://movabletype.org/news/2021/02/mt-760-676-released.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27907",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-05T12:15:12.160",
      "lastModified" : "2024-11-21T05:58:45.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Superset up to and including 0.38.0 allowed the creation of a Markdown component on a Dashboard page for describing chart's related information. Abusing this functionality, a malicious user could inject javascript code executing unwanted action in the context of the user's browser. The javascript code will be automatically executed (Stored XSS) when a legitimate user surfs on the dashboard page. The vulnerability is exploitable creating a “div” section and embedding in it a “svg” element with javascript code."
      }, {
        "lang" : "es",
        "value" : "Apache Superset versiones hasta 0.38.0 incluyendo, permitió la creación de un componente Markdown en una página Dashboard para describir la información relacionada con el gráfico.&#xa0;Abusando de esta funcionalidad, un usuario malicioso podría inyectar código javascript ejecutando una acción no deseada en el contexto del navegador del usuario.&#xa0;El código javascript será automáticamente ejecutado (XSS almacenado) cuando un usuario legítimo navega por la página dashboard.&#xa0;La vulnerabilidad es explotable creando una sección \"div\" e insertando en ella un elemento \"svg\" con código javascript"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.38.0",
            "matchCriteriaId" : "E4835F77-3597-436A-8256-63D5817A42CB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r09293fb09f1d617f0d2180c42210e739e2211f8da9bc5c1873bea67a%40%3Cdev.superset.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T14:15:13.687",
      "lastModified" : "2024-11-21T05:58:59.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jpeg-xl v0.3.2 is affected by a heap buffer overflow in /lib/jxl/coeff_order.cc ReadPermutation. When decoding a malicous jxl file using djxl, an attacker can trigger arbitrary code execution or a denial of service."
      }, {
        "lang" : "es",
        "value" : "jpeg-xl versión v0.3.2, está afectado por un desbordamiento del búfer de la pila en ReadPermutation de la biblioteca /lib/jxl/coeff_order.cc.&#xa0;Cuando se decodifica un archivo jxl malicioso usando djxl, un atacante puede desencadenar una ejecución de código arbitraria o una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jpeg:jpeg-xl:0.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D024D38A-FB57-40DE-AA72-D6E0CAC08497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/wg1/jpeg-xl/-/issues/163",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wg1/jpeg-xl/-/issues/163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26960",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T16:15:12.837",
      "lastModified" : "2024-11-21T05:57:07.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de cross-site request forgery (csrf) no autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de AirWave podría permitir a un atacante remoto no autenticado conducir un ataque CSRF contra un sistema vulnerable.&#xa0;Una explotación con éxito consistiría en que un atacante persuadirá a un usuario autorizado de seguir un enlace malicioso, resultando en acciones arbitrarias llevadas a cabo con el nivel de privilegio del usuario objetivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26961",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T16:15:13.013",
      "lastModified" : "2024-11-21T05:57:07.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site request forgery (csrf) remotos no autenticados en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de AirWave podría permitir a un atacante remoto no autenticado conducir un ataque CSRF contra un sistema vulnerable.&#xa0;Una explotación con éxito consistiría en que un atacante persuadirá a un usuario autorizado de seguir un enlace malicioso, resultando en acciones arbitrarias llevadas a cabo con el nivel de privilegio del usuario objetivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26962",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T16:15:13.070",
      "lastModified" : "2024-11-21T05:57:07.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución de comandos arbitraria autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Unas vulnerabilidades en la CLI de AirWave podrían permitir a usuarios autenticados remotos ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21725",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-03-05T17:15:14.297",
      "lastModified" : "2024-11-21T05:48:53.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ZTE product has an information leak vulnerability. An attacker with higher authority can go beyond their authority to access files in other directories by performing specific operations, resulting in information leak. This affects: ZXHN H196Q V9.1.0C2."
      }, {
        "lang" : "es",
        "value" : "Un producto ZTE presenta una vulnerabilidad de filtrado de información.&#xa0;Un atacante con mayor autoridad puede ir más allá de su autoridad para acceder a archivos en otros directorios al llevar a cabo operaciones específicas, resultando en un filtrado de información.&#xa0;Esto afecta a: ZXHN H196Q V9.1.0C2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxhn_h196q_firmware:9.1.0c2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E7CEBA-96D4-4012-A7FA-358098C07C9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxhn_h196q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E876480B-AD6A-4AB4-9015-CC471414CBC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26963",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.407",
      "lastModified" : "2024-11-21T05:57:07.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to full system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución de comandos arbitraria autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Unas vulnerabilidades en la CLI de AirWave podrían permitir a usuarios autenticados remoto ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como root en el sistema operativo subyacente, conllevando a un compromiso total del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26964",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.467",
      "lastModified" : "2024-11-21T05:57:08.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an authenticated remote attacker to improperly access and modify devices and management user details. A successful exploit would consist of an attacker using a lower privileged account to change management user or device details. This could allow the attacker to escalate privileges and/or change network details that they should not have access to."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de omisión de restricción de autenticación remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de AirWave podría permitir a un atacante remoto autenticado acceder y modificar de manera inapropiada dispositivos y detalles del usuario de administración.&#xa0;Una explotación con éxito consistiría en que un atacante usará una cuenta poco privilegiada para cambiar los detalles del dispositivo o del usuario de administración.&#xa0;Esto podría permitir al atacante escalar privilegios y/o cambiar detalles de la red a los que no debería tener acceso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26965",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.530",
      "lastModified" : "2024-11-21T05:57:08.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección SQL autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Múltiples vulnerabilidades en la API de AirWave podrían permitir a un atacante remoto autenticado conducir ataques de inyección SQL contra la instancia de AirWave.&#xa0;Un atacante podría explotar estas vulnerabilidades para obtener y modificar información confidencial en la base de datos subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26966",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.593",
      "lastModified" : "2024-11-21T05:57:08.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated sql injection vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Multiple vulnerabilities in the API of AirWave could allow an authenticated remote attacker to conduct SQL injection attacks against the AirWave instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección SQL autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Múltiples vulnerabilidades en la API de AirWave podrían permitir a un atacante remoto autenticado conducir ataques de inyección SQL contra la instancia de AirWave.&#xa0;Un atacante podría explotar estas vulnerabilidades para obtener y modificar información confidencial en la base de datos subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26967",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.657",
      "lastModified" : "2024-11-21T05:57:08.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote reflected cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of certain components of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the AirWave management interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (xss) reflejadas de forma remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de AirWave podría permitir a un atacante remoto conducir un ataque de tipo cross-site scripting (XSS) reflejado contra un usuario de determinados componentes de la interfaz.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar código script arbitrario en el navegador de la víctima en el contexto de la interfaz de administración de AirWave"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26968",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.703",
      "lastModified" : "2024-11-21T05:57:08.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated stored cross-site scripting (xss) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the web-based management interface of AirWave could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victim’s browser in the context of the affected interface."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad autenticada remota  de tipo cross-site scripting (xss) almacenado en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Una vulnerabilidad en la interfaz de administración basada en web de AirWave podría permitir a un atacante remoto autenticado conducir un ataque de tipo cross-site scripting (XSS) almacenado contra un usuario de la interfaz.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar código script arbitrario en el navegador de la víctima en el contexto de la interfaz afectada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26969",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.750",
      "lastModified" : "2024-11-21T05:57:08.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated authenticated xml external entity (xxe) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Due to improper restrictions on XML entities a vulnerability exists in the web-based management interface of AirWave. A successful exploit could allow an authenticated attacker to retrieve files from the local system or cause the application to consume system resources, resulting in a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de xml external entity (xxe) autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Debido a restricciones inapropiadas en entidades XML, se presenta una vulnerabilidad en la interfaz de administración basada en web de AirWave.&#xa0;Una explotación con éxito podría permitir a un atacante autenticado recuperar archivos del sistema local o causar a la aplicación consumir recursos del sistema, resultando en una condición de denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26970",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.810",
      "lastModified" : "2024-11-21T05:57:08.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución de comandos arbitraria autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Unas vulnerabilidades en la interfaz de administración basada en web de AirWave podrían permitir a usuarios autenticados remoto ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como un usuario poco privilegiado en el sistema operativo subyacente, conllevando a un compromiso parcial del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26971",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-05T17:15:14.873",
      "lastModified" : "2024-11-21T05:57:08.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authenticated arbitrary command execution vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. Vulnerabilities in the AirWave web-base management interface could allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as a lower privileged user on the underlying operating system leading to partial system compromise."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución de comandos arbitraria autenticada remota en Aruba AirWave Management Platform versiones: anteriores a 8.2.12.0.&#xa0;Unas vulnerabilidades en la interfaz de administración basada en web de AirWave podrían permitir a usuarios autenticados remotos ejecutar comandos arbitrarios en el host subyacente.&#xa0;Una explotación con éxito podría permitir a un atacante ejecutar comandos arbitrarios como un usuario poco privilegiado en el sistema operativo subyacente, conllevando a un compromiso parcial del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.0",
            "matchCriteriaId" : "8F6CD495-ED12-4332-8806-647134C1E15D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T17:15:14.920",
      "lastModified" : "2024-11-21T05:57:20.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SPIRE 0.8.1 through 0.8.4 and before versions 0.9.4, 0.10.2, 0.11.3 and 0.12.1, specially crafted requests to the FetchX509SVID RPC of SPIRE Server’s Legacy Node API can result in the possible issuance of an X.509 certificate with a URI SAN for a SPIFFE ID that the agent is not authorized to distribute. Proper controls are in place to require that the caller presents a valid agent certificate that is already authorized to issue at least one SPIFFE ID, and the requested SPIFFE ID belongs to the same trust domain, prior to being able to trigger this vulnerability. This issue has been fixed in SPIRE versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1."
      }, {
        "lang" : "es",
        "value" : "En SPIRE versiones 0.8.1 hasta 0.8.4 y versiones anteriores a 0.9.4, 0.10.2, 0.11.3 y 0.12.1, unas peticiones especialmente diseñadas para FetchX509SVID RPC de la API del Legacy Node de SPIRE Server, pueden resultar en una posible emisión de un Certificado X.509 con un URI SAN para un ID de SPIFFE que el agente no está autorizado a distribuir.&#xa0;Se presentan controles apropiados para requerir que la persona que llama presente un certificado de agente válido que ya esté autorizado para emitir al menos un ID de SPIFFE, y que el ID de SPIFFE pedido pertenezca al mismo dominio confiable, antes de poder desencadenar esta vulnerabilidad.&#xa0;Este problema ha sido corregido en versiones 0.8.5, 0.9.4, 0.10.2, 0.11.3 y 0.12.1 de SPIRE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.8.1",
            "versionEndIncluding" : "0.8.4",
            "matchCriteriaId" : "53FC0C26-EC3F-45EE-ADAC-FC283813FBE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.0",
            "versionEndExcluding" : "0.9.4",
            "matchCriteriaId" : "E7436751-C627-4143-A890-8B04D9C6642D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.10.2",
            "matchCriteriaId" : "E330A728-6B22-4C71-B37A-119BD2D3EADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.11.0",
            "versionEndExcluding" : "0.11.3",
            "matchCriteriaId" : "EA57458D-53C5-4E8D-AFC2-D56826904304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.12.0",
            "versionEndExcluding" : "0.12.1",
            "matchCriteriaId" : "F05F1090-6FFC-4C74-B9D3-D63B3259A46A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spiffe/spire/security/advisories/GHSA-h746-rm5q-8mgq",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spiffe/spire/security/advisories/GHSA-h746-rm5q-8mgq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T18:15:13.067",
      "lastModified" : "2024-11-21T05:57:20.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12.1, the \"aws_iid\" Node Attestor improperly normalizes the path provided through the agent ID templating feature, which may allow the issuance of an arbitrary SPIFFE ID within the same trust domain, if the attacker controls the value of an EC2 tag prior to attestation, and the attestor is configured for agent ID templating where the tag value is the last element in the path. This issue has been fixed in SPIRE versions 0.11.3 and 0.12.1"
      }, {
        "lang" : "es",
        "value" : "En SPIRE versiones anteriores a 0.8.5, 0.9.4, 0.10.2, 0.11.3 y 0.12.1, el Node Attestor \"aws_iid\" normaliza inapropiadamente la ruta proporcionada por medio de la funcionalidad agent ID templating, lo que puede permitir la emisión de un ID de SPIFFE dentro del mismo dominio confiable, si el atacante controla el valor de una etiqueta EC2 antes de una certificación, y el certificador está configurado para plantillas de ID de agente donde el valor de la etiqueta es el último elemento de la ruta.&#xa0;Este problema ha sido corregido en versiones 0.11.3 y 0.12.1 de SPIRE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.5",
            "matchCriteriaId" : "0CFBEF70-490C-49D7-B601-CE2C8ED7AC99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.0",
            "versionEndExcluding" : "0.9.4",
            "matchCriteriaId" : "E7436751-C627-4143-A890-8B04D9C6642D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "0.10.2",
            "matchCriteriaId" : "E330A728-6B22-4C71-B37A-119BD2D3EADB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.11.0",
            "versionEndExcluding" : "0.11.3",
            "matchCriteriaId" : "EA57458D-53C5-4E8D-AFC2-D56826904304"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cncf:spire:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.12.0",
            "versionEndExcluding" : "0.12.1",
            "matchCriteriaId" : "F05F1090-6FFC-4C74-B9D3-D63B3259A46A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spiffe/spire/security/advisories/GHSA-q7gm-mjrg-44h9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spiffe/spire/security/advisories/GHSA-q7gm-mjrg-44h9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28038",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T18:15:13.127",
      "lastModified" : "2024-11-21T05:59:01.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.3, as used with Xen PV. A certain part of the netback driver lacks necessary treatment of errors such as failed memory allocations (as a result of changes to the handling of grant mapping errors). A host OS denial of service may occur during misbehavior of a networking frontend driver. NOTE: this issue exists because of an incomplete fix for CVE-2021-26931."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.3, como es usada con Xen PV.&#xa0;Una cierta parte del controlador netback carece del tratamiento necesario de errores como asignaciones de memoria fallidas (como resultado de cambios en el manejo de errores de asignación de permisos).&#xa0;Puede producirse una denegación de servicio del Sistema Operativo host durante el comportamiento inapropiado de un controlador de interfaz de red.&#xa0;NOTA: este problema se presenta debido a una corrección incompleta para el CVE-2021-26931"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.6.39",
            "versionEndExcluding" : "4.4.260",
            "matchCriteriaId" : "873F5904-E137-45CC-A229-1ACB174021B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.9.260",
            "matchCriteriaId" : "37A31D37-6E2B-487D-A7B1-AA678845E3BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10.0",
            "versionEndExcluding" : "4.14.224",
            "matchCriteriaId" : "E2C21DCE-38E0-48E5-AB62-F12536A90A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15.0",
            "versionEndExcluding" : "4.19.179",
            "matchCriteriaId" : "3BA86006-B187-4C7D-9712-36D3D724AC33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20.0",
            "versionEndExcluding" : "5.4.103",
            "matchCriteriaId" : "D3CFDB2D-F538-4E59-B331-7EAD494C2924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.10.0",
            "versionEndExcluding" : "5.10.21",
            "matchCriteriaId" : "ADF2B8FE-6B1B-40C6-B1DC-37812D5A0F1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11.0",
            "versionEndExcluding" : "5.11.4",
            "matchCriteriaId" : "635861E2-E992-4768-A883-CBC76271AFD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "07875739-0CCB-4F48-9330-3D4B6A4064FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09B732-04F8-452C-94CF-97644E78684D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/05/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-367.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2991397d23ec597405b116d96de3813420bdcbc3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/05/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-367.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=2991397d23ec597405b116d96de3813420bdcbc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T18:15:13.190",
      "lastModified" : "2024-11-21T05:59:01.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel 5.9.x through 5.11.3, as used with Xen. In some less-common configurations, an x86 PV guest OS user can crash a Dom0 or driver domain via a large amount of I/O activity. The issue relates to misuse of guest physical addresses when a configuration has CONFIG_XEN_UNPOPULATED_ALLOC but not CONFIG_XEN_BALLOON_MEMORY_HOTPLUG."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones 5.9.x hasta 5.11.3, como es usada con Xen.&#xa0;En algunas configuraciones menos comunes, un usuario de Sistema Operativo invitado PV x86 puede bloquear un dominio de controlador o Dom0 por medio de una gran cantidad de actividad de I/O.&#xa0;El problema se relaciona con el uso indebido de las direcciones físicas de invitados cuando una configuración presenta CONFIG_XEN_UNPOPULATED_ALLOC pero no CONFIG_XEN_BALLOON_MEMORY_HOTPLUG"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "AND",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:x86:*",
            "versionStartIncluding" : "5.9.0",
            "versionEndIncluding" : "5.11.3",
            "matchCriteriaId" : "3FA33EE3-601B-4EC1-AC17-F948E8486DE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xen:xen:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFA1950D-1D9F-4401-AA86-CF3028EFD286"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/05/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-369.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=882213990d32fd224340a4533f6318dd152be4b2",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/05/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://xenbits.xen.org/xsa/advisory-369.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=882213990d32fd224340a4533f6318dd152be4b2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28040",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T18:15:13.270",
      "lastModified" : "2024-11-21T05:59:01.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in OSSEC 3.6.0. An uncontrolled recursion vulnerability in os_xml.c occurs when a large number of opening and closing XML tags is used. Because recursion is used in _ReadElem without restriction, an attacker can trigger a segmentation fault once unmapped memory is reached."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en OSSEC versión 3.6.0.&#xa0;Se presenta una vulnerabilidad de recursividad no controlada en el archivo os_xml.c cuando es usada una gran cantidad de etiquetas XML de apertura y cierre.&#xa0;Debido a que una recursividad es usada en _ReadElem sin restricción, un atacante puede desencadenar un fallo de segmentación una vez que es alcanzada la memoria no asignada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ossec:ossec:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5194EBBE-813E-4C77-BE63-1302B9E88855"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ossec/ossec-hids/issues/1953",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ossec/ossec-hids/issues/1953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T19:15:14.577",
      "lastModified" : "2024-11-21T05:56:42.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SquareBox CatDV Server through 9.2. An attacker can invoke sensitive RMI methods such as getConnections without authentication, the results of which can be used to generate valid authentication tokens. These tokens can then be used to invoke administrative tasks within the application, such as disclosing password hashes."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SquareBox CatDV Server versiones hasta 9.2.&#xa0;Un atacante puede invocar métodos RMI sensibles como getConnections sin autenticación, cuyos resultados pueden ser usados para generar tokens de autenticación válidos.&#xa0;Estos tokens pueden ser usados para invocar tareas administrativas dentro de la aplicación, como divulgar el hash de contraseñas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squarebox:catdv:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.2",
            "matchCriteriaId" : "5FAB3AFC-3794-49A9-A932-4852A32E633E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49621",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27254",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-05T20:15:12.317",
      "lastModified" : "2024-11-21T05:57:41.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R7800. Authentication is not required to exploit this vulnerability. The specific flaw exists within the apply_save.cgi endpoint. This issue results from the use of hard-coded encryption key. An attacker can leverage this vulnerability to execute arbitrary code in the context of root. Was ZDI-CAN-12287."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red omitir una autenticación en instalaciones afectadas de NETGEAR R7800.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del endpoint apply_save.cgi.&#xa0;Este problema resulta del uso de una clave de cifrado embebida.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código arbitrario en el contexto de root.&#xa0;Era ZDI-CAN-12287"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFF79A-8ACE-455B-90F3-FFC745E8BAD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "597D1ED8-FE6A-4325-83AB-5CA544CFA1AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5828F04B-E373-4E4F-942D-08CCA038418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5882095F-B22A-4937-BA08-6640140F10AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88D2A3-3B22-4639-94E9-69CE80F37392"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-252/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-252/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27255",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-05T20:15:12.457",
      "lastModified" : "2024-11-21T05:57:41.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the refresh_status.aspx endpoint. The issue results from a lack of authentication required to start a service on the server. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12360."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de NETGEAR R7800 versión de firmware 1.0.2.76.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del endpoint refresh_status.aspx.&#xa0;El problema resulta de la falta de autenticación necesaria para iniciar un servicio en el servidor.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-12360"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFF79A-8ACE-455B-90F3-FFC745E8BAD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "597D1ED8-FE6A-4325-83AB-5CA544CFA1AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5828F04B-E373-4E4F-942D-08CCA038418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5882095F-B22A-4937-BA08-6640140F10AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88D2A3-3B22-4639-94E9-69CE80F37392"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-263/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-263/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27256",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-05T20:15:12.550",
      "lastModified" : "2024-11-21T05:57:42.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_save.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12355."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en instalaciones afectadas de NETGEAR R7800 versión de firmware 1.0.2.76.&#xa0;Aunque es requerida una autenticación para explotar esta vulnerabilidad, el mecanismo de autentificación existente puede ser omitido.&#xa0;El fallo específico se presenta dentro del manejo del parámetro rc_service proporcionado para el archivo apply_save.cgi.&#xa0;El problema resulta de la falta de comprobación apropiada de una cadena suministrada por el usuario antes de usarla para ejecutar una llamada al sistema.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-12355"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFF79A-8ACE-455B-90F3-FFC745E8BAD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "597D1ED8-FE6A-4325-83AB-5CA544CFA1AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5828F04B-E373-4E4F-942D-08CCA038418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5882095F-B22A-4937-BA08-6640140F10AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88D2A3-3B22-4639-94E9-69CE80F37392"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-262/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-262/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27257",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-05T20:15:12.660",
      "lastModified" : "2024-11-21T05:57:42.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to compromise the integrity of downloaded information on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the downloading of files via FTP. The issue results from the lack of proper validation of the certificate presented by the server. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-12362."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red comprometer la integridad de la información descargada en instalaciones afectadas de NETGEAR R7800 versión de firmware 1.0.2.76.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro de la descarga de archivos por medio de FTP.&#xa0;El problema resulta de la falta de comprobación apropiada del certificado presentado por el servidor.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto de root.&#xa0;Era ZDI-CAN-12362"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFF79A-8ACE-455B-90F3-FFC745E8BAD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "597D1ED8-FE6A-4325-83AB-5CA544CFA1AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5828F04B-E373-4E4F-942D-08CCA038418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5882095F-B22A-4937-BA08-6640140F10AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A88D2A3-3B22-4639-94E9-69CE80F37392"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-264/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-264/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28041",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T21:15:13.200",
      "lastModified" : "2024-11-21T05:59:01.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ssh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host."
      }, {
        "lang" : "es",
        "value" : "ssh-agent en OpenSSH versiones anteriores a 8.5, presenta una doble liberación que puede ser relevante en algunos escenarios menos comunes, como el acceso sin restricciones al socket del agente en un sistema operativo heredado o el reenvío de un agente a un host controlado por el atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openbsd:openssh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2",
            "versionEndExcluding" : "8.5",
            "matchCriteriaId" : "7974AA7F-3FC7-437C-80C4-8581BC18F883"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:hci_compute_node_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F921BC85-568E-4B69-A3CD-CF75C76672F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7447BC-F315-4298-A822-549942FC118B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:hci_storage_node_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BC4299D-05D3-4875-BC79-C3DC02C88ECE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DEB4FB-A21D-4CB1-B522-EEE5093E8521"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49ACFC73-A509-4D1C-8FC3-F68F495AB055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568db",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQWGII3LQR4AOTPPFXGMTYE7UDEWIUKI/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXST2CML2MWY3PNVUXX7FFJE3ATJMNVZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-35",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssh.com/security.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openssh.com/txt/release-8.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/03/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openssh/openssh-portable/commit/e04fd6dde16de1cdc5a4d9946397ff60d96568db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQWGII3LQR4AOTPPFXGMTYE7UDEWIUKI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TXST2CML2MWY3PNVUXX7FFJE3ATJMNVZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-35",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssh.com/security.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openssh.com/txt/release-8.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/03/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3377",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T21:15:13.263",
      "lastModified" : "2025-11-03T22:15:50.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The npm package ansi_up converts ANSI escape codes into HTML. In ansi_up v4, ANSI escape codes can be used to create HTML hyperlinks. Due to insufficient URL sanitization, this feature is affected by a cross-site scripting (XSS) vulnerability. This issue is fixed in v5.0.0."
      }, {
        "lang" : "es",
        "value" : "El paquete npm ansi_up convierte los códigos de escape ANSI en HTML.&#xa0;En ansi_up versión v4, los códigos de escape ANSI pueden ser usados para crear hipervínculos HTML.&#xa0;Debido a un saneamiento insuficiente de la URL, esta funcionalidad está afectada por una vulnerabilidad de tipo cross-site scripting (XSS).&#xa0;Este problema es corregido en versión v5.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ansi_up_project:ansi_up:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.0.0",
            "matchCriteriaId" : "72350660-79B9-4D4C-8F06-70A88AE1C3AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://doyensec.com/resources/Doyensec_Advisory_ansi_up4_XSS.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/drudru/ansi_up/commit/c8c726ed1db979bae4f257b7fa41775155ba2e27",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://doyensec.com/resources/Doyensec_Advisory_ansi_up4_XSS.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/drudru/ansi_up/commit/c8c726ed1db979bae4f257b7fa41775155ba2e27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241108-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3420",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-05T21:15:13.437",
      "lastModified" : "2024-11-21T06:21:27.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in newlib in versions prior to 4.0.0. Improper overflow validation in the memory allocation functions mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc could case an integer overflow, leading to an allocation of a small buffer and then to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en newlib en versiones anteriores a 4.0.0.&#xa0;Una comprobación inapropiada del desbordamiento en las funciones de asignación de memoria mEMALIGn, pvALLOc, nano_memalign, nano_valloc, nano_pvalloc podría causar un desbordamiento de enteros, conllevando a una asignación de un búfer pequeño y luego a un desbordamiento de búfer en la región heap de la memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:newlib_project:newlib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "B99E8095-4299-46FB-8199-25C1FD78DBD5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1934088",
        "source" : "secalert@redhat.com",
        "tags" : [ "Broken Link", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQZEUANAWBBAOC4TF5PTPJVLMUR7SFD/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1934088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AEBF6YHWFNCBW5A2ENSQ3Z56ELF4MTRE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AMK54N6UOPBFFX2YT32TWSAEFTHGSKAA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQZEUANAWBBAOC4TF5PTPJVLMUR7SFD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T22:15:12.473",
      "lastModified" : "2024-11-21T05:59:02.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This can lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Deutsche Post Mailoptimizer versiones 4.3 antes del 09-11-2020, permite un Salto de Directorio por medio de un archivo ZIP diseñado a la funcionalidad Upload o al componente MO Connect.&#xa0;Esto puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:P/A:P",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deutschepost:mailoptimizer:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B770FCED-6A36-481C-B531-3DAFAD2AA57F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://herolab.usd.de/security-advisories/usd-2020-0028/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.deutschepost.de/de/m/mailoptimizer.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://herolab.usd.de/security-advisories/usd-2020-0028/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.deutschepost.de/de/m/mailoptimizer.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27581",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-05T23:15:11.900",
      "lastModified" : "2024-11-21T05:58:13.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Blog module in Kentico CMS 5.5 R2 build 5.5.3996 allows SQL injection via the tagname parameter."
      }, {
        "lang" : "es",
        "value" : "El módulo Blog en Kentico CMS versiones 5.5 R2 build 5.5.3996, permite una inyección SQL por medio del parámetro tagname"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kentico:kentico_cms:5.5:r2:build_5.5.3996:*:*:*:*:*",
            "matchCriteriaId" : "7222562F-0599-4E80-8BFD-28A57A7EF3D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/stasinopoulos/673ae3c31d703b4d67449f4d8888c686",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kontent.ai",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.obrela.com/kentico-cms-critical-vulnerability/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/stasinopoulos/673ae3c31d703b4d67449f4d8888c686",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kontent.ai",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.obrela.com/kentico-cms-critical-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26814",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-06T02:15:12.100",
      "lastModified" : "2024-11-21T05:56:51.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authenticated user to the service may exploit incomplete input validation on the /manager/files API to inject arbitrary code within the API service script."
      }, {
        "lang" : "es",
        "value" : "La API de Wazuh en Wazuh desde versiones 4.0.0 hasta 4.0.3, permite a usuarios autenticados ejecutar código arbitrario con privilegios administrativos por medio del URI /manager/files.&#xa0;Un usuario autenticado en el servicio puede explotar una comprobación incompleta de entrada en la API /manager/files para inyectar código arbitrario dentro del script del servicio de la API"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wazuh:wazuh:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.0.3",
            "matchCriteriaId" : "B049C029-6FFF-4796-AF89-BCA763655D7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.wazuh.com/4.0/release-notes/release_4_0_4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wazuh/wazuh/releases/tag/v4.0.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://documentation.wazuh.com/4.0/release-notes/release_4_0_4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/wazuh/wazuh/releases/tag/v4.0.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-07T04:15:12.957",
      "lastModified" : "2024-11-21T05:56:02.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en AfterLogic Aurora versiones hasta 7.7.9 y WebMail Pro versiones hasta 7.7.9.&#xa0;Permiten saltar directorio para leer archivos (tal y como un archivo data/settings/settings.xml que contiene las credenciales del panel de administración), como es demostrado por dav/server.php/files/personal/%2e%2e cuando se usa la cuenta caldav_public_user (con caldav_public_user como contraseña)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afterlogic:aurora:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.9",
            "matchCriteriaId" : "2028A053-25B1-46CB-A9C6-149906D59DD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:afterlogic:webmail_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.7.9",
            "matchCriteriaId" : "218C5599-6D33-4143-8DA5-77ABBA826FF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/E3SEC/AfterLogic/blob/main/CVE-2021-26294-exposure-of-sensitive-information-vulnerability.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/E3SEC/AfterLogic/blob/main/CVE-2021-26294-exposure-of-sensitive-information-vulnerability.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-07T04:15:13.330",
      "lastModified" : "2024-11-21T05:57:50.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.3. A kernel pointer leak can be used to determine the address of the iscsi_transport structure. When an iSCSI transport is registered with the iSCSI subsystem, the transport's handle is available to unprivileged users via the sysfs file system, at /sys/class/iscsi_transport/$TRANSPORT_NAME/handle. When read, the show_transport_handle function (in drivers/scsi/scsi_transport_iscsi.c) is called, which leaks the handle. This handle is actually the pointer to an iscsi_transport struct in the kernel module's global variables."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.3.&#xa0;Se puede usar un filtrado del puntero del kernel para determinar la dirección de la estructura iscsi_transport.&#xa0;Cuando se registra un transporte iSCSI con el subsistema iSCSI, el handle de transporte está disponible para usuarios sin privilegios por medio del sistema de archivos sysfs, en /sys/class/iscsi_transport/$TRANSPORT_NAME/handle.&#xa0;Cuando se lee, se llama a la función show_transport_handle (en el archivo drivers/scsi/scsi_transport_iscsi.c), que filtra el handle.&#xa0;Este handle es en realidad el puntero a una estructura iscsi_transport en las variables globales del módulo del kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.3",
            "matchCriteriaId" : "AAEB7028-B576-457E-927A-8025DB7F3D14"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182716",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182716",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27364",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-07T05:15:13.437",
      "lastModified" : "2024-11-21T05:57:50.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.3. drivers/scsi/scsi_transport_iscsi.c is adversely affected by the ability of an unprivileged user to craft Netlink messages."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.3.&#xa0;El archivo drivers/scsi/scsi_transport_iscsi.c está afectado negativamente por la capacidad de un usuario sin privilegios de crear mensajes Netlink"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.3",
            "matchCriteriaId" : "AAEB7028-B576-457E-927A-8025DB7F3D14"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AA6F4-4404-4E26-82AB-C3A22636F276"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "26F05F85-7458-4C8F-B93F-93C92E506A40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182717",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=688e8128b7a92df982709a4137ea4588d16f24aa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27365",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-07T05:15:13.623",
      "lastModified" : "2024-11-21T05:57:50.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.3. Certain iSCSI data structures do not have appropriate length constraints or checks, and can exceed the PAGE_SIZE value. An unprivileged user can send a Netlink message that is associated with iSCSI, and has a length up to the maximum length of a Netlink message."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones  hasta 5.11.3.&#xa0;Determinadas estructuras de datos iSCSI no tienen restricciones de longitud o comprobaciones apropiadas y pueden exceder el valor PAGE_SIZE.&#xa0;Un usuario sin privilegios puede enviar un mensaje de Netlink que está asociado con iSCSI y tiene una longitud de hasta la longitud máxima de un mensaje de Netlink"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.3",
            "matchCriteriaId" : "AAEB7028-B576-457E-927A-8025DB7F3D14"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "26F05F85-7458-4C8F-B93F-93C92E506A40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AA6F4-4404-4E26-82AB-C3A22636F276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182715",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec98ea7070e94cc25a422ec97d1421e28d97b7ee",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.grimm-co.com/2021/03/new-old-bugs-in-linux-kernel.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=ec98ea7070e94cc25a422ec97d1421e28d97b7ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f9dbdf97a5bd92b1a49cee3d591b55b11fd7a6d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23351",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-08T05:15:12.593",
      "lastModified" : "2024-11-21T05:51:33.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package github.com/pires/go-proxyproto before 0.5.0 are vulnerable to Denial of Service (DoS) via the parseVersion1() function. The reader in this package is a default bufio.Reader wrapping a net.Conn. It will read from the connection until it finds a newline. Since no limits are implemented in the code, a deliberately malformed V1 header could be used to exhaust memory in a server process using this code - and create a DoS. This can be exploited by sending a stream starting with PROXY and continuing to send data (which does not contain a newline) until the target stops acknowledging. The risk here is small, because only trusted sources should be allowed to send proxy protocol headers."
      }, {
        "lang" : "es",
        "value" : "El paquete github.com/pires/go-proxyproto versiones anteriores a 0.5.0, son vulnerables a una Denegación de Servicio (DoS) por medio de la función parseVersion1().&#xa0;El lector de este paquete es un bufio.Reader predeterminado que contiene un net.Conn.&#xa0;Leerá desde la conexión hasta que encuentre una nueva línea.&#xa0;Dado que no se implementan límites en el código, un encabezado V1 deliberadamente malformado podría ser usado para agotar la memoria en un proceso de servidor usando este código y crear una DoS.&#xa0;Esto puede ser explotado mediante el envió de una secuencia que comience con PROXY y continúe enviando datos (que no contienen una nueva línea) hasta que el objetivo deje de reconocer.&#xa0;El riesgo aquí es pequeño, porque solo las fuentes confiables deben poder enviar encabezados de protocolo proxy"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-proxyproto_project:go-proxyproto:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.0",
            "matchCriteriaId" : "F01D02DD-799C-4234-B4B8-2A5FF4DDD98B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pires/go-proxyproto/commit/7f48261db810703d173f27f3309a808cc2b49b8b",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pires/go-proxyproto/issues/69",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pires/go-proxyproto/pull/71",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BNVGJMVI3ZTZ675EFPUHPGXCKCGSX46/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36IBVOZXRTWM7MGTRUTOM56P5RR74VU/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1081577",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pires/go-proxyproto/commit/7f48261db810703d173f27f3309a808cc2b49b8b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pires/go-proxyproto/issues/69",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pires/go-proxyproto/pull/71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BNVGJMVI3ZTZ675EFPUHPGXCKCGSX46/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C36IBVOZXRTWM7MGTRUTOM56P5RR74VU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPIRESGOPROXYPROTO-1081577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26788",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-08T13:15:12.737",
      "lastModified" : "2024-11-21T05:56:49.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Oryx Embedded CycloneTCP 1.7.6 to 2.0.0, fixed in 2.0.2, is affected by incorrect input validation, which may cause a denial of service (DoS). To exploit the vulnerability, an attacker needs to have TCP connectivity to the target system. Receiving a maliciously crafted TCP packet from an unauthenticated endpoint is sufficient to trigger the bug."
      }, {
        "lang" : "es",
        "value" : "Oryx Embedded CycloneTCP versiones 1.7.6 hasta 2.0.0, corregido en versión 2.0.2, está afectado por una comprobación incorrecta de la entrada, lo que puede causar una denegación de servicio (DoS).&#xa0;Para explotar la vulnerabilidad, un atacante necesitar tener conectividad TCP con el sistema de destino.&#xa0;Recibir un paquete TCP diseñado con fines malicioso desde un endpoint no autenticado es suficiente para desencadenar el bug"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oryx-embedded:cyclonetcp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.6",
            "versionEndIncluding" : "2.0.0",
            "matchCriteriaId" : "F9216DE7-8426-45F3-9FE8-A26DFD50C009"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Oryx-Embedded/CycloneTCP/commit/de5336016edbe1e90327d0ed1cba5c4e49114366?branch=de5336016edbe1e90327d0ed1cba5c4e49114366&diff=split",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Oryx-Embedded/CycloneTCP/commit/de5336016edbe1e90327d0ed1cba5c4e49114366?branch=de5336016edbe1e90327d0ed1cba5c4e49114366&diff=split",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27222",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-08T15:15:12.220",
      "lastModified" : "2024-11-21T05:57:37.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the \"Time in Status\" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS."
      }, {
        "lang" : "es",
        "value" : "En la aplicación \"Time in Status\" versiones anteriores a 4.13.0 para Jira, los atacantes autenticados de forma remota pueden causar un ataque de tipo XSS Almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:obss:time_in_status:*:*:*:*:*:jira:*:*",
            "versionEndExcluding" : "4.13.0",
            "matchCriteriaId" : "24D40A43-BBFC-4371-82B8-4ABFDCEAF529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dev.obss.com.tr/confluence/display/MD/2021-02-25+Time+in+Status+for+Jira+Server+and+Data+Center+Security+Advisory",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://dev.obss.com.tr/jira/browse/APDTIS-1097?src=confmacro",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://marketplace.atlassian.com/apps/1211756/time-in-status/version-history",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://dev.obss.com.tr/confluence/display/MD/2021-02-25+Time+in+Status+for+Jira+Server+and+Data+Center+Security+Advisory",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://dev.obss.com.tr/jira/browse/APDTIS-1097?src=confmacro",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://marketplace.atlassian.com/apps/1211756/time-in-status/version-history",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21324",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T17:15:12.757",
      "lastModified" : "2024-11-21T05:48:01.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 there is an Insecure Direct Object Reference (IDOR) on \"Solutions\". This vulnerability gives an unauthorized user the ability to enumerate GLPI items names (including users logins) using the knowbase search form (requires authentication). To Reproduce: Perform a valid authentication at your GLPI instance, Browse the ticket list and select any open ticket, click on Solution form, then Search a solution form that will redirect you to the endpoint /\"glpi/front/knowbaseitem.php?item_itemtype=Ticket&item_items_id=18&forcetab=Knowbase$1\", and the item_itemtype=Ticket parameter present in the previous URL will point to the PHP alias of glpi_tickets table, so just replace it with \"Users\" to point to glpi_users table instead; in the same way, item_items_id=18 will point to the related column id, so changing it too you should be able to enumerate all the content which has an alias. Since such id(s) are obviously incremental, a malicious party could exploit the vulnerability simply by guessing-based attempts."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software de gestión de activos y TI de código abierto que proporciona funciones de ITIL Service Desk, seguimiento de licencias y auditoría de software.&#xa0;En GLPI versiones anteriores a 9.5.4, se presenta una Referencia Directa a Objeto No Segura (IDOR) en \"Solutions\".&#xa0;Esta vulnerabilidad le otorga a un usuario no autorizado la habilidad de enumerar los nombres de los elementos de GLPI (incluyendo los inicios de sesión de los usuarios) mediante el formulario de búsqueda de la base de conocimientos (requiere autenticación).&#xa0;Para reproducir: Realice una autenticación válida en su instancia GLPI, Explore la lista de tickets y seleccione cualquier ticket abierto, haga clic en el formulario Solution, luego Busque un formulario de solución que lo redireccionará al endpoint /\"glpi/front/knowbaseitem.php?item_itemtype=Ticket&amp;item_items_id=18&amp;forcetab=Knowbase$1\", y el parámetro item_itemtype=Ticket presente en la URL anterior apuntará al alias de PHP de la tabla glpi_tickets,&#xa0;así que reemplácelo con \"Users\" para que apunte a la tabla glpi_users en su lugar;&#xa0;de la misma manera, item_items_id=18 apuntará a la identificación de la columna relacionada, así que cambiándola también deberías poder enumerar todo el contenido que presenta un alias.&#xa0;Dado que tales identificaciones son obviamente incrementales, una parte maliciosa podría explotar la vulnerabilidad simplemente con intentos basados ??en adivinanzas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-639"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/commit/aade65b7f67d46f23d276a8acb0df70651c3b1dc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-jvwm-gq36-3v7v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/commit/aade65b7f67d46f23d276a8acb0df70651c3b1dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-jvwm-gq36-3v7v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21325",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T17:15:12.960",
      "lastModified" : "2024-11-21T05:48:01.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 a new budget type can be defined by user. This input is not correctly filtered. This results in a cross-site scripting attack. To exploit this endpoint attacker need to be authenticated. This is fixed in version 9.5.4."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software de gestión de activos y TI de código abierto que proporciona funcionalidades de ITIL Service Desk, seguimiento de licencias y auditoría de software.&#xa0;En GLPI versiones anteriores a 9.5.4, el usuario puede definir un nuevo tipo de presupuesto.&#xa0;Esta entrada no es filtrada correctamente.&#xa0;Esto resulta en un ataque de tipo cross-site scripting.&#xa0;Para explotar este endpoint, el atacante necesita estar autenticado.&#xa0;Esto es corregido en versión 9.5.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-m574-f3jw-pwrf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-m574-f3jw-pwrf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21326",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T17:15:13.057",
      "lastModified" : "2024-11-21T05:48:01.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 it is possible to create tickets for another user with self-service interface without delegatee systems enabled. This is fixed in version 9.5.4."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software de gestión de activos y TI de código abierto que proporciona funcionalidades de ITIL Service Desk, seguimiento de licencias y auditoría de software.&#xa0;En GLPI versiones anteriores a 9.5.4, es posible crear tickets para otro usuario con la interfaz de autoservicio sin sistemas de delegado habilitados.&#xa0;Esto es corregido en versión 9.5.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-vmj9-cg56-p7wh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-vmj9-cg56-p7wh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21327",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T17:15:13.197",
      "lastModified" : "2024-11-21T05:48:01.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. In GLPI before version 9.5.4 non-authenticated user can remotely instantiate object of any class existing in the GLPI environment that can be used to carry out malicious attacks, or to start a “POP chain”. As an example of direct impact, this vulnerability affects integrity of the GLPI core platform and third-party plugins runtime misusing classes which implement some sensitive operations in their constructors or destructors. This is fixed in version 9.5.4."
      }, {
        "lang" : "es",
        "value" : "GLPI es un paquete de software de gestión de activos y TI de código abierto que proporciona funcionalidades de ITIL Service Desk, seguimiento de licencias y auditoría de software.&#xa0;En GLPI versiones anteriores a 9.5.4, el usuario no autenticado puede instanciar de forma remota un objeto de cualquier clase existente en el entorno GLPI que puede ser usado para llevar a cabo ataques maliciosos o para iniciar una “POP chain”.&#xa0;Como ejemplo de impacto directo, esta vulnerabilidad afecta la integridad de la plataforma central de GLPI y las clases de uso inapropiado del tiempo de ejecución de plugins de terceros que implementan algunas operaciones sensibles en sus constructores o destructores.&#xa0;Esto es corregido en la versión 9.5.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-470"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:glpi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.5.4",
            "matchCriteriaId" : "9506B7CC-727B-40FE-B5A3-69B362E1ACEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161680/GLPI-9.5.3-Unsafe-Reflection.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-qmw7-w2m4-rjwp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161680/GLPI-9.5.3-Unsafe-Reflection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/releases/tag/9.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/glpi-project/glpi/security/advisories/GHSA-qmw7-w2m4-rjwp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21329",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T18:15:13.710",
      "lastModified" : "2024-11-21T05:48:02.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RATCF is an open-source framework for hosting Cyber-Security Capture the Flag events. In affected versions of RATCF users with multi factor authentication enabled are able to log in without a valid token. This is fixed in commit cebb67b."
      }, {
        "lang" : "es",
        "value" : "RATCF es un framework de código abierto para hostear los eventos del Flag Cyber-Security Capture. En versiones afectadas de RATCF, los usuarios con la autenticación multifactorial habilitada pueden iniciar sesión sin un token válido. Esto es corregido en el commit cebb67b"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ratcf:ratcf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-02-26",
            "matchCriteriaId" : "56D17694-E585-4506-AF44-789AEF978BD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ractf/core/commit/c57a4d186bfc586ad3edfe4dcba9f11efbf22f09#diff-60c444c47c061306f2dff5bf97c07810f40f949a8e94ecbb609b6b29364c8642R130-R152",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ractf/core/commit/cebb67bd16a8296121201805332365ffccb29638",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ractf/core/security/advisories/GHSA-fw57-f7mq-9q85",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ractf/core/commit/c57a4d186bfc586ad3edfe4dcba9f11efbf22f09#diff-60c444c47c061306f2dff5bf97c07810f40f949a8e94ecbb609b6b29364c8642R130-R152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ractf/core/commit/cebb67bd16a8296121201805332365ffccb29638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ractf/core/security/advisories/GHSA-fw57-f7mq-9q85",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21354",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T19:15:13.333",
      "lastModified" : "2024-11-21T05:48:11.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pollbot is open source software which \"frees its human masters from the toilsome task of polling for the state of things during the Firefox release process.\" In Pollbot before version 1.4.4 there is an open redirection vulnerability in the path of \"https://pollbot.services.mozilla.com/\". An attacker can redirect anyone to malicious sites. To Reproduce type in this URL: \"https://pollbot.services.mozilla.com//evil.com/\". Affected versions will redirect to that website when you inject a payload like \"//evil.com/\". This is fixed in version 1.4.4."
      }, {
        "lang" : "es",
        "value" : "Pollbot es un software de código abierto que \"libera a sus maestros humanos de la ardua tarea de sondear el estado de las cosas durante el proceso de lanzamiento de Firefox\".&#xa0;En Pollbot versiones anteriores a 1.4.4, se presenta una vulnerabilidad de redireccionamiento abierto en la ruta de \"https://pollbot.services.mozilla.com/\".&#xa0;Un atacante puede redireccionar a cualquier persona a sitios maliciosos.&#xa0;Para reproducir escriba esta URL: \"https://pollbot.services.mozilla.com//evil.com/\".&#xa0;Las versiones afectadas redireccionaran a ese sitio web cuando inyecte una carga útil como \"//evil.com/\".&#xa0;Esto es corregido en la versión 1.4.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:pollbot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "3FF4092D-8B10-4C05-A89F-534FB926E740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1694684",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/commit/6db74a4fcbff258c7cdf51a6ff0724fc10c485e5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/pull/333",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/releases/tag/v1.4.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/security/advisories/GHSA-jhgx-wmq8-jc24",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1694684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/commit/6db74a4fcbff258c7cdf51a6ff0724fc10c485e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/pull/333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/releases/tag/v1.4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mozilla/PollBot/security/advisories/GHSA-jhgx-wmq8-jc24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21362",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T19:15:13.443",
      "lastModified" : "2024-11-21T05:48:12.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share upload' URL. Everyone is impacted who uses MinIO multi-users. This is fixed in version RELEASE.2021-03-04T00-53-13Z. As a workaround, one can disable uploads with `Content-Type: multipart/form-data` as mentioned in the S3 API RESTObjectPOST docs by using a proxy in front of MinIO."
      }, {
        "lang" : "es",
        "value" : "MinIO es un servicio de almacenamiento de objetos de alto rendimiento de código abierto y es compatible con la API con el servicio de almacenamiento en nube Amazon S3.&#xa0;En MinIO versiones anteriores a RELEASE.2021-03-04T00-53-13Z, es posible omitir una política de solo lectura al crear una URL temporal \"mc share upload\".&#xa0;Todos los que usan MinIO multiusuario están afectados.&#xa0;Esto es corregido en versión RELEASE.2021-03-04T00-53-13Z.&#xa0;Como una solución alternativa, puede ser deshabilitar las cargas con \"Content-Type: multipart/form-data\" como es mencionado en los documentos RESTObjectPOST de la API S3 al usar un proxy frente a MinIO"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-03-04t00-53-13z",
            "matchCriteriaId" : "D17AB9B3-22BB-48A4-8317-3EB80B812FFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/commit/039f59b552319fcc2f83631bb421a7d4b82bc482",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/11682",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2021-03-04T00-53-13Z",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-hq5j-6r98-9m8v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/039f59b552319fcc2f83631bb421a7d4b82bc482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/11682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/releases/tag/RELEASE.2021-03-04T00-53-13Z",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-hq5j-6r98-9m8v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21335",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T21:15:16.573",
      "lastModified" : "2024-11-21T05:48:02.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the SPNEGO HTTP Authentication Module for nginx (spnego-http-auth-nginx-module) before version 1.1.1 basic Authentication can be bypassed using a malformed username. This affects users of spnego-http-auth-nginx-module that have enabled basic authentication. This is fixed in version 1.1.1 of spnego-http-auth-nginx-module. As a workaround, one may disable basic authentication."
      }, {
        "lang" : "es",
        "value" : "En el módulo de autenticación HTTP SPNEGO para nginx (spnego-http-auth-nginx-module) versiones anteriores a 1.1.1, la Autenticación básica puede ser omitido usando un nombre de usuario malformado.&#xa0;Esto afecta a usuarios de spnego-http-auth-nginx-module que han habilitado la autenticación básica.&#xa0;Esto es corregido en versión 1.1.1 de spnego-http-auth-nginx-module.&#xa0;Como una solución alternativa, puede ser deshabilitar la autenticación básica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spnego_http_authentication_module_project:spnego_http_authentication_module:*:*:*:*:*:nginx:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "89B04778-31B0-41E8-856F-DE883677ED15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stnoonan/spnego-http-auth-nginx-module/commit/a06f9efca373e25328b1c53639a48decd0854570",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stnoonan/spnego-http-auth-nginx-module/releases/tag/v1.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stnoonan/spnego-http-auth-nginx-module/security/advisories/GHSA-ww8q-72rx-hc54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stnoonan/spnego-http-auth-nginx-module/commit/a06f9efca373e25328b1c53639a48decd0854570",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stnoonan/spnego-http-auth-nginx-module/releases/tag/v1.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stnoonan/spnego-http-auth-nginx-module/security/advisories/GHSA-ww8q-72rx-hc54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21336",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T21:15:16.683",
      "lastModified" : "2024-11-21T05:48:03.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an information disclosure vulnerability - everyone can list the names of roles defined in the ZODB Role Manager plugin if the site uses this plugin. The problem has been fixed in version 2.6.0. Depending on how you have installed Products.PluggableAuthService, you should change the buildout version pin to 2.6.0 and re-run the buildout, or if you used pip simply do `pip install \"Products.PluggableAuthService>=2.6.0\"`."
      }, {
        "lang" : "es",
        "value" : "Products.PluggableAuthService es un framework de autenticación y autorización de Zope conectable.&#xa0;En Products.PluggableAuthService versiones anteriores a 2.6.0, se presenta una vulnerabilidad de divulgación de información: todos pueden enumerar los nombres de los roles definidos en el plugin ZODB Role Manager si el sitio usa este plugin.&#xa0;El problema ha sido corregido en versión 2.6.0.&#xa0;Dependiendo de cómo haya instalado Products.PluggableAuthService, debe cambiar el pin de la versión de compilación a 2.6.0 y volver a ejecutar la compilación, o si usó pip simplemente haga la instalación de pip \"Products.PluggableAuthService versiones posteriores o iguales a 2.6.0 \"`"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:products.pluggableauthservice:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.0",
            "matchCriteriaId" : "9B3C2A43-06D9-4E9B-AE27-04DA56FFF848"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndIncluding" : "4.3.20",
            "matchCriteriaId" : "821A3793-1D04-4480-823E-6B92391AB000"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.2.4",
            "matchCriteriaId" : "49BC6F68-1C5B-4EE6-AF9C-5C28E86CC669"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/21/1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/22/1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/commit/2dad81128250cb2e5d950cddc9d3c0314a80b4bb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p75f-g7gx-2r7p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Products.PluggableAuthService/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/commit/2dad81128250cb2e5d950cddc9d3c0314a80b4bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p75f-g7gx-2r7p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Products.PluggableAuthService/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21337",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-08T21:15:16.807",
      "lastModified" : "2024-11-21T05:48:03.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Products.PluggableAuthService is a pluggable Zope authentication and authorization framework. In Products.PluggableAuthService before version 2.6.0 there is an open redirect vulnerability. A maliciously crafted link to the login form and login functionality could redirect the browser to a different website. The problem has been fixed in version 2.6.1. Depending on how you have installed Products.PluggableAuthService, you should change the buildout version pin to `2.6.1` and re-run the buildout, or if you used `pip` simply do `pip install \"Products.PluggableAuthService>=2.6.1\"."
      }, {
        "lang" : "es",
        "value" : "Products.PluggableAuthService es un framework de autenticación y autorización de Zope conectable. En Products.PluggableAuthService versiones anteriores a 2.6.0, se presenta una vulnerabilidad de redireccionamiento abierto. Un enlace maliciosamente diseñado en el formulario de inicio de sesión y la funcionalidad login podría redireccionar el navegador a un sitio web diferente. El problema ha sido corregido en la versión 2.6.1. Dependiendo de cómo haya instalado Products.PluggableAuthService, debe cambiar el pin de la versión de compilación a \"2.6.1\" y volver a ejecutar la compilación, o si usó pip simplemente haga la instalación de pip \"Products.PluggableAuthService versiones posteriores o iguales a 2.6.1\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:products.pluggableauthservice:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "660F14A0-3EF8-4F9A-86F9-6A97D527E35A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162911/Products.PluggableAuthService-2.6.0-Open-Redirect.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/commit/7eead067898852ebd3e0f143bc51295928528dfa",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p44j-xrqg-4xrr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Products.PluggableAuthService/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162911/Products.PluggableAuthService-2.6.0-Open-Redirect.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/commit/7eead067898852ebd3e0f143bc51295928528dfa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.PluggableAuthService/security/advisories/GHSA-p44j-xrqg-4xrr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Products.PluggableAuthService/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22134",
      "sourceIdentifier" : "security@elastic.co",
      "published" : "2021-03-08T21:15:16.947",
      "lastModified" : "2024-11-21T05:49:34.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A document disclosure flaw was found in Elasticsearch versions after 7.6.0 and before 7.11.0 when Document or Field Level Security is used. Get requests do not properly apply security permissions when executing a query against a recently updated document. This affects documents that have been updated and not yet refreshed in the index. This could result in the search disclosing the existence of documents and fields the attacker should not be able to view."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en una divulgación de documentos en Elasticsearch versiones posteriores a 7.6.0 y versiones anteriores a 7.11.0, cuando es usada el Nivel de Seguridad de Documento o Campo.&#xa0;Las peticiones Get no aplican apropiadamente unos permisos de seguridad cuando se ejecuta una consulta contra un documento recientemente actualizado. Esto afecta a los documentos que han sido actualizados y aún no se han refrescado en el índice. Esto podría resultar en la búsqueda divulgue la existencia de documentos y campos que el atacante no debería poder visualizar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@elastic.co",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elastic:elasticsearch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.6.0",
            "versionEndIncluding" : "7.11.0",
            "matchCriteriaId" : "9D35D9FE-317D-4C53-8E39-4EFCCC2ABC05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FB24DB-AF91-48D0-9CA5-C8250D183FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.elastic.co/t/elastic-stack-7-11-0-security-update/265835",
        "source" : "security@elastic.co",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0006/",
        "source" : "security@elastic.co",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@elastic.co",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.elastic.co/t/elastic-stack-7-11-0-security-update/265835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21503",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-08T22:15:13.783",
      "lastModified" : "2024-11-21T05:48:29.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in a command. The Compadmin user could potentially exploit this vulnerability, leading to potential privileges escalation."
      }, {
        "lang" : "es",
        "value" : "PowerScale OneFS versiones 8.1.2, 8.2.2 y 9.1.0, contiene un problema de saneamiento de entrada inapropiado en un comando.&#xa0;El usuario de Compadmin podría aprovechar esta vulnerabilidad, conllevando a una posible escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575793FB-6E18-4A7F-B689-EA4FB7904DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF89B320-6D5A-4E46-A1FA-FCDB31F325C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08AB5B6-818B-4666-8DF8-32030BBE06A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000183717",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000183717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21506",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-08T22:15:13.970",
      "lastModified" : "2024-11-21T05:48:29.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV_SYS_SUPPORT and ISI_PRIV_LOGIN_PAPI privileges could potentially exploit this vulnerability, leading to potential privileges escalation."
      }, {
        "lang" : "es",
        "value" : "PowerScale OneFS versiones 8.1.2, 8.2.2 y 9.1.0, contiene un problema de saneamiento de entrada inapropiado en su controlador de API.&#xa0;Un usuario sin autorización con privilegios ISI_PRIV_SYS_SUPPORT e ISI_PRIV_LOGIN_PAPI podría explotar esta vulnerabilidad, conllevando una posible escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575793FB-6E18-4A7F-B689-EA4FB7904DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF89B320-6D5A-4E46-A1FA-FCDB31F325C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08AB5B6-818B-4666-8DF8-32030BBE06A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000183717",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000183717",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21510",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-08T22:15:14.080",
      "lastModified" : "2024-11-21T05:48:30.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections."
      }, {
        "lang" : "es",
        "value" : "Dell iDRAC8 versiones anteriores a 2.75.100.75, contienen una vulnerabilidad de inyección de encabezado host.&#xa0;Un atacante remoto no autenticado podría explotar esta vulnerabilidad inyectando valores de encabezado \"Host\" arbitrarios para envenenar una caché web o desencadenar redireccionamientos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac8_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.75.100.75",
            "matchCriteriaId" : "3F963701-3E8A-4282-9E99-303FD0A97081"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21360",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-09T01:15:13.120",
      "lastModified" : "2024-11-21T05:48:11.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Products.GenericSetup is a mini-framework for expressing the configured state of a Zope Site as a set of filesystem artifacts. In Products.GenericSetup before version 2.1.1 there is an information disclosure vulnerability - anonymous visitors may view log and snapshot files generated by the Generic Setup Tool. The problem has been fixed in version 2.1.1. Depending on how you have installed Products.GenericSetup, you should change the buildout version pin to 2.1.1 and re-run the buildout, or if you used pip simply do pip install `\"Products.GenericSetup>=2.1.1\"`."
      }, {
        "lang" : "es",
        "value" : "Products.GenericSetup es un mini framework para expresar el estado configurado de un sitio Zope como un conjunto de artefactos del sistema de archivos.&#xa0;En Products.GenericSetup anterior a versión 2.1.1, se presenta una vulnerabilidad de divulgación de información: los visitantes anónimos pueden visualizar archivos de registro e instantáneas generadas por la Generic Setup Tool.&#xa0;El problema se ha corregido en la versión 2.1.1.&#xa0;Dependiendo de cómo haya instalado Products.GenericSetup, debe cambiar el pin de la versión de compilación a 2.1.1 y volver a ejecutar la compilación, o si usó pip simplemente haga la instalación de pip \"Products.GenericSetup versiones posteriores o iguales a 2.1.1\"`"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zope:products.genericsetup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "344C85D3-5FB3-4860-B4EC-881E1DC94A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/21/1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/22/1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Products.GenericSetup/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/21/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/22/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.GenericSetup/commit/700319512b3615b3871a1f24e096cf66dc488c57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zopefoundation/Products.GenericSetup/security/advisories/GHSA-jff3-mwp3-f8cw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/Products.GenericSetup/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21361",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-09T01:15:13.230",
      "lastModified" : "2024-11-21T05:48:11.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The `com.bmuschko:gradle-vagrant-plugin` Gradle plugin contains an information disclosure vulnerability due to the logging of the system environment variables. When this Gradle plugin is executed in public CI/CD, this can lead to sensitive credentials being exposed to malicious actors. This is fixed in version 3.0.0."
      }, {
        "lang" : "es",
        "value" : "El plugin de Gradle \"com.bmuschko: gradle-vagrant-plugin\" contiene una vulnerabilidad de divulgación de información debido al registro de las variables de entorno del sistema.&#xa0;Cuando este plugin de Gradle se ejecuta en CI/CD público, esto puede conllevar a que las credenciales confidenciales se expongan a actores maliciosos.&#xa0;Esto se corrige en la versión 3.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vagrant_project:vagrant:*:*:*:*:*:gradle:*:*",
            "versionEndExcluding" : "0.6",
            "matchCriteriaId" : "3AFF2CD1-56CD-4765-AF25-F7B928781487"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vagrant_project:vagrant:*:*:*:*:*:gradle:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "CF491479-EB43-4F2A-8BDC-5BFB58D25AC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-jpcm-4485-69p7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bmuschko/gradle-vagrant-plugin/blob/292129f9343d00d391543fae06239e9b0f33db73/src/main/groovy/com/bmuschko/gradle/vagrant/process/GDKExternalProcessExecutor.groovy#L42-L44",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bmuschko/gradle-vagrant-plugin/issues/19",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bmuschko/gradle-vagrant-plugin/pull/20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-jpcm-4485-69p7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bmuschko/gradle-vagrant-plugin/blob/292129f9343d00d391543fae06239e9b0f33db73/src/main/groovy/com/bmuschko/gradle/vagrant/process/GDKExternalProcessExecutor.groovy#L42-L44",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bmuschko/gradle-vagrant-plugin/issues/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bmuschko/gradle-vagrant-plugin/pull/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24033",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-03-09T01:15:13.433",
      "lastModified" : "2024-11-21T05:52:15.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "react-dev-utils prior to v11.0.4 exposes a function, getProcessForPort, where an input argument is concatenated into a command string to be executed. This function is typically used from react-scripts (in Create React App projects), where the usage is safe. Only when this function is manually invoked with user-provided values (ie: by custom code) is there the potential for command injection. If you're consuming it from react-scripts then this issue does not affect you."
      }, {
        "lang" : "es",
        "value" : "react-dev-utils anterior a versión v11.0.4, expone una función, getProcessForPort, donde un argumento de entrada se concatena en una cadena de comando para ser ejecutado.&#xa0;Esta función se usa generalmente desde react-scripts (en los proyectos de Create React App), donde el uso es seguro.&#xa0;Solo cuando esta función se invoca manualmente con valores proporcionados por el usuario (es decir, mediante código personalizado) existe la posibilidad de inyección de comandos.&#xa0;Si lo consume desde react-scripts, este problema no le afecta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:react-dev-utils:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.4",
            "matchCriteriaId" : "A233E720-E5C4-48BD-B589-5A16D11BEFEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facebook/create-react-app/pull/10644",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24033",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/facebook/create-react-app/pull/10644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20272",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T14:15:12.413",
      "lastModified" : "2024-11-21T05:46:15.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in privoxy before 3.0.32. An assertion failure could be triggered with a crafted CGI request leading to server crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en privoxy versiones anteriores a 3.0.32.&#xa0;Se podría desencadenar un fallo de aserción con una petición CGI diseñada conllevando a un bloqueo del servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.32",
            "matchCriteriaId" : "10E713A2-B544-465F-BC87-FD2A43B8B5A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936651",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20273",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T14:15:12.757",
      "lastModified" : "2024-11-21T05:46:15.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in privoxy before 3.0.32. A crash can occur via a crafted CGI request if Privoxy is toggled off."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en privoxy versiones anteriores a 3.0.32.&#xa0;Se puede presentar un bloqueo por medio de una petición CGI diseñada si Privoxy está desactivado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.32",
            "matchCriteriaId" : "10E713A2-B544-465F-BC87-FD2A43B8B5A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936658",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936658",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20274",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T14:15:12.850",
      "lastModified" : "2024-11-21T05:46:15.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in privoxy before 3.0.32. A crash may occur due a NULL-pointer dereference when the socks server misbehaves."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en privoxy versiones anteriores a 3.0.32.&#xa0;Puede ocurrir un bloqueo debido a una desreferencia del puntero NULL cuando el servidor socks se comporta inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.32",
            "matchCriteriaId" : "10E713A2-B544-465F-BC87-FD2A43B8B5A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936662",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20275",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T14:15:12.943",
      "lastModified" : "2024-11-21T05:46:15.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in privoxy before 3.0.32. A invalid read of size two may occur in chunked_body_is_complete() leading to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en privoxy versiones anteriores a 3.0.32.&#xa0;Una lectura no válida de tamaño dos puede ocurrir en la función chunked_body_is_complete() conllevando a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.32",
            "matchCriteriaId" : "10E713A2-B544-465F-BC87-FD2A43B8B5A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936666",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20276",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T14:15:13.037",
      "lastModified" : "2024-11-21T05:46:15.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in privoxy before 3.0.32. Invalid memory access with an invalid pattern passed to pcre_compile() may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en privoxy versiones anteriores a 3.0.32.&#xa0;Un acceso a la memoria no válido con un patrón no válido pasado a la función pcre_compile() puede conllevar a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.32",
            "matchCriteriaId" : "10E713A2-B544-465F-BC87-FD2A43B8B5A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936668",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1936668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/announce.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28006",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-09T14:15:13.130",
      "lastModified" : "2024-11-21T05:58:58.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in admin.php through the options parameter."
      }, {
        "lang" : "es",
        "value" : "Web Based Quiz System versión 1.0, está afectado por un ataque de tipo cross-site scripting (XSS) en el archivo admin.php por medio del parámetro options"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_based_quiz_system_project:web_based_quiz_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1AE3B0-08C8-43AF-B579-D062D1514B3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49605",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49605",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20341",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-09T15:15:14.567",
      "lastModified" : "2024-11-21T05:46:25.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cloud Pak for Multicloud Management Monitoring 2.2 returns potentially sensitive information in headers which could lead to further attacks against the system. IBM X-Force ID: 194513."
      }, {
        "lang" : "es",
        "value" : "IBM Cloud Pak para Multicloud Management Monitoring versión 2.2, devuelve información potencialmente confidencial en encabezados que podrían conllevar a nuevos ataques contra el sistema.&#xa0;IBM X-Force ID: 194513"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_multicloud_management_monitoring:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.6",
            "matchCriteriaId" : "8279E54B-E223-4552-BDBD-75FBE5E015C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194513",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6426997",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194513",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6426997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21480",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:14.617",
      "lastModified" : "2025-05-05T17:16:58.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment). An attacker can intercept a request to the server, inject malicious JSP code in the request and forward to server. When this dashboard is opened by users having at least SAP_XMII Developer role, malicious content in the dashboard gets executed, leading to remote code execution in the server, which allows privilege escalation. The malicious JSP code can contain certain OS commands, through which an attacker can read sensitive files in the server, modify files or even delete contents in the server thus compromising the confidentiality, integrity and availability of the server hosting the SAP MII application. Also, an attacker authenticated as a developer can use the application to upload and execute a file which will permit them to execute operating systems commands completely compromising the server hosting the application."
      }, {
        "lang" : "es",
        "value" : "SAP MII permite a los usuarios crear cuadros de mando y guardarlos como JSP a través del SSCE (Self Service Composition Environment). Un atacante puede interceptar una petición al servidor, inyectar código JSP malicioso en la petición y reenviarlo al servidor. Cuando este tablero es abierto por usuarios que tienen al menos el rol de Desarrollador SAP_XMII, el contenido malicioso en el tablero se ejecuta, llevando a la ejecución remota de código en el servidor, lo que permite la escalada de privilegios. El código JSP malicioso puede contener ciertos comandos del sistema operativo, a través de los cuales un atacante puede leer archivos sensibles en el servidor, modificar archivos o incluso eliminar contenidos en el servidor, comprometiendo así la confidencialidad, integridad y disponibilidad del servidor que aloja la aplicación SAP MII. Además, un atacante autentificado como desarrollador puede utilizar la aplicación para cargar y ejecutar un archivo que le permitirá ejecutar comandos del sistema operativo comprometiendo completamente el servidor que aloja la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_integration_and_intelligence:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "514BCD2F-7F64-4504-80CD-808DC67514FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_integration_and_intelligence:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C174EF57-E203-46A0-B3CE-B88B86FA8507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_integration_and_intelligence:15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F817C07-FDB1-4331-99CA-AD3B41A49BA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_integration_and_intelligence:15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35ED3A3F-D139-4E4A-AF1D-550692883CCC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163164/SAP-XMII-Remote-Code-Execution.html",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jun/30",
        "source" : "cna@sap.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3022622",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163164/SAP-XMII-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Jun/30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3022622",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21481",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:14.787",
      "lastModified" : "2024-11-21T05:48:27.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MigrationService, which is part of SAP NetWeaver versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not perform an authorization check. This might allow an unauthorized attacker to access configuration objects, including such that grant administrative privileges. This could result in complete compromise of system confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "MigrationService, que forma parte de SAP NetWeaver versiones 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, no lleva a cabo una comprobación de autorización.&#xa0;Esto podría permitir a un atacante no autorizado acceder a los objetos de configuración, incluyendo los que otorgan privilegios administrativos.&#xa0;Esto podría resultar en un compromiso total de la confidencialidad, integridad y disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDFFDB95-B956-4B22-81F4-A4074D49D4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21A3F6A8-B060-48CE-841F-698F8F779191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53B11A3B-C559-428C-8946-7FD9FFBFA1BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "606EFE4F-57A4-44E2-A98D-F0867A658218"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FECD5E96-7669-4747-80D2-27F95BF420BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019F7F5-7740-4BD4-850F-D7A1923C6200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2B37045-2FB7-49BB-AE38-B84FAA6ADFB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3022422",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3022422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21484",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:14.867",
      "lastModified" : "2024-11-21T05:48:27.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind."
      }, {
        "lang" : "es",
        "value" : "Una autenticación LDAP en SAP HANA Database versión 2.0, puede ser omitido si el servidor de directorio LDAP adjunto está configurado para habilitar un enlace no autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:hana:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "745FBCAF-940A-49F4-9DC9-26470F14DED7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3017378",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3017378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21486",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:14.960",
      "lastModified" : "2024-11-21T05:48:28.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Enterprise Financial Services versions, 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "SAP Enterprise Financial Services versiones , 101, 102, 103, 104, 105, 600, 603, 604, 605, 606, 616, 617, 618, 800, no llevan a cabo unas comprobaciones de autorización necesarias para un usuario autenticado, resultando en una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9939E6A3-772B-4A12-925C-24B16F71AC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:1.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D909C83-6FE7-4AB9-9B11-7EC33EDDDA0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:1.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D6020F-911D-4097-9797-51BFF66A71D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:1.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CC1703-9D38-4390-9ED8-64B7640EFE92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:1.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9736A35F-6BFC-46AB-8C97-0872E1459C34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50CD7494-50B3-4167-90E8-5F9671E4C315"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9217EEF-D896-49B1-B083-EA9A27B50255"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D6D8B8-BE7E-4AC3-BE30-1870A37A37FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513796F8-CD90-4FC0-B7EE-1D820302064D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7E8169B-7F3C-4EAE-AE16-699474C5C8D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A189AED2-ACA6-45EC-94D0-02FF4E8E6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "409525B0-4027-4102-A040-B19E9CFD9247"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:6.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71487B12-23A2-4159-8EE8-43CE3C8222B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:enterprise_financial_services:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE7D301-0978-4914-A776-B05500740CE4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3007888",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3007888",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21487",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:15.053",
      "lastModified" : "2024-11-21T05:48:28.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Payment Engine version 500, does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges."
      }, {
        "lang" : "es",
        "value" : "SAP Payment Engine versión 500, no lleva a cabo unas comprobaciones de autorización necesarias para un usuario autenticado, resultando en una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:payment_engine:500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF587873-4031-44B6-B65B-44AF4B8600E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3023778",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3023778",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21488",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:15.130",
      "lastModified" : "2024-11-21T05:48:28.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Knowledge Management versions 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 allows a remote attacker with basic privileges to deserialize user-controlled data without verification, leading to insecure deserialization which triggers the attacker’s code, therefore impacting Availability."
      }, {
        "lang" : "es",
        "value" : "Knowledge Management versiones 7.01, 7.02, 7.30, 7.31, 7.40, 7.50, permiten a un atacante remoto con privilegios básicos deserializar unos datos controlados por el usuario sin comprobación, conllevando a una deserialización no segura que desencadena el código del atacante y, por lo tanto, afecta la Disponibilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management:7.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A00D98D-C347-4C9B-A794-6AE764FC7837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management:7.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65915328-FCAE-4F39-9E81-1C5B0A8D68AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E7BD55-6020-4CF5-9B1C-AAC6161403E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A9823F-8736-44E1-8F51-7149236A85C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67365283-2C5E-448E-A9F7-8AA033B57F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_knowledge_management:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95298857-D440-4323-ACAE-A1097DBC5C13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2983436",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2983436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21493",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:15.193",
      "lastModified" : "2024-11-21T05:48:29.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Graphics Interchange Format (.GIF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato Graphics Interchange Format (.GIF) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-289/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-290/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-291/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-293/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-295/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-296/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-297/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-300/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-301/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-302/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-303/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-304/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-305/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-307/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-308/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-309/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-289/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-290/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-293/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-295/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-296/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-297/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-300/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-301/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-302/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-303/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-304/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-305/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-307/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-308/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-309/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25915",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-09T15:15:15.977",
      "lastModified" : "2025-04-30T18:15:33.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'changeset' versions 0.0.1 through 0.2.5 allows an attacker to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contaminación del prototipo en \"changeset\" versiones 0.0.1 hasta 0.2.5, permite a un atacante causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:changeset_project:changeset:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.0.1",
            "versionEndExcluding" : "0.2.6",
            "matchCriteriaId" : "BF967612-E0BB-4A5E-BEAE-953F0980F091"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eugeneware/changeset/commit/9e588844edbb9993b32e7366cc799262b4447f99",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25915",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eugeneware/changeset/commit/9e588844edbb9993b32e7366cc799262b4447f99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25915",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27584",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.037",
      "lastModified" : "2024-11-21T05:58:14.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated PhotoShop Document (.PSD) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato PhotoShop Document (.PSD) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27585",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.130",
      "lastModified" : "2024-11-21T05:58:14.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Computer Graphics Metafile (.CGM) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato Computer Graphics Metafile (.CGM) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-288/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-299/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-288/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-299/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27586",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.193",
      "lastModified" : "2024-11-21T05:58:14.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Interchange File Format (.IFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato Interchange File Format (.IFF) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-315/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-315/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27587",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.273",
      "lastModified" : "2024-11-21T05:58:14.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato Jupiter Tessellation (.JT) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-310/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-312/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-310/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-312/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27588",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.350",
      "lastModified" : "2024-11-21T05:58:14.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated HPGL format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato HPGL manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-292/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-292/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27589",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.443",
      "lastModified" : "2024-11-21T05:58:14.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Scalable Vector Graphics (.SVG) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato Scalable Vector Graphics (.SVG) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-306/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-306/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27590",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.523",
      "lastModified" : "2024-11-21T05:58:15.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Tag Image File Format (.TIFF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos Tag Image File Format (.TIFF) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-294/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-294/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27591",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.600",
      "lastModified" : "2024-11-21T05:58:15.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Portable Document Format (.PDF) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos de formato Portable Document Format (.PDF) manipulados recibidos desde fuentes no confiables en SAP 3D Visual Enterprise Viewer versión 9, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-298/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-298/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27592",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-09T15:15:16.677",
      "lastModified" : "2024-11-21T05:58:15.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos Universal 3D (.U3D) manipulados recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicia la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027767",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-311/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-313/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-314/",
        "source" : "cna@sap.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-311/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-313/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-314/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3417",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-03-09T17:15:12.923",
      "lastModified" : "2024-11-21T06:21:27.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An internal product security audit of LXCO, prior to version 1.2.2, discovered that credentials for Lenovo XClarity Administrator (LXCA), if added as a Resource Manager, are encoded then written to an internal LXCO log file each time a session is established with LXCA. Affected logs are captured in the First Failure Data Capture (FFDC) service log. The FFDC service log is only generated when requested by a privileged LXCO user and it is only accessible to the privileged LXCO user that requested the file."
      }, {
        "lang" : "es",
        "value" : "Una auditoría de seguridad de producto interna de LXCO, versiones anteriores a 1.2.2, detectó que las credenciales para Lenovo XClarity Administrator (LXCA), si se agregan como Administrador de Recursos, son codificadas y luego se escriben en un archivo de registro interno de LXCO cada vez que es establecida una sesión con LXCA.&#xa0;Los registros afectados son capturados en el registro del servicio First Failure Data Capture (FFDC).&#xa0;El registro de servicio FFDC solo es generado cuando lo pide un usuario LXCO privilegiado y solo es accesible para el usuario LXCO privilegiado que pidió el archivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "FECA5D80-C79E-41CD-B2CA-F82BE021D384"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-49884",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-49884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20241",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T18:15:14.877",
      "lastModified" : "2024-11-21T05:46:11.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in ImageMagick in coders/jp2.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ImageMagick en el archivo coders/jp2.c.&#xa0;Un atacante que envía un archivo diseñado que es procesado por ImageMagick podría desencadenar un comportamiento indefinido en el formulario de división matemática por cero.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.11-62",
            "matchCriteriaId" : "465FCAC7-2745-4B78-AF5C-58D7B3A8D424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.10",
            "versionEndExcluding" : "7.0.10-62",
            "matchCriteriaId" : "E5AE18B8-0EF2-4A8D-8351-7F54369003B6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928952",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/3177",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/3177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20243",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T18:15:15.033",
      "lastModified" : "2024-11-21T05:46:12.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in ImageMagick in MagickCore/resize.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ImageMagick en el archivo MagickCore/resize.c.&#xa0;Un atacante que envía un archivo diseñado que es procesado por ImageMagick podría desencadenar un comportamiento indefinido en el formulario de división matemática por cero.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.10-62",
            "matchCriteriaId" : "0000A202-2F62-4894-A5E2-C829C2E4AB22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928958",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/3193",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/3193",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20253",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T18:15:15.157",
      "lastModified" : "2024-11-21T05:46:13.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in ansible-tower. The default installation is vulnerable to Job Isolation escape allowing an attacker to elevate the privilege from a low privileged user to the awx user from outside the isolated environment. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ansible-tower.&#xa0;La instalación predeterminada es vulnerable al escape de Job Isolation, permitiendo a un atacante elevar el privilegio de un usuario poco privilegiado al usuario awx desde fuera del entorno aislado.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 3.5,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.7",
            "matchCriteriaId" : "4D06CE61-E92C-4FE6-AF2D-445E777B2479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.7.0",
            "versionEndExcluding" : "3.7.5",
            "matchCriteriaId" : "28453D46-ECC9-47F8-BF01-FD7826A847E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "DC9B9029-1A47-42E6-8409-C36F0AF9F62C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928847",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20262",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T18:15:15.407",
      "lastModified" : "2024-11-21T05:46:14.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Keycloak 12.0.0 where re-authentication does not occur while updating the password. This flaw allows an attacker to take over an account if they can obtain temporary, physical access to a user’s browser. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Keycloak versión 12.0.0, donde no ocurre la re-autenticación mientras se actualiza la contraseña.&#xa0;Este fallo permite a un atacante apoderarse de una cuenta si puede obtener acceso físico temporal al navegador de un usuario.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad, la integridad y la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:12.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12CD4C8E-1AB9-4D25-9F59-169FB351DEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:single_sign-on:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFEC7CA-8DDA-48A6-A7B6-1F1D14792890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1933639",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1933639",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20263",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T18:15:15.593",
      "lastModified" : "2024-11-21T05:46:14.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the virtio-fs shared file system daemon (virtiofsd) of QEMU. The new 'xattrmap' option may cause the 'security.capability' xattr in the guest to not drop on file write, potentially leading to a modified, privileged executable in the guest. In rare circumstances, this flaw could be used by a malicious user to elevate their privileges within the guest."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en el demonio del sistema de archivos compartidos virtio-fs (virtiofsd) de QEMU.&#xa0;La nueva opción \"xattrmap\" puede causar que el xattr \"security.capability\" en el invitado no caiga en la escritura del archivo, potencialmente conllevando a un ejecutable privilegiado modificado en el invitado.&#xa0;En raras ocasiones, un usuario malicioso podría usar este fallo para elevar sus privilegios dentro del invitado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.50",
            "matchCriteriaId" : "58E0AF3A-FB63-438D-892E-960107BAFEC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1933668",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/08/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1933668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20268",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T18:15:15.687",
      "lastModified" : "2024-11-21T05:46:14.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds access flaw was found in the Linux kernel's implementation of the eBPF code verifier in the way a user running the eBPF script calls dev_map_init_map or sock_map_alloc. This flaw allows a local user to crash the system or possibly escalate their privileges. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de acceso fuera de límites en la implementación del comprobador de código eBPF en el kernel de Linux, en la manera en que un usuario que ejecuta el script eBPF llama a las funciones dev_map_init_map o sock_map_alloc.&#xa0;Este fallo permite a un usuario local bloquear el sistema o posiblemente escalar sus privilegios.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad, la integridad y la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.10",
            "matchCriteriaId" : "FB1B2B7E-44A4-4C0E-A747-1F61E4605589"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923816",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/#m8929643e99bea9c18ed490a7bc2591145eac6444",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0006/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/bpf/CACAyw99bEYWJCSGqfLiJ9Jp5YE1ZsZSiJxb4RFUTwbofipf0dA%40mail.gmail.com/T/#m8929643e99bea9c18ed490a7bc2591145eac6444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210409-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21159",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:15.750",
      "lastModified" : "2024-11-21T05:47:40.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en TabStrip en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente la corrupción de pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1171049",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1171049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21160",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:15.843",
      "lastModified" : "2024-11-21T05:47:40.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in WebAudio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en WebAudio en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente la corrupción de pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1170531",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1235",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1170531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1235",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21161",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:15.923",
      "lastModified" : "2024-11-21T05:47:41.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en TabStrip en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente la corrupción de pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173702",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21162",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:15.987",
      "lastModified" : "2024-11-21T05:47:41.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebRTC in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en WebRTC en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1172054",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1172054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21163",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.047",
      "lastModified" : "2024-11-21T05:47:41.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in Reader Mode in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page and a malicious server."
      }, {
        "lang" : "es",
        "value" : "La comprobación de datos insuficiente en Reader Mode en Google Chrome en iOS versiones anteriores a 89.0.4389.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada y un servidor malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1111239",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1111239",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21164",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.140",
      "lastModified" : "2024-11-21T05:47:41.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in Chrome on iOS in Google Chrome on iOS prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La comprobación insuficiente de datos en Chrome en iOS en Google Chrome en iOS versiones anteriores a 89.0.4389.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1164846",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1164846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21165",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.237",
      "lastModified" : "2024-11-21T05:47:41.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una carrera de datos en audio en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1174582",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1174582",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21166",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.297",
      "lastModified" : "2025-10-24T21:02:06.897",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Data race in audio in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una carrera de datos en audio en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium Race Condition Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1177465",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1177465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21166",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21167",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.377",
      "lastModified" : "2024-11-21T05:47:41.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in bookmarks in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en bookmarks en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161144",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21168",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.437",
      "lastModified" : "2024-11-21T05:47:41.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in appcache in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en appcache en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto obtener información potencialmente confidencial desde la memoria del proceso por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152226",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21169",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.517",
      "lastModified" : "2024-11-21T05:47:42.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in V8 in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un acceso a la memoria fuera de límites en V8 en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto llevar a cabo potencialmente un acceso a la memoria fuera de límites por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166138",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21170",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.580",
      "lastModified" : "2024-11-21T05:47:42.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Loader in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una Interfaz de Usuario de seguridad incorrecta en Loader en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto que había comprometido el proceso del renderizador falsificar el contenido del Omnibox (barra de URL) por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1111646",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1111646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21171",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.657",
      "lastModified" : "2024-11-21T05:47:42.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una Interfaz de Usuario de seguridad incorrecta en TabStrip and Navigation en Google Chrome en Android versiones anteriores a 89.0.4389.72, permitió a un atacante remoto falsificar el contenido del Omnibox (barra de URL) por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152894",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1152894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21172",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.737",
      "lastModified" : "2024-11-21T05:47:42.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en File System API en Google Chrome en Windows versiones anteriores a 89.0.4389.72, permitió a un atacante remoto omitir unas restricciones del sistema de archivos por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1150810",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1150810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21173",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.797",
      "lastModified" : "2024-11-21T05:47:42.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un filtrado de información de canal lateral en Network Internals en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1154250",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1154250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21174",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.877",
      "lastModified" : "2024-11-21T05:47:42.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Referrer in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Referrer en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto omitir unas restricciones de navegación por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1158010",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1158010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21175",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:16.937",
      "lastModified" : "2024-11-21T05:47:42.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Site isolation in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Site isolation en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1146651",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1146651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21176",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.000",
      "lastModified" : "2024-11-21T05:47:42.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in full screen mode in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en full screen mode en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto falsificar el contenido del Omnibox (barra de URL) por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1170584",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1170584",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21177",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.063",
      "lastModified" : "2024-11-21T05:47:43.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in Autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en Autofill en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto obtener información potencialmente confidencial desde la memoria del proceso por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173879",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21178",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.173",
      "lastModified" : "2024-11-21T05:47:43.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89.0.4389.72 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Compositing en Google Chrome en Linux y Windows versiones anteriores a 89.0.4389.72, permitió a un atacante remoto falsificar el contenido del Omnibox (barra de URL) por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1174186",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1174186",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21179",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.237",
      "lastModified" : "2024-11-21T05:47:43.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Network Internals en Google Chrome en Linux versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1174943",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1174943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21180",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.313",
      "lastModified" : "2024-11-21T05:47:43.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in tab search in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en tab search en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175507",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175507",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21181",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.360",
      "lastModified" : "2024-11-21T05:47:43.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Side-channel information leakage in autofill in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un filtrado de información de canal lateral en autofill en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto obtener información potencialmente confidencial desde la memoria del proceso por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1182767",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1182767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21182",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.423",
      "lastModified" : "2024-11-21T05:47:43.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in navigations in Google Chrome prior to 89.0.4389.72 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en navigations en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto que había comprometido el proceso del renderizador omitir las restricciones de navegación por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1049265",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1049265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21183",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.487",
      "lastModified" : "2024-11-21T05:47:43.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en performance APIs en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1105875",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1105875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21184",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.547",
      "lastModified" : "2024-11-21T05:47:43.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en performance APIs en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1131929",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1131929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21185",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.610",
      "lastModified" : "2024-11-21T05:47:44.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en extensions de Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante que convenció a un usuario de instalar una extensión maliciosa obtener información confidencial por medio de una Extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1100748",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1100748",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21186",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.687",
      "lastModified" : "2024-11-21T05:47:44.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in QR scanning in Google Chrome on iOS prior to 89.0.4389.72 allowed an attacker who convinced the user to scan a QR code to bypass navigation restrictions via a crafted QR code."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficiente en QR scanning en Google Chrome en iOS versiones anteriores a 89.0.4389.72, permitió a un atacante que convenció al usuario de escanear un código QR omitir las restricciones de navegación por medio de un código QR diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:iphone_os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5415705-33E5-46D5-8E4D-9EBADC8C5705"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1153445",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1153445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21187",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.767",
      "lastModified" : "2024-11-21T05:47:44.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de datos en URL formatting en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto llevar a cabo una suplantación de dominio por medio de homógrafos de IDN mediante un nombre de dominio diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155516",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1155516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21188",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.843",
      "lastModified" : "2024-11-21T05:47:44.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161739",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1161739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21189",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.907",
      "lastModified" : "2024-11-21T05:47:44.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in payments in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación insuficiente de la política en payments en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto omitir las restricciones de navegación por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1165392",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1165392",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21190",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-09T18:15:17.987",
      "lastModified" : "2024-11-21T05:47:44.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Datos no inicializados en PDFium en Google Chrome versiones anteriores a 89.0.4389.72, permitió a un atacante remoto obtener información potencialmente confidencial desde la memoria del proceso por medio de un archivo PDF diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.72",
            "matchCriteriaId" : "F80DD84A-B0D2-49C3-82D0-993B957DFAD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166091",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBT54RKAE5XLMWSHLVUKJ7T2XHHYMXLH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FE5SIKEVYTMDCC5OSXGOM2KRPYLHYMQX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCIDZ77XUDMB2EBPPWCQXPEIJERDNSNT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21369",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-09T18:15:18.047",
      "lastModified" : "2024-11-21T05:48:12.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hyperledger Besu is an open-source, MainNet compatible, Ethereum client written in Java. In Besu before version 1.5.1 there is a denial-of-service vulnerability involving the HTTP JSON-RPC API service. If username and password authentication is enabled for the HTTP JSON-RPC API service, then prior to making any requests to an API endpoint the requestor must use the login endpoint to obtain a JSON web token (JWT) using their credentials. A single user can readily overload the login endpoint with invalid requests (incorrect password). As the supplied password is checked for validity on the main vertx event loop and takes a relatively long time this can cause the processing of other valid requests to fail. A valid username is required for this vulnerability to be exposed. This has been fixed in version 1.5.1."
      }, {
        "lang" : "es",
        "value" : "Hyperledger Besu es un cliente Ethereum de código abierto, compatible con MainNet, escrito en Java.&#xa0;En Besu versiones anteriores a 1.5.1 se presenta una vulnerabilidad de denegación de servicio que involucra al servicio HTTP JSON-RPC API .&#xa0;Si la autenticación de nombre de usuario y contraseña está habilitada para el servicio de HTTP JSON-RPC API , antes de realizar cualquier petición a un endpoint de la API, el solicitante debe usar el endpoint de inicio de sesión para obtener un token web JSON (JWT) con sus credenciales.&#xa0;Un solo usuario puede sobrecargar fácilmente el endpoint de inicio de sesión con peticiones no válidas (contraseña incorrecta).&#xa0;Como se comprueba la validez de la contraseña proporcionada en el bucle de eventos principal de vertx y lleva un tiempo relativamente largo, esto puede causar que el procesamiento de otras peticiones válidas presenten un fallo.&#xa0;Es requerido un nombre de usuario válido para que se exponga esta vulnerabilidad.&#xa0;Esto ha sido corregido en la versión 1.5.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:besu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "236DADDD-59BD-4AD7-9B91-16F5A30FFA0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hyperledger/besu/blob/master/CHANGELOG.md#151",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/commit/06e35a58c07a30c0fbdc0aae45a3e8b06b53c022",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/pull/1144",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/security/advisories/GHSA-qgfj-mjpc-7w3q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/blob/master/CHANGELOG.md#151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/commit/06e35a58c07a30c0fbdc0aae45a3e8b06b53c022",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/pull/1144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hyperledger/besu/security/advisories/GHSA-qgfj-mjpc-7w3q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20244",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T19:15:12.423",
      "lastModified" : "2024-11-21T05:46:12.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in ImageMagick in MagickCore/visual-effects.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ImageMagick en el archivo MagickCore/visual-effects.c.&#xa0;Un atacante que envía un archivo diseñado que es procesado por ImageMagick podría desencadenar un comportamiento indefinido en el formulario de división matemática por cero.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.10-62",
            "matchCriteriaId" : "0000A202-2F62-4894-A5E2-C829C2E4AB22"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928959",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/3194",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928959",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/pull/3194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20245",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T19:15:12.500",
      "lastModified" : "2024-11-21T05:46:12.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in ImageMagick in coders/webp.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ImageMagick en el archivo coders/webp.c.&#xa0;Un atacante que envía un archivo diseñado que es procesado por ImageMagick podría desencadenar un comportamiento indefinido en el formulario de división matemática por cero.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.11-62",
            "matchCriteriaId" : "465FCAC7-2745-4B78-AF5C-58D7B3A8D424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.10-62",
            "matchCriteriaId" : "9F0B33DA-57F7-49FF-853A-336B5131B4ED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928943",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/3176",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928943",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ImageMagick/ImageMagick/issues/3176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20246",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T19:15:12.580",
      "lastModified" : "2024-11-21T05:46:12.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in ImageMagick in MagickCore/resample.c. An attacker who submits a crafted file that is processed by ImageMagick could trigger undefined behavior in the form of math division by zero. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en ImageMagick en el archivo MagickCore/resample.c.&#xa0;Un atacante que envía un archivo diseñado que es procesado por ImageMagick podría desencadenar un comportamiento indefinido en el formulario de división matemática por cero.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.9.11-62",
            "matchCriteriaId" : "465FCAC7-2745-4B78-AF5C-58D7B3A8D424"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagemagick:imagemagick:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.10-62",
            "matchCriteriaId" : "9F0B33DA-57F7-49FF-853A-336B5131B4ED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928941",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928941",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00030.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21295",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-09T19:15:12.657",
      "lastModified" : "2024-11-21T05:47:57.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.60.Final there is a vulnerability that enables request smuggling. If a Content-Length header is present in the original HTTP/2 request, the field is not validated by `Http2MultiplexHandler` as it is propagated up. This is fine as long as the request is not proxied through as HTTP/1.1. If the request comes in as an HTTP/2 stream, gets converted into the HTTP/1.1 domain objects (`HttpRequest`, `HttpContent`, etc.) via `Http2StreamFrameToHttpObjectCodec `and then sent up to the child channel's pipeline and proxied through a remote peer as HTTP/1.1 this may result in request smuggling. In a proxy case, users may assume the content-length is validated somehow, which is not the case. If the request is forwarded to a backend channel that is a HTTP/1.1 connection, the Content-Length now has meaning and needs to be checked. An attacker can smuggle requests inside the body as it gets downgraded from HTTP/2 to HTTP/1.1. For an example attack refer to the linked GitHub Advisory. Users are only affected if all of this is true: `HTTP2MultiplexCodec` or `Http2FrameCodec` is used, `Http2StreamFrameToHttpObjectCodec` is used to convert to HTTP/1.1 objects, and these HTTP/1.1 objects are forwarded to another remote peer. This has been patched in 4.1.60.Final As a workaround, the user can do the validation by themselves by implementing a custom `ChannelInboundHandler` that is put in the `ChannelPipeline` behind `Http2StreamFrameToHttpObjectCodec`."
      }, {
        "lang" : "es",
        "value" : "Netty es un framework de aplicación de red de código abierto y controlado por eventos asíncronos para el desarrollo rápido de servidores y clientes de protocolo de alto rendimiento mantenibles.&#xa0;En Netty (io.netty: netty-codec-http2) versiones anteriores a la versión 4.1.60.Final, se presenta una vulnerabilidad que permite el tráfico de peticiones.&#xa0;Si existe un encabezado Content-Length en la petición HTTP/2 original, el campo no es comprobado por \"Http2MultiplexHandler\" a medida que se propaga.&#xa0;Esto está bien siempre que la petición no se transmita como HTTP/1.1.&#xa0;Si la petición llega como una secuencia HTTP/2, se convierte en los objetos de dominio HTTP/1.1 (\"HttpRequest\", \"HttpContent\", etc.) por medio de \"Http2StreamFrameToHttpObjectCodec\" y luego se envía al pipeline del canal secundario y al proxy mediante un peer remoto como HTTP/1.1, esto puede resultar en el tráfico de peticiones.&#xa0;En un caso de proxy,&#xa0;los usuarios pueden asumir que la longitud del contenido está comprobada de alguna forma, lo que no es el caso.&#xa0;Si la petición se reenvía a un canal de backend que es una conexión HTTP/1.1, la longitud del contenido ahora tiene significado y debe verificarse.&#xa0;Un atacante puede traficar peticiones dentro del cuerpo a medida que se degrada de HTTP/2 a HTTP/1.1.&#xa0;Para visualizar un ejemplo de ataque, consulte el Aviso de GitHub vinculado.&#xa0;Los usuarios solo están afectados si todo esto es cierto: se usa \"HTTP2MultiplexCodec\" o \"Http2FrameCodec\", se usa \"Http2StreamFrameToHttpObjectCodec\" para convertir a objetos HTTP/1.1, y estos objetos HTTP/1.1 se reenvían a otro par remoto.&#xa0;Esto ha sido parcheado en la versión 4.1.60.Final. Como solución, el usuario puede hacer la comprobación por sí mismo implementando un \"ChannelInboundHandler\" personalizado que se coloca en el \"ChannelPipeline\" detrás de \"Http2StreamFrameToHttpObjectCodec\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.60",
            "matchCriteriaId" : "635A35A3-F02B-44CC-BB81-48C97F1612B1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC98B22-FFAA-4B59-8E63-EBAA4336AD13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.7",
            "matchCriteriaId" : "64839EBF-078E-492A-897C-9AFFB7678ED8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:kudu:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "A868228B-8AA3-4A4D-B3B4-9344854B94F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:zookeeper:3.5.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6D906AE-B5F6-4CD6-8018-F6FFF7A49913"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Netflix/zuul/pull/980",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f%40%3Cdev.ranger.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r040a5e4d9cca2f98354b58a70b27099672276f66995c4e2e39545d0b%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04a3e0d9f53421fb946c60cc54762b7151dc692eb4e39970a7579052%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f66ada9a5faf4bac69d9e7c4521cedfefa62df9509881603791969%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r16c4b55ac82be72f28adad4f8061477e5f978199d5725691dcc82c24%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1bca0b81193b74a451fc6d687ab58ef3a1f5ec40f6c61561d8dd9509%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22adb45fe902aeafcd0a1c4db13984224a667676c323c66db3af38a1%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22b2f34447d71c9a0ad9079b7860323d5584fb9b40eb42668c21eaf1%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r268850f26639ebe249356ed6d8edb54ee8943be6f200f770784fb190%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r27b7e5a588ec826b15f38c40be500c50073400019ce7b8adfd07fece%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2e93ce23e04c3f0a61e987d1111d0695cb668ac4ec4edbf237bd3e80%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r312ce5bd3c6bf08c138349b507b6f1c25fe9cf40b6f2b0014c9d12b1%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r32b0b640ad2be3b858f0af51c68a7d5c5a66a462c8bbb93699825cd3%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r33eb06b05afbc7df28d31055cae0cb3fd36cab808c884bf6d680bea5%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r393a339ab0b63ef9e6502253eeab26e7643b3e69738d5948b2b1d064%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c293431c781696681abbfe1c573c2d9dcdae6fd3ff330ea22f0433f%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c4596b9b37f5ae91628ccf169d33cd5a0da4b16b6c39d5bad8e03f3%40%3Cdev.jackrabbit.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3ff9e735ca33612d900607dc139ebd38a64cadc6bce292e53eb86d7f%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r490ca5611c150d193b320a2608209180713b7c68e501b67b0cffb925%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5232e33a1f3b310a3e083423f736f3925ebdb150844d60ac582809f8%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5470456cf1409a99893ae9dd57439799f6dc1a60fda90e11570f66fe%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57245853c7245baab09eae08728c52b58fd77666538092389cc3e882%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5fc5786cdd640b1b0a3c643237ce0011f0a08a296b11c0e2c669022c%40%3Cdev.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r67e6a636cbc1958383a1cd72b7fd0cd7493360b1dd0e6c12f5761798%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6a122c25e352eb134d01e7f4fc4d345a491c5ee9453fef6fc754d15b%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6a29316d758db628a1df49ca219d64caf493999b52cc77847bfba675%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6aee7e3566cb3e51eeed2fd8786704d91f80a7581e00a787ba9f37f6%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d32fc3cd547f7c9a288a57c7f525f5d00a00d5d163613e0d10a23ef%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r70cebada51bc6d49138272437d8a28fe971d0197334ef906b575044c%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5%40%3Cdev.ranger.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r837bbcbf12e335e83ab448b1bd2c1ad7e86efdc14034b23811422e6a%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86cd38a825ab2344f3e6cad570528852f29a4ffdf56ab67d75c36edf%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8bcaf7821247b1836b10f6a1a3a3212b06272fd4cde4a859de1b78cf%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8db1d7b3b9acc9e8d2776395e280eb9615dd7790e1da8c57039963de%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9051e4f484a970b5566dc1870ecd9c1eb435214e2652cf3ea4d0c0cc%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r905b92099998291956eebf4f1c5d95f5a0cbcece2946cc46d32274fd%40%3Cdev.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r96ce18044880c33634c4b3fcecc57b8b90673c9364d63eba00385523%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898%40%3Cdev.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra83096bcbfe6e1f4d54449f8a013117a0536404e9d307ab4a0d34f81%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra96c74c37ed7252f78392e1ad16442bd16ae72a4d6c8db50dd55c88b%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/racc191a1f70a4f13155e8002c61bddef2870b26441971c697436ad5d%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rae198f44c3f7ac5264045e6ba976be1703cff38dcf1609916e50210d%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4%40%3Cdev.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb523bb6c60196c5f58514b86a8585c2069a4852039b45de3818b29d2%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb95d42ce220ed4a4683aa17833b5006d657bc4254bc5cb03cd5e6bfb%40%3Cissues.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbadcbcb50195f00bbd196403865ced521ca70787999583c07be38d0e%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbed09768f496244a2e138dbbe6d2847ddf796c9c8ef9e50f2e3e30d9%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc165e36ca7cb5417aec3f21bbc4ec00fb38ecebdd96a82cfab9bd56f%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc73b8dd01b1be276d06bdf07883ecd93fe1a01f139a99ef30ba4308c%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcf3752209a8b04996373bf57fdc808b3bfaa2be8702698a0323641f8%40%3Ccommits.hbase.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcfc154eb2de23d2dc08a56100341161e1a40a8ea86c693735437e8f2%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcfc535afd413d9934d6ee509dce234dac41fa3747a7555befb17447e%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd25c88aad0e76240dd09f0eb34bdab924933946429e068a167adcb73%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdb4db3f5a9c478ca52a7b164680b88877a5a9c174e7047676c006b2c%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdc096e13ac4501ea2e2b03a197682a313b85d3d3ec89d5ae5551b384%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re4f70b62843e92163fab03b65e2aa8078693293a0c36f1cc260079ed%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re6207ebe2ca4d44f2a6deee695ad6f27fd29d78980f1d46ed1574f91%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/reafc834062486adfc7be5bb8f7b7793be0d33f483678a094c3f9d468%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf87b870a22aa5c77c27900967b518a71a7d954c2952860fce3794b60%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfff6ff8ffb31e8a32619c79774def44b6ffbb037c128c5ad3eab7171%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0003/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4885",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/zuul/pull/980",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/commit/89c241e3b1795ff257af4ad6eadc616cb2fb3dc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r02e467123d45006a1dda20a38349e9c74c3a4b53e2e07be0939ecb3f%40%3Cdev.ranger.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r040a5e4d9cca2f98354b58a70b27099672276f66995c4e2e39545d0b%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r04a3e0d9f53421fb946c60cc54762b7151dc692eb4e39970a7579052%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r15f66ada9a5faf4bac69d9e7c4521cedfefa62df9509881603791969%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r16c4b55ac82be72f28adad4f8061477e5f978199d5725691dcc82c24%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1908a34b9cc7120e5c19968a116ddbcffea5e9deb76c2be4fa461904%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1bca0b81193b74a451fc6d687ab58ef3a1f5ec40f6c61561d8dd9509%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22adb45fe902aeafcd0a1c4db13984224a667676c323c66db3af38a1%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r22b2f34447d71c9a0ad9079b7860323d5584fb9b40eb42668c21eaf1%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r268850f26639ebe249356ed6d8edb54ee8943be6f200f770784fb190%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r27b7e5a588ec826b15f38c40be500c50073400019ce7b8adfd07fece%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2936730ef0a06e724b96539bc7eacfcd3628987c16b1b99c790e7b87%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2e93ce23e04c3f0a61e987d1111d0695cb668ac4ec4edbf237bd3e80%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r312ce5bd3c6bf08c138349b507b6f1c25fe9cf40b6f2b0014c9d12b1%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r32b0b640ad2be3b858f0af51c68a7d5c5a66a462c8bbb93699825cd3%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r33eb06b05afbc7df28d31055cae0cb3fd36cab808c884bf6d680bea5%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r393a339ab0b63ef9e6502253eeab26e7643b3e69738d5948b2b1d064%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c293431c781696681abbfe1c573c2d9dcdae6fd3ff330ea22f0433f%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c4596b9b37f5ae91628ccf169d33cd5a0da4b16b6c39d5bad8e03f3%40%3Cdev.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3ff9e735ca33612d900607dc139ebd38a64cadc6bce292e53eb86d7f%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r490ca5611c150d193b320a2608209180713b7c68e501b67b0cffb925%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5232e33a1f3b310a3e083423f736f3925ebdb150844d60ac582809f8%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5470456cf1409a99893ae9dd57439799f6dc1a60fda90e11570f66fe%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r57245853c7245baab09eae08728c52b58fd77666538092389cc3e882%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r59bac5c09f7a4179b9e2460e8f41c278aaf3b9a21cc23678eb893e41%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5e66e286afb5506cdfe9bbf68a323e8d09614f6d1ddc806ed0224700%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5fc5786cdd640b1b0a3c643237ce0011f0a08a296b11c0e2c669022c%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r67e6a636cbc1958383a1cd72b7fd0cd7493360b1dd0e6c12f5761798%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6a122c25e352eb134d01e7f4fc4d345a491c5ee9453fef6fc754d15b%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6a29316d758db628a1df49ca219d64caf493999b52cc77847bfba675%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6aee7e3566cb3e51eeed2fd8786704d91f80a7581e00a787ba9f37f6%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6d32fc3cd547f7c9a288a57c7f525f5d00a00d5d163613e0d10a23ef%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r70cebada51bc6d49138272437d8a28fe971d0197334ef906b575044c%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r790c2926efcd062067eb18fde2486527596d7275381cfaff2f7b3890%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bb3cdc192e9a6f863d3ea05422f09fa1ae2b88d4663e63696ee7ef5%40%3Cdev.ranger.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r837bbcbf12e335e83ab448b1bd2c1ad7e86efdc14034b23811422e6a%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86cd38a825ab2344f3e6cad570528852f29a4ffdf56ab67d75c36edf%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8bcaf7821247b1836b10f6a1a3a3212b06272fd4cde4a859de1b78cf%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8db1d7b3b9acc9e8d2776395e280eb9615dd7790e1da8c57039963de%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9051e4f484a970b5566dc1870ecd9c1eb435214e2652cf3ea4d0c0cc%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r905b92099998291956eebf4f1c5d95f5a0cbcece2946cc46d32274fd%40%3Cdev.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r96ce18044880c33634c4b3fcecc57b8b90673c9364d63eba00385523%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9924ef9357537722b28d04c98a189750b80694a19754e5057c34ca48%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898%40%3Cdev.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra83096bcbfe6e1f4d54449f8a013117a0536404e9d307ab4a0d34f81%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra96c74c37ed7252f78392e1ad16442bd16ae72a4d6c8db50dd55c88b%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/racc191a1f70a4f13155e8002c61bddef2870b26441971c697436ad5d%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rae198f44c3f7ac5264045e6ba976be1703cff38dcf1609916e50210d%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb06c1e766aa45ee422e8261a8249b561784186483e8f742ea627bda4%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb51d6202ff1a773f96eaa694b7da4ad3f44922c40b3d4e1a19c2f325%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb523bb6c60196c5f58514b86a8585c2069a4852039b45de3818b29d2%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb592033a2462548d061a83ac9449c5ff66098751748fcd1e2d008233%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb95d42ce220ed4a4683aa17833b5006d657bc4254bc5cb03cd5e6bfb%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbadcbcb50195f00bbd196403865ced521ca70787999583c07be38d0e%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbed09768f496244a2e138dbbe6d2847ddf796c9c8ef9e50f2e3e30d9%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc0087125cb15b4b78e44000f841cd37fefedfda942fd7ddf3ad1b528%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc165e36ca7cb5417aec3f21bbc4ec00fb38ecebdd96a82cfab9bd56f%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc73b8dd01b1be276d06bdf07883ecd93fe1a01f139a99ef30ba4308c%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd163e421273e8dca1c71ea298dce3dd11b41d51c3a812e0394e6a5d%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcf3752209a8b04996373bf57fdc808b3bfaa2be8702698a0323641f8%40%3Ccommits.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcfc154eb2de23d2dc08a56100341161e1a40a8ea86c693735437e8f2%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcfc535afd413d9934d6ee509dce234dac41fa3747a7555befb17447e%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd25c88aad0e76240dd09f0eb34bdab924933946429e068a167adcb73%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdb4db3f5a9c478ca52a7b164680b88877a5a9c174e7047676c006b2c%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdc096e13ac4501ea2e2b03a197682a313b85d3d3ec89d5ae5551b384%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re4f70b62843e92163fab03b65e2aa8078693293a0c36f1cc260079ed%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re6207ebe2ca4d44f2a6deee695ad6f27fd29d78980f1d46ed1574f91%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reafc834062486adfc7be5bb8f7b7793be0d33f483678a094c3f9d468%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf87b870a22aa5c77c27900967b518a71a7d954c2952860fce3794b60%40%3Ccommits.servicecomb.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfff6ff8ffb31e8a32619c79774def44b6ffbb037c128c5ad3eab7171%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23352",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-09T19:15:12.860",
      "lastModified" : "2024-11-21T05:51:33.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package madge before 4.0.1. It is possible to specify a custom Graphviz path via the graphVizPath option parameter which when the .image(), .svg() or .dot() functions are called, is executed by the childprocess.exec function."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete madge versiones anteriores a 4.0.1.&#xa0;Es posible especificar una ruta Graphviz personalizada por medio del parámetro graphVizPath option que cuando son llamadas las funciones .image(), .svg() o .dot(), es ejecutado por la función childprocess.exec"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:madge_project:madge:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.1",
            "matchCriteriaId" : "940F078B-EA3A-4113-A8A6-C38552F64D9D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pahen/madge/blob/master/lib/graph.js%23L27",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pahen/madge/commit/da5cbc9ab30372d687fa7c324b22af7ffa5c6332",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-MADGE-1082875",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pahen/madge/blob/master/lib/graph.js%23L27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pahen/madge/commit/da5cbc9ab30372d687fa7c324b22af7ffa5c6332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-MADGE-1082875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23353",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-09T19:15:12.970",
      "lastModified" : "2024-11-21T05:51:33.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package jspdf before 2.3.1. ReDoS is possible via the addImage function."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete jspdf versiones anteriores a 2.3.1.&#xa0;ReDoS es posible por medio de la función addImage"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parall:jspdf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "FCED087E-62BD-4876-93CB-C5BB67C44D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MrRio/jsPDF/commit/d8bb3b39efcd129994f7a3b01b632164144ec43e",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrRio/jsPDF/pull/3091",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1083289",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1083287",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-1083288",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1083286",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-JSPDF-1073626",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrRio/jsPDF/commit/d8bb3b39efcd129994f7a3b01b632164144ec43e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MrRio/jsPDF/pull/3091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1083289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1083287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBMRRIO-1083288",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1083286",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-JSPDF-1073626",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20255",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T20:15:13.133",
      "lastModified" : "2024-11-21T05:46:13.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow via an infinite recursion vulnerability was found in the eepro100 i8255x device emulator of QEMU. This issue occurs while processing controller commands due to a DMA reentry issue. This flaw allows a guest user or process to consume CPU cycles or crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un desbordamiento de la pila por medio de una vulnerabilidad de recursividad infinita en el emulador de dispositivo eepro100 i8255x de QEMU.&#xa0;Este problema ocurre mientras se procesan los comandos del controlador debido a un problema de reingreso de DMA.&#xa0;Este fallo permite a un usuario o proceso invitado consumir ciclos de CPU o bloquear el proceso QEMU en el host, resultando en una denegación de servicio.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB839110-2CFB-4A4C-96DF-620F5F688361"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1930646",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflow1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0003/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/25/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1930646",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://ruhr-uni-bochum.sciebo.de/s/NNWP2GfwzYKeKwE?path=%2Feepro100_stackoverflow1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/25/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21300",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-09T20:15:13.260",
      "lastModified" : "2024-11-21T05:47:58.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Git is an open-source distributed revision control system. In affected versions of Git a specially crafted repository that contains symbolic links as well as files using a clean/smudge filter such as Git LFS, may cause just-checked out script to be executed while cloning onto a case-insensitive file system such as NTFS, HFS+ or APFS (i.e. the default file systems on Windows and macOS). Note that clean/smudge filters have to be configured for that. Git for Windows configures Git LFS by default, and is therefore vulnerable. The problem has been patched in the versions published on Tuesday, March 9th, 2021. As a workaound, if symbolic link support is disabled in Git (e.g. via `git config --global core.symlinks false`), the described attack won't work. Likewise, if no clean/smudge filters such as Git LFS are configured globally (i.e. _before_ cloning), the attack is foiled. As always, it is best to avoid cloning repositories from untrusted sources. The earliest impacted version is 2.14.2. The fix versions are: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19.6, 2.18.5, 2.17.62.17.6."
      }, {
        "lang" : "es",
        "value" : "Git es un sistema de control de revisiones distribuido de código abierto.&#xa0;En las versiones afectadas de Git, un repositorio especialmente diseñado que contiene enlaces simbólicos, así como archivos que usan un filtro clean/smudge como Git LFS, puede hacer que se ejecute un script recién extraído mientras se clona en un sistema de archivos que no distingue entre mayúsculas y minúsculas como NTFS , HFS+ o APFS (es decir, los sistemas de archivos predeterminados en Windows y macOS).&#xa0;Tome en cuenta que los filtros de clean/smudge deben ser configurados para eso.&#xa0;Git para Windows configura Git LFS por defecto y, por lo tanto, es vulnerable.&#xa0;El problema se ha corregido en las versiones publicadas el martes 9 de marzo de 2021. Como solución temporal, si el soporte de enlace simbólico está deshabilitado en Git (por ejemplo, por medio de \"git config --global core.symlinks false\"), el ataque descrito no funcionará.&#xa0;Del mismo modo, si no se configuran globalmente filtros clean/smudge como Git LFS (es decir,_before_ cloning), el ataque se frustra.&#xa0;Como siempre, es mejor evitar la clonación de repositorios de fuentes no confiables.&#xa0;La primera versión afectada es 2.14.2.&#xa0;Las versiones correctas son: 2.30.1, 2.29.3, 2.28.1, 2.27.1, 2.26.3, 2.25.5, 2.24.4, 2.23.4, 2.22.5, 2.21.4, 2.20.5, 2.19 .6, 2.18.5, 2.17.62.17.6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.14.2",
            "matchCriteriaId" : "B122112C-041C-4E35-A95B-09A6FEB34E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.17.0",
            "versionEndExcluding" : "2.17.6",
            "matchCriteriaId" : "F22EC766-C4F5-478C-812C-DC0ECE2B5017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.18.0",
            "versionEndExcluding" : "2.18.5",
            "matchCriteriaId" : "852AD237-C1C7-4C6D-8CD0-46FC6CF3CA2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.19.0",
            "versionEndExcluding" : "2.19.6",
            "matchCriteriaId" : "3964581A-A764-44AC-96AA-0FBAC723876C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.20.0",
            "versionEndExcluding" : "2.20.5",
            "matchCriteriaId" : "6B873D83-F63E-4183-8DF5-FB2CA9F7442A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.21.0",
            "versionEndExcluding" : "2.21.4",
            "matchCriteriaId" : "28F16A48-7467-428E-A797-F17C1B33D845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "2.22.5",
            "matchCriteriaId" : "344A8A7D-A440-46D2-A424-FE9576211B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.23.0",
            "versionEndExcluding" : "2.23.4",
            "matchCriteriaId" : "E08D59A6-5026-4E64-A685-3F3C61384AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.24.0",
            "versionEndExcluding" : "2.24.4",
            "matchCriteriaId" : "800D0A90-9ABA-49AE-AC15-FAB0EAD8E6B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.25.0",
            "versionEndExcluding" : "2.25.5",
            "matchCriteriaId" : "F73CA1C3-0970-4A25-86DF-D6BCF6A245D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.26.0",
            "versionEndExcluding" : "2.26.3",
            "matchCriteriaId" : "C55EAADC-86F7-48AD-ADE6-EAC35900ACCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.29.0",
            "versionEndExcluding" : "2.29.3",
            "matchCriteriaId" : "60B8D72E-7390-4748-85C3-2143B473B8A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.30.0",
            "versionEndExcluding" : "2.30.2",
            "matchCriteriaId" : "3B4C27E1-AB72-4ABB-8BEF-BA317C229CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.27.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A303CF1-7129-4C24-B6EB-03E7F5A51FB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-scm:git:2.28.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8920211C-E92D-41FD-BBFA-4702FB07B4D4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5",
            "matchCriteriaId" : "BD2A6382-E564-4CF6-AE51-62A021766671"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "matchCriteriaId" : "FD77D019-6FF7-4D3B-BE07-65C7A6879F12"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163978/Git-LFS-Clone-Command-Execution.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/60",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/09/3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git-scm.com/docs/gitattributes#_filter",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git/git/commit/684dd4c2b414bcf648505e74498a608f28de4592",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-8prw-h3cq-mghm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/10/msg00014.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBPNGLQSYJHLZZ37BO42YY6S5OTIF4L4/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCLJJLKKMS5WRFO6C475AOUZTWQLIARX/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMXX2POK5X576BSDWSXGU7EIK6I72ERU/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lore.kernel.org/git/xmqqim6019yd.fsf%40gitster.c.googlers.com/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-01",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212320",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163978/Git-LFS-Clone-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/09/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git-scm.com/docs/git-config#Documentation/git-config.txt-coresymlinks",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git-scm.com/docs/gitattributes#_filter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/git/git/commit/684dd4c2b414bcf648505e74498a608f28de4592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/git/git/security/advisories/GHSA-8prw-h3cq-mghm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/10/msg00014.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BBPNGLQSYJHLZZ37BO42YY6S5OTIF4L4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LCLJJLKKMS5WRFO6C475AOUZTWQLIARX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LMXX2POK5X576BSDWSXGU7EIK6I72ERU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/git/xmqqim6019yd.fsf%40gitster.c.googlers.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3411",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-09T20:15:13.417",
      "lastModified" : "2024-11-21T06:21:26.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel in versions prior to 5.10. A violation of memory access was found while detecting a padding of int3 in the linking state. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en el kernel de Linux en versiones anteriores a 5.10.&#xa0;Se encontró una violación del acceso a la memoria al detectar un relleno de int3 en el estado de enlace.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10",
            "matchCriteriaId" : "D61CA62B-157A-4415-B8FD-7C3C1208315D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://blog.pi3.com.pl/?p=831",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://blog.pi3.com.pl/?p=831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23273",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-09T21:15:14.640",
      "lastModified" : "2024-11-21T05:51:28.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Spotfire client component of TIBCO Software Inc.'s TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform for AWS Marketplace, TIBCO Spotfire Desktop, and TIBCO Spotfire Server contains a vulnerability that theoretically allows a low privileged attacker with network access to execute a stored Cross Site Scripting (XSS) attack on the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Spotfire Analyst: versions 10.3.3 and below, versions 10.10.0, 10.10.1, and 10.10.2, versions 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, TIBCO Spotfire Analytics Platform for AWS Marketplace: versions 11.1.0 and below, TIBCO Spotfire Desktop: versions 10.3.3 and below, versions 10.10.0, 10.10.1, and 10.10.2, versions 10.7.0, 10.8.0, 10.9.0, 11.0.0, and 11.1.0, and TIBCO Spotfire Server: versions 10.3.11 and below, versions 10.10.0, 10.10.1, 10.10.2, and 10.10.3, versions 10.7.0, 10.8.0, 10.8.1, 10.9.0, 11.0.0, and 11.1.0."
      }, {
        "lang" : "es",
        "value" : "El componente del cliente Spotfire de TIBCO Spotfire Analyst, TIBCO Spotfire Analytics Platform para AWS Marketplace, TIBCO Spotfire Desktop y TIBCO Spotfire Server, de TIBCO Software Inc, contiene una vulnerabilidad que teóricamente permite a un atacante con pocos privilegios y acceso a la red ejecutar un ataque de tipo Cross Site Scripting (XSS) almacenado en el sistema afectado.&#xa0;Un ataque exitoso que utilice esta vulnerabilidad requiere la interacción humana de una persona que no sea el atacante.&#xa0;Las versiones afectadas son TIBCO Spotfire Analyst de TIBCO Software Inc.: versiones 10.3.3 y anteriores, versiones 10.10.0, 10.10.1 y 10.10.2, versiones 10.7.0, 10.8.0, 10.9.0, 11.0.0 y 11.1.0, TIBCO Spotfire Analytics Platform para AWS Marketplace: versiones 11.1.0 y anteriores, TIBCO Spotfire Desktop: versiones 10.3.3 y anteriores, versiones 10.10.0, 10.10.1 y 10.10.2, versiones 10.7.0 , 10.8.0, 10.9.0, 11.0.0 y 11.1.0, y TIBCO Spotfire Server: versiones 10.3.11 y anteriores, versiones 10.10.0, 10.10.1, 10.10.2 y 10.10.3, versiones 10.7 .0, 10.8.0, 10.8.1, 10.9.0, 11.0.0 y 11.1.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:analytics_platform:*:*:*:*:*:aws_marketplace:*:*",
            "versionEndIncluding" : "11.1.0",
            "matchCriteriaId" : "5AEB1299-AD20-4B5A-AD92-E2BD4AB0BD61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "4EECB41F-9602-41C6-89AD-3567CCE6CD84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:10.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "529B7D1D-3734-433F-87FF-EED082378421"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:10.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F102050-55D2-4DCC-AEA2-7EEF4042B23E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:10.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC965E0-2B80-420F-AE1D-F68B4DB6C314"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:10.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2802ABF7-E503-4FBF-A8C1-D78DC167FB5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:10.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCE461AE-B840-41A1-BD45-75408316EFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:10.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD5FEF12-1AF5-43FB-96CF-074FED42BDA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B50563-341C-498B-85DB-A564DC4787EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_analyst:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16029A99-9B9C-4006-8314-67C8731BDCE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.3",
            "matchCriteriaId" : "71D20203-4F5A-48AE-A3C9-517B94A9F596"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:10.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D5AFBD-DD57-4744-BB81-0ABBDBDE0171"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:10.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3DEF011-D075-44CE-8D5B-E85562360E4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:10.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D25CEF2-A066-44B0-AE48-26C39A0A7507"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:10.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4399AF82-5A89-4DC0-866B-B70D21CE5C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:10.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E01304-336B-4E87-8122-570DE139E06E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:10.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68ED0B9D-699F-476A-AEFD-2CE5B8CA1C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9F866EB-F423-4491-951D-AF0A6681683A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_desktop:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04347EE2-37C4-44EC-A533-9518E793C15F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.3.11",
            "matchCriteriaId" : "3C2F12D0-C533-49FA-84D8-3333DDD097A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28151CD2-540D-4D16-A894-082C2946FEF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "901B6B29-8644-43BC-BFAD-3229CD37FB9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1490724A-AF67-4037-B5D9-47477B58D765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A962BD2-0CB0-4EE5-9904-362FDB9655D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FA54B6E-D53B-4196-AAD4-1C551C635D62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "047CA6DF-7CF2-4B6F-BDFD-DB1EC64D6C1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F5F724C-30A5-4BA3-9047-3B0DFE30B4BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:10.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA297F15-2B70-4A13-9D63-816FD3149A87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:11.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58D5C32A-F10F-4237-99BB-163B4B7D6D1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:spotfire_server:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B68BAB9A-2479-4C36-B12A-D9F5A6C98D0F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-9-2021-tibco-spotfire",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-9-2021-tibco-spotfire",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28115",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-09T22:15:12.803",
      "lastModified" : "2024-11-21T05:59:06.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OUGC Feedback plugin before 1.8.23 for MyBB allows XSS via the comment field of feedback during an edit operation."
      }, {
        "lang" : "es",
        "value" : "El plugin OUGC Feedback versiones anteriores a 1.8.23 para MyBB, permite una ataque de tipo XSS por medio del campo de comentarios durante una operación de edición"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ougc_feedback_project:ougc_feedback:*:*:*:*:*:mybb:*:*",
            "versionEndExcluding" : "1.8.23",
            "matchCriteriaId" : "8052A38F-21AC-4B95-BEB1-1363C4AECCA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161746/MyBB-OUGC-Feedback-1.8.22-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Sama34/OUGC-Feedback/pull/31/commits/ceef7c06359e5dcbaffe90a40884265c5754068c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161746/MyBB-OUGC-Feedback-1.8.22-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Sama34/OUGC-Feedback/pull/31/commits/ceef7c06359e5dcbaffe90a40884265c5754068c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28116",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-09T22:15:12.880",
      "lastModified" : "2024-11-21T05:59:06.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Squid through 4.14 and 5.x through 5.0.5, in some configurations, allows information disclosure because of an out-of-bounds read in WCCP protocol data. This can be leveraged as part of a chain for remote code execution as nobody."
      }, {
        "lang" : "es",
        "value" : "Squid versiones hasta 4.14 y 5.xa 5.0.5, en algunas configuraciones, permite la divulgación de información debido a una lectura fuera de límites en los datos del protocolo WCCP.&#xa0;Esto puede ser aprovechado como parte de una cadena para la ejecución remota de código como nobody"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.14",
            "matchCriteriaId" : "08C691FC-146C-47D0-8FAD-FA7C5A8A2800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squid-cache:squid:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndIncluding" : "5.0.5",
            "matchCriteriaId" : "ABD26F61-9933-44D9-9F99-5A4702D90A56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/10/04/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5171",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-157/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/10/04/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.squid-cache.org/Versions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/squid-cache/squid/security/advisories/GHSA-rgf3-9v3p-qp82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LSQ3U54ZCNXR44QRPW3AV2VCS6K3TKCF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T4EPIWUZDJAXADDHVOPKRBTQHPBR6H66/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-157/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-09T23:15:11.987",
      "lastModified" : "2024-11-21T05:59:07.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Twinkle Tray (aka twinkle-tray) through 1.13.3 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API."
      }, {
        "lang" : "es",
        "value" : "Twinkle Tray (también se conoce como twinkle-tray) versiones hasta 1.13.3, permite la ejecución de comandos remota.&#xa0;Un atacante remoto puede enviar un mensaje IPC diseñado hacia la interfaz IPC ipcRenderer vulnerable expuesta, que invoca la API openExternal peligrosa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:twinkletray:twinkle_tray:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.3",
            "matchCriteriaId" : "4A0D4D41-FB07-4B5E-B118-21C80FD32AC2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xanderfrangos/twinkle-tray/issues/142",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xanderfrangos/twinkle-tray/issues/142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-10T05:15:13.517",
      "lastModified" : "2024-11-21T06:21:15.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure (by reading local files)."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Western Digital My Cloud OS 5 versiones anteriores a 5.10.122, manejan inapropiadamente recursos compartidos de Symbolic Link Following en SMB y AFP.&#xa0;Esto puede conllevar a una ejecución de código y divulgación de información (mediante la lectura de archivos locales)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:westerndigital:my_cloud_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.122",
            "matchCriteriaId" : "EEB46759-686B-4B98-82BD-7FB90BF52A70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_dl2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E783EBC-7608-4527-B1AD-9B4E7A7A108C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_dl4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3034F4A-239C-4E38-9BD6-217361A7C519"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_ex2_ultra:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A581EBA-A1F2-4ABC-8183-29973A46FA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_ex2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBBDC1E-2320-4767-B669-1BB2FFB1E1C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_ex4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B78030F0-6655-4604-9D16-2FA1F3FD52FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_mirror_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5695E842-1561-4A4F-901F-6EC07F558989"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_pr2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF58260B-2131-402C-A9DA-67B188136DE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:westerndigital:my_cloud_pr4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0C2FD9-4792-4DA2-9698-E53109A499EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-277/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.westerndigital.com/support/productsecurity/wdc-21002-my-cloud-firmware-version-5-10-122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-277/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20667",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:12.507",
      "lastModified" : "2024-11-21T05:46:58.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting vulnerability due to inadequate CSP (Content Security Policy) configuration in GROWI versions v4.2.2 and earlier allows remote authenticated attackers to inject an arbitrary script via a specially crafted content."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting almacenado debido a una configuración inapropiada de CSP (Content Security Policy) en GROWI versiones v4.2.2 y anteriores, permite a atacantes autenticados remotos inyectar un script arbitrario por medio de un contenido especialmente diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "AB17F4DC-C685-4507-BBB3-496C2BFC2368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20668",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:12.660",
      "lastModified" : "2024-11-21T05:46:58.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta en GROWI versiones v4.2.2 y anteriores, permite a un atacante con derechos de administrador leer una ruta arbitraria por medio de una URL especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "AB17F4DC-C685-4507-BBB3-496C2BFC2368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20669",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:12.740",
      "lastModified" : "2024-11-21T05:46:58.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta en GROWI versiones v4.2.2 y anteriores, permite a un atacante con derechos de administrador leer y/o eliminar una ruta arbitraria por medio de una URL especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "AB17F4DC-C685-4507-BBB3-496C2BFC2368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20670",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:12.817",
      "lastModified" : "2024-11-21T05:46:58.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in GROWI versions v4.2.2 and earlier allows a remote unauthenticated attacker to read the user's personal information and/or server's internal information via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en GROWI versiones v4.2.2 y anteriores, permite a un atacante remoto no autenticado leer una información personal del usuario y/o la información interna del servidor por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "AB17F4DC-C685-4507-BBB3-496C2BFC2368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20671",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:12.880",
      "lastModified" : "2024-11-21T05:46:58.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Una comprobación de archivos no válidos en la funcionalidad upload en GROWI  versiones v4.2.2, permite a un atacante remoto con privilegios administrativos sobrescribir los archivos en el servidor, lo que puede conllevar a una ejecución de código arbitraria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353DC517-4EE8-4640-82A8-C7FC26F2E08D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU94889258/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/08/vulnerability/growi-prevent-multiple-xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20672",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:12.957",
      "lastModified" : "2024-11-21T05:46:58.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected cross-site scripting vulnerability due to insufficient verification of URL query parameters in GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting reflejado debido a una comprobación insuficiente de los parámetros de consulta URL en GROWI (serie v4.2) versiones desde v4.2.0 hasta v4.2.7, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "4.2.7",
            "matchCriteriaId" : "BF992FE7-A7D2-4FD9-ACF4-3B2B41287F2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN86438134/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN86438134/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20673",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-10T10:15:13.053",
      "lastModified" : "2024-11-21T05:46:59.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored cross-site scripting vulnerability in Admin Page of GROWI (v4.2 Series) versions from v4.2.0 to v4.2.7 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting reflejado debido a una comprobación insuficiente de los parámetros de consulta URL en GROWI (serie v4.2) versiones desde v4.2.0 hasta v4.2.7, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weseek:growi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "4.2.7",
            "matchCriteriaId" : "BF992FE7-A7D2-4FD9-ACF4-3B2B41287F2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN86438134/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN86438134/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://weseek.co.jp/security/2021/03/09/vulnerability/growi-prevent-xss5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28007",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-10T13:15:12.453",
      "lastModified" : "2024-11-21T05:58:58.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web Based Quiz System 1.0 is affected by cross-site scripting (XSS) in register.php through the name parameter."
      }, {
        "lang" : "es",
        "value" : "Web Based Quiz System versión 1.0 está afectado por una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo register.php por medio del parámetro name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web_based_quiz_system_project:web_based_quiz_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1AE3B0-08C8-43AF-B579-D062D1514B3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49607",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49607",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-10T14:15:12.703",
      "lastModified" : "2024-11-21T06:21:08.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in cszcms 1.2.9 exists in /admin/pages/new via the content parameter."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en cszcms versión 1.2.9, en el archivo /admin/pages/new por medio del parámetro content"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cszcms:csz_cms:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0068F78B-C701-4A09-8978-A0D07EE14906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cskaza/cszcms/issues/28",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cszcms.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/cskaza/cszcms/issues/28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cszcms.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21491",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-10T15:15:12.820",
      "lastModified" : "2024-11-21T05:48:28.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Netweaver Application Server Java (Applications based on WebDynpro Java) versions 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, allow an attacker to redirect users to a malicious site due to Reverse Tabnabbing vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "SAP Netweaver Application Server Java (Aplicaciones basadas en WebDynpro Java) versiones 7.00, 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, permiten a un atacante redireccionar a usuarios a un sitio malicioso debido a vulnerabilidades de Reverse Tabnabbing"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54400D5-E5A3-4EE7-B4DC-9D44C9C5278E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60371A7-F8F4-46F8-9659-DD4EE84B81EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B085AF-8CEE-4A87-B381-F36C989FB2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A28C48-4325-4694-88B1-FEE46EBFB0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A1E0B9-8C28-41BC-B050-237B5F929C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAE6C2A-821F-4123-BD56-0FDADF9D63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5308FCE-8B2C-4B4D-BEE7-3CF544570B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2976947",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2976947",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28122",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-10T15:15:12.930",
      "lastModified" : "2024-11-21T05:59:07.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A request-validation issue was discovered in Open5GS 2.1.3 through 2.2.x before 2.2.1. The WebUI component allows an unauthenticated user to use a crafted HTTP API request to create, read, update, or delete entries in the subscriber database. For example, new administrative users can be added. The issue occurs because Express is not set up to require authentication."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de comprobación de peticiones en Open5GS versiones 2.1.3 hasta 2.2.x anteriores a 2.2.1. El componente WebUI permite a un usuario no autenticado usar una petición de la API HTTP diseñada para crear, leer, actualizar o eliminar entradas en la base de datos de suscriptores. Por ejemplo, pueden ser agregados nuevos usuarios administrativos. El problema ocurre porque Express no está ajustado para requerir autenticación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.3",
            "versionEndIncluding" : "2.2.0",
            "matchCriteriaId" : "34A2C732-AE91-433F-9A9E-3B28F7503E47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/open5gs/open5gs/compare/v2.2.0...v2.2.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/837",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/pull/838",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/compare/v2.2.0...v2.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/issues/837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/pull/838",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/open5gs/open5gs/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0368",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.250",
      "lastModified" : "2024-11-21T05:42:35.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In oggpack_look of bitwise.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169829774"
      }, {
        "lang" : "es",
        "value" : "En la función oggpack_look del archivo bitwise.c, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-169829774"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0369",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.313",
      "lastModified" : "2024-11-21T05:42:35.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CrossProfileAppsServiceImpl.java, there is the possibility of an application's INTERACT_ACROSS_PROFILES grant state not displaying properly in the setting UI due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-166561076"
      }, {
        "lang" : "es",
        "value" : "En el archivo CrossProfileAppsServiceImpl.java, se presenta la posibilidad de que el estado de concesión INTERACT_ACROSS_PROFILES de una aplicación no se muestre apropiadamente en la interfaz de usuario de configuración debido a un error lógico en el código.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-166561076"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0370",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.377",
      "lastModified" : "2024-11-21T05:42:35.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Write of NxpMfcReader.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege in the NFC server with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169259605"
      }, {
        "lang" : "es",
        "value" : "En la función Write del archivo NxpMfcReader.cc, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local en el servidor NFC con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-169259605"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0371",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.423",
      "lastModified" : "2024-11-21T05:42:36.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In nci_proc_rf_management_ntf of nci_hrcv.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-164440989"
      }, {
        "lang" : "es",
        "value" : "En la función nci_proc_rf_management_ntf del archivo nci_hrcv.cc, se presenta posible lectura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-164440989"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0372",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.487",
      "lastModified" : "2024-11-21T05:42:36.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getMediaOutputSliceAction of RemoteMediaSlice.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174047735"
      }, {
        "lang" : "es",
        "value" : "En la función getMediaOutputSliceAction del archivo RemoteMediaSlice.java, se presenta una posible omisión de permisos debido a un PendingIntent no seguro.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-174047735"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0374",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.547",
      "lastModified" : "2024-11-21T05:42:36.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BnAudioPolicyService::onTransact of IAudioPolicyService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169572641"
      }, {
        "lang" : "es",
        "value" : "En la función BnAudioPolicyService::onTransact del archivo IAudioPolicyService.cpp, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-169572641"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0375",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.610",
      "lastModified" : "2024-11-21T05:42:36.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onPackageModified of VoiceInteractionManagerService.java, there is a possible change of default applications due to an insecure default value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-167261484"
      }, {
        "lang" : "es",
        "value" : "En la función onPackageModified del archivo VoiceInteractionManagerService.java, se presenta un posible cambio de aplicaciones predeterminadas debido a un valor predeterminado no seguro.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-167261484"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0376",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.673",
      "lastModified" : "2024-11-21T05:42:36.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In checkUriPermission and related functions of MediaProvider.java, there is a possible way to access external files due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-115619667"
      }, {
        "lang" : "es",
        "value" : "En la función checkUriPermission y las funciones relacionadas del archivo MediaProvider.java, se presenta una manera posible de acceder a archivos externos debido a una omisión de permisos.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-115619667"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0377",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.733",
      "lastModified" : "2024-11-21T05:42:36.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In DeltaPerformer::Write of delta_performer.cc, there is a possible use of untrusted input due to improper input validation. This could lead to a local bypass of defense in depth protections with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160800689"
      }, {
        "lang" : "es",
        "value" : "En la función DeltaPerformer::Write del archivo delta_performer.cc, se presenta un posible uso de la entrada que no es confiable debido a una comprobación inapropiada de entrada.&#xa0;Esto podría conllevar a una omisión local de las protecciones de defensa en profundidad sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-160800689"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0378",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.797",
      "lastModified" : "2024-11-21T05:42:36.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getNbits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154076193"
      }, {
        "lang" : "es",
        "value" : "En la función getNbits del archivo pvmp3_getbits.cpp, se presenta una posible lectura fuera de límites debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-154076193"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0390",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.860",
      "lastModified" : "2024-11-21T05:42:37.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In various methods of WifiNetworkSuggestionsManager.java, there is a possible modification of suggested networks due to a missing permission check. This could lead to local escalation of privilege by a background user on the same device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174749461"
      }, {
        "lang" : "es",
        "value" : "En varios métodos del archivo WifiNetworkSuggestionsManager.java, se presenta una posible modificación de las redes sugeridas debido a una falta de comprobación de permisos.&#xa0;Esto podría conllevar a una escalada de privilegios local por parte de un usuario en segundo plano en el mismo dispositivo sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11 Android-8.1 Android-9 Android-10, ID de Android: A-174749461"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0391",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.923",
      "lastModified" : "2024-11-21T05:42:38.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate() of ChooseTypeAndAccountActivity.java, there is a possible way to learn the existence of an account, without permissions, due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172841550"
      }, {
        "lang" : "es",
        "value" : "En la función onCreate() del archivo ChooseTypeAndAccountActivity.java, se presenta una manera posible de conocer la existencia de una cuenta, sin permisos, debido a un ataque de tipo tapjacking/overlay.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11 Android-8.1 Android-9 Android-10, ID de Android: A-172841550"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0392",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:15.983",
      "lastModified" : "2024-11-21T05:42:38.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In main of main.cpp, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-9Android ID: A-175124730"
      }, {
        "lang" : "es",
        "value" : "En el archivo main.cpp, se presenta una posible corrupción de memoria debido a una doble liberación.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-11 Android-9, ID de Android: A-175124730"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0393",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.047",
      "lastModified" : "2024-11-21T05:42:38.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Scanner::LiteralBuffer::NewCapacity of scanner.cc, there is a possible out of bounds write due to an integer overflow. This could lead to remote code execution if an attacker can supply a malicious PAC file, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-168041375"
      }, {
        "lang" : "es",
        "value" : "En la función Scanner::LiteralBuffer::NewCapacity del archivo scanner.cc, se presenta una posible escritura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una ejecución de código remota si un atacante puede proporcionar un archivo PAC malicioso, sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11 Android-8.1 Android-9 Android-10, ID de Android: A-168041375"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0394",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.127",
      "lastModified" : "2024-11-21T05:42:38.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In android_os_Parcel_readString8 of android_os_Parcel.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-172655291"
      }, {
        "lang" : "es",
        "value" : "En la función android_os_Parcel_readString8 del archivo android_os_Parcel.cpp, se presenta una posible lectura fuera de límites debido a que falta una comprobación de límites.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11 Android-8.1 Android-9 Android-10, ID de Android: A-172655291"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0395",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.250",
      "lastModified" : "2024-11-21T05:42:38.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In StopServicesAndLogViolations of reboot.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-170315126"
      }, {
        "lang" : "es",
        "value" : "En la función StopServicesAndLogViolations del archivo reboot.cpp, se presenta una posible corrupción de memoria debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-170315126"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0396",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.327",
      "lastModified" : "2024-11-21T05:42:38.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Builtins::Generate_ArgumentsAdaptorTrampoline of builtins-arm.cc and related files, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution in an unprivileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-160610106"
      }, {
        "lang" : "es",
        "value" : "En la función Builtins::Generate_ArgumentsAdaptorTrampoline del archivo builtins-arm.cc y archivos relacionados, se presenta una posible escritura fuera de límites debido a una comprobación incorrecta de límites.&#xa0;Esto podría conllevar a una ejecución de código remota en un proceso no privilegiado sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-160610106"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0397",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.390",
      "lastModified" : "2024-11-21T05:42:38.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sdp_copy_raw_data of sdp_discovery.cc, there is a possible system compromise due to a double free. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174052148"
      }, {
        "lang" : "es",
        "value" : "En la función sdp_copy_raw_data del archivo sdp_discovery.cc, se presenta un posible compromiso del sistema debido a una doble liberación.&#xa0;Esto podría conllevar a una ejecución de código remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11 Android-8.1 Android-9 Android-10, ID de Android: A-174052148"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0398",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.470",
      "lastModified" : "2024-11-21T05:42:38.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In bindServiceLocked of ActiveServices.java, there is a possible foreground service launch due to a confused deputy. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173516292"
      }, {
        "lang" : "es",
        "value" : "En la función bindServiceLocked del archivo ActiveServices.java, se presenta un posible lanzamiento del servicio en primer plano debido a un problema de tipo confused deputy.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-173516292"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0399",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T16:15:16.530",
      "lastModified" : "2024-11-21T05:42:38.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In qtaguid_untag of xt_qtaguid.c, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-176919394References: Upstream kernel"
      }, {
        "lang" : "es",
        "value" : "En la función qtaguid_untag del archivo xt_qtaguid.c, se presenta una posible corrupción de memoria debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Kernel de Android, ID de Android: A-176919394 Referencias: Kernel ascendente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20265",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-10T16:15:16.610",
      "lastModified" : "2024-11-21T05:46:14.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the way memory resources were freed in the unix_stream_recvmsg function in the Linux kernel when a signal was pending. This flaw allows an unprivileged local user to crash the system by exhausting available memory. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la manera en que son liberados los recursos de memoria en la función unix_stream_recvmsg en el kernel de Linux cuando había una señal pendiente.&#xa0;Este fallo permite a un usuario local sin privilegios bloquear el sistema agotando la memoria disponible.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "26F05F85-7458-4C8F-B93F-93C92E506A40"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1908827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1908827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fa0dc04df259ba2df3ce1920e9690c7842f8fa4b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24025",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-03-10T16:15:16.750",
      "lastModified" : "2024-11-21T05:52:14.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to incorrect string size calculations inside the preg_quote function, a large input string passed to the function can trigger an integer overflow leading to a heap overflow. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, and versions 4.94.0, 4.95.0, 4.96.0, 4.97.0, 4.98.0."
      }, {
        "lang" : "es",
        "value" : "Debido a cálculos de tamaño de cadena incorrectos dentro de la función preg_quote, una cadena de entrada grande pasada a la función puede desencadenar un desbordamiento de enteros que conlleva a un desbordamiento de la pila.&#xa0;Este problema afecta a versiones de HHVM anteriores a 4.56.3, todas las versiones entre 4.57.0 y 4.80.1, todas las versiones entre 4.81.0 y 4.93.1 y versiones 4.94.0, 4.95.0, 4.96.0, 4.97.0 , 4.98.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.56.3",
            "matchCriteriaId" : "069C0B7D-5233-4EFF-BBA7-8B84D9227044"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.57.0",
            "versionEndIncluding" : "4.80.1",
            "matchCriteriaId" : "F5E6E1A7-225A-4C45-9E2D-5ED55BA3AEA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.81.0",
            "versionEndIncluding" : "4.93.1",
            "matchCriteriaId" : "9470E6A8-E2CB-4C72-8FEF-5CFF04E7E3C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:4.94.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C4B9A3C-6A5A-45C4-A490-C13CF6D6A867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:4.95.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18D33DC0-E6A7-4DC6-8E9A-2B85842EC21B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:4.96.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0B9078D-3C25-45B2-B5F2-59585A47BACB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:4.97.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B8F5C11-8610-4099-8A45-E6241F3D24E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:hhvm:4.98.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47FF13C3-19DC-4F53-BF9D-38AC89D647D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hhvm.com/blog/2021/02/25/security-update.html",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/facebook/hhvm/commit/08193b7f0cd3910256e00d599f0f3eb2519c44ca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hhvm.com/blog/2021/02/25/security-update.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24030",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-03-10T16:15:16.813",
      "lastModified" : "2024-11-21T05:52:14.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fbgames protocol handler registered as part of Facebook Gameroom does not properly quote arguments passed to the executable. That allows a malicious URL to cause code execution. This issue affects versions prior to v1.26.0."
      }, {
        "lang" : "es",
        "value" : "El controlador de protocolo fbgames registrado como parte de Facebook Gameroom no cita correctamente los argumentos pasados ??al ejecutable.&#xa0;Eso permite a una URL maliciosa causar una ejecución de código.&#xa0;Este problema afecta a versiones anteriores a v1.26.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:gameroom:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.26.0",
            "matchCriteriaId" : "604BDC02-056F-4C65-B9AC-9BFACA5FBC43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24030",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0379",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.143",
      "lastModified" : "2024-11-21T05:42:36.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getUpTo17bits of pvmp3_getbits.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-154075955"
      }, {
        "lang" : "es",
        "value" : "En la función getUpTo17bits del archivo pvmp3_getbits.cpp, se presenta una posible lectura fuera de límites debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-154075955"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0380",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.237",
      "lastModified" : "2024-11-21T05:42:36.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onReceive of DcTracker.java, there is a possible way to trigger a provisioning URL and modify other telephony settings due to a missing permission check. This could lead to local escalation of privilege during the onboarding flow with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172459128"
      }, {
        "lang" : "es",
        "value" : "En la función onReceive del archivo DcTracker.java, se presenta una manera posible de desencadenar una URL de aprovisionamiento y modificar otras configuraciones de telefonía debido a una falta de comprobación de permisos.&#xa0;Esto podría conllevar a una escalada de privilegios local durante el flujo de incorporación sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-172459128"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0381",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.300",
      "lastModified" : "2024-11-21T05:42:37.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In updateNotifications of DeviceStorageMonitorService.java, there is a possible permission bypass due to an unsafe PendingIntent. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-153466381"
      }, {
        "lang" : "es",
        "value" : "En la función updateNotifications del archivo DeviceStorageMonitorService.java, se presenta una posible omisión de permisos debido a un PendingIntent no seguro.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-153466381"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0382",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.363",
      "lastModified" : "2024-11-21T05:42:37.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In checkSlicePermission of SliceManagerService.java, there is a possible resource exposure due to an incorrect permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-140727941"
      }, {
        "lang" : "es",
        "value" : "En la función checkSlicePermission del archivo SliceManagerService.java, se presenta una posible exposición de recursos debido a una comprobación incorrecta de permisos.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-140727941"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0383",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.427",
      "lastModified" : "2024-11-21T05:42:37.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In done of CaptivePortalLoginActivity.java, there is a confused deputy. This could lead to local escalation of privilege in carrier settings with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-160871056"
      }, {
        "lang" : "es",
        "value" : "En la función done del archivo CaptivePortalLoginActivity.java, se presenta un problema de tipo confused deputy.&#xa0;Esto podría conllevar a una escalada de privilegios local en la configuración del operador sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-160871056"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0384",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.503",
      "lastModified" : "2023-11-07T03:27:23.537",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0385",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.567",
      "lastModified" : "2024-11-21T05:42:37.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In createConnectToAvailableNetworkNotification of ConnectToNetworkNotificationBuilder.java, there is a possible connection to untrusted WiFi networks due to notification interaction above the lockscreen. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172584372"
      }, {
        "lang" : "es",
        "value" : "En la función createConnectToAvailableNetworkNotification del archivo ConnectToNetworkNotificationBuilder.java, se presenta una posible conexión a redes WiFi que no son confiables debido a una interacción de notificación sobre la pantalla de bloqueo.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-172584372"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0386",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.627",
      "lastModified" : "2024-11-21T05:42:37.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of UsbConfirmActivity, there is a possible tapjacking vector due to an insecure default value. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173421110"
      }, {
        "lang" : "es",
        "value" : "En onCreate de UsbConfirmActivity, se presenta un posible vector de tapjacking debido a un valor predeterminado no seguro.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-173421110"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0387",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.690",
      "lastModified" : "2024-11-21T05:42:37.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FindQuotaDeviceForUuid of QuotaUtils.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-169421939"
      }, {
        "lang" : "es",
        "value" : "En la función FindQuotaDeviceForUuid del archivo QuotaUtils.cpp, se presenta un posible uso de la memoria previamente liberada debido a una condición de carrera.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-169421939"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0388",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.767",
      "lastModified" : "2024-11-21T05:42:37.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onReceive of ImsPhoneCallTracker.java, there is a possible misattribution of data usage due to an incorrect broadcast handler. This could lead to local escalation of privilege resulting in attributing video call data to the wrong app, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-162741489"
      }, {
        "lang" : "es",
        "value" : "En la función onReceive del archivo ImsPhoneCallTracker.java, se presenta una posible atribución incorrecta del uso de datos debido a un controlador de transmisión incorrecto.&#xa0;Esto podría conllevar a una escalada de privilegios local que resulte en la atribución de datos de videollamadas a la aplicación incorrecta, sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-162741489"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0389",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.830",
      "lastModified" : "2024-11-21T05:42:37.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setNightModeActivated of UiModeManagerService.java, there is a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-168039904"
      }, {
        "lang" : "es",
        "value" : "En la función setNightModeActivated del archivo UiModeManagerService.java, se presenta una falta de comprobación de permisos.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-168039904"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0449",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.910",
      "lastModified" : "2024-11-21T05:42:44.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117965"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Titan M, se presenta una posible divulgación de la memoria de la pila debido a datos no inicializados.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175117965"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0450",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:13.973",
      "lastModified" : "2024-11-21T05:42:44.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117880"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Titan M, se presenta una posible divulgación de la memoria de la pila debido a datos no inicializados.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175117880"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0451",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.033",
      "lastModified" : "2024-11-21T05:42:44.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117871"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Titan M, se presenta una posible divulgación de la memoria de la pila debido a datos no inicializados.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175117871"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0452",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.097",
      "lastModified" : "2024-11-21T05:42:44.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Titan M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117261"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Titan M, se presenta una posible divulgación de la memoria de la pila debido a datos no inicializados.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175117261"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0453",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.160",
      "lastModified" : "2024-11-21T05:42:44.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Titan-M chip firmware, there is a possible disclosure of stack memory due to uninitialized data. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117199"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Titan-M, se presenta una posible divulgación de la memoria de la pila debido a datos no inicializados.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175117199"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0454",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.237",
      "lastModified" : "2024-11-21T05:42:45.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175117047"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Citadel, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175117047"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0455",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.300",
      "lastModified" : "2024-11-21T05:42:45.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175116439"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Citadel, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175116439"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0456",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.363",
      "lastModified" : "2024-11-21T05:42:45.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Citadel chip firmware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-174769927"
      }, {
        "lang" : "es",
        "value" : "En el firmware del chip Citadel, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-174769927"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0457",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.440",
      "lastModified" : "2024-11-21T05:42:45.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the FingerTipS touch screen driver, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157155375"
      }, {
        "lang" : "es",
        "value" : "En el controlador de pantalla táctil FingerTipS, se presenta una posible escritura fuera de límites debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-157155375"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-279/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-279/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0458",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.503",
      "lastModified" : "2024-11-21T05:42:45.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157156744"
      }, {
        "lang" : "es",
        "value" : "En el controlador de pantalla táctil FingerTipS, se presenta una posible lectura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-157156744"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-280/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-280/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0459",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.567",
      "lastModified" : "2024-11-21T05:42:45.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In fts_driver_test_write of fts_proc.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-157154534"
      }, {
        "lang" : "es",
        "value" : "En la función fts_driver_test_write del archivo fts_proc.c, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-157154534"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-278/",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-278/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0460",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.643",
      "lastModified" : "2024-11-21T05:42:45.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the FingerTipS touch screen driver, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-156739245"
      }, {
        "lang" : "es",
        "value" : "En el controlador de pantalla táctil FingerTipS, se presenta una posible lectura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-156739245"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0461",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.707",
      "lastModified" : "2024-11-21T05:42:45.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In iaxxx_core_sensor_change_state of iaxxx-module.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-175124074"
      }, {
        "lang" : "es",
        "value" : "En la función iaxxx_core_sensor_change_state del archivo iaxxx-module.c, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-175124074"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0462",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.767",
      "lastModified" : "2024-11-21T05:42:45.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the NXP NFC firmware, there is a possible insecure firmware update due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-168799695"
      }, {
        "lang" : "es",
        "value" : "En el firmware NXP NFC, se presenta una posible actualización de firmware no segura debido a un error lógico.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución System necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-168799695"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-08-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-08-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0463",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.830",
      "lastModified" : "2024-11-21T05:42:45.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In convertToHidl of convert.cpp, there is a possible out of bounds read due to uninitialized data from ReturnFrameworkMessage. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-154867068"
      }, {
        "lang" : "es",
        "value" : "En la función convertToHidl del archivo  convert.cpp, se presenta una posible lectura fuera de límites debido a datos no inicializados de ReturnFrameworkMessage.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-154867068"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0464",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.893",
      "lastModified" : "2024-11-21T05:42:46.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In sound_trigger_event_alloc of platform.h, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-167663878"
      }, {
        "lang" : "es",
        "value" : "En la función sound_trigger_event_alloc del archivo platform.h, se presenta una posible escritura fuera de límites debido a un desbordamiento del búfer de pila.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-167663878"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0465",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-03-10T17:15:14.973",
      "lastModified" : "2024-11-21T05:42:46.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GenerateFaceMask of face.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-172005755"
      }, {
        "lang" : "es",
        "value" : "En la función GenerateFaceMask del archivo face.cc, se presenta una posible escritura fuera de límites debido a una verificación de límites incorrecta.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-172005755"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-03-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20205",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-10T17:15:15.033",
      "lastModified" : "2024-11-21T05:46:07.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Libjpeg-turbo versions 2.0.91 and 2.0.90 is vulnerable to a denial of service vulnerability caused by a divide by zero when processing a crafted GIF image."
      }, {
        "lang" : "es",
        "value" : "Libjpeg-turbo versiones 2.0.91 y 2.0.90, es susceptible a una vulnerabilidad de denegación de servicio causada por una división por cero al procesar una imagen GIF diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libjpeg-turbo:libjpeg-turbo:2.0.90:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA5809B6-0C5C-44C6-A2BF-4CE81A4D9200"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1937385",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMLEY6HLVZAGXIOGGPPUAMRJUA6LB3FD/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TM3AHZEYGYFEDL6AW5RLEAJNVRWEJDFL/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1937385",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMLEY6HLVZAGXIOGGPPUAMRJUA6LB3FD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TM3AHZEYGYFEDL6AW5RLEAJNVRWEJDFL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21772",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2021-03-10T17:15:15.113",
      "lastModified" : "2024-11-21T05:48:56.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability exists in the NMR::COpcPackageReader::releaseZIP() functionality of 3MF Consortium lib3mf 2.0.0. A specially crafted 3MF file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de uso de la memoria previamente liberada en la funcionalidad NMR::COpcPackageReader::releaseZIP() de 3MF Consortium lib3mf versión 2.0.0.&#xa0;Un archivo 3MF especialmente diseñado puede conllevar a una ejecución de código.&#xa0;Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:3mf:lib3mf:2.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A315BB37-A70A-4F6C-B686-73847D84E90F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHMMHD2EOMIVJ7EKZTJJMX4C7E6ZRWDL/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPBS642OYVA6DUKK3HZHEINVWEDZSMEU/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDGGB65YBQL662M3MOBNNJJNRNURW4TG/",
        "source" : "talos-cna@cisco.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-01",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1226",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4887",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1226",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IHMMHD2EOMIVJ7EKZTJJMX4C7E6ZRWDL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NPBS642OYVA6DUKK3HZHEINVWEDZSMEU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WDGGB65YBQL662M3MOBNNJJNRNURW4TG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2020-1226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3034",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-03-10T18:15:13.297",
      "lastModified" : "2024-11-21T06:20:48.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single sign-on (SSO) integration can be logged to the '/var/log/demisto/' server logs when testing the integration during setup. This logged information includes the private key and identity provider certificate used to configure the SAML SSO integration. This issue impacts: Cortex XSOAR 5.5.0 builds earlier than 98622; Cortex XSOAR 6.0.1 builds earlier than 830029; Cortex XSOAR 6.0.2 builds earlier than 98623; Cortex XSOAR 6.1.0 builds earlier than 848144."
      }, {
        "lang" : "es",
        "value" : "Se presenta una exposición de la información por medio de la vulnerabilidad del archivo de registro en el software Cortex XSOAR donde los secretos configurados para la integración de inicio de sesión único (SSO) SAML pueden ser registrados en los registros del servidor \"/var/log/demisto/\" al probar la integración durante la instalación.&#xa0;Esta información registrada incluye la clave privada y el certificado del proveedor de identidad utilizado para configurar la integración SAML SSO.&#xa0;Este problema afecta a: Cortex XSOAR versiones 5.5.0 builds anteriores a 98622;&#xa0;Cortex XSOAR versiones 6.0.1 builds anteriores a 830029;&#xa0;Cortex XSOAR versiones 6.0.2 builds anteriores a 98623;&#xa0;Cortex XSOAR versiones 6.1.0 builds anteriores a 848144"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76B47510-C747-4A91-8120-CBD872DDE5F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:70066:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC73F19-BAEC-464E-813E-AABFB0FF1749"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:73387:*:*:*:*:*:*",
            "matchCriteriaId" : "829FDD7F-9F92-4425-BA03-7A916C672A1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:75211:*:*:*:*:*:*",
            "matchCriteriaId" : "01F6E4B3-7264-4B6B-A2E0-EC0C6E454FE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:78518:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF634F2-427F-46AF-A203-3F8F91AEB039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:5.5.0:94592:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B47446-7E43-44ED-A734-4C300ED6F6CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E09D6E6D-586A-4034-A5ED-6669EECE4715"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.1:81077:*:*:*:*:*:*",
            "matchCriteriaId" : "4F60A667-2802-4EE5-879D-DEF385C8A252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAAC395-8A8B-4058-AEC8-450DA13E4D5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:90947:*:*:*:*:*:*",
            "matchCriteriaId" : "5617A797-C295-4534-A8BD-DB7637FEDDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:93351:*:*:*:*:*:*",
            "matchCriteriaId" : "924A87A5-6809-4D3A-B660-4F3D3E930103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:94597:*:*:*:*:*:*",
            "matchCriteriaId" : "B046FAAA-2FC4-4F69-980B-878BA24D1ACE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.0.2:97682:*:*:*:*:*:*",
            "matchCriteriaId" : "231DF541-0D13-42DD-9392-A269999DA50C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:cortex_xsoar:6.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F98F51-39E4-480D-8DB8-EE5AD36920FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3034",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3034",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21265",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-10T22:15:12.057",
      "lastModified" : "2025-05-30T00:15:20.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1.1.2, when running on poorly configured servers (i.e. the server routes any request, regardless of the HOST header to an October CMS instance) the potential exists for Host Header Poisoning attacks to succeed. This has been addressed in version 1.1.2 by adding a feature to allow a set of trusted hosts to be specified in the application. As a workaround one may set the configuration setting cms.linkPolicy to force."
      }, {
        "lang" : "es",
        "value" : "October es una plataforma CMS gratuita, de código abierto y autoinvitada basada en Laravel PHP Framework.&#xa0;En October versiones anteriores a 1.1.2, cuando se ejecuta en servidores mal configurados (es decir, el servidor enruta cualquier petición, independientemente del encabezado HOST hacia una instancia CMS de october), se presenta la posibilidad de que los ataques de Envenenamiento del Encabezado de host tengan éxito.&#xa0;Esto ha sido solucionado en la versión 1.1.2, al agregar una función para permitir que se especifique un conjunto de hosts confiables en la aplicación.&#xa0;Como solución alternativa, puede establecerse el ajuste de configuración cms.linkPolicy para forzar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-644"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "E34205D2-FCF8-4F33-8835-3CEA0E253936"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/library/commit/f29865ae3db7a03be7c49294cd93980ec457f10d",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/octobercms/library/commit/f86fcbcd066d6f8b939e8fe897409d152b11c3c6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/october/commit/555ab61f2313f45d7d5d138656420ead536c5d30",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/octobercms/october/commit/f638d3f78cfe91d7f6658820f9d5e424306a3db0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/october/security/advisories/GHSA-xhfx-hgmf-v6vp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/october/backend",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/octobercms/library/commit/f86fcbcd066d6f8b939e8fe897409d152b11c3c6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/october/commit/f638d3f78cfe91d7f6658820f9d5e424306a3db0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/october/security/advisories/GHSA-xhfx-hgmf-v6vp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21334",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-10T22:15:12.183",
      "lastModified" : "2024-11-21T05:48:02.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through containerd's CRI implementation (through Kubernetes, crictl, or any other pod/container client that uses the containerd CRI service) that share the same image may receive incorrect environment variables, including values that are defined for other containers. If the affected containers have different security contexts, this may allow sensitive information to be unintentionally shared. If you are not using containerd's CRI implementation (through one of the mechanisms described above), you are not vulnerable to this issue. If you are not launching multiple containers or Kubernetes pods from the same image which have different environment variables, you are not vulnerable to this issue. If you are not launching multiple containers or Kubernetes pods from the same image in rapid succession, you have reduced likelihood of being vulnerable to this issue This vulnerability has been fixed in containerd 1.3.10 and containerd 1.4.4. Users should update to these versions."
      }, {
        "lang" : "es",
        "value" : "En containerd (un tiempo de ejecución de contenedor estándar de la industria) anteriores a versiones 1.3.10 y 1.4.4, los contenedores se iniciaron por medio de la implementación de CRI de containerd (por medio de Kubernetes, crictl o cualquier otro cliente de pod/container que use el servicio CRI de containerd) que comparten la misma imagen, puede recibir variables de entorno incorrectas, incluyendo los valores definidos para otros contenedores.&#xa0;Si los contenedores afectados presentan diferentes contextos de seguridad, esto puede permitir que información confidencial sea compartida sin intención.&#xa0;Si no está utilizando la implementación de CRI de containerd (por medio de uno de los mecanismos descritos anteriormente), no es vulnerable a este problema.&#xa0;Si no está iniciando varios contenedores o pods de Kubernetes desde la misma imagen que tienen diferentes variables de entorno, no es vulnerable a este problema.&#xa0;Si no está iniciando varios contenedores o pods de Kubernetes desde la misma imagen en rápida sucesión, presenta menos probabilidades de ser vulnerable a este problema. Esta vulnerabilidad ha sido corregida en containerd versión 1.3.10 y containerd versión 1.4.4.&#xa0;Los usuarios deben actualizar a estas versiones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.10",
            "matchCriteriaId" : "D03A074C-D4A4-4378-94B0-1421F989EAA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "703E5B34-065D-40F7-BD1A-C4EC272FEA55"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/containerd/containerd/commit/05f951a3781f4f2c1911b05e61c160e9c30eaa8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.3.10",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.4.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/security/advisories/GHSA-6g2q-w5j3-fwh4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUE2Z2ZUWBHRU36ZGBD2YSJCYB6ELPXE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIBPKSX5IOWPM3ZPFB3JVLXWDHSZTTWT/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTXHA5JOWQRCCUZH7ZQBEYN6KZKJEYSD/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-33",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/commit/05f951a3781f4f2c1911b05e61c160e9c30eaa8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.3.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/releases/tag/v1.4.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/containerd/containerd/security/advisories/GHSA-6g2q-w5j3-fwh4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KUE2Z2ZUWBHRU36ZGBD2YSJCYB6ELPXE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QIBPKSX5IOWPM3ZPFB3JVLXWDHSZTTWT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTXHA5JOWQRCCUZH7ZQBEYN6KZKJEYSD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21371",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-10T22:15:12.307",
      "lastModified" : "2024-11-21T05:48:13.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tenable for Jira Cloud is an open source project designed to pull Tenable.io vulnerability data, then generate Jira Tasks and sub-tasks based on the vulnerabilities' current state. It published in pypi as \"tenable-jira-cloud\". In tenable-jira-cloud before version 1.1.21, it is possible to run arbitrary commands through the yaml.load() method. This could allow an attacker with local access to the host to run arbitrary code by running the application with a specially crafted YAML configuration file. This is fixed in version 1.1.21 by using yaml.safe_load() instead of yaml.load()."
      }, {
        "lang" : "es",
        "value" : "Tenable para Jira Cloud es un proyecto de código abierto diseñado para extraer datos de vulnerabilidad de Tenable.io y luego generar Tareas y subtareas de Jira en función del estado actual de las vulnerabilidades.&#xa0;Se publicó en pypi como \"tenable-jira-cloud\".&#xa0;En tenable-jira-cloud versiones anteriores a 1.1.21, es posible ejecutar comandos arbitrarios por medio del método yaml.load().&#xa0;Esto podría permitir a un atacante con acceso local al host ejecutar código arbitrario ejecutando la aplicación con un archivo de configuración YAML especialmente diseñado.&#xa0;Esto se corrige en la versión 1.1.21 usando la función yaml.safe_load() en lugar de la función yaml.load()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:jira_cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.21",
            "matchCriteriaId" : "B52A05D1-EA41-4364-BE20-6A673A2EBF59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tenable/integration-jira-cloud/commit/f8c2095fd529e664e7fa25403a0a4a85bb3907d0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tenable/integration-jira-cloud/security/advisories/GHSA-8278-88vv-x98r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/tenable-jira-cloud/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://pyyaml.docsforge.com/master/documentation/#loading-yaml",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tenable/integration-jira-cloud/commit/f8c2095fd529e664e7fa25403a0a4a85bb3907d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tenable/integration-jira-cloud/security/advisories/GHSA-8278-88vv-x98r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/tenable-jira-cloud/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://pyyaml.docsforge.com/master/documentation/#loading-yaml",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21375",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-10T23:15:12.520",
      "lastModified" : "2024-11-21T05:48:13.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PJSIP is a free and open source multimedia communication library written in C language implementing standard based protocols such as SIP, SDP, RTP, STUN, TURN, and ICE. In PJSIP version 2.10 and earlier, after an initial INVITE has been sent, when two 183 responses are received, with the first one causing negotiation failure, a crash will occur. This results in a denial of service."
      }, {
        "lang" : "es",
        "value" : "PJSIP es una biblioteca de comunicación multimedia de código abierto y gratuita escrita en lenguaje C que implementa protocolos basados ??en estándares como SIP, SDP, RTP, STUN, TURN e ICE.&#xa0;En PJSIP versiones 2.10 y anteriores, después de que se haya enviado una INVITE inicial, cuando son recibidas dos respuestas 183, con la primera causando un fallo en la negociación, y se producirá un bloqueo.&#xa0;Esto resulta en una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teluu:pjsip:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10",
            "matchCriteriaId" : "107D71AA-CD87-4682-B600-D583CB865E6F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00023.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00020.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/commit/97b3d7addbaa720b7ddb0af9bf6f3e443e664365",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pjsip/pjproject/security/advisories/GHSA-hvq6-f89p-frvp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T00:15:12.030",
      "lastModified" : "2024-11-21T05:58:48.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "encoding/xml in Go before 1.15.9 and 1.16.x before 1.16.1 has an infinite loop if a custom TokenReader (for xml.NewTokenDecoder) returns EOF in the middle of an element. This can occur in the Decode, DecodeElement, or Skip method."
      }, {
        "lang" : "es",
        "value" : "encoding/xml en Go versiones anteriores a 1.15.9 y versiones 1.16.x anteriores a 1.16.1, presenta un bucle infinito si un TokenReader personalizado (para xml.NewTokenDecoder) devuelve EOF en medio de un elemento.&#xa0;Esto puede ocurrir en el método Decode, DecodeElement o Skip"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15.9",
            "matchCriteriaId" : "AB004DF7-C7C5-4A2C-A0B1-5296DEBC64DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.16.0",
            "versionEndExcluding" : "1.16.1",
            "matchCriteriaId" : "23643AC7-98B9-465F-B10B-C7AD4C59F77E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T00:15:12.093",
      "lastModified" : "2024-11-21T05:58:48.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "archive/zip in Go 1.16.x before 1.16.1 allows attackers to cause a denial of service (panic) upon attempted use of the Reader.Open API for a ZIP archive in which ../ occurs at the beginning of any filename."
      }, {
        "lang" : "es",
        "value" : "archive/zip en Go versiones 1.16.x anteriores a 1.16.1, permite a atacantes causar una denegación de servicio (pánico) al intentar usar la API Reader.Open para un archivo ZIP en el que ../ aparece al principio de cualquier nombre de archivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:golang:go:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.16.0",
            "versionEndExcluding" : "1.16.1",
            "matchCriteriaId" : "23643AC7-98B9-465F-B10B-C7AD4C59F77E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MU47VKTNXX33ZDLTI2ORRUY3KLJKU6G/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HM7U5JNS5WU66Q3S26PFIU2ITB2ATTQ4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/golang-announce/c/MfiLYjG-RAw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MU47VKTNXX33ZDLTI2ORRUY3KLJKU6G/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HM7U5JNS5WU66Q3S26PFIU2ITB2ATTQ4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28134",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T00:15:12.170",
      "lastModified" : "2024-11-21T05:59:09.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal API."
      }, {
        "lang" : "es",
        "value" : "Clipper versiones anteriores a 1.0.5, permite una ejecución de comandos remota.&#xa0;Un atacante remoto puede enviar un mensaje IPC diseñado hacia la interfaz IPC ipcRenderer vulnerable expuesta, que invoca la API openExternal peligrosa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clipper_project:clipper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "5E3A4596-AE85-465C-B1DD-985C1506E835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/AkashRajpurohit/clipper/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/pull/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/pull/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/pull/14/commits/28f1492a12234cf1e6af85c78bf22ee2f5090d19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/AkashRajpurohit/clipper/releases/tag/v1.0.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21363",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-11T03:15:11.977",
      "lastModified" : "2024-11-21T05:48:12.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. This vulnerability is local privilege escalation because the contents of the `outputFolder` can be appended to by an attacker. As such, code written to this directory, when executed can be attacker controlled. For more details refer to the referenced GitHub Security Advisory. This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21364."
      }, {
        "lang" : "es",
        "value" : "swagger-codegen es un proyecto de código abierto que contiene un motor basado en plantillas para generar documentación, clientes API y stubs de servidor en diferentes idiomas mediante el análisis de su definición de OpenAPI/Swagger.&#xa0;En swagger-codegen versiones anteriores a 2.4.19, en sistemas similares a Unix, el directorio temporal del sistema se comparte entre todos los usuarios de ese sistema.&#xa0;Un usuario ubicado puede observar el proceso de creación de un subdirectorio temporal en el directorio temporal compartido y una corrida para completar la creación del subdirectorio temporal.&#xa0;Esta vulnerabilidad es una escalada de privilegios local porque un atacante puede agregar el contenido de \"outputFolder\".&#xa0;Como tal, el código escrito en este directorio, cuando se ejecuta, puede ser controlado por el atacante.&#xa0;Para mayor detalles, consulte el GitHub Security Advisory al que se hace referencia.&#xa0;Esta vulnerabilidad es corregido en versión 2.4.19"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:swagger-codegen:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.19",
            "matchCriteriaId" : "28D1596B-24DA-4372-B7C9-585ECDBA8C30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swagger-api/swagger-codegen/commit/987ea7a30b463cc239580d6ad166c707ae942a89",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-codegen/commit/987ea7a30b463cc239580d6ad166c707ae942a89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-pc22-3g76-gm6j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21364",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-11T03:15:12.070",
      "lastModified" : "2024-11-21T05:48:12.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger definition. In swagger-codegen before version 2.4.19, on Unix-Like systems, the system temporary directory is shared between all local users. When files/directories are created, the default `umask` settings for the process are respected. As a result, by default, most processes/apis will create files/directories with the permissions `-rw-r--r--` and `drwxr-xr-x` respectively, unless an API that explicitly sets safe file permissions is used. Because this vulnerability impacts generated code, the generated code will remain vulnerable until fixed manually! This vulnerability is fixed in version 2.4.19. Note this is a distinct vulnerability from CVE-2021-21363."
      }, {
        "lang" : "es",
        "value" : "swagger-codegen es un proyecto de código abierto que contiene un motor basado en plantillas para generar documentación, clientes API y stubs de servidor en diferentes idiomas al analizar su definición de OpenAPI/Swagger.&#xa0;En swagger-codegen versiones anteriores a 2.4.19, en sistemas tipo Unix, el directorio temporal del sistema es compartido entre todos los usuarios locales.&#xa0;Cuando son creados files/directories, las configuraciones predeterminadas de \"umask\" para el proceso son respetadas.&#xa0;Como resultado, por defecto, la mayoría de los procesos /apis crearán files/directories con los permisos \"-rw-r - r -\" y \"drwxr-xr-x\" respectivamente, a menos que una API que ajusta explícitamente permisos de archivos seguros sea usada.&#xa0;Debido a que esta vulnerabilidad impacta el código generado, el código generado seguirá siendo vulnerable hasta que sea corregido manualmente.&#xa0;Esta vulnerabilidad es corregida en versión 2.4.19.&#xa0;Tome en cuenta que esta es una vulnerabilidad diferente de CVE-2021-21363"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:smartbear:swagger-codegen:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.19",
            "matchCriteriaId" : "28D1596B-24DA-4372-B7C9-585ECDBA8C30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/swagger-api/swagger-codegen/commit/35adbd552d5f99b3ff1e0e59da228becc85190f2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-hpv8-9rq5-hq7w",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-codegen/commit/35adbd552d5f99b3ff1e0e59da228becc85190f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/swagger-api/swagger-codegen/security/advisories/GHSA-hpv8-9rq5-hq7w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21378",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-11T03:15:12.163",
      "lastModified" : "2024-11-21T05:48:14.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured with the `allow_missing` requirement under `requires_any` due to a mistake in implementation. Envoy's JWT Authentication filter can be configured with the `allow_missing` requirement that will be satisfied if JWT is missing (JwtMissed error) and fail if JWT is presented or invalid. Due to a mistake in implementation, a JwtUnknownIssuer error was mistakenly converted to JwtMissed when `requires_any` was configured. So if `allow_missing` was configured under `requires_any`, an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list. Integrity may be impacted depending on configuration if the JWT token is used to protect against writes or modifications. This regression was introduced on 2020/11/12 in PR 13839 which fixed handling `allow_missing` under RequiresAny in a JwtRequirement (see issue 13458). The AnyVerifier aggregates the children verifiers' results into a final status where JwtMissing is the default error. However, a JwtUnknownIssuer was mistakenly treated the same as a JwtMissing error and the resulting final aggregation was the default JwtMissing. As a result, `allow_missing` would allow a JWT token with an unknown issuer status. This is fixed in version 1.17.1 by PR 15194. The fix works by preferring JwtUnknownIssuer over a JwtMissing error, fixing the accidental conversion and bypass with `allow_missing`. A user could detect whether a bypass occurred if they have Envoy logs enabled with debug verbosity. Users can enable component level debug logs for JWT. The JWT filter logs will indicate that there is a request with a JWT token and a failure that the JWT token is missing."
      }, {
        "lang" : "es",
        "value" : "Envoy es un proxy edge/middle/service de servicio de alto rendimiento nativo de la nube.&#xa0;En versión 1.17.0 de Envoy, un atacante puede omitir la autenticación presentando un token JWT con un emisor que no está en la lista de proveedores cuando el filtro de autenticación JWT de Envoy está configurado con el requisito \"allow_missing\" en \"require_any\" debido a un error en la implementación.&#xa0;El filtro de autenticación JWT de Envoy puede ser configurado con el requisito \"allow_missing\" que se cumplirá si falta JWT (error JwtMissed) y presentará un fallo si JWT existe o no es válido.&#xa0;Debido a un error en la implementación, un error de JwtUnknownIssuer se convirtió por error a JwtMissed cuando se configuró \"require_any\".&#xa0;Entonces, si se configuró \"allow_missing\" en \"require_any\", un atacante puede omitir la autenticación al presentar un token JWT con un emisor que no está en la lista de proveedores.&#xa0;La integridad puede ser impactada según la configuración si el token JWT se usa para proteger contra escrituras o modificaciones.&#xa0;Esta regresión fue introducida el 12/11/2020 en PR 13839, que corrigió el manejo de \"allow_missing\" en RequireAny en un JwtRequirement (consulte el problema 13458).&#xa0;AnyVerifier agrega los resultados de los comprobadores secundarios a un estado final donde JwtMissing es el error predeterminado.&#xa0;Sin embargo, un JwtUnknownIssuer se trató por error igual que un error JwtMissing y la agregación final resultante fue el JwtMissing predeterminado.&#xa0;Como resultado, \"allow_missing\" permitiría un token JWT con un estado de emisor desconocido.&#xa0;Esto es corregido en versión 1.17.1 por PR 15194. La corrección funciona al preferir JwtUnknownIssuer sobre un error de JwtMissing, corrigiendo la conversión accidental y omitiendo con \"allow_missing\".&#xa0;Un usuario podría detectar si se produjo una omisión si posee los registros de Envoy habilitados con verbosidad de depuración&#xa0;Los usuarios pueden habilitar registros de depuración a nivel de componente para JWT.&#xa0;Los registros del filtro JWT indicarán que se presenta una petición con un token JWT y un fallo de que falta el token JWT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        }, {
          "lang" : "en",
          "value" : "CWE-303"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:envoyproxy:envoy:1.17.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E426CE56-9EB3-4641-B9A0-2E418FD3478F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/envoyproxy/envoy/commit/ea39e3cba652bcc4b11bb0d5c62b017e584d2e5a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/pull/15194",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-4996-m8hf-hj27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/commit/ea39e3cba652bcc4b11bb0d5c62b017e584d2e5a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/pull/15194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/envoyproxy/envoy/security/advisories/GHSA-4996-m8hf-hj27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28132",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T07:15:12.587",
      "lastModified" : "2024-11-21T05:59:08.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support section) allows upload of .php files within a system.tar.gz file. The .php file becomes accessible with a public/system/static URI."
      }, {
        "lang" : "es",
        "value" : "LUCY Security Awareness Software versiones hasta 4.7.x, permite una ejecución de código remota  no autenticada porque la Migration Tool (en la sección Support) permite cargar archivos .php dentro de un archivo system.tar.gz.&#xa0;El archivo .php se vuelve accesible con un URI public/system/static"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lucysecurity:security_awareness:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.7.8",
            "matchCriteriaId" : "9CB367C4-34B9-4C25-AA51-4C486AC252BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://abuyv.com/cve/lucy-file-upload-RCE",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://abuyv.com/cve/lucy-file-upload-RCE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1640",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.067",
      "lastModified" : "2024-11-21T05:44:47.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Print Spooler de Windows. Este ID de CVE es diferente de CVE-2021-26878"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1640",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-493/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-493/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1729",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.160",
      "lastModified" : "2024-11-21T05:44:59.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Update Stack Setup Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios en Stack Setup de Windows Update"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1729",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-284/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-1729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-284/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20336",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-11T16:15:13.237",
      "lastModified" : "2024-11-21T05:46:25.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Tivoli Netcool/OMNIbus_GUI 8.1.0 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session."
      }, {
        "lang" : "es",
        "value" : "IBM Tivoli Netcool/OMNIbus_GUI versión 8.1.0, es vulnerable a un ataque de tipo cross-site scripting almacenado.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista que puede conllevar a una divulgación de credenciales dentro de una sesión confiable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:tivoli_netcool\\/omnibus_webgui:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82EA18DB-2CB4-401F-90FA-96FAF2D54622"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194350",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6427953",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6427953",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24089",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.347",
      "lastModified" : "2024-11-21T05:52:19.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE-2021-27050, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24089",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24090",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.427",
      "lastModified" : "2024-11-21T05:52:20.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Error Reporting Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios en Error Reporting de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24090",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24095",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.487",
      "lastModified" : "2024-11-21T05:52:20.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DirectX Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de DirectX"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24104",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.550",
      "lastModified" : "2024-11-21T05:52:21.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Suplantación de Identidad de Microsoft SharePoint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24104",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24107",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.630",
      "lastModified" : "2024-11-21T05:52:22.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Event Tracing de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24107",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24108",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.707",
      "lastModified" : "2024-11-21T05:52:22.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Office. Este ID de CVE es diferente de CVE-2021-27057, CVE-2021-27059"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:-:*:-:*:-:*",
            "matchCriteriaId" : "DC9D0A78-9F16-41E0-910E-E93269DB9B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24108",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24108",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24110",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.787",
      "lastModified" : "2024-11-21T05:52:22.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE-2021-27050, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24110",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-24110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26411",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.863",
      "lastModified" : "2025-10-30T19:56:10.210",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer Memory Corruption Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Corrupción de la Memoria de Internet Explorer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Internet Explorer Memory Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77D197D7-57FB-4898-8C70-B19D5F0D5BE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00345596-E9E0-4096-8DC6-0212F4747A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E332666-2E03-468E-BC30-299816D6E8ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B570A8-ED1A-46B6-B8AB-064445F8FC4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DBE5B2-AE10-4251-BCDA-DC5EDEE6EE67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542DAEEC-73CC-46C6-A630-BF474A3446AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61019899-D7AF-46E4-A72C-D189180F66AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00345596-E9E0-4096-8DC6-0212F4747A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E332666-2E03-468E-BC30-299816D6E8ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B570A8-ED1A-46B6-B8AB-064445F8FC4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DBE5B2-AE10-4251-BCDA-DC5EDEE6EE67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043EDDD-41BF-4718-BDCF-158BBBDB6360"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-26411",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26859",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:13.973",
      "lastModified" : "2024-11-21T05:56:54.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Power BI Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Microsoft Power BI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:power_bi_report_server:15.0.1103.234:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD96229-2168-47C3-864C-6E645EC75F81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:power_bi_report_server:15.0.1104.300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9B97C50-A627-4516-9555-7271EC3349BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26859",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26859",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26860",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.050",
      "lastModified" : "2024-11-21T05:56:54.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows App-V Overlay Filter Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Overlay Filter de Windows App-V"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26860",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26860",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26861",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.113",
      "lastModified" : "2024-11-21T05:56:54.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del Graphics Component de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26861",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26861",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26862",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.177",
      "lastModified" : "2024-11-21T05:56:54.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Installer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26862",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-285/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26862",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-285/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26863",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.237",
      "lastModified" : "2024-11-21T05:56:54.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Win32k. Este ID de CVE es diferente de CVE-2021-26875, CVE-2021-26900, CVE-2021-27077"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161768/Microsoft-Windows-Kernel-NtGdiGetDeviceCapsAll-Race-Condition-Use-After-Free.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26863",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161768/Microsoft-Windows-Kernel-NtGdiGetDeviceCapsAll-Race-Condition-Use-After-Free.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26864",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.300",
      "lastModified" : "2024-11-21T05:56:55.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Virtual Registry Provider Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Virtual Registry Provider de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26864",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26865",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.380",
      "lastModified" : "2024-11-21T05:56:55.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Container Execution Agent Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Container Execution Agent de Windows. Este ID de CVE es diferente de CVE-2021-26891"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26865",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26865",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26866",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.440",
      "lastModified" : "2024-11-21T05:56:55.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Update Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Update Service de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26866",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-286/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26866",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-286/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26867",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.503",
      "lastModified" : "2024-11-21T05:56:55.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Windows Hyper-V"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "21074553-EDF2-468D-8E79-C39851B5BC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "61F0792D-7587-4297-8EE7-D4DC3A30EE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "09D9A720-8D3C-4699-AC57-CB4531E5BFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26867",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26867",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26868",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.583",
      "lastModified" : "2024-11-21T05:56:55.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Graphics Component Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Graphics Component de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26868",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26869",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.643",
      "lastModified" : "2024-11-21T05:56:55.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows ActiveX Installer Service Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información del ActiveX Installer Service de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "B7674920-AE12-4A25-BE57-34AEDDA74D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26869",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26869",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26870",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.723",
      "lastModified" : "2024-11-21T05:56:55.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Projected File System Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios Proyectada en el Windows Projected File System"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26870",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26870",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26871",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.787",
      "lastModified" : "2024-11-21T05:56:56.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WalletService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows WalletService. Este ID de CVE es diferente de CVE-2021-26885"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26871",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26872",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.863",
      "lastModified" : "2024-11-21T05:56:56.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Event Tracing de Windows. Este ID de CVE es diferente de CVE-2021-26898, CVE-2021-26901"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "B7674920-AE12-4A25-BE57-34AEDDA74D76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26872",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26873",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.927",
      "lastModified" : "2024-11-21T05:56:56.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows User Profile Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del User Profile Service de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26873",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-283/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26873",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-283/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26874",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:14.987",
      "lastModified" : "2024-11-21T05:56:56.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Overlay Filter Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Overlay Filter de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26874",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26874",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26875",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.067",
      "lastModified" : "2024-11-21T05:56:56.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Win32k. Este ID de CVE es diferente de CVE-2021-26863, CVE-2021-26900, CVE-2021-27077"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26875",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26876",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.137",
      "lastModified" : "2024-11-21T05:56:56.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenType Font Parsing Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de OpenType Font Parsing"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E4C4AB-81A5-4786-829B-EFB23CEE17E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26876",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26877",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.190",
      "lastModified" : "2024-11-21T05:56:56.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DNS Server de Windows. Este ID de CVE es diferente de CVE-2021-26893, CVE-2021-26894, CVE-2021-26895, CVE-2021-26897"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26877",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26877",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26878",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.270",
      "lastModified" : "2024-11-21T05:56:57.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Print Spooler Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Print Spooler de Windows. Este ID de CVE es diferente de CVE-2021-1640"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26878",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26879",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.333",
      "lastModified" : "2024-11-21T05:56:57.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Network Address Translation (NAT) Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de NAT de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "21074553-EDF2-468D-8E79-C39851B5BC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "1981BA0D-0920-40C0-8A6A-5D5A1B221560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CF580BA-6938-40F6-9D86-F43044A6BACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "61F0792D-7587-4297-8EE7-D4DC3A30EE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "09D9A720-8D3C-4699-AC57-CB4531E5BFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26879",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26880",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.393",
      "lastModified" : "2024-11-21T05:56:57.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Storage Spaces Controller Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Storage Spaces Controller"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26880",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26881",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.473",
      "lastModified" : "2024-11-21T05:56:57.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Media Foundation Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Windows Media Foundation"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26881",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26881",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26882",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.537",
      "lastModified" : "2024-11-21T05:56:57.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Access API Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de la API Remote Access"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26882",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26884",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.613",
      "lastModified" : "2024-11-21T05:56:57.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Photo Codec Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Photo Codec de Windows Media"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26884",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26884",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26885",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.677",
      "lastModified" : "2024-11-21T05:56:57.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WalletService Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows WalletService. Este ID de CVE es diferente de CVE-2021-26871"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26885",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26886",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.737",
      "lastModified" : "2024-11-21T05:56:58.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "User Profile Service Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio del User Profile Service"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26886",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-327/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-327/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26887",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.800",
      "lastModified" : "2026-02-24T16:23:27.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.</p>\n<p>To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.</p>\n<p>This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Folder Redirection de Microsoft Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26887",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26887",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26889",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.863",
      "lastModified" : "2024-11-21T05:56:58.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Update Stack Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de la Pila de Windows Update"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26889",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-328/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-328/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26890",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:15.940",
      "lastModified" : "2024-11-21T05:56:58.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Application Virtualization Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Application Virtualization"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:arm64:*",
            "matchCriteriaId" : "610B33F9-0309-4CF7-B7E4-5152D9B2FFE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26890",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26891",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.003",
      "lastModified" : "2024-11-21T05:56:58.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Container Execution Agent Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Container Execution Agent de Windows. Este ID de CVE es diferente de CVE-2021-26865"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26891",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26892",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.067",
      "lastModified" : "2024-11-21T05:56:58.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Extensible Firmware Interface Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad del Extensible Firmware Interface de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26892",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-330/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-330/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26893",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.130",
      "lastModified" : "2024-11-21T05:56:58.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DNS Server de Windows. Este ID de CVE es diferente de CVE-2021-26877, CVE-2021-26894, CVE-2021-26895, CVE-2021-26897"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26893",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26894",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.190",
      "lastModified" : "2024-11-21T05:56:58.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DNS Server de Windows. Este ID de CVE es diferente de CVE-2021-26877, CVE-2021-26893, CVE-2021-26895, CVE-2021-26897"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:x86:*:*",
            "matchCriteriaId" : "DC633D8A-2E7A-4115-95AC-555C42F4942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26894",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26895",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.253",
      "lastModified" : "2024-11-21T05:56:59.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DNS Server de Windows. Este ID de CVE es diferente de CVE-2021-26877, CVE-2021-26893, CVE-2021-26894, CVE-2021-26897"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C0DC57FA-88F8-4D5C-94BD-3A8B1FB8C047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B4809FDE-A816-42FD-807F-4F9C7B6DB22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26895",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26896",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.333",
      "lastModified" : "2024-11-21T05:56:59.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio del DNS Server de Windows. Este ID de CVE es diferente de CVE-2021-27063"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C0DC57FA-88F8-4D5C-94BD-3A8B1FB8C047"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "B4809FDE-A816-42FD-807F-4F9C7B6DB22E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26896",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26897",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.393",
      "lastModified" : "2024-11-21T05:56:59.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del DNS Server de Windows. Este ID de CVE es diferente de CVE-2021-26877, CVE-2021-26893, CVE-2021-26894, CVE-2021-26895"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:x86:*:*",
            "matchCriteriaId" : "DC633D8A-2E7A-4115-95AC-555C42F4942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26897",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26898",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.457",
      "lastModified" : "2024-11-21T05:56:59.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Event Tracing de Windows. Este ID de CVE es diferente de CVE-2021-26872, CVE-2021-26901"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "BA592626-F17C-4F46-823B-0947D102BBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:-:*",
            "matchCriteriaId" : "EBBC793C-D584-46DA-BCD1-2844810152B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "507EB48C-F479-424C-8ABA-C279AB4FE3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:-:*",
            "matchCriteriaId" : "4503B88E-3ECB-4B0A-A813-077157D1EF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:-:*",
            "matchCriteriaId" : "DBE7565D-AC25-4017-B2E4-4B463D7680DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:-:*",
            "matchCriteriaId" : "6EE4C8CA-0351-499C-9E59-D31CEA7BC7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:-:*:x64:*",
            "matchCriteriaId" : "85A7C1C6-7390-4B26-8FED-F067EC3DF1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:-:*:x86:*",
            "matchCriteriaId" : "2E91BCB5-D0F7-4D53-BC85-D114C2D87A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x64:*",
            "matchCriteriaId" : "9D654D3A-6A99-4904-8B37-E52E80F7C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x86:*",
            "matchCriteriaId" : "01A6D6B4-B97F-4C8C-AD09-11454F0A39CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:x86:*:*",
            "matchCriteriaId" : "DC633D8A-2E7A-4115-95AC-555C42F4942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26898",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26899",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.503",
      "lastModified" : "2024-11-21T05:56:59.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows UPnP Device Host Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de UPnP Device Host de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "BA592626-F17C-4F46-823B-0947D102BBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:-:*",
            "matchCriteriaId" : "EBBC793C-D584-46DA-BCD1-2844810152B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "507EB48C-F479-424C-8ABA-C279AB4FE3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:-:*",
            "matchCriteriaId" : "4503B88E-3ECB-4B0A-A813-077157D1EF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:-:*",
            "matchCriteriaId" : "DBE7565D-AC25-4017-B2E4-4B463D7680DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:-:*",
            "matchCriteriaId" : "6EE4C8CA-0351-499C-9E59-D31CEA7BC7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:-:*:x64:*",
            "matchCriteriaId" : "85A7C1C6-7390-4B26-8FED-F067EC3DF1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:-:*:x86:*",
            "matchCriteriaId" : "2E91BCB5-D0F7-4D53-BC85-D114C2D87A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x64:*",
            "matchCriteriaId" : "9D654D3A-6A99-4904-8B37-E52E80F7C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x86:*",
            "matchCriteriaId" : "01A6D6B4-B97F-4C8C-AD09-11454F0A39CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:x86:*:*",
            "matchCriteriaId" : "DC633D8A-2E7A-4115-95AC-555C42F4942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26899",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26900",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.567",
      "lastModified" : "2024-11-21T05:57:00.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Win32k. Este ID de CVE es diferente de CVE-2021-26863, CVE-2021-26875, CVE-2021-27077"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26900",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-331/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-331/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26901",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.630",
      "lastModified" : "2024-11-21T05:57:00.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Event Tracing de Windows. Este ID de CVE es diferente de CVE-2021-26872, CVE-2021-26898"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "BA592626-F17C-4F46-823B-0947D102BBD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:-:*",
            "matchCriteriaId" : "EBBC793C-D584-46DA-BCD1-2844810152B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x86:*",
            "matchCriteriaId" : "507EB48C-F479-424C-8ABA-C279AB4FE3F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:-:*",
            "matchCriteriaId" : "4503B88E-3ECB-4B0A-A813-077157D1EF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:-:*",
            "matchCriteriaId" : "DBE7565D-AC25-4017-B2E4-4B463D7680DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:-:*",
            "matchCriteriaId" : "6EE4C8CA-0351-499C-9E59-D31CEA7BC7B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:-:*:x64:*",
            "matchCriteriaId" : "85A7C1C6-7390-4B26-8FED-F067EC3DF1A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:-:*:x86:*",
            "matchCriteriaId" : "2E91BCB5-D0F7-4D53-BC85-D114C2D87A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x64:*",
            "matchCriteriaId" : "9D654D3A-6A99-4904-8B37-E52E80F7C85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:-:*:x86:*",
            "matchCriteriaId" : "01A6D6B4-B97F-4C8C-AD09-11454F0A39CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:x86:*:*",
            "matchCriteriaId" : "DC633D8A-2E7A-4115-95AC-555C42F4942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26901",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26901",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26902",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.723",
      "lastModified" : "2024-11-21T05:57:00.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE-2021-27050, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26902",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26902",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27047",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.787",
      "lastModified" : "2024-11-21T05:57:14.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27048, CVE-2021-27049, CVE-2021-27050, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27047",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27047",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27048",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.863",
      "lastModified" : "2024-11-21T05:57:14.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27049, CVE-2021-27050, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27048",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27048",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27049",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:16.957",
      "lastModified" : "2024-11-21T05:57:14.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27050, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27049",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27050",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.020",
      "lastModified" : "2024-11-21T05:57:15.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE -2021-27051, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27050",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27050",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27051",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.083",
      "lastModified" : "2024-11-21T05:57:15.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE -2021-27050, CVE-2021-27061, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27051",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27052",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.147",
      "lastModified" : "2024-11-21T05:57:15.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_enterprise_server:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C082CC4-6128-475D-BC19-B239E348FDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27052",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27052",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27053",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.207",
      "lastModified" : "2024-11-21T05:57:15.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-27054"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27053",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-332/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27053",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-332/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27054",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.270",
      "lastModified" : "2024-11-21T05:57:15.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-27053"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27054",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-507/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-507/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27055",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.333",
      "lastModified" : "2024-11-21T05:57:15.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Visio Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad de Microsoft Visio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0408B6-4FB5-45E9-AD27-301FC383152D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "87EBA8C7-E317-4EFD-B1AA-DD6A8B0DFDCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visio:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89229922-0836-4CC2-AED2-107C3142D0EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27055",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27055",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27056",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.397",
      "lastModified" : "2024-11-21T05:57:15.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft PowerPoint Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft PowerPoint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCB2D72-B779-4772-8F72-7177E3F47A92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "BA6E71BA-0EBA-40EE-8B81-92C6DECE8DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "36A1FA52-BFBD-4C88-9CBE-B68E55C75726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:powerpoint:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C971A8FC-3897-496D-BB9A-9E6C8A03AEA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27056",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-333/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-333/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27057",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.457",
      "lastModified" : "2024-11-21T05:57:15.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Office. Este ID de CVE es diferente de CVE-2021-24108, CVE-2021-27059"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "B3C3FC9A-D8E5-493A-A575-C831A9A28815"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27057",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-334/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27057",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-334/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27058",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.520",
      "lastModified" : "2024-11-21T05:57:16.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office ClickToRun Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de ClickToRun de Microsoft Office"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x64:*",
            "matchCriteriaId" : "3259EBFE-AE2D-48B8-BE9A-E22BBDB31378"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:x86:*",
            "matchCriteriaId" : "CD25F492-9272-4836-832C-8439EBE64CCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27058",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27059",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.583",
      "lastModified" : "2025-10-30T19:55:43.910",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft Office. Este ID de CVE es diferente de CVE-2021-24108, CVE-2021-27057"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Office Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0B3B0BC-C7C6-4687-AD72-DCA29FF9AE3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27059",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27060",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.647",
      "lastModified" : "2024-11-21T05:57:16.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF33086-D7CC-44D1-A347-9F3EB50F74A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27060",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27060",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27061",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.707",
      "lastModified" : "2024-11-21T05:57:16.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE -2021-27050, CVE-2021-27051, CVE-2021-27062"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27061",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27062",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.787",
      "lastModified" : "2024-11-21T05:57:16.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HEVC Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de HEVC Video Extensions. Este ID de CVE es diferente de CVE-2021-24089, CVE-2021-24110, CVE-2021-26902, CVE-2021-27047, CVE-2021-27048, CVE-2021-27049, CVE -2021-27050, CVE-2021-27051, CVE-2021-27061"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:high_efficiency_video_coding:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "825C506B-54C4-4B9C-BA09-87164E799A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27062",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27063",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.847",
      "lastModified" : "2024-11-21T05:57:16.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Server Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio del Servidor DNS de Windows. Este ID de CVE es diferente de CVE-2021-26896"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:x86:*:*",
            "matchCriteriaId" : "DC633D8A-2E7A-4115-95AC-555C42F4942D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:-:*:-:*",
            "matchCriteriaId" : "44A1A867-3DAC-4C42-A091-E07B6672EE6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27063",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27066",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.927",
      "lastModified" : "2024-11-21T05:57:17.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Admin Center Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Omisión de la Característica de Seguridad de Windows Admin Center"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:windows_admin_center:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C81AC77-53E8-4BF1-979E-22D063966573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27066",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27066",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27070",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:17.987",
      "lastModified" : "2024-11-21T05:57:17.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows 10 Update Assistant Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios del Update Assistant de Windows 10"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27070",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-329/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27070",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-329/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27074",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.067",
      "lastModified" : "2024-11-21T05:57:17.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Sphere Unsigned Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Sin Firmar de Azure Sphere. Este ID de CVE es diferente del CVE-2021-27080"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_sphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAE8D62-5BAE-4975-ABBB-B2AAD424C299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27074",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1247",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1249",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1247",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27075",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.130",
      "lastModified" : "2024-11-21T05:57:17.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Virtual Machine Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de la Máquina Virtual de Azure"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_container_instances:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AACA3DD-1433-41E5-B848-4572C6E94856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_container_registry:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B374EE1C-9BEA-46D6-B2E6-F27C9B2E5CEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_kubernetes_service:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "934ECDD0-31D7-409A-A1BD-0743E24BFE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_service_fabric:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CA4509-D2AF-4C0E-B072-A200DE36D8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_spring_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB1583A2-CC68-4170-8D41-45B73A375CA5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27075",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27076",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.190",
      "lastModified" : "2024-11-21T05:57:18.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Microsoft SharePoint Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:business_productivity_servers:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0CC3B020-7F19-49D5-8034-567E379C6CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F71184B1-7461-4A05-A5D2-03D9EDDC30D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27076",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-276/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27076",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-276/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27077",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.253",
      "lastModified" : "2024-11-21T05:57:18.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Win32k. Este ID de CVE es diferente de CVE-2021-26863, CVE-2021-26875, CVE-2021-26900"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "DF11918C-FE48-4778-AB51-62159779D96B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27077",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-287/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-403/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-482/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-494/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-495/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-496/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-497/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-498/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-499/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-500/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-501/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27077",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-287/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-403/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-482/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-494/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-495/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-496/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-497/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-498/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-499/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-500/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-501/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27080",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.317",
      "lastModified" : "2024-11-21T05:57:18.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Sphere Unsigned Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Sin Firmar de Azure Sphere. Este ID de CVE es diferente de CVE-2021-27074"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_sphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAE8D62-5BAE-4975-ABBB-B2AAD424C299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27080",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1250",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27080",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27081",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.380",
      "lastModified" : "2025-08-20T13:05:15.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code ESLint Extension Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de la Extensión de Visual Studio Code ESLint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:eslint:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0FB1965-4095-427C-86FF-47D9721BE01F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27081",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27081",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27082",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.427",
      "lastModified" : "2024-11-21T05:57:18.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Quantum Development Kit for Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota del Quantum Development Kit  de Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:quantum_development_kit:-:*:*:*:*:visual_studio_code:*:*",
            "matchCriteriaId" : "D9B5355A-9EA3-4751-A451-2F3F83A29DC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27082",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27083",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.487",
      "lastModified" : "2024-11-21T05:57:18.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Remote Development Extension para una Vulnerabilidad de Ejecución de Código Remota de Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:remote_development:-:*:*:*:*:visual_studio_code:*:*",
            "matchCriteriaId" : "A012A390-4C1A-4748-BF76-69AC26542938"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27083",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27083",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27084",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.613",
      "lastModified" : "2025-07-30T16:51:17.950",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Java Extension Pack Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Visual Studio Code Java Extension Pack"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:maven_for_java:-:*:*:*:*:visual_studio_code:*:*",
            "matchCriteriaId" : "CD14C804-ED51-45E3-9609-A6F9F64882FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27084",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27084",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27085",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-03-11T16:15:18.677",
      "lastModified" : "2025-10-30T19:55:31.993",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Internet Explorer Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Ejecución de Código Remota de Internet Explorer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Internet Explorer Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:internet_explorer:11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "D7809F78-8D56-4925-A8F9-4119B973A667"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00345596-E9E0-4096-8DC6-0212F4747A13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E332666-2E03-468E-BC30-299816D6E8ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B570A8-ED1A-46B6-B8AB-064445F8FC4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DBE5B2-AE10-4251-BCDA-DC5EDEE6EE67"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27085",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-27085",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21381",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-11T17:15:12.703",
      "lastModified" : "2024-11-21T05:48:14.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In Flatpack since version 0.9.4 and before version 1.10.2 has a vulnerability in the \"file forwarding\" feature which can be used by an attacker to gain access to files that would not ordinarily be allowed by the app's permissions. By putting the special tokens `@@` and/or `@@u` in the Exec field of a Flatpak app's .desktop file, a malicious app publisher can trick flatpak into behaving as though the user had chosen to open a target file with their Flatpak app, which automatically makes that file available to the Flatpak app. This is fixed in version 1.10.2. A minimal solution is the first commit \"`Disallow @@ and @@U usage in desktop files`\". The follow-up commits \"`dir: Reserve the whole @@ prefix`\" and \"`dir: Refuse to export .desktop files with suspicious uses of @@ tokens`\" are recommended, but not strictly required. As a workaround, avoid installing Flatpak apps from untrusted sources, or check the contents of the exported `.desktop` files in `exports/share/applications/*.desktop` (typically `~/.local/share/flatpak/exports/share/applications/*.desktop` and `/var/lib/flatpak/exports/share/applications/*.desktop`) to make sure that literal filenames do not follow `@@` or `@@u`."
      }, {
        "lang" : "es",
        "value" : "Flatpak es un sistema para construir, distribuir y ejecutar aplicaciones de escritorio en sandbox en Linux. En Flatpack desde la versión 0.9.4 y anteriores a la versión 1.10.2, presenta una vulnerabilidad en la funcionalidad \"file forwarding\" que puede ser usada por un atacante para conseguir acceso a archivos que normalmente no estarían permitidos por los permisos de la aplicación. Colocando los tokens especiales \"@@\" y/o \"@@u\" en el campo Exec del archivo .desktop de una aplicación Flatpak, un editor de aplicaciones malicioso puede engañar a Flatpak para que se comporte como si el usuario hubiera elegido abrir un archivo de destino con su aplicación Flatpak, lo que automáticamente hace que ese archivo esté disponible para la aplicación Flatpak. Esto ha sido corregido en versión 1.10.2. Una solución mínima es el primer commit \"`Disallow @@ and @@U usage in desktop files`\". El siguiente commit \"`dir: Reserve the whole @@ prefix`\" y \"`dir: Refuse to export .desktop files with suspicious uses of @@ tokens`\" se recomiendan, pero no son estrictamente necesarias. Como solución, evite instalar aplicaciones Flatpak de fuentes no fiables, o compruebe el contenido de los archivos exportados \".desktop\" en \"exports/share/applications/*.desktop\" (normalmente \"~/.local/share/flatpak/exports/share/applications/*.desktop\" y \"/var/lib/flatpak/exports/share/applications/*.desktop\") para asegurarse de que los nombres literales de los archivos no siguen \"@@\" o \"@@u\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flatpak:flatpak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.4",
            "versionEndExcluding" : "1.10.2",
            "matchCriteriaId" : "AB8FA716-DCCF-4E1B-B683-B5313303ED3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flatpak/flatpak/commit/8279c5818425b6812523e3805bbe242fb6a5d961",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/a7401e638bf0c03102039e216ab1081922f140ae",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/eb7946bb6248923d8c90fe9b84425fef97ae580d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/pull/4156",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/releases/tag/1.10.2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MXXLXC2DPJ45HSMTI5MZYHMYEGQN6AA/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXNVFOIB6ZP4DGOVKAM25T6OIEP3YLGV/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-12",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4868",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/8279c5818425b6812523e3805bbe242fb6a5d961",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/a7401e638bf0c03102039e216ab1081922f140ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/commit/eb7946bb6248923d8c90fe9b84425fef97ae580d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/pull/4156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/releases/tag/1.10.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flatpak/flatpak/security/advisories/GHSA-xgh4-387p-hqpp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MXXLXC2DPJ45HSMTI5MZYHMYEGQN6AA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WXNVFOIB6ZP4DGOVKAM25T6OIEP3YLGV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4868",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:12.843",
      "lastModified" : "2024-11-21T05:56:49.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSZ CMS 1.2.9 is affected by a cross-site scripting (XSS) vulnerability in multiple pages through the field name."
      }, {
        "lang" : "es",
        "value" : "CSZ CMS versión 1.2.9, está afectado por una vulnerabilidad de tipo Cross-site scripting (XSS) en múltiples páginas por medio del campo name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cszcms:csz_cms:1.2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0068F78B-C701-4A09-8978-A0D07EE14906"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cskaza/cszcms/issues/29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cskaza/cszcms/issues/29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27677",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:12.907",
      "lastModified" : "2024-11-21T05:58:25.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Galleries in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting (XSS) en Galleries de Batflat CMS versión 1.3.6, permite a atacantes remotos inyectar script web o HTML arbitrarios por medio del campo name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:batflat:batflat:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD502D1-2B27-4BC5-9DF2-C71F42212D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sruupl/batflat/issues/105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sruupl/batflat/issues/105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27678",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:12.987",
      "lastModified" : "2024-11-21T05:58:25.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Snippets in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting (XSS) en Snippets en Batflat CMS versión 1.3.6, permite a atacantes remotos inyectar script web o HTML arbitrarios por medio del campo name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:batflat:batflat:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD502D1-2B27-4BC5-9DF2-C71F42212D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sruupl/batflat/issues/105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sruupl/batflat/issues/105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:13.047",
      "lastModified" : "2024-11-21T05:58:25.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) vulnerability in Navigation in Batflat CMS 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the field name."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting (XSS) en Navigation en Batflat CMS versión 1.3.6, permite a atacantes remotos inyectar script web o HTML arbitrarios por medio del campo name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:batflat:batflat:1.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCD502D1-2B27-4BC5-9DF2-C71F42212D85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sruupl/batflat/issues/105",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sruupl/batflat/issues/105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28088",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:13.110",
      "lastModified" : "2024-11-21T05:59:03.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting (XSS) in modules/content/admin/content.php in ImpressCMS profile 1.4.2 allows remote attackers to inject arbitrary web script or HTML parameters through the \"Display Name\" field."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el archivo modules/content/admin/content.php en el perfil de ImpressCMS versión 1.4.2, permite a atacantes remotos inyectar un script web o parámetros HTML arbitrarios por medio del campo \"Display Name\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:impresscms:impresscms:1.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8A2626E-D329-4134-87E1-CD42259FAECA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://anotepad.com/note/read/s3kkk6h7",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1119296",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://anotepad.com/note/read/s3kkk6h7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1119296",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:13.267",
      "lastModified" : "2025-06-30T13:06:41.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the Telerik.Web.UI.WebResource.axd file. This may allow the attacker to gain unauthorized access to the server and execute code. To exploit, one must use the parameter _TSM_HiddenField_ and inject a command at the end of the URI. NOTE: the vendor states that this is not a vulnerability. The request's output does not indicate that a \"true\" command was executed on the server, and the request's output does not leak any private source code or data from the server"
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Progress Telerik UI para ASP.NET AJAX versión 2021.1.224.&#xa0;Permite el acceso no autorizado a MicrosoftAjax.js por medio del archivo Telerik.Web.UI.WebResource.axd.&#xa0;Esto puede permitir a un atacante conseguir acceso no autorizado al servidor y ejecutar código.&#xa0;Para explotar, uno debe usar el parámetro _TSM_HiddenField_ e inyectar un comando al final del URI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:progress:telerik_ui_for_asp.net_ajax:2021.1.224:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37ACC88D-CB5C-43B5-854E-E8FF24625BC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/shreyasfegade/e2480e26b2ed1d0c7175ecf7cb15f9c1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/JULpfvFJ",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/shreyasfegade/e2480e26b2ed1d0c7175ecf7cb15f9c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/JULpfvFJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T17:15:13.330",
      "lastModified" : "2024-11-21T05:59:10.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "prog.cgi on D-Link DIR-3060 devices before 1.11b04 HF2 allows remote authenticated users to inject arbitrary commands in an admin or root context because SetVirtualServerSettings calls CheckArpTables, which calls popen unsafely."
      }, {
        "lang" : "es",
        "value" : "El archivo prog.cgi en los dispositivos D-Link DIR-3060 versiones anteriores a 1.11b04 HF2, permite a usuarios autenticados remoto inyectar comandos arbitrarios en un contexto de administrador o root porque la función SetVirtualServerSettings llama a CheckArpTables, que llama a popen de manera no segura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-3060_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11b04",
            "matchCriteriaId" : "FCA4E213-3136-41ED-B9D9-D9F8C90E46D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-3060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B48DF58-000E-4846-BEB6-69E4E69375E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161757/D-Link-DIR-3060-1.11b04-Command-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/23",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10208",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-d-link-dir-3060/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161757/D-Link-DIR-3060-1.11b04-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-d-link-dir-3060/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20261",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-11T21:15:11.983",
      "lastModified" : "2024-11-21T05:46:13.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was found in the Linux kernels implementation of the floppy disk drive controller driver software. The impact of this issue is lessened by the fact that the default permissions on the floppy device (/dev/fd0) are restricted to root. If the permissions on the device have changed the impact changes greatly. In the default configuration root (or equivalent) permissions are required to attack this flaw."
      }, {
        "lang" : "es",
        "value" : "Se encontró una condición de carrera en la implementación del kernel de Linux del software manejador del controlador de la unidad de disquete.&#xa0;El impacto de este problema es reducido por el hecho de que los permisos predeterminados en el dispositivo de disquete (/dev/fd0) están restringidos para root.&#xa0;Si los permisos en el dispositivo han cambiado, el impacto cambia mucho.&#xa0;En la configuración predeterminada, son requeridos permisos de root (o equivalentes) para atacar este fallo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "E422399C-2CB8-4293-9B4F-FD5703C1BA97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "28316352-6847-4D33-8E69-F3C933F42A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "5011ED56-97F0-4754-9C98-B28B806DF6DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7FC0A28-90D9-4DF3-8A2A-49C3D4CB470A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D90B29E-F7B6-4EAB-83D2-1C339310D34D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:4.5:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "02A2E198-C184-459C-9B7C-8A9C74A6DCEE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1932150",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0c80efe5956ccce9fe7ae5c78542578c07bc20a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1932150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=a0c80efe5956ccce9fe7ae5c78542578c07bc20a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22709",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-03-11T21:15:12.077",
      "lastModified" : "2024-11-21T05:50:30.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in loss of data or remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition."
      }, {
        "lang" : "es",
        "value" : "Una CWE-119: se presenta una vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los Límites de un Búfer de Memoria en Interactive Graphical SCADA System (IGSS) Definition (Def.exe) versiones V15.0.0.21041 y anteriores, lo que podría resultar en la pérdida de datos o una ejecución de código remota cuando es importado un archivo CGF (Configuration Group File) malicioso para IGSS Definition"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0.0.21041",
            "matchCriteriaId" : "3CC174AC-AAAA-4BA4-B23F-F6F08103EF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22710",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-03-11T21:15:12.170",
      "lastModified" : "2024-11-21T05:50:30.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could cause remote code execution when malicious CGF (Configuration Group File) file is imported to IGSS Definition."
      }, {
        "lang" : "es",
        "value" : "Una CWE-119: se presenta una vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los Límites de un Búfer de Memoria en Interactive Graphical SCADA System (IGSS) Definition (Def.exe) versiones V15.0.0.21041 y anteriores, que podría causar una ejecución de código remota cuando un archivo CGF (Configuration Group File) es importado para IGSS Definition"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0.0.21041",
            "matchCriteriaId" : "3CC174AC-AAAA-4BA4-B23F-F6F08103EF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22711",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-03-11T21:15:12.247",
      "lastModified" : "2024-11-21T05:50:30.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to missing validation of input data."
      }, {
        "lang" : "es",
        "value" : "Una CWE-119: se presenta una vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los Límites de un Búfer de Memoria en Interactive Graphical SCADA System (IGSS) Definition (Def.exe) versiones V15.0.0.21041 y anteriores, que podría resultar en condiciones de lectura o escritura arbitrarias cuando un archivo CGF (Configuration Group File) malicioso es importado para IGSS Definition debido a una falta de comprobación de los datos de entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0.0.21041",
            "matchCriteriaId" : "3CC174AC-AAAA-4BA4-B23F-F6F08103EF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22712",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-03-11T21:15:12.327",
      "lastModified" : "2024-11-21T05:50:30.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System (IGSS) Definition (Def.exe) V15.0.0.21041 and prior, which could result in arbitrary read or write conditions when malicious CGF (Configuration Group File) file is imported to IGSS Definition due to an unchecked pointer address."
      }, {
        "lang" : "es",
        "value" : "Una CWE-119: se presenta una vulnerabilidad de Restricción Inapropiada de Operaciones dentro de los Límites de un Búfer de Memoria en Interactive Graphical SCADA System (IGSS) Definition (Def.exe) versiones V15.0.0.21041 y anteriores, que podría resultar en condiciones de lectura o escritura arbitrarias cuando un archivo CGF (Configuration Group File) malicioso es importado a una IGSS Definition debido a una dirección de puntero no marcada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:interactive_graphical_scada_system:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "15.0.0.21041",
            "matchCriteriaId" : "3CC174AC-AAAA-4BA4-B23F-F6F08103EF38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22713",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-03-11T21:15:12.407",
      "lastModified" : "2024-11-21T05:50:30.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION8650, ION8800, ION7650, ION7700/73xx, and ION83xx/84xx/85xx/8600 (see security notifcation for affected versions), which could cause the meter to reboot."
      }, {
        "lang" : "es",
        "value" : "A CWE-119: se presenta vulnerabilidad de Restricción Inapropiada de Operaciones  dentro de los Límites de un Búfer de la Memoria en PowerLogic ION8650, ION8800, ION7650, ION7700 /73xx e ION83xx /84xx/85xx /8600 (consulte la notificación de seguridad para las versiones afectadas), lo que podría causar al medidor reiniciarse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.1",
            "matchCriteriaId" : "33CD5DAD-BE28-491D-A1CD-09F01194115F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC3A306-D4F4-4C2A-9D60-DD8F0826AEEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "372",
            "matchCriteriaId" : "99A58454-5EF2-4CD2-8391-577771573D2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E8E79E-6DA7-4094-9622-3B91D5913493"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "376",
            "matchCriteriaId" : "EDE14AD4-32C5-49C3-AB52-223CBC52A146"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7550:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFA65E4-51D6-4D2A-B750-7099DA03B107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "376",
            "matchCriteriaId" : "97910A81-407C-48C4-94AB-585FCCEAA56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7650:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD0CD85-457E-4153-B1C2-1B7D39B5854B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7700_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08CA14DE-656C-4D60-986B-FE149560FC2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07312E20-FF8A-4BD2-AB8D-AEA01B984AFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D4CF8E-053E-42CD-8A8D-EBCFD52A7266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F527180F-F818-4D4C-A0BF-F10C8B53B9C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1047C892-B7F5-49FB-AB36-8E8061A58037"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F01E9FE2-4110-4A6D-99F3-49784808D951"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8400_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70BAC583-6101-4F26-A264-26E5D69E9188"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82527983-6167-4D7B-A70A-D1A814ED3D06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8500_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "768FB179-B6D7-457C-9795-310400460F6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E37742-CFF9-4F80-9B6A-0D4F5AD23112"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion8600_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6B0276-AB51-4B8F-B2A7-85EDD56C9E7C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion8600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "324CF58A-753C-4D9C-8E72-FC8EE26EDA0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7550_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "416",
            "matchCriteriaId" : "3A481A07-B2B3-4C35-A19F-DF38885664DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7550:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "029ADDBB-8F5D-4981-B23E-1CF7803AB371"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:ion7650_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "416",
            "matchCriteriaId" : "0A099948-C46C-47E9-A457-8CFADDF740BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7650:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A561E460-E2E7-44EB-9579-51C6715C5F60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-03",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22714",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-03-11T21:15:12.497",
      "lastModified" : "2024-11-21T05:50:31.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-119:Improper restriction of operations within the bounds of a memory buffer vulnerability exists in PowerLogic ION7400, PM8000 and ION9000 (All versions prior to V3.0.0), which could cause the meter to reboot or allow for remote code execution."
      }, {
        "lang" : "es",
        "value" : "A CWE-119: se presenta una vulnerabilidad de Restricción Inapropiada de Operaciones  dentro de los Límites de un Búfer de la Memoria en PowerLogic ION7400, PM8000 e ION9000 (todas las versiones anteriores a V3.0.0), lo que podría causar al medidor reiniciarse o permitir una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion7400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "DCE7015C-02DD-44A1-ADEE-5E71CE312266"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8F28EAA-FC60-4CE0-BD39-DFD3EB88E195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_pm8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "E5A75862-E1AC-4C6E-83AD-DE5FCD8BA50D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_pm8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B16A7BEC-1BED-4A61-A6C9-BF7DB13B998C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:schneider-electric:powerlogic_ion9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "32067EA8-5153-4A00-9DE8-C4BEC42C00A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:schneider-electric:powerlogic_ion9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6718EAAA-074D-4807-AC2D-DD0A06D397FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-02",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.se.com/ww/en/download/document/SEVD-2021-068-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28143",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T22:15:12.700",
      "lastModified" : "2024-11-21T05:59:10.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/jsonrpc on D-Link DIR-841 3.03 and 3.04 devices allows authenticated command injection via ping, ping6, or traceroute (under System Tools)."
      }, {
        "lang" : "es",
        "value" : "/jsonrpc en los dispositivos D-Link DIR-841 versiones 3.03 y 3.04, permite una inyección de comandos autenticados por medio de ping, ping6 o traceroute (bajo System Tools)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-841_firmware:3.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB1F024-4346-4822-94E6-14DA325550C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-841_firmware:3.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26EEF6DC-741A-4F41-ACE9-4002EDE55164"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-841:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D789C69F-5063-43B7-AB71-5B0C9294D55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/DLINK-DIR-841-command-injection.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10207",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vitorespf/Advisories/blob/master/DLINK-DIR-841-command-injection.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T22:15:12.777",
      "lastModified" : "2024-11-21T05:59:11.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in GNOME GLib before 2.66.8. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, it incorrectly also creates the target of the symlink as an empty file, which could conceivably have security relevance if the symlink is attacker-controlled. (If the path is a symlink to a file that already exists, then the contents of that file correctly remain unchanged.)"
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en GNOME GLib versiones anteriores a 2.66.8.&#xa0;Cuando es usada la función g_file_replace() con G_FILE_CREATE_REPLACE_DESTINATION para reemplazar una ruta que es un enlace simbólico colgante, también crea incorrectamente el destino del enlace simbólico como un archivo vacío, lo que posiblemente podría tener relevancia de seguridad si el enlace simbólico está controlado por un atacante.&#xa0;(Si la ruta es un enlace simbólico para un archivo que ya existe, entonces el contenido de ese archivo permanece sin cambios correctamente)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:glib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.66.8",
            "matchCriteriaId" : "AFAE1174-32D0-4FB9-94D8-E3EE23AEC070"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/2325",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RXTD5HCP2K4AAUSWWZTBKQNHRCTAEOF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICUTQPHZNZWX2DZR46QFLQZRHVMHIILJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/glib/-/issues/2325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/06/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6RXTD5HCP2K4AAUSWWZTBKQNHRCTAEOF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ICUTQPHZNZWX2DZR46QFLQZRHVMHIILJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-11T22:15:12.857",
      "lastModified" : "2024-11-21T05:59:11.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Camunda Modeler (aka camunda-modeler) through 4.6.0 allows arbitrary file access. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which manipulates the readFile and writeFile APIs. NOTE: the vendor states \"The way we secured the app is that it does not allow any remote scripts to be opened, no unsafe scripts to be evaluated, no remote sites to be browsed."
      }, {
        "lang" : "es",
        "value" : "** En DISPUTA ** Camunda Modeler (también se conoce como camunda-modeler) versiones hasta 4.6.0, permite un acceso arbitrario a archivos.&#xa0;Un atacante remoto puede enviar un mensaje IPC diseñado a la interfaz IPC ipcRenderer vulnerable expuesta, que manipula las API readFile y writeFile.&#xa0;NOTA: el proveedor afirma \"La manera en que aseguramos la aplicación es que no permite que se abran scripts remotos, no se evalúen scripts no seguros, no se naveguen sitios remotos\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:camunda:modeler:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.0",
            "matchCriteriaId" : "3E8FC2A3-2C9A-48E2-A874-9D63E2CB0E20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/camunda/camunda-modeler/issues/2143",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/camunda/camunda-modeler/issues/2143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20674",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-12T02:15:13.163",
      "lastModified" : "2024-11-21T05:46:59.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Untrusted search path vulnerability in Installer of MagicConnect Client program distributed before 2021 March 1 allows an attacker to gain privileges and via a Trojan horse DLL in an unspecified directory and to execute arbitrary code with the privilege of the user invoking the installer when a terminal is connected remotely using Remote desktop."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de búsqueda no confiable en el Instalador del programa distribuido MagicConnect Client versiones anteriores al 1 de marzo de 2021, permite a un atacante alcanzar privilegios y, por medio de una DLL de tipo caballo de Troya en un directorio no especificado, y ejecutar código arbitrario con el privilegio del usuario que invoca al instalador cuando es conectado a una terminal remoto usando el escritorio remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ntt-tx:magicconnect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-03-01",
            "matchCriteriaId" : "5E3E5BFF-E01D-4D14-9925-D24292C89FAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN18056666/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.magicconnect.net/information/202103110900-2",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN18056666/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.magicconnect.net/information/202103110900-2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26569",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-03-12T07:15:12.437",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Race Condition within a Thread vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests."
      }, {
        "lang" : "es",
        "value" : "Una Condición de Carrera dentro de una vulnerabilidad de Subproceso en iscsi_snapshot_comm_core en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes remotos ejecutar código arbitrario por medio de peticiones web diseñadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-366"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-338/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-338/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27646",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-03-12T07:15:13.717",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use After Free vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Uso de la Memoria Previamente Liberada en iscsi_snapshot_comm_core en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes remotos ejecutar código arbitrario por medio de peticiones web diseñadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-339/",
        "source" : "security@synology.com",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-340/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-339/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-340/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27647",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-03-12T07:15:13.797",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out-of-bounds Read vulnerability in iscsi_snapshot_comm_core in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote attackers to execute arbitrary code via crafted web requests."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Lectura Fuera de Límites en iscsi_snapshot_comm_core en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a atacantes remotos ejecutar código arbitrario por medio de peticiones web diseñadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-339/",
        "source" : "security@synology.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-339/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28305",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T09:15:12.783",
      "lastModified" : "2024-11-21T05:59:26.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the diesel crate before 1.4.6 for Rust. There is a use-after-free in the SQLite backend because the semantics of sqlite3_column_name are not followed."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate diesel versiones anteriores a 1.4.6 para Rust.&#xa0;Se presenta un uso de la memoria previamente liberada en el backend de SQLite porque no se sigue la semántica de la función sqlite3_column_name"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:diesel:diesel:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.4.6",
            "matchCriteriaId" : "AEA5F4ED-69BF-490A-8A75-725E9619863F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0037.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0037.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T09:15:12.940",
      "lastModified" : "2024-11-21T05:59:26.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a multi label type if the image is nonexistent."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate fltk versiones anteriores a 0.15.3 para Rust.&#xa0;Se presenta una desreferencia del puntero NULL durante el intento de usar un tipo de etiqueta múltiple si la imagen no es existente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fltk_project:fltk:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.15.3",
            "matchCriteriaId" : "CC4FBAAC-F86C-4972-BFDC-2E53EFD45C51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28307",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T09:15:13.000",
      "lastModified" : "2024-11-21T05:59:27.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the fltk crate before 0.15.3 for Rust. There is a NULL pointer dereference during attempted use of a non-raster image for a window icon."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate fltk versiones anteriores a 0.15.3 para Rust.&#xa0;Se presenta una desreferencia del puntero NULL durante el intento de usar una imagen non-raster para un icono de window"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fltk_project:fltk:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.15.3",
            "matchCriteriaId" : "CC4FBAAC-F86C-4972-BFDC-2E53EFD45C51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T09:15:13.063",
      "lastModified" : "2024-11-21T05:59:27.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the fltk crate before 0.15.3 for Rust. There is an out-of bounds read because the pixmap constructor lacks pixmap input validation."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate fltk versiones anteriores a 0.15.3 para Rust.&#xa0;Se presenta una lectura fuera de límites porque el constructor pixmap carece de una comprobación de entrada de pixmap"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fltk_project:fltk:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.15.3",
            "matchCriteriaId" : "CC4FBAAC-F86C-4972-BFDC-2E53EFD45C51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0038.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23354",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-12T15:15:14.207",
      "lastModified" : "2024-11-21T05:51:33.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package printf before 0.6.1 are vulnerable to Regular Expression Denial of Service (ReDoS) via the regex string /\\%(?:\\(([\\w_.]+)\\)|([1-9]\\d*)\\$)?([0 +\\-\\]*)(\\*|\\d+)?(\\.)?(\\*|\\d+)?[hlL]?([\\%bscdeEfFgGioOuxX])/g in lib/printf.js. The vulnerable regular expression has cubic worst-case time complexity."
      }, {
        "lang" : "es",
        "value" : "El paquete printf versiones anteriores a 0.6.1, es vulnerable a una Denegación de Servicio de Expresión Regular (ReDoS) por medio de la cadena de expresiones regulares /\\%(?:\\(([\\w_.]+)\\)|([1-9]\\d*)\\$)?([0+\\ -\\]*)(\\* |\\d+)?(\\.)? (\\*|\\D+)? [HlL]?([\\% BscdeEfFgGioOuxX])/g en la biblioteca lib/printf.js.&#xa0;La expresión regular vulnerable tiene una complejidad de tiempo en el peor de los casos cúbica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaltas:printf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.6.1",
            "matchCriteriaId" : "355FBD56-0D7A-4DB1-9517-BAD18C121E39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/adaltas/node-printf/issues/31",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/adaltas/node-printf/pull/32",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PRINTF-1072096",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/adaltas/node-printf/issues/31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/adaltas/node-printf/pull/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PRINTF-1072096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T15:15:14.377",
      "lastModified" : "2024-11-21T05:59:26.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow in pupnp before version 1.14.5 can cause the denial of service through the Parser_parseDocument() function. ixmlNode_free() will release a child node recursively, which will consume stack space and lead to a crash."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de la pila en pupnp versión 1.14.5, puede causar una denegación de servicio por medio de la función Parser_parseDocument(). La función ixmlNode_free() liberará un nodo hijo de forma recursiva, lo que consumirá espacio en la pila y conllevará a un bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pupnp_project:pupnp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.5",
            "matchCriteriaId" : "AEB13C63-2F47-4A96-B84F-5226835BDCBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pupnp/pupnp/issues/249",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pupnp/pupnp/releases/tag/release-1.14.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pupnp/pupnp/issues/249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pupnp/pupnp/releases/tag/release-1.14.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21366",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-12T17:15:12.643",
      "lastModified" : "2024-11-21T05:48:12.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module. xmldom versions 0.4.0 and older do not correctly preserve system identifiers, FPIs or namespaces when repeatedly parsing and serializing maliciously crafted documents. This may lead to unexpected syntactic changes during XML processing in some downstream applications. This is fixed in version 0.5.0. As a workaround downstream applications can validate the input and reject the maliciously crafted documents."
      }, {
        "lang" : "es",
        "value" : "xmldom es un módulo DOMParser y XMLSerializer basado en el estándar JavaScript W3C puro (XML DOM Level 2 Core).&#xa0;xmldom versiones 0.4.0 y anteriores, no preservan correctamente los identificadores del sistema, los FPI o los espacios de nombres cuando se analizan y serializan repetidamente documentos diseñados maliciosos.&#xa0;Esto puede conllevar a cambios sintácticos inesperados durante el procesamiento de XML en algunas aplicaciones posteriores.&#xa0;Esto es corregido en la versión 0.5.0.&#xa0;Como solución alternativa, las aplicaciones posteriores pueden comprobar la entrada y rechazar los documentos diseñados maliciosos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-115"
        }, {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-436"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmldom_project:xmldom:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.5.0",
            "matchCriteriaId" : "F6797B31-06DB-419B-B5F2-F51DDC057B56"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xmldom/xmldom/commit/d4201b9dfbf760049f457f9f08a3888d48835135",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xmldom/xmldom/releases/tag/0.5.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/xmldom/xmldom/security/advisories/GHSA-h6q6-9hqw-rwfv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00000.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/xmldom",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/xmldom/xmldom/commit/d4201b9dfbf760049f457f9f08a3888d48835135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/xmldom/xmldom/releases/tag/0.5.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://github.com/xmldom/xmldom/security/advisories/GHSA-h6q6-9hqw-rwfv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/xmldom",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21367",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-12T17:15:12.753",
      "lastModified" : "2024-11-21T05:48:12.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Switchboard Bluetooth Plug for elementary OS from version 2.3.0 and before version version 2.3.5 has an incorrect authorization vulnerability. When the Bluetooth plug is running (in discoverable mode), Bluetooth service requests and pairing requests are automatically accepted, allowing physically proximate attackers to pair with a device running an affected version of switchboard-plug-bluetooth without the active consent of the user. By default, elementary OS doesn't expose any services via Bluetooth that allow information to be extracted by paired Bluetooth devices. However, if such services (i.e. contact list sharing software) have been installed, it's possible that attackers have been able to extract data from such services without authorization. If no such services have been installed, attackers are only able to pair with a device running an affected version without authorization and then play audio out of the device or possibly present a HID device (keyboard, mouse, etc...) to control the device. As such, users should check the list of trusted/paired devices and remove any that are not 100% confirmed to be genuine. This is fixed in version 2.3.5. To reduce the likelihood of this vulnerability on an unpatched version, only open the Bluetooth plug for short intervals when absolutely necessary and preferably not in crowded public areas. To mitigate the risk entirely with unpatched versions, do not open the Bluetooth plug within switchboard at all, and use a different method for pairing devices if necessary (e.g. `bluetoothctl` CLI)."
      }, {
        "lang" : "es",
        "value" : "Switchboard Bluetooth Plug para el SO elementary desde la versión 2.3.0 y versiones anteriores a 2.3.5, presenta una vulnerabilidad de autorización incorrecta.&#xa0;Cuando Bluetooth plug se está ejecutando (en modo detectable), unas peticiones de servicio de Bluetooth y las peticiones de emparejamiento se aceptan automáticamente, lo que permite a  atacantes cercanos físicamente emparejarse con un dispositivo que ejecuta una versión afectada de switchboard-plug-bluetooth sin el consentimiento activo del usuario.&#xa0;De forma predeterminada, el Sistema Operativo elementary no expone ningún servicio por medio de Bluetooth que permita que los dispositivos Bluetooth emparejados extraigan información.&#xa0;Sin embargo, si se han instalado dichos servicios (es decir, software para compartir listas de contactos), es posible que los atacantes han sido capaces de extraer datos de dichos servicios sin autorización.&#xa0;Si no se han instalado tales servicios,&#xa0;los atacantes solo pueden emparejarse con un dispositivo que ejecuta una versión afectada sin autorización y luego reproducir audio desde el dispositivo o posiblemente presentar un dispositivo HID (teclado, mouse, etc.) para controlar el dispositivo.&#xa0;Como tal, los usuarios deben verificar la lista de dispositivos confiables, emparejados y eliminar los que no estén 100% confirmados como genuinos.&#xa0;Esto es corregido en la versión 2.3.5.&#xa0;Para reducir la probabilidad de esta vulnerabilidad en una versión sin parches, solo abra el plug de Bluetooth durante intervalos cortos cuando sea absolutamente necesario y preferiblemente no en áreas públicas concurridas.&#xa0;Para mitigar el riesgo por completo con las versiones no parcheadas, no abra el plug de Bluetooth dentro de la switchboard y use un método diferente para emparejar dispositivos si es necesario (por ejemplo, CLI \"bluetoothctl\")"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementary:switchboard_bluetooth_plug:*:*:*:*:*:elementary_os:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndExcluding" : "2.3.5",
            "matchCriteriaId" : "AC2A9759-1C40-4C89-AD5B-AEBEBF1931A6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/elementary/switchboard-plug-bluetooth/commit/86500e645a907538abafe5225b67cc12c03e7645",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elementary/switchboard-plug-bluetooth/releases/tag/2.3.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elementary/switchboard-plug-bluetooth/security/advisories/GHSA-5p3g-j69g-w2mq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV7WKO5SZHTF3QEMX4WZ576HRECIG6VQ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7TCGM4B45VLUJDCE5PHFYA5KBNHD4RA/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWUPPVFG76PXQA3AHSGKYPRMVZ5AYHZI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/elementary/switchboard-plug-bluetooth/commit/86500e645a907538abafe5225b67cc12c03e7645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elementary/switchboard-plug-bluetooth/releases/tag/2.3.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/elementary/switchboard-plug-bluetooth/security/advisories/GHSA-5p3g-j69g-w2mq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AV7WKO5SZHTF3QEMX4WZ576HRECIG6VQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/O7TCGM4B45VLUJDCE5PHFYA5KBNHD4RA/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SWUPPVFG76PXQA3AHSGKYPRMVZ5AYHZI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21368",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-12T17:15:12.863",
      "lastModified" : "2024-11-21T05:48:12.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "msgpack5 is a msgpack v5 implementation for node.js and the browser. In msgpack5 before versions 3.6.1, 4.5.1, and 5.2.1 there is a \"Prototype Poisoning\" vulnerability. When msgpack5 decodes a map containing a key \"__proto__\", it assigns the decoded value to __proto__. Object.prototype.__proto__ is an accessor property for the receiver's prototype. If the value corresponding to the key __proto__ decodes to an object or null, msgpack5 sets the decoded object's prototype to that value. An attacker who can submit crafted MessagePack data to a service can use this to produce values that appear to be of other types; may have unexpected prototype properties and methods (for example length, numeric properties, and push et al if __proto__'s value decodes to an Array); and/or may throw unexpected exceptions when used (for example if the __proto__ value decodes to a Map or Date). Other unexpected behavior might be produced for other types. There is no effect on the global prototype. This \"prototype poisoning\" is sort of a very limited inversion of a prototype pollution attack. Only the decoded value's prototype is affected, and it can only be set to msgpack5 values (though if the victim makes use of custom codecs, anything could be a msgpack5 value). We have not found a way to escalate this to true prototype pollution (absent other bugs in the consumer's code). This has been fixed in msgpack5 version 3.6.1, 4.5.1, and 5.2.1. See the referenced GitHub Security Advisory for an example and more details."
      }, {
        "lang" : "es",
        "value" : "msgpack5 es una implementación de msgpack v5 para node.js y el navegador. En msgpack5 versiones anteriores a 3.6.1, 4.5.1 y 5.2.1, se presenta una vulnerabilidad de \"Prototype Poisoning\". Cuando msgpack5 decodifica un mapa que contiene una clave \"__proto__\", asigna el valor decodificado a __proto__. Object.prototype.__proto__ es una propiedad accesoria para el prototipo del receptor. Si el valor correspondiente a la clave __proto__ se decodifica para un objeto o null, msgpack5 establece el prototipo del objeto decodificado a ese valor. Un atacante que pueda enviar datos de MessagePack manipulados a un servicio puede usar esto para producir valores que parezcan ser de otros tipos; pueden tener propiedades y métodos de prototipo inesperados (por ejemplo, longitud, propiedades numéricas, y presione et al si el valor de __proto __ se decodifica en una matriz); y/o pueden lanzar excepciones inesperadas cuando se usan (por ejemplo, si el valor de __proto__ decodifica a un Map o Date). Pueden producirse otros comportamientos inesperados para otros tipos. No se presenta ningún efecto en el prototipo global. Este \"Prototype Poisoning\" es una especie de inversión muy limitada de un ataque de contaminación de prototipo. Sólo afecta al prototipo del valor decodificado, y sólo puede establecerse en valores msgpack5 (aunque si la víctima hace uso de códecs personalizados, cualquier cosa podría ser un valor msgpack5). No hemos encontrado una manera de escalar esto a una verdadera contaminación del prototipo (en ausencia de otros errores en el código del consumidor). Esto ha sido corregido en las versiones 3.6.1, 4.5.1 y 5.2.1 de msgpack5. Consulte el GitHub Security Advisory para visualizar un ejemplo y más detalles"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-915"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msgpack5_project:msgpack5:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.6.1",
            "matchCriteriaId" : "DECFA2B7-27F5-425C-A366-33BB7F1EFF47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msgpack5_project:msgpack5:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "F034EAD4-5A42-4ED4-B30F-138D6096372D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:msgpack5_project:msgpack5:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "72D94C9C-D8E5-4FB9-801C-49BF082ED6E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mcollina/msgpack5/commit/d4e6cb956ae51c8bb2828e71c7c1107c340cf1e8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/releases/tag/v3.6.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/releases/tag/v4.5.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/releases/tag/v5.2.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/security/advisories/GHSA-gmjw-49p4-pcfm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/msgpack5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/commit/d4e6cb956ae51c8bb2828e71c7c1107c340cf1e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/releases/tag/v3.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/releases/tag/v4.5.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/releases/tag/v5.2.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mcollina/msgpack5/security/advisories/GHSA-gmjw-49p4-pcfm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/msgpack5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21379",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-12T18:15:12.873",
      "lastModified" : "2024-11-21T05:48:14.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform, the `{{wikimacrocontent}}` executes the content with the rights of the wiki macro author instead of the caller of that wiki macro. This makes possible to inject scripts through it and they will be executed with the rights of the wiki macro (very often a user which has Programming rights). Fortunately, no such macro exists by default in XWiki Standard but one could have been created or installed with an extension. This vulnerability has been patched in versions XWiki 12.6.3, 11.10.11 and 12.8-rc-1. There is no easy workaround other than disabling the affected macros. Inserting content in a safe way or knowing what is the user who called the wiki macro is not easy."
      }, {
        "lang" : "es",
        "value" : "XWiki Platform es una plataforma wiki genérica que ofrece servicios de tiempo de ejecución para aplicaciones creadas sobre ella.&#xa0;En las versiones afectadas de la plataforma XWiki, el \"{{wikimacrocontent}}\" ejecuta el contenido con los derechos de autor de la macro wiki en lugar del autor de la llamada de esa macro wiki.&#xa0;Esto hace posible inyectar scripts por medio de él y se ejecutarán con los derechos de la macro wiki (muy a menudo un usuario que presenta derechos de programación).&#xa0;Afortunadamente, tal macro no se presenta por defecto en XWiki Standard, pero podría haber sido creada o instalada con una extensión.&#xa0;Esta vulnerabilidad ha sido parcheada en versiones XWiki 12.6.3, 11.10.11 y 12.8-rc-1.&#xa0;No existe una solución alternativa sencilla que no sea la de deshabilitar las macros afectadas.&#xa0;Insertar contenido de manera segura o saber cuál es el usuario que llamó a la macro wiki no es fácil"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.4",
            "versionEndExcluding" : "11.10.11",
            "matchCriteriaId" : "C3567E50-73AF-43E4-936B-BA4E992DAC20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "053136E4-CF15-4B19-90DD-2C97F4A4B1EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.7",
            "versionEndIncluding" : "12.7.1",
            "matchCriteriaId" : "832C25BB-74B9-400E-8396-406BA2FC5A9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-17759",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-v662-xpcc-9xf6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-17759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20231",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-12T19:15:13.037",
      "lastModified" : "2024-11-21T05:46:10.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in gnutls. A use after free issue in client sending key_share extension may lead to memory corruption and other consequences."
      }, {
        "lang" : "es",
        "value" : "Se encontró un defecto en gnutls.&#xa0;Un uso de la memoria previamente liberada en el cliente que envía la extensión key_share puede conllevar a una corrupción de la memoria y otras consecuencias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.3",
            "versionEndExcluding" : "3.7.1",
            "matchCriteriaId" : "66BC7206-28E1-4A23-9701-78ABEA79D0C5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922276",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e0800230168%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef450131914a6e1f85feba2779%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459721ba18822d611f7%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c713320bd90fdcb57495f%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf5e1256d870193def4a82ad89ab95e63943a313b5ff0d81aa87e4532%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a3268f569e8092ea0b3b2bb20%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922276",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e0800230168%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef450131914a6e1f85feba2779%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459721ba18822d611f7%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c713320bd90fdcb57495f%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf5e1256d870193def4a82ad89ab95e63943a313b5ff0d81aa87e4532%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a3268f569e8092ea0b3b2bb20%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20232",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-12T19:15:13.130",
      "lastModified" : "2025-12-03T15:15:48.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in gnutls. A use after free issue in client_send_params in lib/ext/pre_shared_key.c may lead to memory corruption and other potential consequences."
      }, {
        "lang" : "es",
        "value" : "Se encontró un defecto en gnutls.&#xa0;Un uso de la memoria previamente liberada en la función client_send_params en la biblioteca lib/ext/pre_shared_key.c puede conllevar a una corrupción en la memoria y otras potenciales consecuencias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:gnutls:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.3",
            "versionEndExcluding" : "3.7.1",
            "matchCriteriaId" : "66BC7206-28E1-4A23-9701-78ABEA79D0C5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922275",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e0800230168%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef450131914a6e1f85feba2779%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459721ba18822d611f7%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c713320bd90fdcb57495f%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf5e1256d870193def4a82ad89ab95e63943a313b5ff0d81aa87e4532%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a3268f569e8092ea0b3b2bb20%40%3Cissues.spark.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r50661d6f0082709aad9a584431b59ec364f9974b63b07e0800230168%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5d4001031e7790d8c6396c499522b4ed2aab782da87b1a14184793bb%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f88bed447742fcc5c47bf1c7be965ef450131914a6e1f85feba2779%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac143ba6dd98bd4bf6bf010d46e56e254056459721ba18822d611f7%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9cbc69e57276413788e90a6ee16c7c034ea4258d31935b70db2bd158%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd70a4c88a47a75fd2d5f3ffb7cee8c2a18c713320bd90fdcb57495f%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf5e1256d870193def4a82ad89ab95e63943a313b5ff0d81aa87e4532%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd5273d72d244178441e6904a2f2b41a3268f569e8092ea0b3b2bb20%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OSLAE6PP33A7VYRYMYMUVB3U6B26GZER/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gnutls.org/security-new.html#GNUTLS-SA-2021-03-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21056",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:13.210",
      "lastModified" : "2024-11-21T05:47:28.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Framemaker version 2020.0.1 (and earlier) is affected by an Out-of-bounds Read vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Framemaker versión 2020.0.1 (y anteriores), está afectada por una vulnerabilidad de lectura fuera de límites cuando se analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:framemaker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.0.2",
            "matchCriteriaId" : "A378ECF3-EAD7-4CF1-9E60-6DE47936DFC5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb21-14.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-282/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/framemaker/apsb21-14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-282/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21067",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:13.633",
      "lastModified" : "2024-11-21T05:47:30.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by an Out-of-bounds Write vulnerability in the CoolType library. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.5 (y anteriores) y 22.2 (y anteriores), están afectadas por una vulnerabilidad de Escritura Fuera de Límites en la biblioteca CoolType.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_2020:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2.6",
            "matchCriteriaId" : "69607563-AA33-49CA-A52B-872AF17BE1FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop_2020:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndExcluding" : "22.3",
            "matchCriteriaId" : "AE790B29-9F10-4281-934B-69AC05889D66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21068",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:13.723",
      "lastModified" : "2024-11-21T05:47:30.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction."
      }, {
        "lang" : "es",
        "value" : "Adobe Creative Cloud Desktop Application versiones 5.3 (y anteriores), está afectada por una vulnerabilidad de manejo de archivos que podría permitir a un atacante causar una sobrescritura de archivos arbitraria.&#xa0;Una explotación de este problema requiere acceso físico e interacción del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3",
            "matchCriteriaId" : "065BB65B-7840-48D8-AB5C-0BCE3DC2303C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21069",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:13.867",
      "lastModified" : "2024-11-21T05:47:30.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to perform high privileged actions. Exploitation of this issue does not require user interaction."
      }, {
        "lang" : "es",
        "value" : "Adobe Creative Cloud Desktop Application versiones 5.3 (y anteriores), está afectada por una vulnerabilidad de escalada de privilegios local que podría permitir a un atacante llamar funciones contra el instalador para llevar a cabo acciones con altos privilegios.&#xa0;Una explotación de este problema no requiere una interacción del usuario"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3",
            "matchCriteriaId" : "065BB65B-7840-48D8-AB5C-0BCE3DC2303C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-281/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-281/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21071",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:13.943",
      "lastModified" : "2024-11-21T05:47:30.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by a Memory Corruption vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores), está afectada por una vulnerabilidad de Corrupción de la Memoria.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21072",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.037",
      "lastModified" : "2024-11-21T05:47:30.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores), está afectada por una vulnerabilidad de lectura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para divulgar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21073",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.117",
      "lastModified" : "2024-11-21T05:47:30.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores), está afectada por una vulnerabilidad de lectura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para divulgar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21074",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.210",
      "lastModified" : "2024-11-21T05:47:31.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores), está afectada por una vulnerabilidad de lectura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para divulgar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21075",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.287",
      "lastModified" : "2024-11-21T05:47:31.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores) está afectada por una vulnerabilidad de lectura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para divulgar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21076",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.350",
      "lastModified" : "2024-11-21T05:47:31.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by an Out-of-bounds Read vulnerability. An unauthenticated attacker could leverage this vulnerability to disclose sensitive information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores) está afectada por una vulnerabilidad de lectura fuera de límites.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para divulgar información confidencial en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21077",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.443",
      "lastModified" : "2024-11-21T05:47:31.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Animate version 21.0.3 (and earlier) is affected by a Heap-based Buffer Overflow vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Animate versiones 21.0.3 (y anteriores), está afectada por una vulnerabilidad de desbordamiento de búfer en la región heap de la memoria.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:animate:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.0.3",
            "matchCriteriaId" : "99835A92-3422-46B9-96DA-EF3B63632178"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/animate/apsb21-21.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21078",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.537",
      "lastModified" : "2024-11-21T05:47:31.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by an Unquoted Service Path vulnerability in CCXProcess that could allow an attacker to achieve arbitrary code execution in the process of the current user. Exploitation of this issue requires user interaction"
      }, {
        "lang" : "es",
        "value" : "Adobe Creative Cloud Desktop Application versiones 5.3 (y anteriores), está afectada por una vulnerabilidad de Ruta de Servicio Sin Comillas en CCXProcess que podría permitir a un atacante lograr una ejecución de código arbitraria en el proceso del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:creative_cloud_desktop_application:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3",
            "matchCriteriaId" : "065BB65B-7840-48D8-AB5C-0BCE3DC2303C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/creative-cloud/apsb21-18.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21079",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.667",
      "lastModified" : "2024-11-21T05:47:31.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field."
      }, {
        "lang" : "es",
        "value" : "Adobe Connect versiones 11.0.7 (y anteriores), está afectado por una vulnerabilidad de tipo Cross-Site Scripting (XSS) reflejado.&#xa0;Un atacante podría explotar esta vulnerabilidad para inyectar contenido JavaScript malicioso que puede ejecutarse dentro del contexto del navegador de la víctima cuando navega a la página que contiene el campo vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.7",
            "matchCriteriaId" : "C32AEC65-EFAE-4DAF-9C74-DBA28E61B21A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb21-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb21-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21080",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.757",
      "lastModified" : "2024-11-21T05:47:31.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect version 11.0.7 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. An attacker could exploit this vulnerability to inject malicious JavaScript content that may be executed within the context of the victim's browser when they browse to the page containing the vulnerable field."
      }, {
        "lang" : "es",
        "value" : "Adobe Connect versiones 11.0.7 (y anteriores), está afectado por una vulnerabilidad de tipo Cross-Site Scripting (XSS) reflejado.&#xa0;Un atacante podría explotar esta vulnerabilidad para inyectar contenido JavaScript malicioso que puede ser ejecutado dentro del contexto del navegador de la víctima cuando navega a la página que contiene el campo vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.7",
            "matchCriteriaId" : "C32AEC65-EFAE-4DAF-9C74-DBA28E61B21A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb21-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb21-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21082",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.833",
      "lastModified" : "2024-11-21T05:47:31.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.5 (and earlier) and 22.2 (and earlier) are affected by a Memory Corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.5 (y anteriores) y 22.2 (y anteriores), están afectadas por una vulnerabilidad de Corrupción de la Memoria al analizar un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Una explotación de este problema requiere una interacción del usuario, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.0",
            "versionEndIncluding" : "21.2.5",
            "matchCriteriaId" : "926F6D2F-1266-47CE-A3CF-8CCBAAAD5E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.2",
            "matchCriteriaId" : "8ED760E6-E577-413F-A021-B624449B4FB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-17.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-17.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21085",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-03-12T19:15:14.927",
      "lastModified" : "2024-11-21T05:47:32.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Connect version 11.0.7 (and earlier) is affected by an Input Validation vulnerability in the export feature. An attacker could exploit this vulnerability by injecting a payload into an online event form and achieve code execution if the victim exports and opens the data on their local machine."
      }, {
        "lang" : "es",
        "value" : "La versión 11.0.7 de Adobe Connect (y anteriores) se ve afectada por una vulnerabilidad de Validación de Entradas en la función de exportación. Un atacante podría aprovechar esta vulnerabilidad inyectando una carga útil en un formulario de eventos en línea y lograr la ejecución de código si la víctima exporta y abre los datos en su máquina local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.0.7",
            "matchCriteriaId" : "C32AEC65-EFAE-4DAF-9C74-DBA28E61B21A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb21-19.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/connect/apsb21-19.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21726",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-03-12T19:15:15.007",
      "lastModified" : "2024-11-21T05:48:53.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some ZTE products have an input verification vulnerability in the diagnostic function interface. Due to insufficient verification of some parameters input by users, an attacker with high privileges can cause process exception by repeatedly inputting illegal parameters. This affects:<ZXONE 9700 , ZXONE 8700, ZXONE 19700><V1.40.021.021CP049, V1.0P02B219_@NCPM-RELEASE_2.40R1-20200914.set>"
      }, {
        "lang" : "es",
        "value" : "Algunos productos ZTE presentan una vulnerabilidad de comprobación de entrada en la interfaz de la función de diagnostico.&#xa0;Debido a una comprobación insuficiente de algunos parámetros ingresados ??por los usuarios, un atacante con altos privilegios puede causar una excepción en el proceso insertando repetidamente parámetros ilegales.&#xa0;Esto afecta a: "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxone_9700_firmware:1.40.021.021cp049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7D653D-5E78-4BF7-B93A-211B4ED04BE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxone_9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3B1F08-335C-4D75-8824-7501BB778F3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxone_8700_firmware:1.40.021.021cp049:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A138D17-A631-4B11-9C76-0EA80B8260CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxone_8700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D8A058D-5F27-4015-946D-F975F2EADBC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxone_19700_firmware:1.0p02b219_\\@ncpm-release_2.40r1-20200914.set:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AF3DD6-CBF8-4654-8540-80B29285F8FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxone_19700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8530D441-FED3-48CF-9937-A13951B2E0EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014664",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21518",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-03-12T20:15:11.420",
      "lastModified" : "2024-11-21T05:48:31.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2.x, and Dell SupportAssist Client ProManage 1.x contain a DLL injection vulnerability in the Costura Fody plugin. A local user with low privileges could potentially exploit this vulnerability, leading to the execution of arbitrary executable on the operating system with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "Dell SupportAssist Client for Consumer PCs versiones 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versiones 2.0.x, 2.1.x, 2.2.x y Dell SupportAssist Client ProManage versión 1.x, contienen una vulnerabilidad de inyección DLL en el plugin Costura Fody.&#xa0;Un usuario local poco privilegiado podría explotar esta vulnerabilidad, conllevando a una ejecución de un ejecutable arbitrario en el sistema operativo con privilegios SYSTEM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_client_promanage:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD3C2335-489E-4886-A576-4BBD3AC98870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_business_pcs:2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD01BE4E-FF64-43DC-B2B7-F2F6BDA8F269"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_business_pcs:2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A49CD3-DC0D-4404-9FBD-8BD6801E1B27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_business_pcs:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C12BF6-07A7-401E-BF43-27EEEDFA1598"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_home_pcs:3.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7749B9C9-72A5-47C7-B8F5-5AB11CD2B130"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_home_pcs:3.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D7A1D4-D5A2-49AA-9186-0F3D345D6585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_home_pcs:3.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1083A3BD-E9B8-40C8-83B1-218CB6D76A0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:supportassist_for_home_pcs:3.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CFC107-2F62-4FFA-BE21-582981E8D503"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184012/dsa-2021-052-dell-supportassist-for-home-pcs-business-pcs-security-update-for-pc-doctor-plugin-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184012/dsa-2021-052-dell-supportassist-for-home-pcs-business-pcs-security-update-for-pc-doctor-plugin-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T22:15:14.843",
      "lastModified" : "2024-11-21T05:57:45.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ssri 5.2.2-8.0.0, fixed in 8.0.1, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option."
      }, {
        "lang" : "es",
        "value" : "ssri versión 5.2.2-8.0.0, corregido en versión 8.0.1, procesa los SRI usando una expresión regular que es vulnerable a una denegación de servicio.&#xa0;Los SRI maliciosos pueden tardar mucho en procesarse, conllevando a una denegación del servicio.&#xa0;Este problema solo afecta a  consumidores que usan la opción estricta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssri_project:ssri:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "5.2.2",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "97535BF1-C00D-4D6C-A201-26593DA55635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssri_project:ssri:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "8.0.1",
            "matchCriteriaId" : "4AC74498-E825-4FA7-A724-192949C07FA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.3:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "53B2BB06-A2F7-4603-89C3-C8500E55483A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.2.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "01E88C86-8C04-4A4A-BF45-9082AA783056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yetingli/SaveResults/blob/main/pdf/ssri-redos.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://npmjs.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://doyensec.com/resources/Doyensec_Advisory_ssri_redos.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/yetingli/SaveResults/blob/main/pdf/ssri-redos.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://npmjs.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-12T22:15:14.983",
      "lastModified" : "2024-11-21T05:59:04.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The is-svg package 2.1.0 through 4.2.1 for Node.js uses a regular expression that is vulnerable to Regular Expression Denial of Service (ReDoS). If an attacker provides a malicious string, is-svg will get stuck processing the input for a very long time."
      }, {
        "lang" : "es",
        "value" : "El paquete is-svg versiones 2.1.0 hasta 4.2.1 para Node.js, usa una expresión regular que es vulnerable a una Denegación de Servicio de Expresión Regular (ReDoS).&#xa0;Si un atacante proporciona una cadena maliciosa, is-svg se bloqueará al procesar la entrada durante mucho tiempo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:is-svg_project:is-svg:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndIncluding" : "4.2.1",
            "matchCriteriaId" : "5BB35285-8008-4EED-8975-A3F11F13D31C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sindresorhus/is-svg/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sindresorhus/is-svg/releases/tag/v4.2.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/is-svg",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/sindresorhus/is-svg/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sindresorhus/is-svg/releases/tag/v4.2.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/is-svg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28161",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-03-12T22:15:15.077",
      "lastModified" : "2024-11-21T05:59:12.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Theia versions up to and including 1.8.0, in the debug console there is no HTML escaping, so arbitrary Javascript code can be injected."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Theia versiones hasta 1.8.0 incluyendo, en la consola de depuración no se presenta un escape HTML, por lo que puede ser inyectado código Javascript arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:theia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.8.0",
            "matchCriteriaId" : "F6229F48-421D-4A07-B017-8E6F07F4121E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse-theia/theia/issues/8794",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse-theia/theia/issues/8794",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28162",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-03-12T22:15:15.157",
      "lastModified" : "2024-11-21T05:59:12.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Theia versions up to and including 0.16.0, in the notification messages there is no HTML escaping, so Javascript code can run."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Theia versiones hasta 0.16.0 incluyendo, en los mensajes de notificación no se presenta un escape HTML, por lo que se puede ejecutar el código Javascript"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-830"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:theia:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.16.0",
            "matchCriteriaId" : "636CCCB3-F8BE-4506-84BA-8E7D21601BF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse-theia/theia/issues/7283",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse-theia/theia/issues/7283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20017",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-03-13T02:15:12.563",
      "lastModified" : "2024-11-21T05:45:47.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authenticated command injection vulnerability in SonicWall SMA100 allows an authenticated attacker to execute OS commands as a 'nobody' user. This vulnerability impacts SMA100 version 10.2.0.5 and earlier."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos posterior a la autenticación en SonicWall SMA100, permite a un atacante autenticado ejecutar comandos del Sistema Operativo como un usuario \"nobody\".&#xa0;Esta vulnerabilidad afecta a SMA100 versiones 10.2.0.5 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0.5",
            "matchCriteriaId" : "CDC143C4-3155-4DEF-9D80-BE14FD2295E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20018",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-03-13T02:15:12.783",
      "lastModified" : "2024-11-21T05:45:47.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A post-authenticated vulnerability in SonicWall SMA100 allows an attacker to export the configuration file to the specified email address. This vulnerability impacts SMA100 version 10.2.0.5 and earlier."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad posterior a una autenticación en SonicWall SMA100, permite a un atacante exportar el archivo de configuración a la dirección de correo electrónico especificada.&#xa0;Esta vulnerabilidad afecta a SMA100 versiones 10.2.0.5 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.2.0.5",
            "matchCriteriaId" : "CDC143C4-3155-4DEF-9D80-BE14FD2295E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28361",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-13T19:15:12.237",
      "lastModified" : "2024-11-21T05:59:35.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Storage Performance Development Kit (SPDK) before 20.01.01. If a PDU is sent to the iSCSI target with a zero length (but data is expected), the iSCSI target can crash with a NULL pointer dereference."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Storage Performance Development Kit (SPDK) versiones anteriores a 20.01.01.&#xa0;Si es enviado una PDU al destino iSCSI con una longitud cero (pero se esperan datos), el destino iSCSI puede bloquearse con una desreferencia del puntero NULL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:spdk:storage_performance_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.01.01",
            "matchCriteriaId" : "D05E8D3F-AA5D-4655-93C2-F8C13E9A8449"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/spdk/spdk/releases/tag/v21.01.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/spdk/spdk/releases/tag/v21.01.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28373",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-13T21:15:14.503",
      "lastModified" : "2024-11-21T05:59:36.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The auth_internal plugin in Tiny Tiny RSS (aka tt-rss) before 2021-03-12 allows an attacker to log in via the OTP code without a valid password. NOTE: this issue only affected the git master branch for a short time. However, all end users are explicitly directed to use the git master branch in production. Semantic version numbers such as 21.03 appear to exist, but are automatically generated from the year and month. They are not releases."
      }, {
        "lang" : "es",
        "value" : "El plugin auth_internal en Tiny Tiny RSS (también se conoce como tt-rss) antes del 12-03-2021, permite a un atacante iniciar sesión por medio del código OTP sin una contraseña válida.&#xa0;NOTA: este problema solo afectó a la rama git master por un corto tiempo.&#xa0;Sin embargo, todos los usuarios finales son explícitamente conducidos a usar la rama git master en producción.&#xa0;Los números de versión semántica como 21.03 parecen existir, pero se generan automáticamente a partir del año y el mes.&#xa0;Estos no son lanzamientos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tt-rss:tiny_tiny_rss:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-03-12",
            "matchCriteriaId" : "86843D18-CD37-47F0-9059-E2F2B8B59846"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.tt-rss.org/t/check-password-not-called-if-otp-is-enabled-update-asap-if-youre-using-2fa/4502",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.tt-rss.org/fox/tt-rss/commit/4949e1a59059d9e72ba7a98f783cec312c06c6d2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://community.tt-rss.org/t/check-password-not-called-if-otp-is-enabled-update-asap-if-youre-using-2fa/4502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.tt-rss.org/fox/tt-rss/commit/4949e1a59059d9e72ba7a98f783cec312c06c6d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T05:15:12.467",
      "lastModified" : "2024-11-21T05:59:36.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debian courier-authlib package before 0.71.1-2 for Courier Authentication Library creates a /run/courier/authdaemon directory with weak permissions, allowing an attacker to read user information. This may include a cleartext password in some configurations. In general, it includes the user's existence, uid and gids, home and/or Maildir directory, quota, and some type of password information (such as a hash)."
      }, {
        "lang" : "es",
        "value" : "El paquete Debian courier-authlib versiones anteriores a 0.71.1-2 para Courier Authentication Library, crea un directorio /run/courier/authdaemon con permisos débiles, permitiendo a un atacante leer la información del usuario.&#xa0;Esto puede incluir una contraseña de texto sin cifrar en algunas configuraciones.&#xa0;En general, incluye la existencia del usuario, uid y gids, directorio de inicio y/o Maildir, cuota y algún tipo de información de contraseña (como un hash)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:debian:courier-authlib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.71.1-2",
            "matchCriteriaId" : "F9841CEE-3EF1-46EF-AB0D-0574062A7FC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/984810",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00011.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/984810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28375",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T05:15:13.740",
      "lastModified" : "2024-11-21T05:59:36.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.6. fastrpc_internal_invoke in drivers/misc/fastrpc.c does not prevent user applications from sending kernel RPC messages, aka CID-20c40794eb85. This is a related issue to CVE-2019-2308."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.6.&#xa0;La función fastrpc_internal_invoke en el archivo drivers/misc/fastrpc.c no evita a unas aplicaciones de usuario enviar mensajes RPC del kernel, también se conoce como CID-20c40794eb85.&#xa0;Este es un problema relacionado con el CVE-2019-2308"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "5.4.106",
            "matchCriteriaId" : "B6D69D39-1E3F-4191-A336-DC619D5CA003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.24",
            "matchCriteriaId" : "1E692548-C944-4984-9823-EE1EC83F4F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.7",
            "matchCriteriaId" : "F83144BB-4FAB-40A1-8F52-8690FF516A33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMRQVOTASD3VZP6GE4JJHE27QU6FHTZ6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XAUNYDTGE6MB4NWL2SIHPCODCLET3JZB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210401-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/linus/20c40794eb85ea29852d7bc37c55713802a543d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OMRQVOTASD3VZP6GE4JJHE27QU6FHTZ6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XAUNYDTGE6MB4NWL2SIHPCODCLET3JZB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/stable/YD03ew7+6v0XPh6l%40kroah.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210401-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28378",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T06:15:12.423",
      "lastModified" : "2024-11-21T05:59:36.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gitea 1.12.x and 1.13.x before 1.13.4 allows XSS via certain issue data in some situations."
      }, {
        "lang" : "es",
        "value" : "Gitea versiones 1.12.x y versiones 1.13.x anteriores a 1.13.4, permite un ataque de tipo XSS por medio de determinados datos de problemas en algunas situaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.12.0",
            "versionEndIncluding" : "1.12.6",
            "matchCriteriaId" : "F12318F1-F60F-4F82-96FD-41FB2E36714F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitea:gitea:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.13.0",
            "versionEndExcluding" : "1.13.4",
            "matchCriteriaId" : "79997226-230B-4DEF-8E0F-98D961399559"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.gitea.io/2021/03/gitea-1.13.4-is-released/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PandatiX/CVE-2021-28378",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/14898",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.gitea.io/2021/03/gitea-1.13.4-is-released/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/PandatiX/CVE-2021-28378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-gitea/gitea/pull/14898",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T06:15:12.783",
      "lastModified" : "2024-11-21T05:59:37.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "web/upload/UploadHandler.php in Vesta Control Panel (aka VestaCP) through 0.9.8-27 and myVesta through 0.9.8-26-39 allows uploads from a different origin."
      }, {
        "lang" : "es",
        "value" : "El archivo web/upload/UploadHandler.php en Vesta Control Panel (también se conoce como VestaCP) versiones hasta 0.9.8-27 y myVesta versiones hasta 0.9.8-26-39, permite cargas desde un origen diferente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:myvestacp:myvesta:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8-26-39",
            "matchCriteriaId" : "A210CEF2-4A8A-4963-921D-47D4890EFB2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vestacp:vesta_control_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8-27",
            "matchCriteriaId" : "7A573DF2-7611-421B-A340-4E4F0CFF4701"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161836/VestaCP-0.9.8-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/myvesta/vesta/commit/3402071e950e76b79fa8672a1e09b70d3860f355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27576",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-15T09:15:12.047",
      "lastModified" : "2024-11-21T05:58:13.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If was found that the NetTest web service can be used to overload the bandwidth of a Apache OpenMeetings server. This issue was addressed in Apache OpenMeetings 6.0.0"
      }, {
        "lang" : "es",
        "value" : "Si se encontró que el servicio web NetTest, puede ser usado para sobrecargar el ancho de banda de un servidor Apache OpenMeetings.&#xa0;Este problema se solucionó en Apache OpenMeetings versión 6.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openmeetings:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "85E51375-48F0-49C6-99C4-1F82C57BCA7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r9bb615bd70a0197368f5f3ffc887162686caeb0b5fc30592a7a871e9%40%3Cuser.openmeetings.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9bb615bd70a0197368f5f3ffc887162686caeb0b5fc30592a7a871e9%40%3Cuser.openmeetings.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20179",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T13:15:14.887",
      "lastModified" : "2024-11-21T05:46:04.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in pki-core. An attacker who has successfully compromised a key could use this flaw to renew the corresponding certificate over and over again, as long as it is not explicitly revoked. The highest threat from this vulnerability is to data confidentiality and integrity."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en pki-core.&#xa0;Un atacante que haya comprometido con éxito una clave podría usar este fallo para renovar el certificado correspondiente una y otra vez, siempre que no se revoque explícitamente.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.5.0",
            "matchCriteriaId" : "35822BF7-9D76-42E1-BDFA-A8B3E8999BB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.1",
            "versionEndExcluding" : "10.8.0",
            "matchCriteriaId" : "06CFB91F-6413-4D72-83C3-03A884C0B1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.8.1",
            "versionEndExcluding" : "10.9.0",
            "matchCriteriaId" : "EF5CF10D-8285-47CD-81A4-CF05F973B17E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.9.1",
            "versionEndExcluding" : "10.10.0",
            "matchCriteriaId" : "48A1BB16-EED2-43E8-B446-1A3D86EE1256"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dogtagpki:dogtagpki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.10.1",
            "versionEndExcluding" : "10.11.0",
            "matchCriteriaId" : "3A615089-6DFC-40A8-867A-9832A21AAC2E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:certificate_system:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95575E40-9DB8-43CB-B667-46803DAE501F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1914379",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3474",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3475",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3476",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3477",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3478",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDOLFOLEIV7I4EUC3SCZBXL6E2ER7ZEN/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRE44N6P24AEDKRMWK7RPRLMCUUBRJII/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3I7BRAHLE2WWSY76W3CKFCF5WSSAE24/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1914379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dogtagpki/pki/pull/3478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDOLFOLEIV7I4EUC3SCZBXL6E2ER7ZEN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HRE44N6P24AEDKRMWK7RPRLMCUUBRJII/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R3I7BRAHLE2WWSY76W3CKFCF5WSSAE24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27208",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T13:15:14.967",
      "lastModified" : "2024-11-21T05:57:34.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code execution. Physical access and modification of the board assembly on which the Zynq-7000 SoC device mounted is needed to replace the original NAND flash memory with a NAND flash emulation device for this attack to be successful."
      }, {
        "lang" : "es",
        "value" : "Cuando se arranca un dispositivo Zync-7000 SOC desde la memoria flash nand, el controlador nand en la ROM no comprueba las entradas cuando se leen en parámetros any en la página de parámetros nand. SI un campo leído desde la página de parámetros es demasiado grande, esto causa un desbordamiento del búfer que podría conllevar a una ejecución de código arbitraria. Es necesario un acceso físico y modificación al dispositivo Zynq-7000 para reemplazar la memoria flash nand original con un emulador flash nand para que este ataque tenga éxito"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xilinx:zynq-7000s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59B1D2D0-34CB-4BAA-982C-FFEBCA5C7A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xilinx:zynq-7000s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B820E50-D48F-47C1-BC7F-2823E4948674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xilinx:zynq-7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74141029-1B75-4D78-B1AE-9FCB0BA8498B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xilinx:zynq-7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A733B279-FD2C-4F20-B220-4D42CD82AB35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.onfi.org/specifications",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.xilinx.com/support/answers/76201.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.onfi.org/specifications",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.xilinx.com/support/answers/76201.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T15:15:14.680",
      "lastModified" : "2024-11-21T05:57:03.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Argo CD before 1.8.4. Accessing the endpoint /api/version leaks internal information for the system, and this endpoint is not protected with authentication."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Argo CD versiones anteriores a 1.8.4.&#xa0;Accediendo al endpoint /api/versión se filtra información interna del sistema, y ??este endpoint no está protegido con autenticación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.12",
            "matchCriteriaId" : "9AEEA97A-CE3D-40E4-BD95-5C4892477940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.4",
            "matchCriteriaId" : "5695FFA1-BA9D-4165-9762-93BAC286BD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-pfgj-mh5m-2p48",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-pfgj-mh5m-2p48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T15:15:14.727",
      "lastModified" : "2024-11-21T05:57:03.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Argo CD before 1.8.4. Browser XSS protection is not activated due to the missing XSS protection header."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Argo CD versiones anteriores a 1.8.4.&#xa0;Una protección de XSS del navegador no está activada debido a una falta del encabezado de protección de XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.12",
            "matchCriteriaId" : "9AEEA97A-CE3D-40E4-BD95-5C4892477940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.4",
            "matchCriteriaId" : "5695FFA1-BA9D-4165-9762-93BAC286BD20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-pg99-h5gc-446r",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/compare/v1.8.3...v1.8.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/argoproj/argo-cd/security/advisories/GHSA-pg99-h5gc-446r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27891",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T15:15:15.697",
      "lastModified" : "2024-11-21T05:58:43.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Client and Server before 6.4.19 on Windows have weak key generation. ConnectSecure on Windows is affected."
      }, {
        "lang" : "es",
        "value" : "SSH Tectia Client and Server versiones anteriores a 6.4.19 en Windows, presentan una generación de claves débil.&#xa0;ConnectSecure en Windows está afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.19",
            "matchCriteriaId" : "F19AD707-E08D-4D78-AE68-46806EBABE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_connectsecure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058495B9-2E81-4400-9A70-8E58A623BA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.19",
            "matchCriteriaId" : "18B662B1-6336-41F2-A5CA-55E875E43718"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://info.ssh.com/tectia-vulnerability-cve-2021-27891",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://info.ssh.com/tectia-vulnerability-cve-2021-27891",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27892",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T15:15:15.760",
      "lastModified" : "2024-11-21T05:58:43.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected."
      }, {
        "lang" : "es",
        "value" : "SSH Tectia Client and Server versiones anteriores a 6.4.19 en Windows, permiten una escalada de privilegios locales.&#xa0;ConnectSecure en Windows está afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.19",
            "matchCriteriaId" : "F19AD707-E08D-4D78-AE68-46806EBABE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_connectsecure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058495B9-2E81-4400-9A70-8E58A623BA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.19",
            "matchCriteriaId" : "18B662B1-6336-41F2-A5CA-55E875E43718"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://info.ssh.com/tectia-vulnerability-cve-2021-27892",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://info.ssh.com/tectia-vulnerability-cve-2021-27892",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T15:15:15.837",
      "lastModified" : "2024-11-21T05:58:43.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. ConnectSecure on Windows is affected."
      }, {
        "lang" : "es",
        "value" : "SSH Tectia Client and Server versiones anteriores a 6.4.19 en Windows, permiten una escalada de privilegios locales en condiciones no estándar.&#xa0;ConnectSecure en Windows está afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.19",
            "matchCriteriaId" : "F19AD707-E08D-4D78-AE68-46806EBABE3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_connectsecure:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058495B9-2E81-4400-9A70-8E58A623BA5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ssh:tectia_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.19",
            "matchCriteriaId" : "18B662B1-6336-41F2-A5CA-55E875E43718"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://info.ssh.com/tectia-vulnerability-cve-2021-27893",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://info.ssh.com/tectia-vulnerability-cve-2021-27893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20440",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-15T16:15:13.217",
      "lastModified" : "2024-11-21T05:46:35.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM API Connect 10.0.0.0, and 2018.4.1.0 through 2018.4.1.13 does not restrict member registration to the intended recepient. An attacker who is a valid user in the user registry used by API Manager can use a stolen invitation link and register themselves as a member of an API provider organization. IBM X-Force ID: 196536."
      }, {
        "lang" : "es",
        "value" : "IBM API Connect versiones 10.0.0.0 y 2018.4.1.0 hasta 2018.4.1.13, no restringe el registro de miembros al destinatario previsto.&#xa0;Un atacante que sea un usuario válido en el registro de usuarios usado por API Manager puede usar un enlace de invitación robado y registrarse como miembro de una organización proveedora de API.&#xa0;IBM X-Force ID: 196536"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2018.4.1.0",
            "versionEndIncluding" : "2018.4.1.13",
            "matchCriteriaId" : "403B95C9-40E9-4F9D-AE7D-5B3BC2ECE8A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:api_connect:10.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF48BB29-806D-4613-A1D8-77462461245E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196536",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6430107",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6430107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3167",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T16:15:13.810",
      "lastModified" : "2024-11-21T06:21:02.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Cloudera Data Engineering (CDE) 1.3.0, JWT authentication tokens are exposed to administrators in virtual cluster server logs."
      }, {
        "lang" : "es",
        "value" : "En Cloudera Data Engineering (CDE) versión1.3.0, los tokens de autenticación JWT son expuestos para administradores en los registros del servidor del clúster virtual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudera:data_engineering:1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9435D375-4895-417E-AC98-654D1350ADEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.cloudera.com/knowledge/TSB-2021-466-CDE-authentication-tokens-exposed-in-pod-and?id=310163",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cloudera.com/data-engineering/cloud/release-notes/topics/cde-general-known-issues.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cloudera.com/documentation/other/security-bulletins/topics/Security-Bulletin.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://my.cloudera.com/knowledge/TSB-2021-466-CDE-authentication-tokens-exposed-in-pod-and?id=310163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23355",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-15T17:15:21.410",
      "lastModified" : "2024-11-21T05:51:33.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package ps-kill. If (attacker-controlled) user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the index.js file. PoC (provided by reporter): var ps_kill = require('ps-kill'); ps_kill.kill('$(touch success)',function(){});"
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete ps-kill.&#xa0;Si se otorga una entrada del usuario (controlada por el atacante) a la función kill, es posible que un atacante ejecute comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada en el archivo index.js.&#xa0;PoC (proporcionada por el reportero): var ps_kill = require('ps-kill'); ps_kill.kill('$(touch success)',function(){});"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ps-kill_project:ps-kill:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "B2D48D83-1E7D-4A84-893B-FF480898EF9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://snyk.io/vuln/SNYK-JS-PSKILL-1078529",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PSKILL-1078529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23356",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-15T17:15:21.517",
      "lastModified" : "2024-11-21T05:51:33.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package kill-process-by-name. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization in the index.js file."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete kill-process-by-name.&#xa0;Si se otorga una entrada del usuario (controlada por el atacante), es posible que un atacante ejecute comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada en el archivo index.js"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kill-process-by-name_project:kill-process-by-name:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "F7527BB5-D638-4E41-B5B5-D9A60214306E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLPROCESSBYNAME-1078534",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLPROCESSBYNAME-1078534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23357",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-15T17:15:21.597",
      "lastModified" : "2024-11-21T05:51:34.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is able to delete arbitrary JSON files on the disk where Tyk is running via the management API. The APIID is provided by the user and this value is then used to create a file on disk. If there is a file found with the same name then it will be deleted and then re-created with the contents of the API creation request."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete github.com/tyktechnologies/tyk/gateway son vulnerables a un Salto de Directorio por medio de la función handleAddOrUpdateApi.&#xa0;Esta función puede eliminar archivos JSON arbitrarios en el disco donde se ejecuta Tyk mediante la API de administración.&#xa0;El ID de la API lo proporciona el usuario y este valor es usado para crear un archivo en el disco.&#xa0;Si es encontrado un archivo con el mismo nombre, se eliminará y luego se volverá a crear con el contenido de la petición de creación de API"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tyk:tyk:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31F492C7-6DF7-4CCA-9B23-C2063688FDB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TykTechnologies/tyk/issues/3390",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTYKTECHNOLOGIESTYKGATEWAY-1078516",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk/issues/3390",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTYKTECHNOLOGIESTYKGATEWAY-1078516",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25667",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:21.690",
      "lastModified" : "2024-11-21T05:55:15.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in RUGGEDCOM RM1224 (All versions >= V4.3 and < V6.4), SCALANCE M-800 (All versions >= V4.3 and < V6.4), SCALANCE S615 (All versions >= V4.3 and < V6.4), SCALANCE SC-600 Family (All versions >= V2.0 and < V2.1.3), SCALANCE XB-200 (All versions < V4.1), SCALANCE XC-200 (All versions < V4.1), SCALANCE XF-200BA (All versions < V4.1), SCALANCE XM400 (All versions < V6.2), SCALANCE XP-200 (All versions < V4.1), SCALANCE XR-300WG (All versions < V4.1), SCALANCE XR500 (All versions < V6.2). Affected devices contain a stack-based buffer overflow vulnerability in the handling of STP BPDU frames that could allow a remote attacker to trigger a denial-of-service condition or potentially remote code execution. Successful exploitation requires the passive listening feature of the device to be active."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en RUGGEDCOM RM1224 (Todas las versiones posteriores e incluyendo a V4.3 y anteriores a V6.4), SCALANCE M-800 (Todas las versiones posteriores e incluyendo a V4.3 y anteriores a V6.4), SCALANCE S615 (Todas las versiones posteriores e incluyendo a V4.3 y anteriores a V6.4), SCALANCE SC-600 Family (Todas las versiones posteriores e incluyendo a V2.0 y anteriores a V2.1.3), SCALANCE XB-200 (Todas las versiones anteriores a V4.1), SCALANCE XC-200 (Todas las versiones anteriores a V4.1), SCALANCE XF-200BA (Todas las versiones anteriores a V4.1), SCALANCE XM400 (Todas las versiones anteriores a V6.2), SCALANCE XP-200 (Todas las versiones anteriores a V4.1), SCALANCE XR-300WG (Todas las versiones anteriores a V4.1), SCALANCE XR500 (Todas las versiones anteriores a V6.2). Unos dispositivos afectados contienen una vulnerabilidad de desbordamiento de búfer en la región stack de la memoria en el manejo de frames STP BPDU que podría permitir a un atacante remoto desencadenar una condición de denegación de servicio o una ejecución de código potencialmente remoto. Una explotación con éxito requiere que la funcionalidad listening pasiva del dispositivo esté activa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "0EA73ED4-CA84-4499-8B05-BA394552C91B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284DF779-D900-48B4-A177-7281CD445AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "81E8F8B9-8CE5-45DD-8F66-00C2CD611158"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB9921A-5204-40A3-88AB-B7755F5C6875"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "9E518F61-3BA5-4C49-B9F6-4F72333C6A59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E917CBBB-EF41-4113-B0CA-EB91889235E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x300wg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "147C2E5A-7085-4E63-8ED6-BDE56A6E333F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x300wg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA0ECC58-F717-4F4A-AC8D-3F0244666E73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xm400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "371C4BA0-42A9-4BA4-BE21-7C5D0F9E837B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xm400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC408A8-903F-43A2-9D05-65AD4482FDBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2",
            "matchCriteriaId" : "481EA136-48B6-46CA-8534-5F8F0E794F57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "080E722F-FCD4-4967-86EE-151ADC5702E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "35E28605-DD44-42F2-9076-2ED1D6205043"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc622-2c_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "28F05973-CB28-46C2-BA62-654516FE7603"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc622-2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FEE5FA-B141-4E5F-8673-363089262530"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "CB080626-09C0-45CA-BE56-B3988E0E59C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc632-2c_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "08F55CDF-84A4-4356-B81A-F78F50B0CC1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc632-2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A79836B-5EC1-40AF-8A57-9657EF6758E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "D567B739-8271-4A43-9E1A-9FAF983DCBA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc636-2c_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "DA160BE5-8790-4075-AE13-15569F9A5379"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc636-2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCB9BD17-7F1F-42E9-831F-EB907F9BC214"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "23B81A14-B7A0-441E-998E-7F7B75088788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc642-2c_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "5323BADF-8F3F-4B0B-8875-6D2E4963B8CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc642-2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10C7D54A-27B4-4195-8131-DD5380472A75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.0",
            "matchCriteriaId" : "A90B1197-62AD-456C-99AF-8EC48461BDC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc646-2c_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "CCD4C9CA-211C-4B1F-BDBD-C612DA76B0B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc646-2c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54AF1E6-0E52-447C-8946-18716D30EBE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "999A853F-1B20-4698-8391-805FE7055DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB3CC2D-CBF0-4F53-A412-01BBC39E34C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "C098F765-4BA2-4E59-9875-35FB5B83B6EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7719E194-EE3D-4CE8-8C85-CF0D82A553AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "7CFE7041-F84D-40AE-9102-48637F000214"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58377C58-F660-4C17-A3CB-BFC2F28848CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1",
            "matchCriteriaId" : "5E81AEF3-1F99-4728-B3E1-FFBB22DA64E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F962FC7-0616-467F-8CCA-ADEA224B5F7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-979775.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-068-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25672",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:21.767",
      "lastModified" : "2024-11-21T05:55:16.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Mendix Forgot Password Appstore module (All Versions < V3.2.1). The Forgot Password Marketplace module does not properly control access. An attacker could take over accounts."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en el módulo Mendix Forgot Password Appstore (Todas las versiones anteriores a V3.2.1).&#xa0;El módulo de Marketplace Forgot Password no controla el acceso apropiadamente.&#xa0;Un atacante podría apoderarse de las cuentas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:forgot_password:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "E4941CD2-258F-47BE-A0AC-59D9C6364867"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-917115.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-917115.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25673",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:21.847",
      "lastModified" : "2024-11-21T05:55:16.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, the application could enter an infinite loop, become unresponsive and must be restarted to restore the service."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en SIMATIC S7-PLCSIM versión V5.4 (todas las versiones).&#xa0;Un atacante con acceso local al sistema podría causar una condición de Denegación de Servicio en la aplicación cuando es usada para abrir un archivo especialmente diseñado.&#xa0;Como consecuencia, la aplicación podría entrar en un bucle infinito, deja de responder y debe reiniciarse para restaurar el servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_s7-plcsim:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB74C10-6967-420B-8C4F-81838A54050D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25674",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:21.927",
      "lastModified" : "2024-11-21T05:55:16.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a NULL pointer deference condition could cause the application to terminate unexpectedly and must be restarted to restore the service."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en SIMATIC S7-PLCSIM versión V5.4 (todas las versiones).&#xa0;Un atacante con acceso local al sistema podría causar una condición de Denegación de Servicio en la aplicación cuando es usada para abrir un archivo especialmente diseñado.&#xa0;Como consecuencia, una condición de deferencia del puntero NULL podría causar a la aplicación terminará inesperadamente y tuviera que ser reiniciada para restaurar el servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_s7-plcsim:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5964421-8D14-4D38-B36A-EFC0E676BE65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25675",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:22.003",
      "lastModified" : "2024-11-21T05:55:16.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SIMATIC S7-PLCSIM V5.4 (All versions). An attacker with local access to the system could cause a Denial-of-Service condition in the application when it is used to open a specially crafted file. As a consequence, a divide by zero operation could occur and cause the application to terminate unexpectedly and must be restarted to restore the service."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en SIMATIC S7-PLCSIM versión V5.4 (todas las versiones).&#xa0;Un atacante con acceso local al sistema podría causar una condición de Denegación de Servicio en la aplicación cuando es usada para abrir un archivo especialmente diseñado.&#xa0;Como consecuencia, podría ocurrir una operación de división por cero y causar a la aplicación finalizar inesperadamente y deba reiniciarse para restaurar el servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_s7-plcsim:5.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5964421-8D14-4D38-B36A-EFC0E676BE65"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-256092.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25676",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:22.127",
      "lastModified" : "2024-11-21T05:55:16.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in RUGGEDCOM RM1224 (V6.3), SCALANCE M-800 (V6.3), SCALANCE S615 (V6.3), SCALANCE SC-600 (All Versions >= V2.1 and < V2.1.3). Multiple failed SSH authentication attempts could trigger a temporary Denial-of-Service under certain conditions. When triggered, the device will reboot automatically."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en RUGGEDCOM RM1224 (versión V6.3), SCALANCE M-800 (versión V6.3), SCALANCE S615 (versión V6.3), SCALANCE SC-600 (Todas las versiones  posteriores a V2.1 y anteriores a V2.1.3) .&#xa0;Múltiples intentos fallidos de autenticación SSH podrían desencadenar una Denegación de Servicio temporal en determinadas condiciones.&#xa0;Cuando es desencadenada, el dispositivo se reiniciará automáticamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rm1224_firmware:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041588BC-B3E6-400F-AF25-869D38EE3A1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom_rm1224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284DF779-D900-48B4-A177-7281CD445AB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_m-800_firmware:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57AE2532-01C4-4E62-836B-48FA7B0D932A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB9921A-5204-40A3-88AB-B7755F5C6875"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s615_firmware:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2B9767D-9249-4524-BA86-484610EDF9D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E917CBBB-EF41-4113-B0CA-EB91889235E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "FABE752D-A89A-4C2A-980E-AC75E471BA51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725C671B-D7A0-48CF-8A31-5F9C4173F1DD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-296266.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-068-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27380",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:22.207",
      "lastModified" : "2024-11-21T05:57:52.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12532)"
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Solid Edge SE2020 (Todas las versiones anteriores a SE2020MP13), Solid Edge SE2021 (Todas las versiones anteriores a SE2021MP4). Las aplicaciones afectadas carecen de una comprobación apropiada de los datos proporcionados por el usuario cuando se analizan archivos PAR. Esto podría resultar en una escritura fuera de límites más allá del final de una estructura asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. (ZDI-CAN-12532)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "se2020",
            "matchCriteriaId" : "7AF39DFE-A31B-4324-BB62-0B446ACA04B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:-:*:*:*:*:*:*",
            "matchCriteriaId" : "07440B76-B975-4946-8A97-38C564D240E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack1:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0A748E-BB6F-4604-8024-F50DC0C20EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack10:*:*:*:*:*:*",
            "matchCriteriaId" : "F4F37267-6B37-46A4-B9F9-4264BEC922D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack11:*:*:*:*:*:*",
            "matchCriteriaId" : "CB1DC54B-E715-4425-B6B6-900F2CFBCE03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack12:*:*:*:*:*:*",
            "matchCriteriaId" : "1CC1A49B-907A-4317-B7A7-4E85D9C0E386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack2:*:*:*:*:*:*",
            "matchCriteriaId" : "2F495722-39BD-4BA1-A643-C7D0BA81CC21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B776512-BF3D-4F70-BD58-AFF8E1B03EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack4:*:*:*:*:*:*",
            "matchCriteriaId" : "99E05299-50FD-4292-9978-8E05C1483FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack5:*:*:*:*:*:*",
            "matchCriteriaId" : "2447D05B-2634-4895-B7B0-6F7DBB9D2EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack6:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBD39F3-790F-4017-A57E-6EFC314F0557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack7:*:*:*:*:*:*",
            "matchCriteriaId" : "B4387BFA-8A98-433E-9EF7-B29226C195A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack8:*:*:*:*:*:*",
            "matchCriteriaId" : "9E380F66-C11C-472B-9B71-7CB4AF4FABDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2020:maintenance_pack9:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF4ACE1-B069-4007-8142-7F90015BBE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2021:-:*:*:*:*:*:*",
            "matchCriteriaId" : "39D237BD-EE55-4B40-ABC3-194C4BF7C6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:*:*:*:*:*:*",
            "matchCriteriaId" : "49F5649A-349C-42C6-AFFF-CEE1ABC14E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack2:*:*:*:*:*:*",
            "matchCriteriaId" : "756343AA-DB57-40F7-94FA-84BFCDEB6159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack3:*:*:*:*:*:*",
            "matchCriteriaId" : "36B0DD28-653E-4069-AB5A-38F8EFEB36CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27381",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-03-15T17:15:22.300",
      "lastModified" : "2024-11-21T05:57:52.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2020 (All Versions < SE2020MP13), Solid Edge SE2021 (All Versions < SE2021MP3). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds read past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12534)"
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Solid Edge SE2020 (Todas las versiones anteriores a SE2020MP13), Solid Edge SE2021 (Todas las versiones anteriores a SE2021MP3).&#xa0;Las aplicaciones afectadas carecen de una comprobación apropiada de los datos proporcionados por el usuario cuando se analizan archivos PAR.&#xa0;Esto podría resultar en una lectura fuera de límites más allá del final de una estructura asignada.&#xa0;Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;(ZDI?CAN?12534)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "se2021",
            "matchCriteriaId" : "576A303A-66CA-4694-AA54-9EB0137C24F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2021:-:*:*:*:*:*:*",
            "matchCriteriaId" : "39D237BD-EE55-4B40-ABC3-194C4BF7C6CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge:se2021:maintenance_pack1:*:*:*:*:*:*",
            "matchCriteriaId" : "49F5649A-349C-42C6-AFFF-CEE1ABC14E67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-715184.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27695",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T17:15:22.377",
      "lastModified" : "2024-11-21T05:58:26.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any \"Add\" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site scripting (XSS) almacenado en openMAINT versión 2.1-3.3-b, permiten a atacantes remotos inyectar script web o HTML arbitrario por medio de cualquier sección \"Add\", tal y como Add Card Building &amp; Floor, u otras en los parámetros de Name y Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmaint:openmaint:2.1-3.3-b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCCF34B-387E-480D-9648-681FFF7AB12E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://openmaint.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49649",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://openmaint.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27817",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T17:15:22.440",
      "lastModified" : "2024-11-21T05:58:36.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote command execution vulnerability in shopxo 1.9.3 allows an attacker to upload malicious code generated by phar where the suffix is JPG, which is uploaded after modifying the phar suffix."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos remota  en shopxo versión 1.9.3, permite a un atacante cargar código malicioso generado mediante phar donde el sufijo es JPG, que es cargado después de modificar el sufijo phar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shopxo:shopxo:1.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC0D126-51F1-4F17-8547-4925F29EB910"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gongfuxiang/shopxo",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/h4ckdepy/vuls/blob/main/shopxo.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/gongfuxiang/shopxo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/h4ckdepy/vuls/blob/main/shopxo.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27889",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T17:15:22.517",
      "lastModified" : "2024-11-21T05:58:42.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting (XSS) vulnerability in MyBB before 1.8.26 via Nested Auto URL when parsing messages."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site Scripting (XSS) en MyBB versiones anteriores a  1.8.26 a través de Nested Auto URL cuando se analizan los mensajes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.26",
            "matchCriteriaId" : "E92578FF-AAA5-4F8F-8D78-0662DB9BB02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161908/MyBB-1.8.25-Remote-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/mybb-remote-code-execution-chain",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-xhj7-3349-mqcm",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161908/MyBB-1.8.25-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/mybb-remote-code-execution-chain",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-xhj7-3349-mqcm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20286",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T18:15:17.783",
      "lastModified" : "2024-11-21T05:46:17.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libnbd 1.7.3. An assertion failure in nbd_unlocked_opt_go in ilb/opt.c may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en libnbd versión 1.7.3.&#xa0;Un error de aserción en la función nbd_unlocked_opt_go en la biblioteca ilb/opt.c puede causar una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:libnbd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "5629A61B-5285-46A6-9615-8E997E0C3E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.3.0:*:*:*:advanced_virtualization:*:*:*",
            "matchCriteriaId" : "436B0037-9557-42FE-AB8E-B6702FAFBBBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1934727",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/nbdkit/libnbd/-/commit/fb4440de9cc76e9c14bd3ddf3333e78621f40ad0",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1934727",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/nbdkit/libnbd/-/commit/fb4440de9cc76e9c14bd3ddf3333e78621f40ad0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22191",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-15T18:15:17.863",
      "lastModified" : "2024-11-21T05:49:40.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper URL handling in Wireshark 3.4.0 to 3.4.3 and 3.2.0 to 3.2.11 could allow remote code execution via via packet injection or crafted capture file."
      }, {
        "lang" : "es",
        "value" : "Un manejo inapropiado de la URL en Wireshark versiones 3.4.0 hasta 3.4.3 y versiones 3.2.0 hasta 3.2.1,1 podría permitir una ejecución de código remota por medio de una inyección de paquetes o un archivo de captura diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.11",
            "matchCriteriaId" : "5CE38FCA-83CA-4E4D-B09F-294F85E9F9AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndIncluding" : "3.4.3",
            "matchCriteriaId" : "F4B093C9-8552-40D9-A298-68B9D496DBD8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17232",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-03.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22191.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/03/msg00041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-03.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27890",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T18:15:18.707",
      "lastModified" : "2024-11-21T05:58:42.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerablity in MyBB before 1.8.26 via theme properties included in theme XML files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en MyBB versiones anteriores a 1.8.26, mediante las propiedades del tema incluyendo en los archivos XML del tema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.26",
            "matchCriteriaId" : "E92578FF-AAA5-4F8F-8D78-0662DB9BB02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161908/MyBB-1.8.25-Remote-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/mybb-remote-code-execution-chain",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-r34m-ccm8-mfhq",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161908/MyBB-1.8.25-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/mybb-remote-code-execution-chain",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-r34m-ccm8-mfhq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27946",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T18:15:18.767",
      "lastModified" : "2024-11-21T05:58:53.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in MyBB before 1.8.26 via poll vote count. (issue 1 of 3)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en MyBB, versiones anteriores a 1.8.26, mediante el recuento de votos de la encuesta.&#xa0;(número 1 de 3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.26",
            "matchCriteriaId" : "E92578FF-AAA5-4F8F-8D78-0662DB9BB02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161918/MyBB-1.8.25-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-23m9-w75q-ph4p",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161918/MyBB-1.8.25-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-23m9-w75q-ph4p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27947",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T18:15:18.830",
      "lastModified" : "2024-11-21T05:58:53.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in MyBB before 1.8.26 via the Copy Forum feature in Forum Management. (issue 2 of 3)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en MyBB versiones anteriores a 1.8.26, por medio de la funcionalidad Copy Forum en Forum Management.&#xa0;(número 2 de 3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.26",
            "matchCriteriaId" : "E92578FF-AAA5-4F8F-8D78-0662DB9BB02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-jjx8-8mcp-7h65",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-jjx8-8mcp-7h65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27948",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T18:15:18.893",
      "lastModified" : "2024-11-21T05:58:53.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection vulnerability in MyBB before 1.8.26 via User Groups. (issue 3 of 3)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en MyBB versiones anteriores a 1.8.26 mediante User Groups.&#xa0;(número 3 de 3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.26",
            "matchCriteriaId" : "E92578FF-AAA5-4F8F-8D78-0662DB9BB02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-3p9w-2q65-r6g2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-3p9w-2q65-r6g2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27949",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T18:15:18.957",
      "lastModified" : "2024-11-21T05:58:53.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site Scripting vulnerability in MyBB before 1.8.26 via Custom moderator tools."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site Scripting en MyBB versiones anteriores a 1.8.26, por medio de las herramientas de moderación Custom"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mybb:mybb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.26",
            "matchCriteriaId" : "E92578FF-AAA5-4F8F-8D78-0662DB9BB02C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-cmmr-39v8-8rx2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mybb/mybb/security/advisories/GHSA-cmmr-39v8-8rx2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28363",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T18:15:19.017",
      "lastModified" : "2024-11-21T05:59:35.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies. The initial connection to the HTTPS proxy (if an SSLContext isn't given via proxy_config) doesn't verify the hostname of the certificate. This means certificates for different servers that still validate properly with the default urllib3 SSLContext will be silently accepted."
      }, {
        "lang" : "es",
        "value" : "La biblioteca urllib3 versiones 1.26.x anteriores a 1.26.4 para Python, omite una comprobación del certificado SSL en algunos casos que involucran HTTPS a proxies HTTPS.&#xa0;La conexión inicial al proxy HTTPS (si no se proporciona un SSLContext por medio de proxy_config) no verifica el nombre de host del certificado.&#xa0;Esto significa que los certificados para diferentes servidores que aún se comprueban apropiadamente con el urllib3 SSLContext predeterminado serán aceptados silenciosamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:urllib3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.26.0",
            "versionEndExcluding" : "1.26.4",
            "matchCriteriaId" : "E96214AF-6F58-4B98-9C24-CF7917C431DB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/urllib3/urllib3/commit/8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/urllib3/urllib3/commits/main",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/urllib3/urllib3/security/advisories/GHSA-5phf-pp7p-vc2r",
        "source" : "cve@mitre.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S65ZQVZ2ODGB52IC7VJDBUK4M5INCXL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://pypi.org/project/urllib3/1.26.4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-36",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0007/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/urllib3/urllib3/commit/8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/urllib3/urllib3/commits/main",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/urllib3/urllib3/security/advisories/GHSA-5phf-pp7p-vc2r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4S65ZQVZ2ODGB52IC7VJDBUK4M5INCXL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pypi.org/project/urllib3/1.26.4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23879",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-03-15T19:15:13.323",
      "lastModified" : "2024-11-21T05:51:59.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unquoted service path vulnerability in McAfee Endpoint Product Removal (EPR) Tool prior to 21.2 allows local administrators to execute arbitrary code, with higher-level privileges, via execution from a compromised folder. The tool did not enforce and protect the execution path. Local admin privileges are required to place the files in the required location."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ruta de servicio no citada en la herramienta McAfee Endpoint Product Removal (EPR) versiones anteriores a 21.2, permite a administradores locales ejecutar código arbitrario, con privilegios de nivel superior, por medio de una ejecución desde una carpeta comprometida.&#xa0;La herramienta no aplicó ni protegió la ruta de ejecución.&#xa0;Son requeridos privilegios de administrador local para poner los archivos en la ubicación requerida"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:endpoint_product_removal_tool:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "1187BDD8-B299-4DAC-AE82-F6F520CCED16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10351",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T19:15:13.447",
      "lastModified" : "2024-11-21T06:21:00.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability on the Delete Personal Data page in Cryptshare Server before 4.8.0 allows an attacker to inject arbitrary web script or HTML via the user name. The issue is fixed with the version 4.8.1"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en la página Delete Personal Data en Cryptshare Server versiones anteriores a 4.8.0, permite a un atacante inyectar script web o HTML arbitrario por medio del nombre de usuario.&#xa0;El problema es corregido con la versión 4.8.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cryptshare:cryptshare_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.0",
            "matchCriteriaId" : "45ADB0AF-71BD-46FD-AD1F-06294397EE57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.cryptshare.com/display/CSM/Update+from+v4.7.1+to+v4.8.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wiki.cryptshare.com/display/CSM/Update+from+v4.7.1+to+v4.8.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20279",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T22:15:13.140",
      "lastModified" : "2024-11-21T05:46:16.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ID number user profile field required additional sanitizing to prevent a stored XSS risk in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17."
      }, {
        "lang" : "es",
        "value" : "El campo ID number user profile requería un saneamiento adicional para evitar un riesgo de tipo XSS almacenado en moodle versiones anteriores a 3.10.2, 3.9.5, 3.8.8, 3.5.17"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.17",
            "matchCriteriaId" : "584A879A-4956-4F12-81F7-D0C077B52C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "A9B97B7B-DB0F-47A3-B8B3-6F9650206EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "B3EBDDDC-1C09-48CE-B20C-FE5F8CAB253B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "54845DBB-5E10-410F-83B7-04123F7C9019"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939033",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419650",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939033",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419650",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20280",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T22:15:13.203",
      "lastModified" : "2024-11-21T05:46:16.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Text-based feedback answers required additional sanitizing to prevent stored XSS and blind SSRF risks in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17."
      }, {
        "lang" : "es",
        "value" : "Las respuestas de retroalimentación basadas en texto requirieron saneamiento adicional para prevenir un ataque de tipo XSS almacenado y riesgos SSRF ciegos en moodle versiones anteriores a 3.10.2, 3.9.5, 3.8.8, 3.5.17"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.17",
            "matchCriteriaId" : "584A879A-4956-4F12-81F7-D0C077B52C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "A9B97B7B-DB0F-47A3-B8B3-6F9650206EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "B3EBDDDC-1C09-48CE-B20C-FE5F8CAB253B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "54845DBB-5E10-410F-83B7-04123F7C9019"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164817/Moodle-Cross-Site-Scripting-Server-Side-Request-Forgery.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939037",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGOMHMYM3WICJ6D6U22Z6LPJGT5A6MZM/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419651",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164817/Moodle-Cross-Site-Scripting-Server-Side-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGOMHMYM3WICJ6D6U22Z6LPJGT5A6MZM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20281",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T22:15:13.250",
      "lastModified" : "2024-11-21T05:46:16.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "It was possible for some users without permission to view other users' full names to do so via the online users block in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17."
      }, {
        "lang" : "es",
        "value" : "Fue posible que algunos usuarios sin permiso para visualizar los nombres completos de otros usuarios lo hicieran por medio del bloque de usuarios en línea en moodle versiones anteriores a 3.10.2, 3.9.5, 3.8.8, 3.5.17"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.17",
            "matchCriteriaId" : "584A879A-4956-4F12-81F7-D0C077B52C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "A9B97B7B-DB0F-47A3-B8B3-6F9650206EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "B3EBDDDC-1C09-48CE-B20C-FE5F8CAB253B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "54845DBB-5E10-410F-83B7-04123F7C9019"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939041",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419652",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419652",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20282",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T22:15:13.327",
      "lastModified" : "2024-11-21T05:46:16.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When creating a user account, it was possible to verify the account without having access to the verification email link/secret in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17."
      }, {
        "lang" : "es",
        "value" : "Cuando se crea una cuenta de usuario, era posible verificar la cuenta sin tener acceso al enlace/secreto del correo electrónico de comprobación en moodle versiones anteriores a 3.10.2, 3.9.5, 3.8.8, 3.5.17"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.17",
            "matchCriteriaId" : "584A879A-4956-4F12-81F7-D0C077B52C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "A9B97B7B-DB0F-47A3-B8B3-6F9650206EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "B3EBDDDC-1C09-48CE-B20C-FE5F8CAB253B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "54845DBB-5E10-410F-83B7-04123F7C9019"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419653",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20283",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T22:15:13.373",
      "lastModified" : "2024-11-21T05:46:16.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web service responsible for fetching other users' enrolled courses did not validate that the requesting user had permission to view that information in each course in moodle before 3.10.2, 3.9.5, 3.8.8, 3.5.17."
      }, {
        "lang" : "es",
        "value" : "El servicio web responsable de obtener los cursos inscritos de otros usuarios no comprobó que el usuario solicitante tuviera permiso para visualizar esa información en cada curso en moodle versiones anteriores a 3.10.2, 3.9.5, 3.8.8, 3.5.17"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.5.0",
            "versionEndExcluding" : "3.5.17",
            "matchCriteriaId" : "584A879A-4956-4F12-81F7-D0C077B52C92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "A9B97B7B-DB0F-47A3-B8B3-6F9650206EB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "B3EBDDDC-1C09-48CE-B20C-FE5F8CAB253B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.2",
            "matchCriteriaId" : "54845DBB-5E10-410F-83B7-04123F7C9019"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939051",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419654",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939051",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://moodle.org/mod/forum/discuss.php?d=419654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24029",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-03-15T22:15:13.530",
      "lastModified" : "2024-11-21T05:52:14.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A packet of death scenario is possible in mvfst via a specially crafted message during a QUIC session, which causes a crash via a failed assertion. Per QUIC specification, this particular message should be treated as a connection error. This issue affects mvfst versions prior to commit a67083ff4b8dcbb7ee2839da6338032030d712b0 and proxygen versions prior to v2021.03.15.00."
      }, {
        "lang" : "es",
        "value" : "Un paquete de escenario death es posible en mvfst por medio de un mensaje especialmente diseñado durante una sesión QUIC, lo que causa un bloqueo por medio de un fallo de aserción.&#xa0;Según la especificación QUIC, este mensaje en particular debe tratarse como un error de conexión.&#xa0;Este problema afecta a las versiones de mvfst anteriores al commit a67083ff4b8dcbb7ee2839da6338032030d712b0 y versiones de proxygen anteriores a v2021.03.15.00"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:mvfst:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-03-13",
            "matchCriteriaId" : "D48024F5-694D-40A0-AAC5-8F3E127E1CCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:proxygen:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.03.15.00",
            "matchCriteriaId" : "4855309D-53DF-44FE-B80D-D0D3E2425D32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facebookincubator/mvfst/commit/a67083ff4b8dcbb7ee2839da6338032030d712b0",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24029",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/facebookincubator/mvfst/commit/a67083ff4b8dcbb7ee2839da6338032030d712b0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26987",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2021-03-15T22:15:13.813",
      "lastModified" : "2024-11-21T05:57:08.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Element Plug-in for vCenter Server incorporates SpringBoot Framework. SpringBoot Framework versions prior to 1.3.2 are susceptible to a vulnerability which when successfully exploited could lead to Remote Code Execution. All versions of Element Plug-in for vCenter Server, Management Services versions prior to 2.17.56 and Management Node versions through 12.2 contain vulnerable versions of SpringBoot Framework."
      }, {
        "lang" : "es",
        "value" : "Element Plug-in para vCenter Server incorpora SpringBoot Framework.&#xa0;Las versiones de SpringBoot Framework anteriores a 1.3.2 son susceptibles a una vulnerabilidad que, cuando es explotada con éxito, podría conllevar a una ejecución de código remota.&#xa0;Todas las versiones de Element Plug-in para vCenter Server, las versiones de Management Services anteriores a 2.17.56 y versiones de Management Node hasta 12.2 contienen versiones vulnerables de SpringBoot Framework"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:spring_boot:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "3579E684-2D41-4FFC-8178-E1E8D1FA6044"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB95AEBA-93A7-42E2-971B-F9ABA00C65B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:management_services_for_element_software_and_netapp_hci:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.17.56",
            "matchCriteriaId" : "795534FF-3519-4D0D-8366-7FD320FC08EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.2",
            "matchCriteriaId" : "32B0AF18-0C65-41F8-AA40-58DBACA15859"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210315-0001/",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210315-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3418",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-15T22:15:13.907",
      "lastModified" : "2024-11-21T06:21:27.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw is a reintroduction of CVE-2020-15705 and only affects grub2 versions prior to 2.06 and upstream and distributions using the shim_lock mechanism."
      }, {
        "lang" : "es",
        "value" : "Si los certificados que firmaron grub están instalados en db, grub puede ser arrancado directamente. Entonces arrancará cualquier kernel sin comprobación de firma. El kernel arrancado pensará que ha sido arrancado en modo secureboot e implementará el bloqueo, aunque podría haber sido manipulado. Este fallo es una reintroducción de CVE-2020-15705 y sólo afecta a las versiones de grbu2 anteriores a la 2.06 y a las distribuciones que usan el mecanismo shim_lock"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-281"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:grub2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.06",
            "matchCriteriaId" : "01F8D62F-70BB-4718-A095-D68540C17EEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1933757",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1933757",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-15T23:15:12.703",
      "lastModified" : "2024-11-21T05:57:38.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ExpressionEngine before 5.4.2 and 6.x before 6.0.3 allows PHP Code Injection by certain authenticated users who can leverage Translate::save() to write to an _lang.php file under the system/user/language directory."
      }, {
        "lang" : "es",
        "value" : "ExpressionEngine versiones anteriores a 5.4.2 y versiones 6.x anteriores a 6.0.3, permite una inyección de código PHP por parte de determinados usuarios autenticados que pueden aprovechar a la función Translate::save() para escribir en un archivo _lang.php en el directorio system/user/language"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.2",
            "matchCriteriaId" : "5A96212E-D52F-41B5-997C-F4B973894748"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expressionengine:expressionengine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.3",
            "matchCriteriaId" : "839B032C-0093-4F93-AB5E-269A7EDB2644"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://karmainsecurity.com/KIS-2021-03",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161805/ExpressionEngine-6.0.2-PHP-Code-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/32",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://expressionengine.com/features",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1093444",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://karmainsecurity.com/KIS-2021-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161805/ExpressionEngine-6.0.2-PHP-Code-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://expressionengine.com/features",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1093444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21191",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-16T15:15:12.953",
      "lastModified" : "2024-11-21T05:47:44.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebRTC in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en WebRTC en Google Chrome versiones anteriores a 89.0.4389.90, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.90",
            "matchCriteriaId" : "66251C61-17B9-4437-B3D7-75A75BCCE0FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1167357",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1167357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21192",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-16T15:15:13.093",
      "lastModified" : "2024-11-21T05:47:44.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in tab groups in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento del búfer de la pila en tab groups en Google Chrome versiones anteriores a 89.0.4389.90, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.90",
            "matchCriteriaId" : "66251C61-17B9-4437-B3D7-75A75BCCE0FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1181387",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1181387",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21193",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-03-16T15:15:13.157",
      "lastModified" : "2025-10-24T21:00:22.890",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome versiones anteriores a 89.0.4389.90, permitía a un atacante remoto explotar la corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium Blink Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.90",
            "matchCriteriaId" : "66251C61-17B9-4437-B3D7-75A75BCCE0FD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1186287",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1186287",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21193",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T15:15:13.843",
      "lastModified" : "2024-11-21T05:59:48.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Varnish varnish-modules before 0.17.1 allows remote attackers to cause a denial of service (daemon restart) in some configurations. This does not affect organizations that only install the Varnish Cache product; however, it is common to install both Varnish Cache and varnish-modules. Specifically, an assertion failure or NULL pointer dereference can be triggered in Varnish Cache through the varnish-modules header.append() and header.copy() functions. For some Varnish Configuration Language (VCL) files, this gives remote clients an opportunity to cause a Varnish Cache restart. A restart reduces overall availability and performance due to an increased number of cache misses, and may cause higher load on backend servers."
      }, {
        "lang" : "es",
        "value" : "Varnish varnish-modules versiones anteriores a 0.17.1, permite a atacantes remotos causar una denegación de servicio (reinicio del demonio) en algunas configuraciones.&#xa0;Esto no afecta a organizaciones que solo instalan el producto Varnish Cache;&#xa0;sin embargo, es común instalar tanto Varnish Cache como varnish-modules.&#xa0;Específicamente, un error de aserción o desreferencia del puntero NULL se puede activar en Varnish Cache por medio de las funciones header.append() y header.copy() de varnish-modules.&#xa0;Para algunos archivos de Varnish Configuration Language (VCL), esto brinda a clientes remotos la oportunidad de causar un reinicio de Varnish Cache.&#xa0;Un reinicio reduce la disponibilidad y el rendimiento general debido a un mayor número de pérdidas de caché y puede causar una mayor carga en los servidores de backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        }, {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish-modules:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.17.1",
            "matchCriteriaId" : "7EF31F4C-6C1C-4774-9D64-C288CB059C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:varnish-cache:varnish-modules_klarlack:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.17.1",
            "matchCriteriaId" : "6E98D45B-7CBC-432F-B40E-DC9C67B07667"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPFBRQUJNWHCB3GQHSSAPRLQU6Q6PY43/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://varnish-cache.org/security/VSV00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OPFBRQUJNWHCB3GQHSSAPRLQU6Q6PY43/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://varnish-cache.org/security/VSV00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22887",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-16T16:15:14.037",
      "lastModified" : "2024-11-21T05:50:50.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the BIOS of Pulse Secure (PSA-Series Hardware) models PSA5000 and PSA7000 could allow an attacker to compromise BIOS firmware. This vulnerability can be exploited only as part of an attack chain. Before an attacker can compromise the BIOS, they must exploit the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el BIOS de los modelos Pulse Secure (hardware de la serie PSA) PSA5000 y PSA7000, podría permitir a un atacante comprometer el firmware del BIOS.&#xa0;Esta vulnerabilidad solo puede ser explotada como parte de una cadena de ataque.&#xa0;Antes de que un atacante pueda comprometer el BIOS, deben explotar el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-506"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pulsesecure:psa-5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80CC4081-CCA6-4D44-838F-9EB52FD978C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pulsesecure:psa-5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6F03F5E-72B5-4E19-8197-62AC1FCD5199"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:pulsesecure:psa-7000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1693B89-44A4-42B1-81F7-E29DDA16ECD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:pulsesecure:psa-7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4997E5B4-0EDA-41E0-8BEF-9297A486F0C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10slh-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "85025F6A-1211-40A3-91E6-331C35207FD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10slh-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A12FF2-6211-4924-AF01-A05886E08D42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10sll-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "8ACBA1D4-F2DF-4A99-A31E-730A4B37C60E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10sll-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4D8487-4B77-4346-9890-65C4B49FAE64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10slm-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "2CAD83CA-5831-40E2-90DF-DE47BF1054B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10slm-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF19EEA-9C85-4410-B320-8A3092772B25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10sll\\+f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "E0B1A1EC-7506-4929-8BCE-2787C7A2A447"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10sll\\+f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5C61A1D-531F-436F-9AB4-478783DF5791"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10slm\\+-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "B0A630E7-8C70-4221-A599-BEAA8C3AE70E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10slm\\+-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B44DFDA-7DC7-40E2-80C8-A3BCEC13DD6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10slm\\+ln4f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "F5807F75-CEAC-4907-B728-E69419F31FD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10slm\\+ln4f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613FB90A-028B-40F3-8904-DBA0A2059138"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10sla-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "B67CE7D3-A95D-4684-A1D0-0231A6202624"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10sla-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2609DD5-F528-4D1D-9C05-2F1EC5913D1A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10sl7-f_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "C24F289D-1DFC-4CC6-B532-57D68A7149E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10sl7-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA44D755-24EE-4316-96E1-FA05AB532074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10sll-s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "42D69601-5076-4477-B944-FBA2C52571B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10sll-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7856BB2-765E-44C4-BA7E-6074D8B0991F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:supermicro:x10sll-sf_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "0D26D0C4-0978-41AB-90EE-ABB6086BFB7D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:supermicro:x10sll-sf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A441DC-264D-4BF1-9920-5551B9BB4E71"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44712",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.supermicro.com/en/support/security/Trickbot",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.supermicro.com/en/support/security/Trickbot",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25916",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-16T16:15:14.143",
      "lastModified" : "2025-04-30T18:15:33.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'patchmerge' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contaminación del prototipo en \"patchmerge\" versiones 1.0.0 hasta 1.0.1, permite a un atacante causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patchmerge_project:patchmerge:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "940B7D3D-4DF0-44FB-B6DB-ABF80BB55FD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pjshumphreys/patchmerge/commit/5b383c537eae7a00ebd26d3f7211dac99ddecb12",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25916",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pjshumphreys/patchmerge/commit/5b383c537eae7a00ebd26d3f7211dac99ddecb12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25916",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T16:15:14.333",
      "lastModified" : "2024-11-21T05:58:51.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in the Silverstripe CMS 3 and 4 version of the symbiote/silverstripe-queuedjobs module. A Cross Site Scripting vulnerability allows an attacker to inject an arbitrary payload in the CreateQueuedJobTask dev task via a specially crafted URL."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en el Silverstripe CMS versiones 3 y 4 del módulo symbiote/silverstripe-queuedjobs.&#xa0;Una vulnerabilidad de tipo Cross Site Scripting permite a un atacante inyectar una carga útil arbitraria en CreateQueuedJobTask por medio de una URL especialmente diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "098921E9-926C-44C1-85D2-B738E173628F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1.0",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "3BD45781-AFC8-42F5-9F44-77B4C44FF908"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.0.7",
            "matchCriteriaId" : "13A9B65B-BA43-4628-9573-0A8C033887AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "D5A80BAC-CA91-4B95-B108-FA83348FCC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.4",
            "matchCriteriaId" : "9749F6D1-4D71-427D-B548-253B68651960"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "D5FCBF4F-F70A-4009-A992-011682645CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "AD6F40F9-4B51-44B9-9A90-20E02B86216C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "8309476D-89AF-4DB6-A432-7B79204C37BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symbiote:silverstripe_queued_jobs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "247BBECB-D6AD-4FD3-958F-51F8C109F79A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/symbiote/silverstripe-queuedjobs/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/cve-2021-27938",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/symbiote/silverstripe-queuedjobs/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.silverstripe.org/download/security-releases/cve-2021-27938",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28294",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T20:15:13.037",
      "lastModified" : "2024-11-21T05:59:26.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Ordering System 1.0 is vulnerable to arbitrary file upload through /onlineordering/GPST/store/initiateorder.php, which may lead to remote code execution (RCE)."
      }, {
        "lang" : "es",
        "value" : "Online Ordering System versión 1.0, es vulnerable a la carga de archivos arbitrarios por medio del archivo /onlineordering/GPST/store/initiateorder.php, lo que puede conllevar a una ejecución de código remota (RCE)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_ordering_system_project:online_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BDE507-8304-4191-AB9A-86C6628F5804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49615",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49615",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28295",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T20:15:13.097",
      "lastModified" : "2024-11-21T05:59:26.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Ordering System 1.0 is vulnerable to unauthenticated SQL injection through /onlineordering/GPST/admin/design.php, which may lead to database information disclosure."
      }, {
        "lang" : "es",
        "value" : "Online Ordering System versión 1.0, es vulnerable a una inyección SQL no autenticada por medio del archivo /onlineordering/GPST/admin/design.php, que puede conllevar a una divulgación de información de la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:online_ordering_system_project:online_ordering_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33BDE507-8304-4191-AB9A-86C6628F5804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28380",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T20:15:13.160",
      "lastModified" : "2024-11-21T05:59:37.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The aimeos (aka Aimeos shop and e-commerce framework) extension before 19.10.12 and 20.x before 20.10.5 for TYPO3 allows XSS via a backend user account."
      }, {
        "lang" : "es",
        "value" : "La extensión de aimeos (también se conoce como tienda de Aimeos y e-commerce framework) versiones anteriores a 19.10.12 y versiones 20.x anteriores a 20.10.5 para TYPO3, permite un ataque de tipo XSS por medio de una cuenta de usuario de backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aimeos_project:aimeos:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "19.10.12",
            "matchCriteriaId" : "D3851C52-19D4-4CBD-8FF6-694185D74635"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aimeos_project:aimeos:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.10.5",
            "matchCriteriaId" : "60DED89E-BC1A-4999-A6B2-B6D6BBB038FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-003",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28381",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T20:15:13.237",
      "lastModified" : "2024-11-21T05:59:37.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The vhs (aka VHS: Fluid ViewHelpers) extension before 5.1.1 for TYPO3 allows SQL injection via isLanguageViewHelper."
      }, {
        "lang" : "es",
        "value" : "La extensión vhs (también se conoce como VHS: Fluid ViewHelpers) versiones anteriores a 5.1.1 para TYPO3, permite una inyección SQL por medio de la función isLanguageViewHelper"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vhs_project:vhs:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "5.1.1",
            "matchCriteriaId" : "91BA8ABE-98F1-46E6-9CBF-B4680A353C34"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-16T20:15:13.300",
      "lastModified" : "2026-03-30T14:30:00.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 have Incorrect Access Control because Import Token bindings are mishandled."
      }, {
        "lang" : "es",
        "value" : "NATS Server versiones 2.x anteriores a 2.2.0 y la biblioteca JWT versiones anteriores a 2.0.1, presentan un Control de Acceso Incorrecto porque unos enlaces de token de importación se manejan inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:nats-server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "A6A674D0-36A2-4AF7-A37E-AE127E53D2E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nats:jwt_library:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "993D5140-11FE-46D0-8886-D0FACD33AF27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.nats.io/CVE/CVE-2021-3127.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://advisories.nats.io/CVE/CVE-2021-3127.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20218",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-16T21:15:10.930",
      "lastModified" : "2024-11-21T05:46:09.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric8 kubernetes-client `copy` command to extract files outside the working path. The highest threat from this vulnerability is to integrity and system availability. This has been fixed in kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2"
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en fabric8 kubernetes-client en versión 4.2.0 y posteriores.&#xa0;Este fallo permite a un pod/container malicioso causar que unas aplicaciones que usan el comando \"copy\" de fabric8 kubernetes-client extraigan archivos fuera de la ruta de trabajo.&#xa0;La mayor amenaza de esta vulnerabilidad es la integridad y la disponibilidad del sistema.&#xa0;Esto ha sido corregido en kubernetes-client-4.13.2 kubernetes-client-5.0.2 kubernetes-client-4.11.2 kubernetes-client-4.7.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.7.2",
            "matchCriteriaId" : "396A03F1-9514-4805-9AB5-6B31FD4B4413"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.8.0",
            "versionEndExcluding" : "4.11.2",
            "matchCriteriaId" : "15E80E40-DCBB-4043-B074-674D548FD0AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.12.0",
            "versionEndExcluding" : "4.13.2",
            "matchCriteriaId" : "A777CC85-DC45-4E4B-B11C-E0CF9F06593D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:kubernetes-client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.2",
            "matchCriteriaId" : "70D40776-9CBC-4F2F-9702-525330082531"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:a-mq_online:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C99D72-43AD-4A22-AE66-44E868323D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:build_of_quarkus:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE29B9D6-63DC-4779-ACE8-4E51E6A0AF37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:codeready_studio:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BAF877F-B8D5-4313-AC5C-26BB82006B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:descision_manager:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5863BBF-829E-44EF-ACE8-61D5037251F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:integration_camel_k:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B87C8AD3-8878-4546-86C2-BF411876648C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:jboss_fuse:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40CCE4F-EA2C-453D-BB76-6388767E5C6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87326E-0B56-4356-A889-73D026DB1D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:process_automation:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20A6B40D-F991-4712-8E30-5FE008505CB7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923405",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fabric8io/kubernetes-client/issues/2715",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/fabric8io/kubernetes-client/issues/2715",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3344",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-16T22:15:11.837",
      "lastModified" : "2024-11-21T06:21:20.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into the container image under construction. An OpenShift user, able to execute code during build time inside this container can re-use the credentials to overwrite arbitrary container images in internal registries and/or escalate their privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. This affects github.com/openshift/builder v0.0.0-20210125201112-7901cb396121 and before."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de escalada de privilegios en el compilador de OpenShift. Durante el tiempo de compilación, las credenciales fuera del contexto de compilación se montan automáticamente en la imagen del contenedor en construcción.&#xa0;Un usuario de OpenShift, capaz de ejecutar código durante el tiempo de compilación dentro de este contenedor, puede reutilizar las credenciales para sobrescribir imágenes de contenedor arbitrarias en registros internos y/o escalar sus privilegios.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema.&#xa0;Esto afecta a github.com/openshift/builder versiones v0.0.0-20210125201112-7901cb396121 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_builder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-01-26",
            "matchCriteriaId" : "66A1557A-313D-4325-9DB0-AF5CD4A65677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.5.33",
            "matchCriteriaId" : "757657A0-CE8E-492F-B035-56BD80F0A517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.6",
            "versionEndExcluding" : "4.6.16",
            "matchCriteriaId" : "EAD9F29A-5040-4A26-B4F8-B0CE0DF693BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921450",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-17T06:15:14.640",
      "lastModified" : "2024-11-21T06:00:01.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241."
      }, {
        "lang" : "es",
        "value" : "El archivo autoar-extractor.c en GNOME gnome-autoar versiones anteriores a 0.3.1, tal y como es usado en GNOME Shell, Nautilus y otro software, permite un Salto de Directorio durante la extracción porque carece de una comprobación de si el padre de un archivo es un enlace simbólico en determinadas situaciones complejas. NOTA: este problema se presenta debido a una corrección incompleta del CVE-2020-36241"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnome:gnome-autoar:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.1",
            "matchCriteriaId" : "80A8A3E8-C5F6-4E0C-AFE0-AF191B425083"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.gnome.org/GNOME/gnome-autoar/-/commit/8109c368c6cfdb593faaf698c2bf5da32bb1ace4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN5TVQ7OHZEGY6AGFLAZWCVCI53RYNHQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.gnome.org/GNOME/gnome-autoar/-/commit/8109c368c6cfdb593faaf698c2bf5da32bb1ace4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BN5TVQ7OHZEGY6AGFLAZWCVCI53RYNHQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22859",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-03-17T09:15:12.093",
      "lastModified" : "2024-11-21T05:50:46.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The users’ data querying function of EIC e-document system does not filter the special characters which resulted in remote attackers can inject SQL syntax and execute arbitrary commands without privilege."
      }, {
        "lang" : "es",
        "value" : "La función users’ data querying del sistema de e-document de EIC, no filtra los caracteres especiales que dieron como resultado que los atacantes remotos puedan inyectar sintaxis SQL y ejecutar comandos arbitrarios sin privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eic:e-document_system:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D6184C-8C14-4FC0-8995-8E23CA91A53A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/tonykuo76/807c838b75879b0d327782dfcd2c3bea",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/c974fd28-c19b-4003-82f3-818904057496",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4517-51e25-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/tonykuo76/807c838b75879b0d327782dfcd2c3bea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/c974fd28-c19b-4003-82f3-818904057496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4517-51e25-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22860",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-03-17T09:15:12.670",
      "lastModified" : "2024-11-21T05:50:46.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "EIC e-document system does not perform completed identity verification for sorting and filtering personnel data. The vulnerability allows remote attacker to obtain users’ credential information without logging in the system, and further acquire the privileged permissions and execute arbitrary commends."
      }, {
        "lang" : "es",
        "value" : "El sistema de e-document de EIC, no lleva a cabo una comprobación de identidad completa para clasificar y filtrar los datos del personal.&#xa0;La vulnerabilidad permite a un atacante remoto obtener la información de las credenciales de los usuarios sin iniciar sesión en el sistema, y ??además adquirir los permisos privilegiados y ejecutar recomendaciones arbitrarias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eic:e-document_system:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF2502A7-E3EE-4332-BE44-8D96B74661C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eic:e-document_system:3.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D6184C-8C14-4FC0-8995-8E23CA91A53A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/tonykuo76/17d497b3472a80a5e8914227e81e6fa3",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/12929036-924b-4b89-8a0e-3e7155e19011",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4518-c813c-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/tonykuo76/17d497b3472a80a5e8914227e81e6fa3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/12929036-924b-4b89-8a0e-3e7155e19011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4518-c813c-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-17T13:15:15.137",
      "lastModified" : "2024-11-21T05:57:45.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions. Some of the regular expressions have exponential or cubic worst-case complexity and are vulnerable to ReDoS. By crafting malicious input, an attacker can cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "En pygments versión 1.1+, corregido en 2.7.4, los lexers usados para analizar unos lenguajes de programación dependen en gran medida en expresiones regulares.&#xa0;Algunas de las expresiones regulares presentan una complejidad exponencial o cúbica en el peor de los casos y son vulnerables a ReDoS.&#xa0;Al diseñar una entrada maliciosa, un atacante puede causar una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pygments:pygments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1",
            "versionEndExcluding" : "2.7.4",
            "matchCriteriaId" : "CD77E0B1-BE2B-4B95-91AA-AD9AAEFD6DA8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4878",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/b-c-ds/b1a2cc0c68a35c57188575eb496de5ce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GSJRFHALQ7E3UV4FFMFU2YQ6LUDHAI55/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSLD67LFGXOX2K5YNESSWAS4AGZIJTUQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4878",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-17T13:15:15.200",
      "lastModified" : "2024-11-21T05:57:45.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ua-parser-js >= 0.7.14, fixed in 0.7.24, uses a regular expression which is vulnerable to denial of service. If an attacker sends a malicious User-Agent header, ua-parser-js will get stuck processing it for an extended period of time."
      }, {
        "lang" : "es",
        "value" : "ua-parser-js versiones posteriores incluyendo a 0.7.14, corregido en 0.7.24, usa una expresión regular que es vulnerable a una denegación de servicio.&#xa0;Si un atacante envía un encabezado User-Agent malicioso, ua-parser-js se bloqueará al procesarlo durante un período de tiempo prolongado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ua-parser-js_project:ua-parser-js:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.7.14",
            "versionEndExcluding" : "0.7.24",
            "matchCriteriaId" : "983F378E-C74C-489E-A4CC-5499264D3896"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/b-c-ds/6941d80d6b4e694df4bc269493b7be76",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/faisalman/ua-parser-js/commit/809439e20e273ce0d25c1d04e111dcf6011eb566",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pygments/pygments/commit/2e7e8c4a7b318f4032493773732754e418279a14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20200",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-17T15:15:13.500",
      "lastModified" : "2023-11-07T03:28:59.873",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-17T15:15:13.593",
      "lastModified" : "2024-11-21T06:00:02.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "rtw_wx_set_scan in drivers/staging/rtl8188eu/os_dep/ioctl_linux.c in the Linux kernel through 5.11.6 allows writing beyond the end of the ->ssid[] array. NOTE: from the perspective of kernel.org releases, CVE IDs are not normally used for drivers/staging/* (unfinished work); however, system integrators may have situations in which a drivers/staging issue is relevant to their own customer base."
      }, {
        "lang" : "es",
        "value" : "La función rtw_wx_set_scan en el archivo drivers/staging/rtl8188eu/os_dep/ioctl_linux.c en el kernel de Linux versiones hasta 5.11.6, permite escribir más allá del final de la matriz -)ssid[].&#xa0;NOTA: desde la perspectiva de las versiones de kernel.org, las ID de CVE no se usan normalmente para drivers/staging/* (trabajo sin terminar);&#xa0;sin embargo, los integradores de sistemas pueden tener situaciones en las que un problema de drivers/staging sea relevante para su propia base de clientes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.12",
            "versionEndExcluding" : "4.4.262",
            "matchCriteriaId" : "E91AC4E8-93C9-42D3-AB6A-2D4CA3911609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.262",
            "matchCriteriaId" : "D3BB1DB0-B588-4D26-89CB-F67E73EDA007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.226",
            "matchCriteriaId" : "33EEBE13-936B-4210-9B09-9D61A6BE9A35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.181",
            "matchCriteriaId" : "BC933089-0F51-436C-928E-1C72335F5822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.106",
            "matchCriteriaId" : "2A66FDC0-50BA-4BCC-8BFE-2209436DDBF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.24",
            "matchCriteriaId" : "1E692548-C944-4984-9823-EE1EC83F4F2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.7",
            "matchCriteriaId" : "F83144BB-4FAB-40A1-8F52-8690FF516A33"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AA6F4-4404-4E26-82AB-C3A22636F276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2022/11/18/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/11/21/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=74b6b20df8cfe90ada777d621b54c32e69e27cd7",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0008/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/11/18/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2022/11/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=74b6b20df8cfe90ada777d621b54c32e69e27cd7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00035.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TJPVQZPY3DHPV5I3IVNMSMO6D3PKZISX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20624",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.513",
      "lastModified" : "2024-11-21T05:46:53.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Scheduler via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Scheduler de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a un atacante autenticado omitir la restricción de acceso y alterar los datos de Scheduler por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36866/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36866/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20625",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.593",
      "lastModified" : "2024-11-21T05:46:54.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and alter the data of Bulletin Board via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Bulletin Board de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a un atacante autenticado omitir la restricción de acceso y alterar los datos de Bulletin Board por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36874/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36874/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20626",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.653",
      "lastModified" : "2024-11-21T05:46:54.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Workflow of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and alter the data of Workflow via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Workflow de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes autenticados omitir la restricción de acceso y alterar los datos de Workflow por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36864/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36864/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20627",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.717",
      "lastModified" : "2024-11-21T05:46:54.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-site scripting  en Address Book de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36873/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36873/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20628",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.797",
      "lastModified" : "2024-11-21T05:46:54.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Address Book of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors. Note that this vulnerability occurs only when using Mozilla Firefox."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-site scripting  en Address Book de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados.&#xa0;Tome en cuenta que esta vulnerabilidad se produce solo cuando se usa Mozilla Firefox"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:mozilla:firefox:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D4FFCF-5309-43B6-9FD5-680C6D535A7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36868/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36868/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20629",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.873",
      "lastModified" : "2024-11-21T05:46:54.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in E-mail of Cybozu Office 10.0.0 to 10.8.4 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Cross-site scripting en E-mail de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36867/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36867/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20630",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:11.950",
      "lastModified" : "2024-11-21T05:46:54.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Phone Messages of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Phone Messages via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Phone Messages de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes autenticados omitir la restricción de acceso y obtener los datos de los Phone Messages por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36872/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36872/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20631",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.013",
      "lastModified" : "2024-11-21T05:46:54.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attacker to alter the data of Custom App via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación inapropiada de entrada en Custom App de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a un atacante autenticado alterar los datos de la Custom App por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36871/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36871/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20632",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.093",
      "lastModified" : "2024-11-21T05:46:54.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the data of Bulletin Board via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Bulletin Board de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes autenticados omitir la restricción de acceso y obtener los datos de Bulletin Board por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36870/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36870/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20633",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.170",
      "lastModified" : "2024-11-21T05:46:54.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Cabinet of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Cabinet via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Cabinet de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes autenticados omitir la restricción de acceso y obtener la fecha de Cabinet por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36869/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36869/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20634",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.247",
      "lastModified" : "2024-11-21T05:46:54.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Custom App of Cybozu Office 10.0.0 to 10.8.4 allows authenticated attackers to bypass access restriction and obtain the date of Custom App via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Custom App de Cybozu Office versiones 10.0.0 hasta 10.8.4, permite a atacantes autenticados omitir la restricción de acceso y obtener la fecha de Custom App por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cybozu:office:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.8.4",
            "matchCriteriaId" : "A468F5BE-4EB2-464F-AE29-D0C98163C410"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36865/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN45797538/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kb.cybozu.support/article/36865/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20675",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.327",
      "lastModified" : "2024-11-21T05:46:59.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to cause a denial of service (DoS) condition via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Serie M-System DL8 (tipo A (DL8-A) anteriores a Ver3.0, tipo B (DL8-B) anteriores a Ver3.0, tipo C (DL8-C) anteriores a Ver3.0, tipo D (DL8-D) versiones anteriores a Ver3.0, y las tipo E (DL8-E) anteriores a Ver3.0), permiten a atacantes autenticados remotamente causar una condición de denegación de servicio (DoS) por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.81",
            "matchCriteriaId" : "2B7786F5-7A3C-4EF2-A0D3-562B96102AF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81D7A6A-D046-45B5-BA43-43664E7EF971"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.77",
            "matchCriteriaId" : "9327B151-A2FA-488D-9A89-287FDBC59ACB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A9C3-0E52-4C5D-B977-8FB032DBAFD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.99",
            "matchCriteriaId" : "826A1FA4-1946-410F-B965-D2D4D7F48FD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95112D2-2808-4E20-902A-C16A7E1F5A3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.91",
            "matchCriteriaId" : "46361610-8BC5-424B-998D-E3B4B6D19F04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63B2CDA-4509-46C4-A6D5-0BB4589C8A88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.12",
            "matchCriteriaId" : "B3E11E93-18EC-40A8-A466-33910BD66A87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE11AD2-D6EB-47F4-AF8A-EE89FF1F9507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47497535/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.m-system.co.jp/download_w/dl_dl8updaterE.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47497535/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.m-system.co.jp/download_w/dl_dl8updaterE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20676",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.390",
      "lastModified" : "2024-11-21T05:46:59.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "M-System DL8 series (type A (DL8-A) versions prior to Ver3.0, type B (DL8-B) versions prior to Ver3.0, type C (DL8-C) versions prior to Ver3.0, type D (DL8-D) versions prior to Ver3.0, and type E (DL8-E) versions prior to Ver3.0) allows remote authenticated attackers to bypass access restriction and conduct prohibited operations via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Serie M-System DL8 (tipo A (DL8-A) anteriores a Ver3.0, tipo B (DL8-B) anteriores a Ver3.0, tipo C (DL8-C) anteriores a Ver3.0, tipo D (DL8-D) versiones anteriores a Ver3.0 y las tipo E (DL8-E) anteriores a Ver3.0) permiten a atacantes autenticados de forma remota omitir la restricción de acceso y llevar a cabo operaciones prohibidas por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.81",
            "matchCriteriaId" : "2B7786F5-7A3C-4EF2-A0D3-562B96102AF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A81D7A6A-D046-45B5-BA43-43664E7EF971"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.77",
            "matchCriteriaId" : "9327B151-A2FA-488D-9A89-287FDBC59ACB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4064A9C3-0E52-4C5D-B977-8FB032DBAFD5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.99",
            "matchCriteriaId" : "826A1FA4-1946-410F-B965-D2D4D7F48FD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95112D2-2808-4E20-902A-C16A7E1F5A3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.91",
            "matchCriteriaId" : "46361610-8BC5-424B-998D-E3B4B6D19F04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A63B2CDA-4509-46C4-A6D5-0BB4589C8A88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:m-system:dl8-e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.12",
            "matchCriteriaId" : "B3E11E93-18EC-40A8-A466-33910BD66A87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:m-system:dl8-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACE11AD2-D6EB-47F4-AF8A-EE89FF1F9507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN47497535/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.m-system.co.jp/download_w/dl_dl8updaterE.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN47497535/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.m-system.co.jp/download_w/dl_dl8updaterE.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20678",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-18T01:15:12.450",
      "lastModified" : "2024-11-21T05:46:59.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in the Paid Memberships Pro versions prior to 2.5.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en las versiones de Paid Memberships Pro anteriores a 2.5.6, permite a atacantes autenticados remotamente ejecutar comandos SQL arbitrarios por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strangerstudios:paid_memberships_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.6",
            "matchCriteriaId" : "7C956371-CBBE-4173-B139-9324222D0A67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN08191557/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/paid-memberships-pro/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.paidmembershipspro.com/pmpro-update-2-5-6/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN08191557/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/paid-memberships-pro/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://www.paidmembershipspro.com/pmpro-update-2-5-6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28667",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T03:15:12.047",
      "lastModified" : "2024-11-21T06:00:04.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "StackStorm before 3.4.1, in some situations, has an infinite loop that consumes all available memory and disk space. This can occur if Python 3.x is used, the locale is not utf-8, and there is an attempt to log Unicode data (from an action or rule name)."
      }, {
        "lang" : "es",
        "value" : "StackStorm versiones anteriores a 3.4.1, en algunas situaciones, presenta un bucle infinito que consume toda la memoria disponible y el espacio en disco.&#xa0;Esto puede ocurrir si se usa Python versión 3.x, la configuración regional no es utf-8 y se intenta registrar datos Unicode (a partir de un nombre de acción o regla)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackstorm:stackstorm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4.1",
            "matchCriteriaId" : "C4B2E62D-1A30-41EC-9D39-FD9A5CA9CF43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "28A4532F-92AA-4662-8F91-E99030C8E41D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://stackstorm.com/2021/03/10/stackstorm-v3-4-1-security-fix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://stackstorm.com/2021/03/10/stackstorm-v3-4-1-security-fix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T04:15:14.617",
      "lastModified" : "2024-11-21T06:00:07.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pion WebRTC before 3.0.15 didn't properly tear down the DTLS Connection when certificate verification failed. The PeerConnectionState was set to failed, but a user could ignore that and continue to use the PeerConnection. )A WebRTC implementation shouldn't allow the user to continue if verification has failed.)"
      }, {
        "lang" : "es",
        "value" : "Pion WebRTC versiones anteriores a 3.0.15, no eliminó apropiadamente la conexión DTLS cuando falló una comprobación del certificado.&#xa0;El PeerConnectionState se configuró para un fallo, pero un usuario podría ignorarlo y continuar usando PeerConnection.&#xa0;(Una implementación de WebRTC no debería permitir al usuario continuar si la comprobación ha fallado)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webrtc_project:webrtc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.15",
            "matchCriteriaId" : "6268E745-4C5D-4103-AD3F-0B16DBA1B1CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pion/webrtc/issues/1708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pion/webrtc/security/advisories/GHSA-74xm-qj29-cq8p",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pion/webrtc/issues/1708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pion/webrtc/security/advisories/GHSA-74xm-qj29-cq8p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22848",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-03-18T05:15:13.430",
      "lastModified" : "2024-11-21T05:50:45.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HGiga MailSherlock contains a SQL Injection. Remote attackers can inject SQL syntax and execute SQL commands in a URL parameter of email pages without privilege."
      }, {
        "lang" : "es",
        "value" : "HGiga MailSherlock contiene una inyección SQL.&#xa0;Unos atacantes remotos pueden inyectar sintaxis SQL y ejecutar comandos SQL en un parámetro de URL de páginas de correo electrónico sin privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:msr45_isherlock-antispam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5-133",
            "matchCriteriaId" : "2E5B5E25-BC65-49E2-9865-9BC9A4DE98F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:msr45_isherlock-user:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5-120",
            "matchCriteriaId" : "F203F7FA-9E30-49AD-956C-5E893B1264A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:ssr45_isherlock-antispam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5-133",
            "matchCriteriaId" : "DAAA3F24-7821-4F5A-A64E-EEA30B269DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hgiga:ssr45_isherlock-user:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5-120",
            "matchCriteriaId" : "BE0FEDEB-2C43-4C45-800A-9323146DC214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4521-a4fd8-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4521-a4fd8-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T05:15:13.913",
      "lastModified" : "2024-11-21T06:20:58.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Unisys Stealth (core) before 6.0.025.0, the Keycloak password is stored in a recoverable format that might be accessible by a local attacker, who could gain access to the Management Server and change the Stealth configuration."
      }, {
        "lang" : "es",
        "value" : "En Unisys Stealth (core) versiones anteriores a 6.0.025.0, la contraseña de Keycloak se almacena en un formato recuperable al que podría ser accesible por un atacante local, que podría conseguir acceso al Management Server y cambiar la configuración de Stealth"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:stealth:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.025.0",
            "matchCriteriaId" : "D725F27A-F3EC-4105-98CE-17CC00C33CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=62",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T12:15:12.037",
      "lastModified" : "2024-11-21T05:59:38.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php and the \"search_name\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en Seo Panel versión 4.8.0, permite a atacantes remotos inyectar JavaScript por medio del archivo archive.php y el parámetro \"search_name\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/208",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T12:15:12.100",
      "lastModified" : "2024-11-21T05:59:38.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via settings.php and the \"category\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en Seo Panel versión 4.8.0, permite a atacantes remotos inyectar JavaScript por medio del archivo settings.php y el parámetro \"category\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/207",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/207",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28419",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T12:15:12.177",
      "lastModified" : "2024-11-21T05:59:38.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"order_col\" parameter in archive.php of SEO Panel 4.8.0 is vulnerable to time-based blind SQL injection, which leads to the ability to retrieve all databases."
      }, {
        "lang" : "es",
        "value" : "El parámetro \"order_col\" en el archivo archive.php de SEO Panel versión 4.8.0, es vulnerable a una inyección SQL ciega basada en el tiempo, lo que conlleva a la habilidad de recuperar todas las bases de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162322/SEO-Panel-4.8.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/209",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162322/SEO-Panel-4.8.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/209",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28420",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T12:15:12.240",
      "lastModified" : "2024-11-21T05:59:38.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in Seo Panel 4.8.0 allows remote attackers to inject JavaScript via alerts.php and the \"from_time\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en Seo Panel versión 4.8.0, permite a atacantes remotos inyectar JavaScript por medio del archivo alerts.php y el parámetro \"from_time\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/206",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162914/Seo-Panel-4.8.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23359",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-18T13:15:20.237",
      "lastModified" : "2024-11-21T05:51:34.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package port-killer. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC will cause the command touch success to be executed, leading to the creation of a file called success."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete port-killer.&#xa0;Si es proporcionada una entrada del usuario (controlada por el atacante), es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin saneamiento de entrada.&#xa0;Una ejecución de esta PoC causará que sea ejecutado el comando touch success, conllevando a la creación de un archivo llamado success"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:port-killer_project:port-killer:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "30D9AEA3-F2A0-4E14-BEE6-11E5062A737E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/tylerjpeterson/port-killer/blob/1ca3a99ad80cc9ed5498d12b185189c10329025b/index.js%23L19",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PORTKILLER-1078533",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/tylerjpeterson/port-killer/blob/1ca3a99ad80cc9ed5498d12b185189c10329025b/index.js%23L19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PORTKILLER-1078533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26236",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T13:15:20.393",
      "lastModified" : "2024-11-21T05:55:58.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer v.<= 7.5 is affected by a Stack-based Buffer Overflow at 0x005BDF49, affecting the CUR file parsing functionality (BITMAPINFOHEADER Structure, 'BitCount' file format field), that will end up corrupting the Structure Exception Handler (SEH). Attackers could exploit this issue to achieve code execution when a user opens or views a malformed/specially crafted CUR file."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versiones anteriores incluyendo a 7.5, está afectado por un desbordamiento del búfer en la región stack de la memoria en 0x005BDF49, que afecta la funcionalidad de análisis de archivos CUR (estructura BITMAPINFOHEADER, campo de formato de archivo \"BitCoun\"), que terminará corrompiendo el Structure Exception Handler (SEH) .&#xa0;Unos atacantes podrían explotar este problema para lograr una ejecución de código cuando un usuario abre o visualiza un archivo CUR malformado o especialmente diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "EF5DB16A-3B41-4691-8CE4-B8A98FA43CA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49660",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://voidsec.com/advisories/cve-2021-26236-faststone-image-viewer-v-7-5-stack-based-buffer-overflow/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://voidsec.com/fuzzing-faststone-image-viewer-cve-2021-26236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21623",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-18T14:15:13.227",
      "lastModified" : "2024-11-21T05:48:43.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect permission check in Jenkins Matrix Authorization Strategy Plugin 2.6.5 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders."
      }, {
        "lang" : "es",
        "value" : "Una comprobación incorrecta de permiso en Jenkins Matrix Authorization Strategy Plugin  versiones 2.6.5 y anteriores, permite a atacantes con permiso Item/Read en elementos anidados acceder a ellos, incluso si no presentan permiso de Item/Read para las carpetas principales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:matrix_authorization_strategy:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.6.5",
            "matchCriteriaId" : "CF293100-04B9-4D9A-A14D-7D6B469FF193"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21624",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-18T14:15:13.350",
      "lastModified" : "2024-11-21T05:48:43.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect permission check in Jenkins Role-based Authorization Strategy Plugin 3.1 and earlier allows attackers with Item/Read permission on nested items to access them, even if they lack Item/Read permission for parent folders."
      }, {
        "lang" : "es",
        "value" : "Una comprobación incorrecta de permiso en Jenkins Role-based Authorization Strategy Plugin versiones 3.1 y anteriores, permite a atacantes con permiso Item/Read en elementos anidados acceder a ellos, incluso si carecen del permiso Item/Read para carpetas principales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:role-based_authorization_strategy:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.1",
            "matchCriteriaId" : "7323983E-40C3-4FC3-B392-7C0FF25FB5D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2182",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21625",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-18T14:15:13.427",
      "lastModified" : "2024-11-21T05:48:43.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins CloudBees AWS Credentials Plugin 1.28 and earlier does not perform a permission check in a helper method for HTTP endpoints, allowing attackers with Overall/Read permission to enumerate credentials IDs of AWS credentials stored in Jenkins in some circumstances."
      }, {
        "lang" : "es",
        "value" : "Jenkins CloudBees AWS Credentials Plugin versiones 1.28 y anteriores, no lleva a cabo una comprobación de permisos en un método auxiliar para endpoints HTTP, permitiendo a atacantes con permiso Overall/Read enumerar los ID de credenciales de las credenciales de AWS almacenadas en Jenkins en algunas circunstancias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:cloudbees_aws_credentials:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.28",
            "matchCriteriaId" : "B3A37139-805F-4395-8F00-67A078E93EB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2032",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21626",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-18T14:15:13.490",
      "lastModified" : "2024-11-21T05:48:43.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Warnings Next Generation Plugin 8.4.4 and earlier does not perform a permission check in methods implementing form validation, allowing attackers with Item/Read permission but without Item/Workspace or Item/Configure permission to check whether attacker-specified file patterns match workspace contents."
      }, {
        "lang" : "es",
        "value" : "Jenkins Warnings Next Generation Plugin versiones 8.4.4 y anteriores, no lleva a cabo una comprobación de permisos en los métodos que implementan una validación de formularios, permitiendo a atacantes con permiso Item/Read pero sin permiso Item/Workspace o Item/Configure para comprobar si los patrones de archivo especificados por el atacante coinciden con el contenido del espacio de trabajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:warnings_next_generation:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "8.4.4",
            "matchCriteriaId" : "3B3A8B18-5768-40BA-A04D-AE51F883A0B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2041",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2041",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21627",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-18T14:15:13.570",
      "lastModified" : "2024-11-21T05:48:43.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Libvirt Agents Plugin 1.9.0 and earlier allows attackers to stop hypervisor domains."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins Libvirt Agents Plugin  versiones 1.9.0 y anteriores, permite a atacantes tener los dominios del hipervisor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:libvirt_agents:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.9.0",
            "matchCriteriaId" : "957CAC64-0C06-46C6-AAF5-323F38F22E1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-1764",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/18/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-1764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T14:15:13.630",
      "lastModified" : "2024-11-21T05:55:57.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfcb, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versiones anteriores incluyendo a 7.5, está afectado por una infracción de acceso de escritura en modo de usuario cercana a NULL en 0x005bdfcb, que se desencadena cuando un usuario abre o visualiza un archivo CUR malformado que el archivo FSViewer.exe maneja inapropiadamente.&#xa0;unos atacantes podrían explotar este problema para una Denegación de Servicio (DoS) o posiblemente para lograr una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "EF5DB16A-3B41-4691-8CE4-B8A98FA43CA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://voidsec.com/advisories/cve-2021-26233-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://voidsec.com/advisories/cve-2021-26233-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T14:15:13.740",
      "lastModified" : "2024-11-21T05:55:58.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d8a, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versiones anteriores incluyendo a 7.5, está afectado por una infracción de acceso de escritura en modo de usuario en 0x00402d8a, que se desencadena cuando un usuario abre o visualiza un archivo CUR malformado que el archivo FSViewer.exe maneja inapropiadamente.&#xa0;Unos atacantes podrían explotar este problema para una Denegación de Servicio (DoS) o posiblemente para lograr una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "EF5DB16A-3B41-4691-8CE4-B8A98FA43CA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://voidsec.com/advisories/cve-2021-26234-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://voidsec.com/advisories/cve-2021-26234-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26235",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T14:15:13.803",
      "lastModified" : "2024-11-21T05:55:58.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer <= 7.5 is affected by a user mode write access violation near NULL at 0x005bdfc9, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versiones anteriores incluyendo a 7.5, está afectado por una infracción de acceso de escritura en modo de usuario cercana a NULL en 0x005bdfc9, que se desencadena cuando un usuario abre o visualiza un archivo CUR malformado que el archivo FSViewer.exe no maneja apropiadamente.&#xa0;Unos atacantes podrían explotar este problema para una Denegación de Servicio (DoS) o posiblemente para lograr una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "EF5DB16A-3B41-4691-8CE4-B8A98FA43CA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://voidsec.com/advisories/cve-2021-26235-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://voidsec.com/advisories/cve-2021-26235-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26237",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T14:15:13.943",
      "lastModified" : "2024-11-21T05:55:58.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FastStone Image Viewer <= 7.5 is affected by a user mode write access violation at 0x00402d7d, triggered when a user opens or views a malformed CUR file that is mishandled by FSViewer.exe. Attackers could exploit this issue for a Denial of Service (DoS) or possibly to achieve code execution."
      }, {
        "lang" : "es",
        "value" : "FastStone Image Viewer versiones anteriores incluyendo a 7.5, está afectado por una infracción de acceso de escritura en modo de usuario en 0x00402d7d, que se desencadena cuando un usuario abre o visualiza un archivo CUR malformado que el archivo FSViewer.exe maneja inapropiadamente.&#xa0;Unos atacantes podrían explotar este problema para una Denegación de Servicio (DoS) o posiblemente para lograr una ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:faststone:image_viewer:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.5",
            "matchCriteriaId" : "EF5DB16A-3B41-4691-8CE4-B8A98FA43CA2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://voidsec.com/advisories/cve-2021-26237-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://voidsec.com/advisories/cve-2021-26237-faststone-image-viewer-v-7-5-user-mode-write-access-violation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T14:15:14.007",
      "lastModified" : "2024-11-21T05:59:09.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attempted to share the private part of their screen. When a user shares a specific application window via the Share Screen functionality, other meeting participants can briefly see contents of other application windows that were explicitly not shared. The contents of these other windows can (for instance) be seen for a short period of time when they overlay the shared window and get into focus. (An attacker can, of course, use a separate screen-recorder application, unsupported by Zoom, to save all such contents for later replays and analysis.) Depending on the unintentionally shared data, this short exposure of screen contents may be a more or less severe security issue."
      }, {
        "lang" : "es",
        "value" : "Zoom versiones hasta 5.5.4, a veces permite a atacantes leer información privada en la pantalla de un participante, aunque el participante nunca intentó compartir la parte privada de su pantalla.&#xa0;Cuando un usuario comparte una ventana de aplicación específica por medio de la funcionalidad Share Screen, otros participantes de la reunión pueden visualizar brevemente el contenido de otras ventanas de la aplicación que no se compartieron explícitamente.&#xa0;El contenido de estas otras ventanas puede (por ejemplo) verse durante un corto período de tiempo cuando se superponen a la ventana compartida y se enfocan.&#xa0;(Un atacante puede, por supuesto, usar una aplicación de grabación de pantalla separada, no compatible con Zoom, para guardar todos esos contenidos para posteriores repeticiones y análisis). Dependiendo de los datos compartidos involuntariamente, esta breve exposición de los contenidos de la pantalla puede ser un problema de seguridad más o menos grave"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:zoom:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.5.4",
            "matchCriteriaId" : "8AE7F07C-3FDD-4D2A-92E6-A9648C83B016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161897/Zoom-5.4.3-54779.1115-5.5.4-13142.0301-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/48",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://thehackernews.com/2021/03/new-zoom-screen-sharing-bug-lets-other.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-044.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.syss.de/pentest-blog/syss-2020-044-sicherheitsproblem-in-screen-sharing-funktionalitaet-von-zoom-cve-2021-28133",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=SonmmgQlLzg",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zoom.us/trust/security/security-bulletin",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161897/Zoom-5.4.3-54779.1115-5.5.4-13142.0301-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Mar/48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://thehackernews.com/2021/03/new-zoom-screen-sharing-bug-lets-other.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-044.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.syss.de/pentest-blog/syss-2020-044-sicherheitsproblem-in-screen-sharing-funktionalitaet-von-zoom-cve-2021-28133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=SonmmgQlLzg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://zoom.us/trust/security/security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24123",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:13.573",
      "lastModified" : "2024-11-21T05:52:24.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images (such as the ones from Podcast Artwork section), allowing high privilege accounts (admin+) being able to upload arbitrary files, such as php, leading to RCE."
      }, {
        "lang" : "es",
        "value" : "Una carga arbitraria de archivos en el plugin de WordPress PowerPress, versiones anteriores a 8.3.8, no comprobaba algunas de las imágenes de fuentes cargadas (como las de la sección de ilustraciones de Podcast), permitiendo que las cuentas de alto privilegio (admin+) puedan cargar archivos arbitrarios, como php, lo que conlleva a una RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blubrry:powerpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.3.8",
            "matchCriteriaId" : "A2BBE365-519E-4728-B22E-A3EA9C467D8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/43aa30bf-eaf8-467a-93a1-78f9bdb37b36",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/43aa30bf-eaf8-467a-93a1-78f9bdb37b36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24124",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:13.760",
      "lastModified" : "2024-11-21T05:52:24.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown could lead to privileged escalation."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin WP Shieldon de WordPress, versión 1.6.3 y anteriores, conlleva a un ataque de tipo Cross-Site Scripting (XSS) Reflejado No Autenticado cuando es mostrada la página CAPTCHA que podría conllevar a una escalada privilegiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:terryl:wp_shieldon:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.6.3",
            "matchCriteriaId" : "5C94B013-BEB8-4216-8637-75BFE6A0BCBA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8d0eb0b4-0cc0-44e5-b720-90b01df3a6ee",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8d0eb0b4-0cc0-44e5-b720-90b01df3a6ee",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24125",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:13.823",
      "lastModified" : "2024-11-21T05:52:24.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Contact Form Submissions WordPress plugin before 1.7.1, could lead to SQL injection in the wpcf7_contact_form GET parameter when submitting a filter request as a high privilege user (admin+)"
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin de WordPress Contact Form Submissions, anterior a la versión 1.7.1, podría conllevar a la inyección SQL en el parámetro GET wpcf7_contact_form al enviar una petición de filtro como un usuario de alto privilegio (admin+)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contact_form_submissions_project:contact_form_submissions:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "BA23A379-1B31-4F79-943F-360075F44438"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8591b3c9-b041-4ff5-b8d9-6f9f81041178",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8591b3c9-b041-4ff5-b8d9-6f9f81041178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24126",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:13.917",
      "lastModified" : "2024-11-21T05:52:24.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitise the images metadata (namely title) before outputting them in the generated gallery, which could lead to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress Envira Gallery Lite, versiones anteriores a 1.8.3.3, no sanearon apropiadamente los metadatos de las imágenes (es decir, el título) antes de enviarlas a la galería generada, lo que podría conllevar a una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:enviragallery:envira_gallery:*:*:*:*:lite:wordpress:*:*",
            "versionEndExcluding" : "1.8.3.3",
            "matchCriteriaId" : "4DA20741-4782-4562-989B-AB9D0B7A17D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f3952bd1-ac2f-4007-9e19-6c44a22465f3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f3952bd1-ac2f-4007-9e19-6c44a22465f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24127",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:13.980",
      "lastModified" : "2024-11-21T05:52:24.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS), which could lead to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress ThirstyAffiliates Affiliate Link Manager, versiones anteriores a 3.9.3, era vulnerable a un ataque de tipo Cross-Site Scripting (XSS) almacenado autenticado, lo que podría conllevar  a una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:caseproof:thirstyaffiliates_affiliate_link_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.9.3",
            "matchCriteriaId" : "4EDE268A-1A02-4DDF-87C0-6C50726D92D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1fbd9f7a-6f99-45a2-9d57-01631a1f35d6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1fbd9f7a-6f99-45a2-9d57-01631a1f35d6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24128",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.057",
      "lastModified" : "2024-11-21T05:52:24.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross-site scripting vulnerabilities allowing medium-privileged authenticated attacker (contributor+) to inject arbitrary web script or HTML via the 'Description/biography' of a member."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress Team Members, versiones anteriores a 5.0.4, conllevan a vulnerabilidades de tipo Cross-site scripting que permiten a un atacante autenticado con privilegios medios (colaborador+) inyectar script web o HTML arbitrario por medio de la \"Description/biography\" de un miembro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdarko:team_members:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "82170180-0573-4DB7-A3A0-3A65C1ABA0E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/11dc3325-e696-4c9e-ba10-968416d5c864",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/11dc3325-e696-4c9e-ba10-968416d5c864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24129",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.120",
      "lastModified" : "2024-11-21T05:52:24.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities allowing low-privileged users (Contributor+) to inject arbitrary JavaScript code or HTML in posts where the Themify Custom Panel is embedded, which could lead to privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin Themify Portfolio Post de WordPress, versiones anteriores a 1.1.6, conlleva a vulnerabilidades de tipo Cross-Site Scripting (XSS) Almacenado que permiten a usuarios pocos privilegiados (Colaborador+) inyectar código JavaScript o HTML arbitrario en publicaciones donde Themify Custom Panel está embebido, lo que podría conllevar a una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themify:portfolio_post:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.6",
            "matchCriteriaId" : "05F710E2-21DB-47E8-AD51-571C1CD2EB4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c8537e5f-1948-418b-9d29-3cf50cd8f9a6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c8537e5f-1948-418b-9d29-3cf50cd8f9a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24130",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.213",
      "lastModified" : "2025-05-07T13:35:15.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the WP Google Map Plugin WordPress plugin, versions before 4.1.5, in the Manage Locations page within the plugin settings was vulnerable to SQL Injection through a high privileged user (admin+)."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin de WordPress WP Google Map, versiones anteriores a 4.1.5, en la página Manage Locations dentro de la configuración del plugin era vulnerable a una inyección SQL por medio de un usuario muy privilegiado (admin+)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:weplugins:wp_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.1.5",
            "matchCriteriaId" : "782CF750-842D-494A-9C84-95FDE4FA76CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/46af9a4d-67ac-4e08-a753-a2a44245f4f8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/46af9a4d-67ac-4e08-a753-a2a44245f4f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24131",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.277",
      "lastModified" : "2024-11-21T05:52:25.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Anti-Spam by CleanTalk WordPress plugin, versions before 5.149, lead to multiple authenticated SQL injection vulnerabilities, however, it requires high privilege user (admin+)."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en Anti-Spam del plugin de WordPress CleanTalk, versiones anteriores a 5.149, conlleva a múltiples vulnerabilidades de inyección SQL autenticadas, sin embargo, requiere un usuario muy privilegiado (admin+)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cleantalk:anti-spam:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.149",
            "matchCriteriaId" : "8BD307F7-0119-46B8-827C-A67952E5C488"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1bc28021-28c0-43fa-b89e-6b93c345e5d8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1bc28021-28c0-43fa-b89e-6b93c345e5d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24132",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.353",
      "lastModified" : "2024-11-21T05:52:25.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Slider by 10Web WordPress plugin, versions before 1.2.36, in the bulk_action, export_full and save_slider_db functionalities of the plugin were vulnerable, allowing a high privileged user (Admin), or medium one such as Contributor+ (if \"Role Options\" is turn on for other users) to perform a SQL Injection attacks."
      }, {
        "lang" : "es",
        "value" : "El plugin Slider para 10Web WordPress, versiones anteriores a 1.2.36, en las funcionalidades bulk_action, export_full y save_slider_db del plugin, eran vulnerables, permitiendo a un usuario muy privilegiado (Admin), o uno medio como Colaborador+ (si \"Role Options\" se activa para otros usuarios) para llevar a cabo ataques de inyección SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:10web:slider:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.36",
            "matchCriteriaId" : "94876046-B7C5-4CA2-A622-78935D7D2565"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c1f45000-6c16-4606-be80-1938a755af2c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c1f45000-6c16-4606-be80-1938a755af2c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24133",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.433",
      "lastModified" : "2024-11-21T05:52:25.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobaciones CSRF en el plugin ActiveCampaign de WordPress, versiones anteriores a 8.0.2, en su formulario Settings, lo que podría permitir al atacante causar que un administrador que haya iniciado sesión cambiar las Credenciales de la API para la cuenta del atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:activecampaign:activecampaign:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "8.0.2",
            "matchCriteriaId" : "45DF220D-289E-4F2E-80F0-97CDBC7B3000"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a72a5be4-654b-496f-94cd-3814c0e40120",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a72a5be4-654b-496f-94cd-3814c0e40120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24134",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.510",
      "lastModified" : "2024-11-21T05:52:25.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the Constant Contact Forms WordPress plugin, versions before 1.8.8, lead to multiple Stored Cross-Site Scripting vulnerabilities, which allowed high-privileged user (Editor+) to inject arbitrary JavaScript code or HTML in posts where the malicious form is embed."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress Constant Contact Forms, versiones anteriores a 1.8.8, conllevan a múltiples vulnerabilidades de tipo Cross-Site Scripting Almacenado, que permitían a un usuario muy privilegiado (Editor+) inyectar código JavaScript o HTML arbitrario en publicaciones donde la forma maliciosa está insertada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:constantcontact:constant_contact_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.8",
            "matchCriteriaId" : "8BE7A7DF-C39A-4FB8-8987-4A98CF947E53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8f3cca92-d072-4806-9142-7f1a987f840b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8f3cca92-d072-4806-9142-7f1a987f840b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24135",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.603",
      "lastModified" : "2024-11-21T05:52:25.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the WP Customer Reviews WordPress plugin, versions before 3.4.3, lead to multiple Stored Cross-Site Scripting vulnerabilities allowing remote attackers to inject arbitrary JavaScript code or HTML."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress WP Customer Reviews, versiones anteriores a 3.4.3, conllevan a múltiples vulnerabilidades de tipo Cross-Site Scripting Almacenado que permiten a atacantes remotos inyectar código JavaScript o HTML arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gowebsolutions:wp_customer_reviews:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.3",
            "matchCriteriaId" : "1AAA8D79-7466-4A9C-94F7-89ABAD4F744E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/07e9e70b-97a6-42e3-b0de-8cb69dedcbd3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/07e9e70b-97a6-42e3-b0de-8cb69dedcbd3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24136",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.683",
      "lastModified" : "2024-11-21T05:52:25.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the Testimonials Widget WordPress plugin, versions before 4.0.0, lead to multiple Cross-Site Scripting vulnerabilities, allowing remote attackers to inject arbitrary JavaScript code or HTML via the below parameters: - Author - Job Title - Location - Company - Email - URL"
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress Testimonials Widget, versiones anteriores a 4.0.0, conllevan a múltiples vulnerabilidades de tipo Cross-Site Scripting, permitiendo a atacantes remotos inyectar código JavaScript o HTML arbitrario por medio de los siguientes parámetros: - Job Title - Location - Company - Email - URL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:axelerant:testimonials_widget:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "77730DE2-5A15-4246-94A8-FD6F61BD31A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/537ee410-3833-4e88-9d4a-ee3c72b44ca1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/537ee410-3833-4e88-9d4a-ee3c72b44ca1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24137",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.747",
      "lastModified" : "2024-11-21T05:52:26.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Blog2Social WordPress plugin, versions before 6.3.1, lead to SQL Injection in the Re-Share Posts feature, allowing authenticated users to inject arbitrary SQL commands."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin de WordPress Blog2Social, versiones anteriores a 6.3.1, conlleva a una inyección SQL en la funcionalidad Re-Share Posts, permitiendo a usuarios autenticados inyectar comandos SQL arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adenion:blog2social:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.3.1",
            "matchCriteriaId" : "6DC87AEB-4FC5-45F5-AF2F-809BFE60DE46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9eb94e55-765b-4df5-baea-b247ef72aef3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9eb94e55-765b-4df5-baea-b247ef72aef3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24138",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.823",
      "lastModified" : "2024-11-21T05:52:26.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the AdRotate WordPress plugin, versions before 5.8.4, leads to Authenticated SQL injection via param \"id\". This requires an admin privileged user."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin de WordPress AdRotate, versiones anteriores a 5.8.4, conlleva a una inyección SQL autenticado por medio del parámetro \"id\".&#xa0;Esto requiere un usuario con privilegios de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ajdg:adrotate:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.8.4",
            "matchCriteriaId" : "A2D047C3-F423-4DC0-B8B8-1DB95A2180E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/aafac655-3616-4b27-9d0f-1cbc2faf0151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24139",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.900",
      "lastModified" : "2024-11-21T05:52:26.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Photo Gallery (10Web Photo Gallery) WordPress plugin, versions before 1.5.55, leads to SQL injection via the frontend/models/model.php bwg_search_x parameter."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin Photo Gallery de WordPress (10Web Photo Gallery), versiones anteriores a 1.5.55, conlleva a una inyección SQL por medio del parámetro bwg_search_x en el archivo frontend/models/model.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:10web:photo_gallery:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.55",
            "matchCriteriaId" : "1AAC8C97-FA5C-4909-99C9-609A81F0CF91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2e33088e-7b93-44af-aa6a-e5d924f86e28",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2e33088e-7b93-44af-aa6a-e5d924f86e28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24140",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:14.963",
      "lastModified" : "2024-11-21T05:52:27.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Ajax Load More WordPress plugin, versions before 5.3.2, lead to SQL Injection in POST /wp-admin/admin-ajax.php with param repeater=' or sleep(5)#&type=test."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin Ajax Load More de WordPress, versiones anteriores a 5.3.2, conlleva a una inyección SQL en el archivo POST /wp-admin/admin-ajax.php con param repeater=' o sleep(5)#&amp;type=test"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:connekthq:ajax_load_more:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.3.2",
            "matchCriteriaId" : "AB4BCE00-9394-4AD0-868A-470C7ED2F119"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1876312e-3dba-4909-97a5-afbb76fbc056",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1876312e-3dba-4909-97a5-afbb76fbc056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24141",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.073",
      "lastModified" : "2024-11-21T05:52:27.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high privilege users (admin+) to perform SQL attacks."
      }, {
        "lang" : "es",
        "value" : "Una entrada no valorada en el plugin Advanced Database Cleaner, versiones anteriores a 3.0.2, conlleva a una inyección SQL que permite a usuarios muy privilegiado (admin+) llevar a cabo ataques SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sigmaplugin:advanced_database_cleaner:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "8F1DA5B0-72B6-417B-A5C9-2910B926E05A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5c8adca0-fe19-4624-81ef-465b8d007f93",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5c8adca0-fe19-4624-81ef-465b8d007f93",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24142",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.137",
      "lastModified" : "2024-11-21T05:52:27.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its \"Redirect From\" column when importing a CSV file, allowing high privilege users to perform SQL injections."
      }, {
        "lang" : "es",
        "value" : "Una entrada no valorada en el plugin de WordPress 301 Redirects - Easy Redirect Manager, versiones anteriores a 2.51, no saneaba su columna \"Redirect From\" cuando se importa un archivo CSV, permitiendo a usuarios muy privilegiado llevar a cabo inyecciones SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webfactoryltd:301_redirects:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.51",
            "matchCriteriaId" : "55AE97B0-8B05-4146-A74E-0A0A3011E112"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/19800898-d7b6-4edd-887b-dac3c0597f14",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/19800898-d7b6-4edd-887b-dac3c0597f14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24143",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.213",
      "lastModified" : "2024-11-21T05:52:27.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the AccessPress Social Icons plugin, versions before 1.8.1, did not sanitise its widget attribute, allowing accounts with post permission, such as author, to perform SQL injections."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin AccessPress Social Icons, versiones anteriores a 1.8.1, no saneaba su atributo de widget, permitiendo que cuentas con permiso de publicación, tales como el autor, para llevar a cabo inyecciones SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accesspressthemes:accesspress_social_icons:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.1",
            "matchCriteriaId" : "E902C34C-3606-4FD8-8DFB-5252151CF723"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/02c5e10c-1ac7-447e-8ae5-b6d251be750b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/02c5e10c-1ac7-447e-8ae5-b6d251be750b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24144",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.323",
      "lastModified" : "2024-11-21T05:52:27.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Contact Form 7 Database Addon plugin, versions before 1.2.5.6, was prone to a vulnerability that lets remote attackers inject arbitrary formulas into CSV files."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin Contact Form 7 Database Addon, versiones anteriores a 1.2.5.6, era propensa a una vulnerabilidad que permite a atacantes remotos inyectar fórmulas arbitrarias en archivos CSV"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ciphercoin:contact_form_7_database_addon:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.5.6",
            "matchCriteriaId" : "8AFE94DD-19B5-4FEB-B3AE-7CEA066A80CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/143cdaff-c536-4ff9-8d64-c617511ddd48",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/143cdaff-c536-4ff9-8d64-c617511ddd48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24145",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.400",
      "lastModified" : "2024-11-21T05:52:27.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file upload in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request."
      }, {
        "lang" : "es",
        "value" : "Una carga arbitraria de archivos en el plugin de WordPress Modern Events Calendar Lite, versiones anteriores a 5.16.5, no comprobaba apropiadamente el archivo importado, permitiendo que los PHP sean cargados por el administrador al usar el tipo de contenido \"text/csv\" en la petición"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webnus:modern_events_calendar_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.16.5",
            "matchCriteriaId" : "BD00028C-3D21-47D5-BC22-73761A049EFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163346/WordPress-Modern-Events-Calendar-5.16.2-Shell-Upload.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163672/WordPress-Modern-Events-Calendar-Remote-Code-Execution.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f42cc26b-9aab-4824-8168-b5b8571d1610",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163346/WordPress-Modern-Events-Calendar-5.16.2-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163672/WordPress-Modern-Events-Calendar-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f42cc26b-9aab-4824-8168-b5b8571d1610",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24146",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.480",
      "lastModified" : "2024-11-21T05:52:27.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobaciones de autorización en el plugin de WordPress Modern Events Calendar Lite, versiones anteriores a 5.16.5, no restringió apropiadamente el acceso a los archivos de exportación, permitiendo a usuarios no autenticados exportar todos los datos de eventos en formato CSV o XML, por ejemplo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webnus:modern_events_calendar_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.16.5",
            "matchCriteriaId" : "BD00028C-3D21-47D5-BC22-73761A049EFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163345/WordPress-Modern-Events-Calendar-5.16.2-Information-Disclosure.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c7b1ebd6-3050-4725-9c87-0ea525f8fecc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163345/WordPress-Modern-Events-Calendar-5.16.2-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c7b1ebd6-3050-4725-9c87-0ea525f8fecc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24147",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.557",
      "lastModified" : "2024-11-21T05:52:27.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not sanitise the mic_comment field (Notes on time) when adding/editing an event, allowing users with privilege as low as author to add events with a Cross-Site Scripting payload in them, which will be triggered in the frontend when viewing the event."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de salida en el plugin de WordPress Modern Events Calendar Lite, versiones anteriores a 5.16.5, no sanean el campo mic_comment (Notas a tiempo) cuando agrega y edita un evento, permitiendo a usuarios con privilegios tan bajos como el autor para agregar eventos con una carga útil de tipo Cross-Site Scripting en ellos, que será activada en el frontend cuando se visualiza el evento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webnus:modern_events_calendar_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.16.5",
            "matchCriteriaId" : "BD00028C-3D21-47D5-BC22-73761A049EFB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0f9ba284-5d7e-4092-8344-c68316b0146f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0f9ba284-5d7e-4092-8344-c68316b0146f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24148",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.640",
      "lastModified" : "2024-11-21T05:52:28.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A business logic issue in the MStore API WordPress plugin, versions before 3.2.0, had an authentication bypass with Sign In With Apple allowing unauthenticated users to recover an authentication cookie with only an email address."
      }, {
        "lang" : "es",
        "value" : "Un problema de lógica empresarial en el plugin de WordPress MStore API, versiones anteriores a 3.2.0, presentaba una omisión de autenticación con Sign In With Apple que permitía a usuarios no autenticados recuperar una cookie de autenticación con solo una dirección de correo electrónico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:inspireui:mstore_api:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.2.0",
            "matchCriteriaId" : "D13B50A8-D39E-4F7B-9E0A-1C60C986E9A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/bf5ddc43-974d-41fa-8276-c1a27d3cc882",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bf5ddc43-974d-41fa-8276-c1a27d3cc882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24149",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-03-18T15:15:15.697",
      "lastModified" : "2024-11-21T05:52:28.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.6, did not sanitise the mec[post_id] POST parameter in the mec_fes_form AJAX action when logged in as an author+, leading to an authenticated SQL Injection issue."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada en el plugin de WordPress Modern Events Calendar Lite, versiones anteriores a 5.16.6, no saneaba el parámetro mec[post_id] POST en la acción mec_fes_form AJAX cuando se iniciaba sesión como autor+, conllevando a un problema de inyección SQL autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webnus:modern_events_calendar_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.16.6",
            "matchCriteriaId" : "5FFC99A3-D356-4EAA-958A-048720EBEAD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/26819680-22a8-4348-b63d-dc52c0d50ed0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/26819680-22a8-4348-b63d-dc52c0d50ed0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T15:15:16.150",
      "lastModified" : "2024-11-21T05:57:04.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter."
      }, {
        "lang" : "es",
        "value" : "En WoWonder versiones anteriores a 3.1, unos atacantes remotos pueden conseguir acceso a la base de datos al explotar una vulnerabilidad de inyección SQL de requirements.php?f=search-my-Followers por medio del parámetro event_id"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowonder:wowonder:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1",
            "matchCriteriaId" : "CF1E9745-B55D-45D3-8C71-F4744C76EBDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-26935",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49657",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-26935",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27306",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T15:15:16.230",
      "lastModified" : "2024-11-21T05:57:46.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en el plugin JWT en Kong Gateway versiones anteriores a 2.3.0.0, permite a usuarios no autenticados acceder a rutas autenticadas sin un token JWT válido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:konghq:kong_gateway:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "2.3.2.0",
            "matchCriteriaId" : "3B56DBB1-EAC4-489A-899D-4196DF58BFCB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.konghq.com/enterprise/changelog/#core-1",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40sew.campos/cve-2021-27306-access-an-authenticated-route-on-kong-api-gateway-6ae3d81968a3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://docs.konghq.com/enterprise/changelog/#core-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/%40sew.campos/cve-2021-27306-access-an-authenticated-route-on-kong-api-gateway-6ae3d81968a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26215",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.357",
      "lastModified" : "2024-11-21T05:55:55.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditDocument.php."
      }, {
        "lang" : "es",
        "value" : "SeedDMS versión 5.1.x, está afectado por un ataque de tipo cross-site request forgery (CSRF) en el archivo out.EditDocument.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seeddms:seeddms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.1.21",
            "matchCriteriaId" : "FC8816E6-32EC-4E41-9150-439FD6AD0823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seeddms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tuhin1729.medium.com/cve-2021-26215-7ce6800be822",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seeddms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tuhin1729.medium.com/cve-2021-26215-7ce6800be822",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.420",
      "lastModified" : "2024-11-21T05:55:55.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SeedDMS 5.1.x is affected by cross-site request forgery (CSRF) in out.EditFolder.php."
      }, {
        "lang" : "es",
        "value" : "SeedDMS versión 5.1.x, está afectado por un ataque de tipo cross-site request forgery (CSRF) en el archivo out.EditFolder.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seeddms:seeddms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.1.21",
            "matchCriteriaId" : "FC8816E6-32EC-4E41-9150-439FD6AD0823"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seeddms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tuhin1729.medium.com/cve-2021-26216-ffb33321dc91",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://seeddms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://tuhin1729.medium.com/cve-2021-26216-ffb33321dc91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28145",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.717",
      "lastModified" : "2024-11-21T05:59:10.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Concrete CMS (formerly concrete5) before 8.5.5 allows remote authenticated users to conduct XSS attacks via a crafted survey block. This requires at least Editor privileges."
      }, {
        "lang" : "es",
        "value" : "Concrete CMS (anteriormente concrete5) versiones anteriores a 8.5.5, permite a usuarios autenticados de forma remota llevar a cabo ataques de tipo XSS por medio de un bloque de encuesta diseñado.&#xa0;Esto requiere al menos privilegios Editor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:concretecms:concrete_cms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.5",
            "matchCriteriaId" : "C1F0AC3F-2B3D-474D-89AE-E36D5307AD12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.concrete5.org/developers/introduction/version-history/855-release-notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.concrete5.org/developers/security",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.concrete5.org/developers/introduction/version-history/855-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.concrete5.org/developers/security",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28789",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.810",
      "lastModified" : "2024-11-21T06:00:12.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial apple/swift-format extension before 1.1.2 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted apple-swift-format.path configuration value that triggers execution upon opening the workspace."
      }, {
        "lang" : "es",
        "value" : "La extensión apple/swift-format no oficial versiones anteriores a 1.1.2 para Visual Studio Code, permite a atacantes remotos ejecutar código arbitrario mediante la construcción de un espacio de trabajo malicioso con un valor de configuración apple-swift-format.path diseñado que desencadena una ejecución tras abrir el espacio de trabajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple-swift-format_project:apple-swift-format:*:*:*:*:*:visual_studio:*:*",
            "versionEndExcluding" : "1.1.2",
            "matchCriteriaId" : "1F6ADEC2-5ED7-4B17-902D-8A1FBC895A26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vknabel/vscode-apple-swift-format/releases/tag/1.1.2",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vknabel/vscode-apple-swift-format/releases/tag/1.1.2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28790",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.873",
      "lastModified" : "2024-11-21T06:00:12.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial SwiftLint extension before 1.4.5 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftlint.path configuration value that triggers execution upon opening the workspace."
      }, {
        "lang" : "es",
        "value" : "La extensión SwiftLint no oficial versiones anteriores a 1.4.5 para Visual Studio Code, permite a atacantes remotos ejecutar código arbitrario mediante la construcción de un espacio de trabajo malicioso con un valor de configuración swiftlint.path diseñado que desencadena una ejecución tras abrir el espacio de trabajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swiftlint_project:swiftlint:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "1.4.5",
            "matchCriteriaId" : "0921984D-1E5D-48D5-BE11-E8EADB3E325A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vknabel/vscode-swiftlint/releases/tag/1.4.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vknabel/vscode-swiftlint/releases/tag/1.4.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.933",
      "lastModified" : "2024-11-21T06:00:12.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial SwiftFormat extension before 1.3.7 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted swiftformat.path configuration value that triggers execution upon opening the workspace."
      }, {
        "lang" : "es",
        "value" : "La extensión SwiftFormat no oficial versiones anteriores a 1.3.7 para Visual Studio Code, permite a atacantes remotos ejecutar código arbitrario mediante la construcción de un espacio de trabajo malicioso con un valor de configuración swiftformat.path diseñado que desencadena una ejecución tras abrir el espacio de trabajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swiftformat_project:swiftformat:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "1.3.7",
            "matchCriteriaId" : "158006FF-FF8C-43CB-92D0-0CF56B8854CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vknabel/vscode-swiftformat/releases/tag/1.3.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vknabel/vscode-swiftformat/releases/tag/1.3.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:14.997",
      "lastModified" : "2024-11-21T06:00:12.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial Swift Development Environment extension before 2.12.1 for Visual Studio Code allows remote attackers to execute arbitrary code by constructing a malicious workspace with a crafted sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite, swift.path.sourcekiteDockerMode, swift.path.swift_driver_bin, or swift.path.shell configuration value that triggers execution upon opening the workspace."
      }, {
        "lang" : "es",
        "value" : "La extensión Swift Development Environment no oficial versiones anteriores a 2.12.1 para Visual Studio Code, permite a atacantes remotos ejecutar código arbitrario mediante la construcción de un espacio de trabajo malicioso con un valor de configuración sourcekit-lsp.serverPath, swift.languageServerPath, swift.path.sourcekite, swift.path.sourcekiteDockerMode, swift.path.swift_driver_bin o swift.path.shell, que desencadena una ejecución tras abrir el espacio de trabajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swift_development_environment_project:swift_development_environment:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "2.12.1",
            "matchCriteriaId" : "51B2E9A2-5D93-410C-B7E9-C2616171BDD2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vknabel/vscode-swift-development-environment/releases/tag/2.12.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vknabel/vscode-swift-development-environment/releases/tag/2.12.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:15.090",
      "lastModified" : "2024-11-21T06:00:12.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial ShellCheck extension before 0.13.4 for Visual Studio Code mishandles shellcheck.executablePath."
      }, {
        "lang" : "es",
        "value" : "La extensión ShellCheck no oficial versiones anteriores a 0.13.4 para Visual Studio Code, maneja inapropiadamente la función shellcheck.executablePath"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shellcheck_project:shellcheck:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "0.13.4",
            "matchCriteriaId" : "7BBB7CF7-3708-4E4D-A754-0ADEF51CD1DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/timonwong/vscode-shellcheck/pull/181",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/timonwong/vscode-shellcheck/releases/tag/v0.13.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/10",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/timonwong/vscode-shellcheck/pull/181",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/timonwong/vscode-shellcheck/releases/tag/v0.13.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28796",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T16:15:15.153",
      "lastModified" : "2024-11-21T06:00:13.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Increments Qiita::Markdown before 0.33.0 allows XSS in transformers."
      }, {
        "lang" : "es",
        "value" : "Increments Qiita::Markdown versiones anteriores a 0.33.0, permite un ataque de tipo XSS en transformadores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:increments:qiita\\:\\:markdown:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.33.0",
            "matchCriteriaId" : "3A153997-BCAB-449A-956C-3774BA8BE9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/increments/qiita-markdown/compare/v0.32.0...v0.33.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/increments/qiita-markdown/compare/v0.32.0...v0.33.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21383",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-18T17:15:13.947",
      "lastModified" : "2024-11-21T05:48:14.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wiki.js an open-source wiki app built on Node.js. Wiki.js before version 2.5.191 is vulnerable to stored cross-site scripting through mustache expressions in code blocks. This vulnerability exists due to mustache expressions being parsed by Vue during content injection even though it is contained within a `<pre>` element. By creating a crafted wiki page, a malicious Wiki.js user may stage a stored cross-site scripting attack. This allows the attacker to execute malicious JavaScript when the page is viewed by other users. For an example see referenced GitHub Security Advisory. Commit 5ffa189383dd716f12b56b8cae2ba0d075996cf1 fixes this vulnerability by adding the v-pre directive to all `<pre>` tags during the render."
      }, {
        "lang" : "es",
        "value" : "Wiki.js una aplicación wiki de código abierto construida sobre Node.js.&#xa0;Wiki.js versiones anteriores a 2.5.191, es vulnerable a un ataque de tipo cross-site scripting almacenado por medio de expresiones mustache en bloques de código.&#xa0;Esta vulnerabilidad se presenta debido a que las expresiones mustache eran analizadas por Vue durante la inyección de contenido a pesar de que está contenida dentro de un elemento \"(pre)\".&#xa0;Al crear una página wiki diseñada, un usuario de Wiki.js malicioso puede organizar un ataque de tipo cross-site scripting almacenado.&#xa0;Esto permite al atacante ejecutar JavaScript malicioso cuando otros usuarios visualizan la página.&#xa0;Para visualizar un ejemplo, consulte el Aviso de Seguridad de GitHub al que se hace referencia.&#xa0;Commit 5ffa189383dd716f12b56b8cae2ba0d075996cf1 corrige esta vulnerabilidad agregando la directiva v-pre a todas las etiquetas \"(pre)\" durante el renderizado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:requarks:wiki.js:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.191",
            "matchCriteriaId" : "AE1BA27C-823D-4E0A-A478-1E8CE5EC2EC8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Requarks/wiki/commit/5ffa189383dd716f12b56b8cae2ba0d075996cf1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Requarks/wiki/releases/tag/2.5.191",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Requarks/wiki/security/advisories/GHSA-6xx4-m8gx-826r",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Requarks/wiki/commit/5ffa189383dd716f12b56b8cae2ba0d075996cf1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Requarks/wiki/releases/tag/2.5.191",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Requarks/wiki/security/advisories/GHSA-6xx4-m8gx-826r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22665",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-18T18:15:13.450",
      "lastModified" : "2024-11-21T05:50:26.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privilege escalation and complete control of the system."
      }, {
        "lang" : "es",
        "value" : "DriveTools SP versiones v5.13 y anteriores de Rockwell Automation y Drives AOP versiones v4.12 y anteriores, contienen una vulnerabilidad que un atacante local con privilegios limitados puede ser capaz de explotar, resultando en una escalada de privilegios y un control completo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:drivetools_add-on_profiles:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.12",
            "matchCriteriaId" : "2052E441-B61E-42A6-B263-E6FCF5A30B7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rockwellautomation:drivetools_sp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.13",
            "matchCriteriaId" : "1DF300A1-CD1E-46A4-A114-EC030F30CF7D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129798",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-042-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129798",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-042-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27656",
      "sourceIdentifier" : "productsecurity@jci.com",
      "published" : "2021-03-18T18:15:13.827",
      "lastModified" : "2024-11-21T05:58:23.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in exacqVision Web Service 20.12.2.0 and prior could allow an unauthenticated attacker to view system-level information about the exacqVision Web Service and the operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio web exacqVision versiones 20.12.2.0 y anteriores, podría permitir a un atacante no autenticado visualizar información a nivel del sistema sobre el servicio web exacqVision y el sistema operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productsecurity@jci.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:johnsoncontrols:exacqvision_web_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20.12.2.0",
            "matchCriteriaId" : "1D2AFD5F-FB50-44AF-99DA-3C1E1260C3F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-077-01",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/cyber-solutions/security-advisories",
        "source" : "productsecurity@jci.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-077-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.johnsoncontrols.com/cyber-solutions/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1287",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-18T19:15:13.323",
      "lastModified" : "2024-11-21T05:44:00.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco RV132W ADSL2+ Wireless-N VPN Routers and Cisco RV134W VDSL2 Wireless-AC VPN Routers could allow an authenticated, remote attacker to execute arbitrary code on an affected device or cause the device to restart unexpectedly. The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending crafted HTTP requests to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a denial of service (DoS) condition on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los enrutadores VPN Cisco RV132W ADSL2 + Wireless-N y los enrutadores VPN Cisco RV134W VDSL2 Wireless-AC, podría permitir a un atacante remoto autenticado ejecutar código arbitrario en un dispositivo afectado o que el dispositivo se reinicie inesperadamente.&#xa0;La vulnerabilidad se presenta porque la interfaz de administración basada en web no comprueba apropiadamente la entrada proporcionada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente o causar que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS) en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.15",
            "matchCriteriaId" : "4BCC5C17-9EE8-47D8-BE56-DC24A335739F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511C48D-9EA6-4521-988C-61E1035BEFA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.21",
            "matchCriteriaId" : "B2C27566-67D8-458B-B226-3A6383E56B18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39710CC4-1891-4E4B-AF65-AC2577CC8FFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-132w134w-overflow-Pptt4H2p",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-132w134w-overflow-Pptt4H2p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28160",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T19:15:13.527",
      "lastModified" : "2024-11-21T05:59:12.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) suffers from a reflected XSS vulnerability due to unsanitized SSID value when the latter is displayed in the /repeater.html page (\"Repeater Wizard\" homepage section)."
      }, {
        "lang" : "es",
        "value" : "Wireless-N WiFi Repeater REV 1.0 (28.08.06.1), sufre una vulnerabilidad de tipo XSS reflejado debido a un valor SSID no saneado cuando este último es mostrado en la página /repeater.html (sección de la página de inicio \"Repeater Wizard\")"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:acexy_wireless-n_wifi_repeater_project:acexy_wireless-n_wifi_repeater_firmware:28.08.06.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B37965B9-8B77-43FF-AF67-E8329FE4CE6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acexy_wireless-n_wifi_repeater_project:acexy_wireless-n_wifi_repeater:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "877FE567-EAE2-4C10-8F8E-987C28943EC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.amazon.com/Extender-Wireless-Repeater-External-Antennas/dp/B08GMCC6X2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.amazon.com/Extender-Wireless-Repeater-External-Antennas/dp/B08GMCC6X2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25764",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T20:15:13.160",
      "lastModified" : "2024-11-21T05:55:23.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In JetBrains PhpStorm before 2020.3, source code could be added to debug logs."
      }, {
        "lang" : "es",
        "value" : "En JetBrains PhpStorm versiones anteriores a 2020.3, el código fuente podía ser agregado a los registros de depuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jetbrains:phpstorm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "83E163C5-4D86-4820-8850-2A67C22DB9C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.jetbrains.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.jetbrains.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://blog.jetbrains.com/blog/2021/02/03/jetbrains-security-bulletin-q4-2020/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27358",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-18T20:15:13.253",
      "lastModified" : "2024-11-21T05:57:50.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The snapshot feature in Grafana 6.7.3 through 7.4.1 can allow an unauthenticated remote attackers to trigger a Denial of Service via a remote API call if a commonly used configuration is set."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad snapshot en Grafana versiones 6.7.3 hasta la 7.4.1, puede permitir a atacantes remotos no autenticados desencadenar una Denegación de Servicio por medio de una llamada de la API remota si es ajustada una configuración usada comúnmente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.3",
            "versionEndIncluding" : "7.4.1",
            "matchCriteriaId" : "0BE6AA9C-F31D-4F0D-B6FE-B144164C6FF6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/grafana/grafana/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grafana/grafana/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grafana/grafana/blob/master/CHANGELOG.md#742-2021-02-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3416",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-18T20:15:13.300",
      "lastModified" : "2024-11-21T06:21:27.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU in versions up to and including 5.2.0. The issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume CPU cycles or crash the QEMU process on the host resulting in DoS scenario."
      }, {
        "lang" : "es",
        "value" : "Se encontró un posible desbordamiento de la pila por medio de un problema de bucle infinito en varios emuladores de NIC de QEMU en versiones hasta 5.2.0 incluyéndola.&#xa0;El problema ocurre en el modo loopback de una NIC en donde son omitidas las comprobaciones DMA reentrantes.&#xa0;Un usuario y proceso invitado puede usar este fallo para consumir ciclos de CPU o bloquear el proceso QEMU en el host, resultando en un escenario DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "326C44E5-259C-47D1-B540-E153CD7C907C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "053C1B35-3869-41C2-9551-044182DE0A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*",
            "matchCriteriaId" : "3AA08768-75AF-4791-B229-AE938C780959"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1932827",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/26/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1932827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/02/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27436",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-18T22:15:13.617",
      "lastModified" : "2024-11-21T05:57:59.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could result in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser actions."
      }, {
        "lang" : "es",
        "value" : "WebAccess/SCADA versiones 9.0 y anteriores, son vulnerables a un ataque de tipo cross-site scripting, lo que puede permitir a un atacante enviar código JavaScript malicioso a un usuario desprevenido, lo que podría resultar en el secuestro de las cookies y tokens de sesión del usuario, redireccionando al usuario a una página web maliciosa. y llevar a cabo acciones no deseadas del navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess\\/scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0",
            "matchCriteriaId" : "EE952533-988E-4B44-8FD3-A29B53C1885A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-075-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-075-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21384",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-19T00:15:11.793",
      "lastModified" : "2024-11-21T05:48:14.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "shescape is a simple shell escape package for JavaScript. In shescape before version 1.1.3, anyone using _Shescape_ to defend against shell injection may still be vulnerable against shell injection if the attacker manages to insert a into the payload. For an example see the referenced GitHub Security Advisory. The problem has been patched in version 1.1.3. No further changes are required."
      }, {
        "lang" : "es",
        "value" : "shescape es un paquete de escape de shell simple para JavaScript.&#xa0;En shescape versiones anteriores a 1.1.3, cualquiera que use _Shescape_ para defenderse de la inyección de shell puede ser vulnerable frente a una inyección shell si el atacante logra insertar en la carga útil.&#xa0;Para visualizar un ejemplo, consulte el Aviso de Seguridad de GitHub al que se hace referencia.&#xa0;El problema ha sido solucionado en la versión 1.1.3.&#xa0;No son requeridos más cambios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shescape_project:shescape:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.1.3",
            "matchCriteriaId" : "C88DEA52-C298-4E68-AA29-00122DE84930"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:opengroup:unix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A90CB3A-9BE7-475C-9E75-6ECAD2106302"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ericcornelissen/shescape/commit/07a069a66423809cbedd61d980c11ca44a29ea2b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ericcornelissen/shescape/releases/tag/v1.1.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ericcornelissen/shescape/security/advisories/GHSA-f2rp-38vg-j3gh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/shescape",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/ericcornelissen/shescape/commit/07a069a66423809cbedd61d980c11ca44a29ea2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ericcornelissen/shescape/releases/tag/v1.1.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ericcornelissen/shescape/security/advisories/GHSA-f2rp-38vg-j3gh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/shescape",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T00:15:11.903",
      "lastModified" : "2024-11-21T05:56:01.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The eslint-fixer package through 0.1.5 for Node.js allows command injection via shell metacharacters to the fix function. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. The ozum/eslint-fixer GitHub repository has been intentionally deleted"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** El paquete eslint-fixer versiones hasta 0.1.5 para Node.js, permite una inyección de comandos por medio de metacaracteres shell para la función fix.&#xa0;NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles con el mantenedor.&#xa0;El repositorio de GitHub ozum/eslint-fixer ha sido eliminado intencionadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eslint-fixer_project:eslint-fixer:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.1.5",
            "matchCriteriaId" : "DA092F6B-9E7B-44D6-8BE6-B7A2727A0487"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4774",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/eslint-fixer",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2021-4774",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/eslint-fixer",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T00:15:11.963",
      "lastModified" : "2024-11-21T06:00:02.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The iOS and macOS apps before 1.4.1 for the Western Digital G-Technology ArmorLock NVMe SSD store keys insecurely. They choose a non-preferred storage mechanism if the device has Secure Enclave support but lacks biometric authentication hardware."
      }, {
        "lang" : "es",
        "value" : "Las aplicaciones iOS y macOS versiones anteriores a 1.4.1 para Western Digital G-Technology ArmorLock NVMe SSD, almacenan claves de forma no segura.&#xa0;Eligen un mecanismo de almacenamiento no preferido si el dispositivo es compatible con Secure Enclave pero carece de hardware de autenticación biométrica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-922"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:westerndigital:armorlock:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "6510A674-DBD5-4D12-B1E4-9DC90763269A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:westerndigital:armorlock:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "619FC584-6206-4ED0-ABF3-2035E729F7BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.westerndigital.com/support/productsecurity/wdc-21003-armorLock-insecure-key-storage-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27221",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T03:15:12.363",
      "lastModified" : "2024-11-21T05:57:37.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** MikroTik RouterOS versión 6.47.9, permite a usuarios de ftp autenticados de forma remota crear o sobrescribir archivos .rsc arbitrarios por medio del comando /export.&#xa0;NOTA: la posición del proveedor es que este es un comportamiento previsto debido a cómo funcionan las políticas de usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mikrotik:routeros:6.47.9:*:*:*:-:*:*:*",
            "matchCriteriaId" : "899BBA29-3A0B-41A3-A077-AB4BEF29E5F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://onovy.medium.com/routeros-user-with-just-ftp-policy-can-write-to-filesystem-cve-2021-27221-e3e45d780dfe",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://onovy.medium.com/routeros-user-with-just-ftp-policy-can-write-to-filesystem-cve-2021-27221-e3e45d780dfe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27928",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T03:15:12.427",
      "lastModified" : "2024-11-21T05:58:50.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution issue was discovered in MariaDB 10.2 before 10.2.37, 10.3 before 10.3.28, 10.4 before 10.4.18, and 10.5 before 10.5.9; Percona Server through 2021-03-03; and the wsrep patch through 2021-03-03 for MySQL. An untrusted search path leads to eval injection, in which a database SUPER user can execute OS commands after modifying wsrep_provider and wsrep_notify_cmd. NOTE: this does not affect an Oracle product."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema de ejecución de código remota en MariaDB versiones 10.2 anteriores a 10.2.37, versiones 10.3 anteriores a 10.3.28, versiones 10.4 anteriores a 10.4.18 y versiones 10.5 anteriores a 10.5.9;&#xa0;Percona Server versiones hasta el 03-03-2021;&#xa0;y el parche de wsrep versiones hasta el 03-03-2021 para MySQL.&#xa0;Una ruta de búsqueda que no es confiable conlleva a una inyección eval, en la que un usuario SUPER de la base de datos puede ejecutar comandos del Sistema Operativo después de modificar las funciones wsrep_provider y wsrep_notify_cmd.&#xa0;NOTA: esto no afecta a un producto de Oracle"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2",
            "versionEndExcluding" : "10.2.37",
            "matchCriteriaId" : "C6D44606-A656-4DAA-8053-9ECD76D71D22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3",
            "versionEndExcluding" : "10.3.28",
            "matchCriteriaId" : "A3EB49AE-1CEF-4777-92DD-08E95CB3FA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4",
            "versionEndExcluding" : "10.4.18",
            "matchCriteriaId" : "D895AA3B-6BE4-4EB9-A915-03E3B8F2C2F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "10.5.9",
            "matchCriteriaId" : "6BBD522D-BF25-4B6B-96C8-09FEE94018AA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:percona:percona_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-03-03",
            "matchCriteriaId" : "EC14B9A6-C36B-4638-BCAE-F358F69FE8C3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:galeracluster:wsrep:*:*:*:*:*:mysql:*:*",
            "versionEndIncluding" : "2021-03-03",
            "matchCriteriaId" : "1DAC147D-1014-49E4-821D-2AA46DBAE5E3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162177/MariaDB-10.2-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.mariadb.org/browse/MDEV-25179",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00028.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-10237-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-10328-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-10418-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-1059-release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162177/MariaDB-10.2-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://jira.mariadb.org/browse/MDEV-25179",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-10237-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-10328-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-10418-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/mariadb-1059-release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mariadb.com/kb/en/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T03:15:12.487",
      "lastModified" : "2024-11-21T05:59:05.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TranzWare (POI) FIMI before 4.2.20.4.2 allows login_tw.php reflected Cross-Site Scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "TranzWare (POI) FIMI versiones anteriores a 4.2.20.4.2, permite al archivo login_tw.php un ataque de tipo Cross-Site Scripting (XSS) reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compassplus:tranzware_fimi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.20.4.2",
            "matchCriteriaId" : "2E2F329D-DC81-42E1-AD2B-92A41F7E6C93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/ArtemBrylev/51106b7cf8929b3ecfb9dd7c9e7b0fcf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tadviser.ru/index.php/%D0%9F%D1%80%D0%BE%D0%B4%D1%83%D0%BA%D1%82:TranzWare_Online",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/ArtemBrylev/51106b7cf8929b3ecfb9dd7c9e7b0fcf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tadviser.ru/index.php/%D0%9F%D1%80%D0%BE%D0%B4%D1%83%D0%BA%D1%82:TranzWare_Online",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T03:15:12.550",
      "lastModified" : "2024-11-21T06:21:18.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter."
      }, {
        "lang" : "es",
        "value" : "Ovation Dynamic Content versión 1.10.1 para Elementor, permite un ataque de tipo XSS por medio del parámetro post_title"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovation:dynamic_content:1.10.1:*:*:*:*:elementor:*:*",
            "matchCriteriaId" : "4094B418-B36E-4FF0-A5BF-2D0B92EF2AA1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/IthacaLabs/e69e90e1d0d9cb37bb3746b6a4274d29",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dynamic.ooo/changelog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/IthacaLabs/e69e90e1d0d9cb37bb3746b6a4274d29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dynamic.ooo/changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25289",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.280",
      "lastModified" : "2024-11-21T05:54:41.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pillow before 8.1.1. TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode. NOTE: this issue exists because of an incomplete fix for CVE-2020-35654."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Pillow versiones anteriores a 8.1.1.&#xa0;La función TiffDecode presenta un desbordamiento de búfer en la región heap de la memoria cuando se decodifican archivos YCbCr diseñados debido a determinados conflictos de interpretación con LibTIFF en el modo RGBA.&#xa0;NOTA: este problema se presenta debido a una corrección incompleta para CVE-2020-35654"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25290",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.357",
      "lastModified" : "2024-11-21T05:54:41.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is a negative-offset memcpy with an invalid size."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Pillow versiones anteriores a 8.1.1.&#xa0;En el archivo TiffDecode.c, se presenta una memoria de desplazamiento negativo con un tamaño no válido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25291",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.530",
      "lastModified" : "2024-11-21T05:54:41.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pillow before 8.1.1. In TiffDecode.c, there is an out-of-bounds read in TiffreadRGBATile via invalid tile boundaries."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Pillow versiones anteriores a 8.1.1.&#xa0;En el archivo TiffDecode.c, se presenta una lectura fuera de límites en la función TiffreadRGBATile por medio de límites de mosaico no válidos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25292",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.590",
      "lastModified" : "2024-11-21T05:54:41.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pillow before 8.1.1. The PDF parser allows a regular expression DoS (ReDoS) attack via a crafted PDF file because of a catastrophic backtracking regex."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Pillow versiones anteriores a 8.1.1.&#xa0;El analizador de PDF permite un ataque DoS (ReDoS) de expresión regular por medio de un archivo PDF diseñado debido a una regex de retroceso catastrófica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25293",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.670",
      "lastModified" : "2024-11-21T05:54:41.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Pillow before 8.1.1. There is an out-of-bounds read in SGIRleDecode.c."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Pillow versiones anteriores a 8.1.1.&#xa0;Se presenta una lectura fuera de límites en el archivo SGIRleDecode.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:pillow:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.1",
            "matchCriteriaId" : "0EAEBE97-889C-4137-92C1-F832F605B041"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pillow.readthedocs.io/en/stable/releasenotes/8.1.1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28110",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.793",
      "lastModified" : "2024-11-21T05:59:05.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "/exec in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a vulnerability in its XML parser."
      }, {
        "lang" : "es",
        "value" : "/exec en TranzWare e-Commerce Payment Gateway (TWEC PG) versiones anteriores a 3.1.27.5, presentaba una vulnerabilidad en su analizador XML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compassplus:tranzware_e-commerce_payment_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.27.5",
            "matchCriteriaId" : "E3A5AC31-E328-44D3-B84C-5213B8E1D62D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/kukuxumushi/0b7d90a917ac3480066c4cbf7519b40a",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/kukuxumushi/0b7d90a917ac3480066c4cbf7519b40a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T04:15:13.967",
      "lastModified" : "2024-11-21T05:59:08.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability"
      }, {
        "lang" : "es",
        "value" : "El archivo index.jsp en TranzWare e-Commerce Payment Gateway (TWEC PG) versiones anteriores a 3.1.27.5, presentaba una vulnerabilidad de tipo cross-site scripting (XSS) almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:compassplus:tranzware_e-commerce_payment_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.27.5",
            "matchCriteriaId" : "E3A5AC31-E328-44D3-B84C-5213B8E1D62D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/kukuxumushi/7436994ef395573023b79652e104a2a0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/kukuxumushi/7436994ef395573023b79652e104a2a0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28089",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T05:15:12.807",
      "lastModified" : "2024-11-21T05:59:04.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.4.5.7 allows a remote participant in the Tor directory protocol to exhaust CPU resources on a target, aka TROVE-2021-001."
      }, {
        "lang" : "es",
        "value" : "Tor versiones anteriores a 0.4.5.7, permite a un participante remoto en el protocolo de directorio de Tor agotar los recursos de la CPU en un objetivo, también se conoce como TROVE-2021-001"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.5.14",
            "matchCriteriaId" : "43571CF8-3E89-4207-85A4-809927C4E8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.4.4",
            "versionEndExcluding" : "0.4.4.8",
            "matchCriteriaId" : "172491E9-1095-4908-8D59-F65C7639FDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.5.0",
            "versionEndExcluding" : "0.4.5.7",
            "matchCriteriaId" : "A7449C9D-05ED-49E4-A3D9-674B44E032F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C3708B4D-8F02-47B4-81E8-AA626B04C906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2143F2C0-BBD4-4B14-84D6-70125DD37376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "85811EFA-8639-439D-BC97-52C70D5937E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "419573B8-18FB-4BEA-8C21-023BA05B3D8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/node/2009",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/issues/40304",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPDXB2GZHG3VNOTWSXQ3QZVHNV76WCU5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-25",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/node/2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/issues/40304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPDXB2GZHG3VNOTWSXQ3QZVHNV76WCU5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T05:15:12.870",
      "lastModified" : "2024-11-21T05:59:04.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tor before 0.4.5.7 allows a remote attacker to cause Tor directory authorities to exit with an assertion failure, aka TROVE-2021-002."
      }, {
        "lang" : "es",
        "value" : "Tor versiones anteriores a 0.4.5.7, permite a un atacante remoto causar que autoridades del directorio de Tor salgan con un fallo de aserción, también se conoce como TROVE-2021-002"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.5.14",
            "matchCriteriaId" : "43571CF8-3E89-4207-85A4-809927C4E8B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.4.4",
            "versionEndExcluding" : "0.4.4.8",
            "matchCriteriaId" : "172491E9-1095-4908-8D59-F65C7639FDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.5.0",
            "versionEndExcluding" : "0.4.5.7",
            "matchCriteriaId" : "A7449C9D-05ED-49E4-A3D9-674B44E032F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "C3708B4D-8F02-47B4-81E8-AA626B04C906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.1:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "2143F2C0-BBD4-4B14-84D6-70125DD37376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.2:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "85811EFA-8639-439D-BC97-52C70D5937E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torproject:tor:0.4.4.3:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "419573B8-18FB-4BEA-8C21-023BA05B3D8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.torproject.org/node/2009",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/tpo/core/tor/40316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/issues/40316",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPDXB2GZHG3VNOTWSXQ3QZVHNV76WCU5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-25",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.torproject.org/node/2009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.torproject.org/tpo/core/tor/40316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.torproject.org/tpo/core/tor/-/issues/40316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HPDXB2GZHG3VNOTWSXQ3QZVHNV76WCU5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28831",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T05:15:13.150",
      "lastModified" : "2025-12-17T22:15:56.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "decompress_gunzip.c in BusyBox through 1.32.1 mishandles the error bit on the huft_build result pointer, with a resultant invalid free or segmentation fault, via malformed gzip data."
      }, {
        "lang" : "es",
        "value" : "El archivo decompress_gunzip.c en BusyBox versiones hasta 1.32.1, maneja inapropiadamente el bit de error en el puntero de resultado de huft_build, con un fallo liberación invalida o de segmentación resultante, por medio de datos gzip malformados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:busybox:busybox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndIncluding" : "1.32.1",
            "matchCriteriaId" : "3F45843F-3E26-4DE5-B89B-E83623AB8054"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.busybox.net/busybox/commit/?id=f25d254dfd4243698c31a4f3153d4ac72aa9e9bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/01/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3UDQGJRECXFS5EZVDH2OI45FMO436AC4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z7ZIFKPRR32ZYA3WAA2NXFA3QHHOU6FJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZASBW7QRRLY5V2R44MQ4QQM4CZIDHM2U/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20250509-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28834",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T07:15:13.147",
      "lastModified" : "2024-11-21T06:00:17.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kramdown before 2.3.1 does not restrict Rouge formatters to the Rouge::Formatters namespace, and thus arbitrary classes can be instantiated."
      }, {
        "lang" : "es",
        "value" : "Kramdown versiones anteriores a 2.3.1, no restringe los formateadores Rouge al espacio de nombres de Rouge::Formatters, y por lo tanto, pueden ser instancializadas clases arbitrarias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kramdown_project:kramdown:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "2.3.1",
            "matchCriteriaId" : "E6F23C23-B609-42B7-9D92-73BC4C61CC4A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gettalong/kramdown/compare/REL_2_3_0...REL_2_3_1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gettalong/kramdown/pull/708",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/commit/179329b5c3c118924fb242dc449d06b4ed6ccb66",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJCJVYHPY6LNUFM6LYZIAUIYOMVT5QGV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3BBLUIDCUUR3NEE4NJLOCCAV3ALQ3O6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYOLQKFL6IJCQLBXV34Z4TI4O54GESPR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4890",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gettalong/kramdown/compare/REL_2_3_0...REL_2_3_1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gettalong/kramdown/pull/708",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/commit/179329b5c3c118924fb242dc449d06b4ed6ccb66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NJCJVYHPY6LNUFM6LYZIAUIYOMVT5QGV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S3BBLUIDCUUR3NEE4NJLOCCAV3ALQ3O6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SYOLQKFL6IJCQLBXV34Z4TI4O54GESPR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27506",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T15:15:12.650",
      "lastModified" : "2024-11-21T05:58:07.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1."
      }, {
        "lang" : "es",
        "value" : "El componente ClamAV Engine (versión 0.103.1 e inferior) incrustado en Storsmshield Network Security (SNS) está sujeto a DoS en caso de analizar archivos png malformados. Esto afecta a las versiones 9.1.0 a 9.1.11 de Netasq y a las versiones 1.0.0 a 4.2.0 de SNS. Este problema se ha solucionado en SNS versiones 3.7.19, 3.11.7 y 4.2.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netasq_project:netasq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndIncluding" : "9.1.11",
            "matchCriteriaId" : "9706560E-DD3E-45D1-895C-5EE59C7DFB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "versionEndIncluding" : "4.2.0",
            "matchCriteriaId" : "20C1A2CD-7802-4497-B87D-8D49506B7BCB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.103.1",
            "matchCriteriaId" : "22A4DD0B-BD39-4BC7-BB23-114AFC9C2FAD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories.stormshield.eu/2021-003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2021/02/clamav-01031-patch-release.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisories.stormshield.eu/2021-003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2021/02/clamav-01031-patch-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21387",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-19T16:15:12.780",
      "lastModified" : "2024-11-21T05:48:15.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wrongthink peer-to-peer, end-to-end encrypted messenger with PeerJS and Axolotl ratchet. In wrongthink from version 2.0.0 and before 2.3.0 there was a set of vulnerabilities causing inadequate encryption strength. Part of the secret identity key was disclosed by the fingerprint used for connection. Additionally, the safety number was improperly calculated. It was computed using part of one of the public identity keys instead of being derived from both public identity keys. This caused issues in computing safety numbers which would potentially be exploitable in the real world. Additionally there was inadequate encryption strength due to use of 1024-bit DSA keys. These issues are all fixed in version 2.3.0."
      }, {
        "lang" : "es",
        "value" : "Wrongthink mensajero cifrado punto a punto y de extremo a extremo con PeerJS y Axolotl Ratchet.&#xa0;En wrongthink desde versión 2.0.0 y anteriores a 2.3.0, había un conjunto de vulnerabilidades que causaban una fuerza de cifrado inapropiada.&#xa0;Parte de la clave de identidad secreta fue divulgada por la huella digital usada para la conexión.&#xa0;Además, el número de seguridad fue calculado inapropiadamente.&#xa0;Se calculó usando parte de una de las claves de identidad públicas en lugar de derivarse de ambas claves de identidad públicas.&#xa0;Esto causó problemas en el cálculo de números de seguridad que potencialmente podrían explotarse en el mundo real.&#xa0;Además, hubo un nivel de cifrado inadecuado debido al uso de claves DSA de 1024 bits.&#xa0;Todos estos problemas están corregidos en versión 2.3.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        }, {
          "lang" : "en",
          "value" : "CWE-326"
        }, {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wrongthink:wrongthink:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "EF024789-5E37-406E-81A4-99DF296E2A38"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/parabirb/wrongthink/security/advisories/GHSA-5jxh-6378-rg7v",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/parabirb/wrongthink/security/advisories/GHSA-5jxh-6378-rg7v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21390",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-19T16:15:12.920",
      "lastModified" : "2024-11-21T05:48:15.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-17T02-33-02Z, there is a vulnerability which enables MITM modification of request bodies that are meant to have integrity guaranteed by chunk signatures. In a PUT request using aws-chunked encoding, MinIO ordinarily verifies signatures at the end of a chunk. This check can be skipped if the client sends a false chunk size that is much greater than the actual data sent: the server accepts and completes the request without ever reaching the end of the chunk + thereby without ever checking the chunk signature. This is fixed in version RELEASE.2021-03-17T02-33-02Z. As a workaround one can avoid using \"aws-chunked\" encoding-based chunk signature upload requests instead use TLS. MinIO SDKs automatically disable chunked encoding signature when the server endpoint is configured with TLS."
      }, {
        "lang" : "es",
        "value" : "MinIO es un servicio de almacenamiento de objetos de alto rendimiento de código abierto y su API es compatible con el servicio de almacenamiento en la nube Amazon S3. En MinIO versiones anteriores a RELEASE.2021-03-17T02-33-02Z, se presenta una vulnerabilidad que permite la modificación por parte de un MITM de los cuerpos de las peticiones que se supone que presentan la integridad garantizada por las firmas de los fragmentos. En una petición PUT que usa la codificación aws-chunked, MinIO normalmente comprueba las firmas al final de un fragmento. Esta comprobación puede saltarse si el cliente envía un tamaño de fragmento falso que es mucho mayor que los datos reales enviados: el servidor acepta y completa la petición sin llegar nunca al final del fragmento + por tanto sin comprobar nunca la firma del fragmento. Esto se ha corregido en la versión RELEASE.2021-03-17T02-33-02Z. Como solución, se puede evitar el uso de peticiones de carga de firmas de fragmentos basadas en la codificación \"aws-chunked\" y, en su lugar, usar TLS. Los SDKs de MinIO deshabilitan automáticamente la firma de codificación en trozos cuando el endpoint del servidor está configurado con TLS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-924"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-924"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minio:minio:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-03-17t02-33-02z",
            "matchCriteriaId" : "420A5DDF-D7F9-45C8-82EB-BD18D81939CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/minio/minio/commit/e197800f9055489415b53cf137e31e194aaf7ba0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/11801",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-xr7r-7gpj-5pgp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/commit/e197800f9055489415b53cf137e31e194aaf7ba0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/pull/11801",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/minio/minio/security/advisories/GHSA-xr7r-7gpj-5pgp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27807",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-19T16:15:13.013",
      "lastModified" : "2024-11-21T05:58:36.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions."
      }, {
        "lang" : "es",
        "value" : "Un archivo PDF cuidadosamente diseñado puede desencadenar un bucle infinito mientras se carga el archivo.&#xa0;Este problema afecta a Apache PDFBox versión 2.0.22 y versiones anteriores 2.0.x"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.22",
            "matchCriteriaId" : "BC2012CF-DF16-46AC-90E8-63511C960BCD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E14324D-B9EE-4C06-ACC7-255189ED6300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBB60F-6EAB-4AE5-B777-5044C657FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185C1EA-71E6-4972-8637-08A33CC00841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3D0063-9458-4018-9B92-79A219716C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "9B7C949D-0AB3-4566-9096-014C82FC1CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.3.0",
            "matchCriteriaId" : "54BE0CCE-8216-4CCF-96E1-38EF76124368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1C2DF5-1C2C-4205-A577-85234D13B60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6675A3-684B-4486-A451-C6688F1C821B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_reporting:11.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED543A4C-B774-4578-AC5B-752434EAF197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2.8.0",
            "matchCriteriaId" : "55BBCD48-BCC6-4E19-A4CE-970E524B9FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "08FA59A8-6A62-4B33-8952-D6E658F8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10864586-270E-4ACF-BDCC-ECFCD299305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38340E3C-C452-4370-86D4-355B6B4E0A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFAEA84-E376-40A2-8C9F-3E0676FEC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FB468-EAF3-4E67-95E7-DF92C281C1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D551CAB1-4312-44AA-BDA8-A030817E153A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174A6D2E-E42E-4C92-A194-C6A820CD7EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569C0BD-16C1-441E-BAEB-840C94BE73EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/19/9",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r043edc5dcf9199f7f882ed7906b41cb816753766e88b8792dbf319a9%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4717f902f8bc36d47b3fa978552a25e4ed3ddc2fffb52b94fbc4ab36%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/19/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r043edc5dcf9199f7f882ed7906b41cb816753766e88b8792dbf319a9%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4717f902f8bc36d47b3fa978552a25e4ed3ddc2fffb52b94fbc4ab36%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r818058ff1e4b9f6bef4e5a2e74faff38cb3d3885c1e2db398bc55cfb%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27906",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-19T16:15:13.093",
      "lastModified" : "2024-11-21T05:58:45.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions."
      }, {
        "lang" : "es",
        "value" : "Un archivo PDF cuidadosamente diseñado puede desencadenar una excepción OutOfMemory-Exception mientras se carga el archivo.&#xa0;Este problema afecta a Apache PDFBox versión 2.0.22 y versiones anteriores 2.0.x"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-789"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:pdfbox:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.22",
            "matchCriteriaId" : "BC2012CF-DF16-46AC-90E8-63511C960BCD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9A061-2421-426D-9854-0A4E55B2961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95EDC3D-54BB-48F9-82F2-7CCF335FCA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72B735F-4E52-484A-9C2C-23E6E2070385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B36A1D4-F391-4EE3-9A65-0A10568795BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55116032-AAD1-4FEA-9DA8-2C4CBD3D3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0275F820-40BE-47B8-B167-815A55DF578E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_supply_chain_finance:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8420D4-AAF1-44AA-BF28-48EE3ED310B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_supply_chain_finance:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB80AC5-35F2-4703-AD93-416B46972EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_supply_chain_finance:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19DAAEFF-AB4A-4D0D-8C86-D2F2811B53B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E14324D-B9EE-4C06-ACC7-255189ED6300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBB60F-6EAB-4AE5-B777-5044C657FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185C1EA-71E6-4972-8637-08A33CC00841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_treasury_management:14.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C3D0063-9458-4018-9B92-79A219716C10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "9B7C949D-0AB3-4566-9096-014C82FC1CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.3.0",
            "matchCriteriaId" : "54BE0CCE-8216-4CCF-96E1-38EF76124368"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_universal_banking:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE1C2DF5-1C2C-4205-A577-85234D13B60B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_reporting:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6675A3-684B-4486-A451-C6688F1C821B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_reporting:11.2.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED543A4C-B774-4578-AC5B-752434EAF197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_infrastructure_technology:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2.8.0",
            "matchCriteriaId" : "55BBCD48-BCC6-4E19-A4CE-970E524B9FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "08FA59A8-6A62-4B33-8952-D6E658F8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10864586-270E-4ACF-BDCC-ECFCD299305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38340E3C-C452-4370-86D4-355B6B4E0A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EFAEA84-E376-40A2-8C9F-3E0676FEC527"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FB468-EAF3-4E67-95E7-DF92C281C1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D551CAB1-4312-44AA-BDA8-A030817E153A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_sites:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "174A6D2E-E42E-4C92-A194-C6A820CD7EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569C0BD-16C1-441E-BAEB-840C94BE73EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/19/10",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r64982b768c8a2220b07aaf813bd099a9863de0d13eb212fd4efe208f%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdf78aef4793362e778e21e34328b0456e302bde4b7e74f229df0ee04%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf35026148ccc0e1af133501c0d003d052883fcc65107b3ff5d3b61cd%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf35026148ccc0e1af133501c0d003d052883fcc65107b3ff5d3b61cd%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/19/10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1218e60c32829f76943ecaca79237120c2ec1ab266459d711a578b50%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1d268642f8b52456ee8f876b888b8ed7a9e9568c7770789f3ded7f9e%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r54594251369e14c185da9662a5340a52afbbdf75d61c9c3a69c8f2e8%40%3Cdev.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5c8e2125d18af184c80f7a986fbe47eaf0d30457cd450133adc235ac%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r64982b768c8a2220b07aaf813bd099a9863de0d13eb212fd4efe208f%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6e067a6d83ccb6892d0ff867bd216704f21fb0b6a854dea34be04f12%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7ee634c21816c69ce829d0c41f35afa2a53a99bdd3c7cce8644fdc0e%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ffe179385637b0b5cbdabd0246118005b4b8232909d2d14cd68ccd3%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa35746227f3f8d50fff1db9899524423a718f6f35cd39bd4769fa6c%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc69140d894c6a9c67a8097a25656cce59b46a5620c354ceba10543c3%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdf78aef4793362e778e21e34328b0456e302bde4b7e74f229df0ee04%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1e35881482e07dc2be6058d9b44483457f36133cac67956686ad9b9%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf35026148ccc0e1af133501c0d003d052883fcc65107b3ff5d3b61cd%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rf35026148ccc0e1af133501c0d003d052883fcc65107b3ff5d3b61cd%40%3Cusers.pdfbox.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2AVLKAHFMPH72TTP25INPZPGX5FODK3H/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6KDA2U4KL2N3XT3PM4ZJEBBA6JJIH2G4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6PT72QOFDXLJ7PLTN66EMG5EHPTE7TFZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25277",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T17:15:13.193",
      "lastModified" : "2024-11-21T05:54:40.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the alternative text hover box in the file submission component."
      }, {
        "lang" : "es",
        "value" : "FTAPI versiones 4.0 - 4.10, permite un ataque de tipo XSS por medio de un nombre de archivo diseñado al cuadro de texto alternativo en el componente file submission"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftapi:ftapi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "1DBEFEFA-5626-4BBE-9CB9-1BFC36363C83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25277",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ftapi.com/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ftapi.com/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25278",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T17:15:13.257",
      "lastModified" : "2024-11-21T05:54:40.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FTAPI 4.0 through 4.10 allows XSS via an SVG document to the Background Image upload feature in the Submit Box Template Editor."
      }, {
        "lang" : "es",
        "value" : "FTAPI versiones 4.0 hasta 4.10, permite un ataque de tipo XSS por medio de un documento SVG a la funcionalidad de carga de Background Image en el Submit Box Template Editor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ftapi:ftapi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndIncluding" : "4.10",
            "matchCriteriaId" : "1DBEFEFA-5626-4BBE-9CB9-1BFC36363C83"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25278",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ftapi.com/release-notes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/rauschecker/CVEs/tree/main/CVE-2021-25278",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ftapi.com/release-notes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20077",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-03-19T19:15:13.497",
      "lastModified" : "2024-11-21T05:45:53.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nessus Agent versions 7.2.0 through 8.2.2 were found to inadvertently capture the IAM role security token on the local host during initial linking of the Nessus Agent when installed on an Amazon EC2 instance. This could allow a privileged attacker to obtain the token."
      }, {
        "lang" : "es",
        "value" : "Se encontró que las versiones 7.2.0 a 8.2.2 del Agente Nessus capturan inadvertidamente el token de seguridad del rol IAM en el host local durante la vinculación inicial del Agente Nessus cuando se instala en una instancia de Amazon EC2. Esto podría permitir a un atacante privilegiado obtener el token"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "8.2.3",
            "matchCriteriaId" : "1F349161-FB60-4003-B328-6FD49D226195"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/tns-2021-04-0",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-04-0",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-07",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-04-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-04-0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26990",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2021-03-19T19:15:13.710",
      "lastModified" : "2024-11-21T05:57:09.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability that could allow a remote attacker to overwrite arbitrary system files."
      }, {
        "lang" : "es",
        "value" : "Cloud Manager versiones anteriores a 3.9.4, son susceptibles a una vulnerabilidad que podría permitir a un atacante remoto sobrescribir archivos arbitrarios del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "117843DF-F0F6-4ABB-8D0A-A7CDA1CF3783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20210318-0001",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/NTAP-20210318-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26991",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2021-03-19T19:15:13.787",
      "lastModified" : "2024-11-21T05:57:09.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Manager versions prior to 3.9.4 contain an insecure Cross-Origin Resource Sharing (CORS) policy which could allow a remote attacker to interact with Cloud Manager."
      }, {
        "lang" : "es",
        "value" : "Cloud Manager versiones anteriores a 3.9.4, contienen una política no segura de tipo Cross-Origin Resource Sharing (CORS) que podría permitir a un atacante remoto interactuar con Cloud Manager"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "117843DF-F0F6-4ABB-8D0A-A7CDA1CF3783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20210318-0002",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/NTAP-20210318-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26992",
      "sourceIdentifier" : "security-alert@netapp.com",
      "published" : "2021-03-19T19:15:13.850",
      "lastModified" : "2024-11-21T05:57:09.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Manager versions prior to 3.9.4 are susceptible to a vulnerability which could allow a remote attacker to cause a Denial of Service (DoS)."
      }, {
        "lang" : "es",
        "value" : "Cloud Manager versiones anteriores a 3.9.4, son susceptibles a una vulnerabilidad que podría permitir a un atacante remoto causar una Denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.4",
            "matchCriteriaId" : "117843DF-F0F6-4ABB-8D0A-A7CDA1CF3783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/NTAP-20210318-0003",
        "source" : "security-alert@netapp.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/NTAP-20210318-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27519",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T19:15:13.913",
      "lastModified" : "2024-11-21T05:58:08.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the \"srch\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en FUDForum versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del archivo index.php en el parámetro \"srch\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fudforum:fudforum:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38C9CCE-ABB8-4093-9EED-D11EF11F8B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162942/FUDForum-3.1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/fudforum/FUDforum/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162942/FUDForum-3.1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/fudforum/FUDforum/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27520",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-19T19:15:13.977",
      "lastModified" : "2024-11-21T05:58:08.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in FUDForum 3.1.0 allows remote attackers to inject JavaScript via index.php in the \"author\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en FUDForum versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del archivo index.php en el parámetro \"author\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fudforum:fudforum:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38C9CCE-ABB8-4093-9EED-D11EF11F8B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162942/FUDForum-3.1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/fudforum/FUDforum/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162942/FUDForum-3.1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/fudforum/FUDforum/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21267",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-19T21:15:12.417",
      "lastModified" : "2024-11-21T05:47:53.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Schema-Inspector is an open-source tool to sanitize and validate JS objects (npm package schema-inspector). In before version 2.0.0, email address validation is vulnerable to a denial-of-service attack where some input (for example `a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.`) will freeze the program or web browser page executing the code. This affects any current schema-inspector users using any version to validate email addresses. Users who do not do email validation, and instead do other types of validation (like string min or max length, etc), are not affected. Users should upgrade to version 2.0.0, which uses a regex expression that isn't vulnerable to ReDoS."
      }, {
        "lang" : "es",
        "value" : "Schema-Inspector es una herramienta de código abierto para sanear y comprobar objetos JS (el inspector de esquema del paquete npm).&#xa0;versiones anteriores a 2.0.0, la comprobación de la dirección de correo electrónico es vulnerable a un ataque de denegación de servicio donde alguna entrada (por ejemplo, \"a@0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 .0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 \") congelará el programa o la página del navegador web que ejecuta el código.&#xa0;Esto afecta a cualquier usuario actual del inspector de esquemas que usan cualquier versión para comprobar direcciones de correo electrónico.&#xa0;Los usuarios que no realizan la comprobación por correo electrónico y, en su lugar, realizan otros tipos de comprobación (como la longitud mínima o máxima de la cadena, etc.), no están afectados.&#xa0;Los usuarios deben actualizar a la versión 2.0.0, que usa una expresión regular que no es vulnerable a ReDoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schema-inspector_project:schema-inspector:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "D161AA96-06D3-4764-9274-A3BD6FC67DEC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/mattwelke/b7f42424680a57b8161794ad1737cd8f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/schema-inspector/schema-inspector/security/advisories/GHSA-f38p-c2gq-4pmr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0006/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/schema-inspector",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/mattwelke/b7f42424680a57b8161794ad1737cd8f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/schema-inspector/schema-inspector/security/advisories/GHSA-f38p-c2gq-4pmr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/schema-inspector",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28950",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-20T20:15:13.100",
      "lastModified" : "2024-11-21T06:00:25.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in fs/fuse/fuse_i.h in the Linux kernel before 5.11.8. A \"stall on CPU\" can occur because a retry loop continually finds the same bad inode, aka CID-775c5033a0d1."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo fs/fuse/fuse_i.h en el kernel de Linux versiones anteriores a 5.11.8.&#xa0;Un \"stall on CPU\" puede ocurrir porque un bucle de reintento encuentra continuamente el mismo inode malo, también se conoce como CID-775c5033a0d1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.8",
            "matchCriteriaId" : "763E9A04-7849-4977-AA11-891E4F04810A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=775c5033a0d164622d9d10dd0f0a5531639ed3ed",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FB6LUXPEIRLZH32YXWZVEZAD4ZL6SDK2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRTPQE73ANG7D6M4L4PK5ZQDPO4Y2FVD/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5096",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=775c5033a0d164622d9d10dd0f0a5531639ed3ed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/03/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FB6LUXPEIRLZH32YXWZVEZAD4ZL6SDK2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QRTPQE73ANG7D6M4L4PK5ZQDPO4Y2FVD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2022/dsa-5096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28951",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-20T20:15:13.553",
      "lastModified" : "2024-11-21T06:00:25.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in fs/io_uring.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (deadlock) because exit may be waiting to park a SQPOLL thread, but concurrently that SQPOLL thread is waiting for a signal to start, aka CID-3ebba796fa25."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo fs/io_uring.c en el kernel de Linux versiones hasta 5.11.8.&#xa0;Permite a atacantes causar una denegación de servicio (deadlock) porque la salida puede estar esperando para estacionar un hilo SQPOLL, pero al mismo tiempo ese hilo SQPOLL está esperando una señal para comenzar, también se conoce como CID-3ebba796fa25"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.8",
            "matchCriteriaId" : "84451FA1-8DED-44B9-9EF2-36C6D89F2FE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1236B66D-EB11-4324-929F-E2B86683C3C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DFC67-46BB-4FC2-BE03-3C65C9311F65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BB9A7-BF28-4068-A9A6-1DE19CEEC293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E430A7-F93D-422B-BC9E-99C17CC2BF6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC58E3E-C8AA-4400-8A48-733B321CC924"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AA6F4-4404-4E26-82AB-C3A22636F276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3ebba796fa251d042be42b929a2d916ee5c34a49",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=3ebba796fa251d042be42b929a2d916ee5c34a49",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28117",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-20T21:15:11.827",
      "lastModified" : "2024-11-21T05:59:06.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "libdiscover/backends/KNSBackend/KNSResource.cpp in KDE Discover before 5.21.3 automatically creates links to potentially dangerous URLs (that are neither https:// nor http://) based on the content of the store.kde.org web site. (5.18.7 is also a fixed version.)"
      }, {
        "lang" : "es",
        "value" : "El archivo libdiscover/backends/KNSBackend/KNSResource.cpp en KDE Discover versiones anteriores a 5.21.3 crea automáticamente enlaces hacia URL potencialmente peligrosas (que no son ni https:// ni http://) basados ??en el contenido del sitio web store.kde.org .&#xa0;(5.18.7 también es una versión corregida)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kde:discover:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.21.3",
            "matchCriteriaId" : "C6E1B5A4-CD99-4240-90B7-B718FF713D3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/KDE/discover/commit/fcd3b30552bf03a384b1a16f9bb8db029c111356",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KDE/discover/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://invent.kde.org/plasma/discover/commit/94478827aab63d2e2321f0ca9ec5553718798e60",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kde.org/info/security/advisory-20210310-1.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://userbase.kde.org/Discover",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/KDE/discover/commit/fcd3b30552bf03a384b1a16f9bb8db029c111356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/KDE/discover/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://invent.kde.org/plasma/discover/commit/94478827aab63d2e2321f0ca9ec5553718798e60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kde.org/info/security/advisory-20210310-1.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://userbase.kde.org/Discover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28952",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-20T21:15:11.890",
      "lastModified" : "2024-11-21T06:00:25.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.8. The sound/soc/qcom/sdm845.c soundwire device driver has a buffer overflow when an unexpected port ID number is encountered, aka CID-1c668e1c0a0f. (This has been fixed in 5.12-rc4.)"
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.8.&#xa0;El controlador de dispositivo soundwire del archivo sound/soc/qcom/sdm845.c presenta un desbordamiento del búfer cuando es encontrado un número de identificación de puerto no previsto, también se conoce como CID-1c668e1c0a0f.&#xa0;(Esto ha sido corregido en 5.12-rc4)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.8",
            "matchCriteriaId" : "84451FA1-8DED-44B9-9EF2-36C6D89F2FE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1236B66D-EB11-4324-929F-E2B86683C3C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DFC67-46BB-4FC2-BE03-3C65C9311F65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BB9A7-BF28-4068-A9A6-1DE19CEEC293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E430A7-F93D-422B-BC9E-99C17CC2BF6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC58E3E-C8AA-4400-8A48-733B321CC924"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AA6F4-4404-4E26-82AB-C3A22636F276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1c668e1c0a0f74472469cd514f40c9012b324c31",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lore.kernel.org/alsa-devel/20210309142129.14182-2-srinivas.kandagatla%40linaro.org/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=1c668e1c0a0f74472469cd514f40c9012b324c31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lore.kernel.org/alsa-devel/20210309142129.14182-2-srinivas.kandagatla%40linaro.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28953",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-21T05:15:12.167",
      "lastModified" : "2024-11-21T06:00:25.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial C/C++ Advanced Lint extension before 1.9.0 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted repository."
      }, {
        "lang" : "es",
        "value" : "La extensión no oficial C/C++ Advanced Lint versiones anteriores a 1.9.0 para Visual Studio Code, permite a atacantes ejecutar binarios arbitrarios si el usuario abre un repositorio diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:c\\/c\\+\\+_advanced_lint_project:c\\/c\\+\\+_advanced_lint:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "1.9.0",
            "matchCriteriaId" : "DBB0C4EC-6F03-4421-9A74-D706C4EDCCC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jbenden/vscode-c-cpp-flylint/compare/v1.8.2...v1.9.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=jbenden.c-cpp-flylint",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jbenden/vscode-c-cpp-flylint/compare/v1.8.2...v1.9.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=jbenden.c-cpp-flylint",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28954",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-21T05:15:13.290",
      "lastModified" : "2024-11-21T06:00:26.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Chris Walz bit before 1.0.5 on Windows, attackers can run arbitrary code via a .exe file in a crafted repository."
      }, {
        "lang" : "es",
        "value" : "En el bit Chris Walz versiones anteriores a 1.0.5 en Windows, los atacantes pueden ejecutar código arbitrario por medio de un archivo .exe en un repositorio diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bit_project:bit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "8A60F092-8C84-47A4-BA95-31D2533E9064"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chriswalz/bit/releases/tag/v1.0.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/17",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chriswalz/bit/releases/tag/v1.0.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28957",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-21T05:15:13.367",
      "lastModified" : "2025-12-17T22:15:56.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3. When disabling the safe_attrs_only and forms arguments, the Cleaner class does not remove the formaction attribute allowing for JS to bypass the sanitizer. A remote attacker could exploit this flaw to run arbitrary JS code on users who interact with incorrectly sanitized HTML. This issue is patched in lxml 4.6.3."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto una vulnerabilidad XSS en las versiones del módulo clean de python-lxml anteriores a la versión 4.6.3. Al desactivar los argumentos safe_attrs_only y forms, la clase Cleaner no elimina el atributo formaction, lo que permite que JS eluda el sanitizador. Un atacante remoto podría aprovechar este fallo para ejecutar código JS arbitrario en usuarios que interactúen con HTML incorrectamente saneado. Este problema está parcheado en lxml  versión 4.6.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lxml:lxml:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6.3",
            "matchCriteriaId" : "2BADE2D9-D321-4DB0-839C-EB11673439DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/lxml/+bug/1888153",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lxml/lxml/commit/a5f9cb52079dc57477c460dbe6ba0f775e14a999",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lxml/lxml/pull/316/commits/10ec1b4e9f93713513a3264ed6158af22492f270",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00031.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3C2R44VDUY7FJVMAVRZ2WY7XYL4SVN45/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXN3QPWCTQVOGW4BMWV3AUUZZ4NRZNSQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-06",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4880",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/lxml/+bug/1888153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lxml/lxml/commit/a5f9cb52079dc57477c460dbe6ba0f775e14a999",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lxml/lxml/pull/316/commits/10ec1b4e9f93713513a3264ed6158af22492f270",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00031.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3C2R44VDUY7FJVMAVRZ2WY7XYL4SVN45/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXN3QPWCTQVOGW4BMWV3AUUZZ4NRZNSQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4880",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28961",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-21T06:15:12.357",
      "lastModified" : "2024-11-21T06:00:27.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests."
      }, {
        "lang" : "es",
        "value" : "El archivo applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua en el paquete DDNS para OpenWrt versión 19.07, permite a usuarios autenticados remotos inyectar comandos arbitrarios por medio de peticiones POST"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:openwrt:openwrt:19.07.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4FA469E2-9E63-4C9A-8EBA-10C8C870063A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openwrt/luci/commit/9df7ea4d66644df69fcea18b36bc465912ffc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://openwrt.org/advisory/2021-08-01-3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/openwrt/luci/commit/9df7ea4d66644df69fcea18b36bc465912ffc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://openwrt.org/advisory/2021-08-01-3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23360",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-21T16:15:12.720",
      "lastModified" : "2024-11-21T05:51:34.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package killport before 1.0.2. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization. Running this PoC will cause the command touch success to be executed, leading to the creation of a file called success."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete killport versiones anteriores a 1.0.2.&#xa0;Si es proporcionada una entrada de usuario (controlada por el atacante), es posible que un atacante ejecute comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de entrada.&#xa0;Una Ejecución de esta PoC causará que sea ejecutado el comando touch success, conllevando a la creación de un archivo llamado success"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:killport_project:killport:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "3644C510-D21D-4A5D-8744-176AE24E94D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ssnau/killport/blob/5268f23ea8f152e47182b263d8f7ef20c12a9f28/index.js%23L9",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/ssnau/killport/commit/bec8e371f170a12e11cd222ffc7a6e1ae9942638",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLPORT-1078535",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ssnau/killport/blob/5268f23ea8f152e47182b263d8f7ef20c12a9f28/index.js%23L9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/ssnau/killport/commit/bec8e371f170a12e11cd222ffc7a6e1ae9942638",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLPORT-1078535",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26069",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-03-22T05:15:12.057",
      "lastModified" : "2024-11-21T05:55:48.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/{id}/ActionsAndOperations API endpoint. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.15.0."
      }, {
        "lang" : "es",
        "value" : "Versiones afectadas de Atlassian Jira Server y Data Center, permiten a atacantes remotos no autenticados descargar archivos temporales y enumerar claves de proyectos por medio de una vulnerabilidad de Divulgación de Información en el endpoint de la API /rest/api/1.0/issues/{id}/ActionsAndOperations.&#xa0;Las versiones afectadas son anteriores a 8.5.11, desde versión 8.6.0 anteriores a 8.13.3 y desde versión 8.14.0 anteriores a 8.15.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.11",
            "matchCriteriaId" : "2823995C-7B02-4318-8B9D-3F9659F2B0CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.3",
            "matchCriteriaId" : "23CA57C4-72B6-465C-8EC1-0C00A9A67877"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.11",
            "matchCriteriaId" : "6DC31C8A-7C3A-497D-8B93-186A4BB78177"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.0",
            "matchCriteriaId" : "BEF44ED6-2346-4FF8-8AFF-67A4E3BFF69D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.3",
            "matchCriteriaId" : "54CAA007-B086-4422-AB45-35A561CCD894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.0",
            "matchCriteriaId" : "BC0005F9-7748-4F24-927E-6789D415E0CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72010",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26070",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-03-22T05:15:13.257",
      "lastModified" : "2024-11-21T05:55:48.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-linked resources via a Broken Authentication vulnerability in the `makeRequest` gadget resource. The affected versions are before version 8.13.3, and from version 8.14.0 before 8.14.1."
      }, {
        "lang" : "es",
        "value" : "Versiones afectadas de Atlassian Jira Server y Data Center, permiten a atacantes remotos evadir una protección detrás del firewall de los recursos app-linked por medio de una vulnerabilidad de Autenticación Rota en el recurso de gadget \"makeRequest\".&#xa0;Las versiones afectadas son anteriores a 8.13.3 y desde versión 8.14.0 anteriores a 8.14.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.13.3",
            "matchCriteriaId" : "09CBD196-0202-4A65-BC01-8DD009159343"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.14.1",
            "matchCriteriaId" : "BD26E1FA-D472-40ED-B8BC-876F2A7EF3FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.13.3",
            "matchCriteriaId" : "121B25D7-31B4-4A85-BA57-5FE0DE58F4F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.14.1",
            "matchCriteriaId" : "F5814BDF-AF93-4440-AFEA-75AADFA95EA7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72029",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28955",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T07:15:12.677",
      "lastModified" : "2024-11-21T06:00:26.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "git-bug before 0.7.2 has an Uncontrolled Search Path Element. It will execute git.bat from the current directory in certain PATH situations (most often seen on Windows)."
      }, {
        "lang" : "es",
        "value" : "git-bug versiones anteriores a 0.7.2, presenta un Elemento de Ruta de Búsqueda No Controlada.&#xa0;Ejecutará git.bat desde el directorio actual en determinadas situaciones de PATH (visto con mayor frecuencia en Windows)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:git-bug_project:git-bug:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.2",
            "matchCriteriaId" : "E539EF8E-1E7B-46C5-83A5-CB321963B37F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MichaelMure/git-bug/security/advisories/GHSA-m898-h4pm-pqfr",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/18",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MichaelMure/git-bug/security/advisories/GHSA-m898-h4pm-pqfr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28956",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T07:15:12.753",
      "lastModified" : "2024-11-21T06:00:26.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial vscode-sass-lint (aka Sass Lint) extension through 1.0.7 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** La extensión no oficial vscode-sass-lint (también se conoce como Sass Lint) versiones hasta 1.0.7 para Visual Studio Code, permite a atacantes ejecutar binarios arbitrarios si el usuario abre un workspace diseñado.&#xa0;NOTA: Esta vulnerabilidad solo afecta a productos que ya no son compatibles por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sass_lint_project:sass_lint:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndIncluding" : "1.0.7",
            "matchCriteriaId" : "8C763466-EABC-4607-B56F-AEF14503677E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/glen-84/vscode-sass-lint/compare/v1.0.6...v1.0.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glen-84/vscode-sass-lint/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/glen-84.sass-lint/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glen-84/vscode-sass-lint/compare/v1.0.6...v1.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/glen-84/vscode-sass-lint/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/glen-84.sass-lint/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28963",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T08:15:13.247",
      "lastModified" : "2024-11-21T06:00:27.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shibboleth Service Provider before 3.2.1 allows content injection because template generation uses attacker-controlled parameters."
      }, {
        "lang" : "es",
        "value" : "Shibboleth Service Provider versiones anteriores a 3.2.1, permite una inyección de contenido porque la generación de plantillas usa parámetros controlados por atacantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shibboleth:service_provider:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "53FA3F6E-6575-4BD2-AD06-EE72FD44E560"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/985405",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=d1dbebfadc1bdb824fea63843c4c38fa69e54379",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.shibboleth.net/jira/browse/SSPCPP-922",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20210317.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4872",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/985405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=d1dbebfadc1bdb824fea63843c4c38fa69e54379",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.shibboleth.net/jira/browse/SSPCPP-922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20210317.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4872",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21437",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2021-03-22T09:15:12.953",
      "lastModified" : "2024-11-21T05:48:21.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions"
      }, {
        "lang" : "es",
        "value" : "Los agentes pueden ser capaces de visualizar Elementos de Configuración vinculados sin permisos, que son definidos en el Catálogo General.&#xa0;Este problema afecta a: OTRSCIsInCustomerFrontend versiones 7.0.15 y anteriores, ITSMConfigurationManagement versiones 7.0.24 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:itsmconfigurationmanagement:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.24",
            "matchCriteriaId" : "22785061-8457-4745-8DA4-698A59CE6139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrscisincustomerfrontend:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.0.15",
            "matchCriteriaId" : "CEE941D9-D14E-4B97-BC43-843F1116C8F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-07/",
        "source" : "security@otrs.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-07/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21438",
      "sourceIdentifier" : "security@otrs.com",
      "published" : "2021-03-22T09:15:13.437",
      "lastModified" : "2024-11-21T05:48:21.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Los agentes pueden ser capaces de visualizar artículos de FAQ vinculados sin permisos (definidos en la categoría FAQ).&#xa0;Este problema afecta a: FAQ versión 6.0.29 y anteriores, OTRS versión 7.0.24 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@otrs.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@otrs.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:faq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.29",
            "matchCriteriaId" : "5B3670FD-E893-4F88-A619-0898E422EBDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:otrs:otrs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.24",
            "matchCriteriaId" : "49D03751-FD5B-45FA-B77C-5ECE233C5818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-08/",
        "source" : "security@otrs.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://otrs.com/release-notes/otrs-security-advisory-2021-08/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28964",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T09:15:13.517",
      "lastModified" : "2024-11-21T06:00:27.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was discovered in get_old_root in fs/btrfs/ctree.c in the Linux kernel through 5.11.8. It allows attackers to cause a denial of service (BUG) because of a lack of locking on an extent buffer before a cloning operation, aka CID-dbcc7d57bffc."
      }, {
        "lang" : "es",
        "value" : "Se detectó una condición de carrera en la función get_old_root en el archivo fs/btrfs/ctree.c en el kernel de Linux versiones hasta 5.11.8.&#xa0;Permite a atacantes causar una denegación de servicio (BUG) debido a una falta de bloqueo en un búfer de extensión antes de una operación de clonación, también se conoce como CID-dbcc7d57bffc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.8",
            "matchCriteriaId" : "84451FA1-8DED-44B9-9EF2-36C6D89F2FE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5DE972-F8B8-4964-943A-DA0BD18289D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B1F59C-6ADA-4930-834F-2A8A8444F6AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:fas_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E430A7-F93D-422B-BC9E-99C17CC2BF6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:fas_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBC58E3E-C8AA-4400-8A48-733B321CC924"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbcc7d57bffc0c8cac9dac11bec548597d59a6a5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dbcc7d57bffc0c8cac9dac11bec548597d59a6a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26295",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-22T12:15:13.877",
      "lastModified" : "2024-11-21T05:56:02.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OFBiz has unsafe deserialization prior to 17.12.06. An unauthenticated attacker can use this vulnerability to successfully take over Apache OFBiz."
      }, {
        "lang" : "es",
        "value" : "Apache OFBiz, presenta una deserialización no segura versiones anteriores a 17.12.06.&#xa0;Un atacante no autenticado puede usar esta vulnerabilidad para apoderarse con éxito de Apache OFBiz"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.12.06",
            "matchCriteriaId" : "AA92EF87-4692-4D5F-9AC8-FD0DB39CBC59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162104/Apache-OFBiz-SOAP-Java-Deserialization.html",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0d97a3b7a14777b9e9e085b483629d2774343c4723236d1c73f43ff0%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r3ee005dd767cd83f522719423f5e7dd316f168ddbd1dc51a13d4e244%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6e4579c4ebf7efeb462962e359501c6ca4045687f12212551df2d607%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc9bd0d3d794dc370bc70585960841868cb29b92dcc80552b84ca2599%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec5e9fdcdca13099cfb29f632333f44ad1dd60d90f67b90434e4467a%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/reccf8c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://packetstormsecurity.com/files/162104/Apache-OFBiz-SOAP-Java-Deserialization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0d97a3b7a14777b9e9e085b483629d2774343c4723236d1c73f43ff0%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c1802eaf34aa78a61b4e8e044c214bc94accbd28a11f3a276586a31%40%3Cuser.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r3ee005dd767cd83f522719423f5e7dd316f168ddbd1dc51a13d4e244%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6e4579c4ebf7efeb462962e359501c6ca4045687f12212551df2d607%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc9bd0d3d794dc370bc70585960841868cb29b92dcc80552b84ca2599%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec5e9fdcdca13099cfb29f632333f44ad1dd60d90f67b90434e4467a%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/reccf8c8a58337ce7c035495d3d82fbc549e97036a9789a2a7d9cccf6%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27962",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T14:15:14.023",
      "lastModified" : "2024-11-21T05:58:55.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access."
      }, {
        "lang" : "es",
        "value" : "Grafana Enterprise versiones 7.2.x y 7.3.x anteriores a 7.3.10 y versiones 7.4.x anteriores a 7.4.5, permite a un editor de tablero omitir una comprobación de permisos relacionada con una fuente de datos a la que no debería poder ser capaz de acceder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.2.0",
            "versionEndExcluding" : "7.3.10",
            "matchCriteriaId" : "9E9735BD-3047-4AB2-96A8-B7C982CF3B60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "7CFD90C0-68A4-40F8-82FF-4B161A38C378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://community.grafana.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://community.grafana.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T14:15:14.100",
      "lastModified" : "2024-11-21T05:59:10.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn't supposed to have."
      }, {
        "lang" : "es",
        "value" : "La API HTTP de sincronización de equipo en Grafana Enterprise versiones 7.4.x anteriores a 7.4.5, presenta un problema de Control de Acceso Incorrecto.&#xa0;En las instancias de Grafana que usan un servicio de autenticación externo, esta vulnerabilidad permite a cualquier usuario autenticado agregar grupos externos a los equipos existentes.&#xa0;Esto puede ser usado para otorgar a un equipo de usuarios permisos que se supone que el usuario no debe tener"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "7CFD90C0-68A4-40F8-82FF-4B161A38C378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/products/enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/products/enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27308",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T15:15:14.160",
      "lastModified" : "2024-11-21T05:57:46.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the admin login panel in 4images version 1.8 allows remote attackers to inject JavaScript via the \"redirect\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el panel de inicio de sesión del administrador en 4images versión 1.8, permite a atacantes remotos inyectar JavaScript por medio del parámetro \"redirect\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:4homepages:4images:1.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D15DA7C-22D1-4281-951E-FD4F5BA2BE54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162946/4Images-1.8-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/4images/4images/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162946/4Images-1.8-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/4images/4images/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T15:15:14.537",
      "lastModified" : "2024-11-21T05:59:10.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn't supposed to have."
      }, {
        "lang" : "es",
        "value" : "La API HTTP de sincronización de equipo en Grafana Enterprise versiones 6.x anteriores a 6.7.6, versiones 7.x anteriores a 7.3.10 y versiones 7.4.x anteriores a 7.4.5, presenta un problema de Control de Acceso Incorrecto.&#xa0;En las instancias de Grafana que usan un servicio de autenticación externo y presentan habilitada la funcionalidad EditorsCanAdmin, esta vulnerabilidad permite a cualquier usuario autenticado agregar grupos externos a cualquier equipo existente.&#xa0;Esto puede ser usado para otorgar a un equipo de usuarios permisos que se supone que el usuario no debe tener"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.7.6",
            "matchCriteriaId" : "57D0867F-AE3E-4527-B891-CE8DD0CC4536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.3.10",
            "matchCriteriaId" : "B3EB7759-355F-4E65-8227-1BB21F74C167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "7CFD90C0-68A4-40F8-82FF-4B161A38C378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/products/enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/products/enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28148",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T15:15:14.597",
      "lastModified" : "2024-11-21T05:59:11.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "One of the usage insights HTTP API endpoints in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 is accessible without any authentication. This allows any unauthenticated user to send an unlimited number of requests to the endpoint, leading to a denial of service (DoS) attack against a Grafana Enterprise instance."
      }, {
        "lang" : "es",
        "value" : "Uno de los endpoints de la API HTTP de información de uso en Grafana Enterprise versiones 6.x anteriores a 6.7.6, versiones 7.x anteriores a 7.3.10 y versiones 7.4.x anteriores a 7.4.5, es accesible sin ninguna autenticación.&#xa0;Esto permite a cualquier usuario no autenticado enviar un número ilimitado de peticiones al endpoint, conllevando a un ataque de denegación de servicio (DoS) contra una instancia de Grafana Enterprise"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.7.6",
            "matchCriteriaId" : "57D0867F-AE3E-4527-B891-CE8DD0CC4536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.3.10",
            "matchCriteriaId" : "B3EB7759-355F-4E65-8227-1BB21F74C167"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:grafana:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "7CFD90C0-68A4-40F8-82FF-4B161A38C378"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/products/enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/t/release-notes-v6-7-x/27119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-grafana-enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-3-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/products/enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28968",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T16:15:14.147",
      "lastModified" : "2024-11-21T06:00:28.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PunBB before 1.4.6. An XSS vulnerability in the [email] BBcode tag allows (with authentication) injecting arbitrary JavaScript into any forum message."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en PunBB versiones anteriores a 1.4.6.&#xa0;Una vulnerabilidad de tipo XSS en la etiqueta [email] BBcode permite (con autenticación) inyectar JavaScript arbitrario en cualquier mensaje del foro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:punbb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.6",
            "matchCriteriaId" : "7B35E630-9345-48ED-9447-5F142A70A162"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://punbb.informer.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://punbb.informer.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27593",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-22T17:15:14.233",
      "lastModified" : "2024-11-21T05:58:15.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Graphics Interchange Format (.GIF) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos manipulados de Graphics Interchange Format (.GIF) recibidos de fuentes que no son confiables en SAP 3D Visual Enterprise Viewer, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicie la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27594",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-22T17:15:14.360",
      "lastModified" : "2024-11-21T05:58:15.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Windows Bitmap (.BMP) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos manipulados de Windows Bitmap (.BMP) recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicie la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27595",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-22T17:15:14.420",
      "lastModified" : "2024-11-21T05:58:15.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Portable Document Format (.PDF) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos manipulados de Portable Document Format (.PDF) recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicie la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27596",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-03-22T17:15:14.483",
      "lastModified" : "2024-11-21T05:58:15.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a user opens manipulated Autodesk 3D Studio for MS-DOS (.3DS) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application."
      }, {
        "lang" : "es",
        "value" : "Cuando un usuario abre archivos manipulados de Autodesk 3D Studio para MS-DOS (.3DS) recibidos de fuentes no confiables en SAP 3D Visual Enterprise Viewer, la aplicación se bloquea y deja de estar disponible temporalmente para el usuario hasta que se reinicie la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:3d_visual_enterprise_viewer:9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FAD1A0-EEA0-476D-A00A-07E918F9606F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3035472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28971",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T17:15:15.137",
      "lastModified" : "2024-11-21T06:00:28.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In intel_pmu_drain_pebs_nhm in arch/x86/events/intel/ds.c in the Linux kernel through 5.11.8 on some Haswell CPUs, userspace applications (such as perf-fuzzer) can cause a system crash because the PEBS status in a PEBS record is mishandled, aka CID-d88d05a9e0b6."
      }, {
        "lang" : "es",
        "value" : "En la función intel_pmu_drain_pebs_nhm en el archivo arch/x86/events/intel/ds.c en el kernel de Linux versiones hasta 5.11.8 en algunas CPU Haswell, las aplicaciones de espacio de usuario (como perf-fuzzer) pueden causar un bloqueo del sistema porque el estado de PEBS en un registro de PEBS es manejado inapropiadamente, también se conoce como CID-d88d05a9e0b6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.8",
            "matchCriteriaId" : "84451FA1-8DED-44B9-9EF2-36C6D89F2FE4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5DE972-F8B8-4964-943A-DA0BD18289D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B1F59C-6ADA-4930-834F-2A8A8444F6AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BB9A7-BF28-4068-A9A6-1DE19CEEC293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d88d05a9e0b6d9356e97129d4ff9942d765f46ea",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d88d05a9e0b6d9356e97129d4ff9942d765f46ea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28972",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-22T17:15:15.200",
      "lastModified" : "2024-11-21T06:00:28.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In drivers/pci/hotplug/rpadlpar_sysfs.c in the Linux kernel through 5.11.8, the RPA PCI Hotplug driver has a user-tolerable buffer overflow when writing a new device name to the driver from userspace, allowing userspace to write data to the kernel stack frame directly. This occurs because add_slot_store and remove_slot_store mishandle drc_name '\\0' termination, aka CID-cc7a0bb058b8."
      }, {
        "lang" : "es",
        "value" : "En el archivo drivers/pci/hotplug/rpadlpar_sysfs.c en el kernel de Linux versiones hasta 5.11.8, el controlador RPA PCI Hotplug, presenta un desbordamiento de búfer tolerable por el usuario al escribir un nuevo nombre de dispositivo en el controlador desde el espacio de usuario, permitiendo al espacio de usuario escribir datos en el trama de la pila de kernel directamente.&#xa0;Esto ocurre porque add_slot_store y remove_slot_store maneja inapropiadamente la terminación drc_name \"\\0\", también se conoce como CID-cc7a0bb058b8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.263",
            "matchCriteriaId" : "E6700326-D14A-444C-940F-A8B78A921A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.5",
            "versionEndIncluding" : "4.9.263",
            "matchCriteriaId" : "6453071D-CC06-4DAD-9C31-334188F3AA0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.227",
            "matchCriteriaId" : "97CAD916-8DF3-46CF-8602-059108ABE6AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "4.15",
            "versionEndIncluding" : "4.19.183",
            "matchCriteriaId" : "5EA91DC6-E5D2-482A-8E73-1ECC2DF16C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.108",
            "matchCriteriaId" : "97B07A94-323B-4290-912E-1C20D5DE8C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.10.26",
            "matchCriteriaId" : "DC50D4A7-9E10-45A6-853A-13162AA4C814"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.9",
            "matchCriteriaId" : "C9AC2D4F-D052-400B-A640-77F3D1B04F5D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:fas\\/aff_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66EEA3CA-8CC7-4F0B-8204-6132D4114873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=cc7a0bb058b85ea03db87169c60c7cfdd5d34678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4VCKIOXCOZGXBEZMO5LGGV5MWCHO6FT3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTRNPQTZ4GVS46SZ4OBXY5YDOGVPSTGQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/T2S3I4SLRNRUQDOFYUS6IUAZMQNMPNLG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22309",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-22T18:15:14.433",
      "lastModified" : "2024-11-21T05:49:53.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions V500R001C30SPC200, V500R001C60SPC500,V500R005C00SPC200;USG9520 versions V500R005C00;USG9560 versions V500R005C00;USG9580 versions V500R005C00."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de algoritmo no seguro en unos productos Huawei.&#xa0;Un módulo usa una entrada poco aleatoria en un mecanismo seguro.&#xa0;Unos atacantes pueden explotar esta vulnerabilidad mediante fuerza bruta para obtener mensajes confidenciales.&#xa0;Esto puede conllevar a un filtrado de información.&#xa0;Las versiones de producto afectadas incluyen: USG9500 versiones V500R001C30SPC200, V500R001C60SPC500, V500R005C00SPC200; USG9520 versiones V500R005C00; USG9560 versiones V500R005C00; USG9580 versiones V500R005C00"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BF5257-8CD1-4951-9C53-07B85D468F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1EFB9D-5349-4EAF-9880-34F0D20011E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA71C5D-4B11-401D-AEC9-907204C21476"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9520_firmware:v500r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAE4B21-DB0F-46BA-AEEF-878CFE2CB120"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60030EDB-682F-4107-80FC-5F03CE75131D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9560_firmware:v500r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752FD81F-0750-4200-B732-304306D31BF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96AFE94D-EDC7-4372-A1BF-8089D5551AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9580_firmware:v500r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F890E352-DB01-4BF0-A709-0F63AE3F91AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C9D3E2-B016-4238-A170-6C4AD1B3B76C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210202-01-fw-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210202-01-fw-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25265",
      "sourceIdentifier" : "security-alert@sophos.com",
      "published" : "2021-03-22T18:15:14.480",
      "lastModified" : "2024-11-21T05:54:38.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious website could execute code remotely in Sophos Connect Client before version 2.1."
      }, {
        "lang" : "es",
        "value" : "Un sitio web malicioso podría ejecutar código remotamente en Sophos Connect Client versiones anteriores a 2.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sophos:connect:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1",
            "matchCriteriaId" : "ED6F654F-471D-41B7-82B6-B8EAA1E879BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.sophos.com/b/security-blog",
        "source" : "security-alert@sophos.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265",
        "source" : "security-alert@sophos.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://community.sophos.com/b/security-blog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sophos.com/b/security-blog/posts/resolved-rce-in-sophos-connect-client-for-windows-cve-2021-25265",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26578",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-22T18:15:14.560",
      "lastModified" : "2024-11-21T05:56:31.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE Network Orchestrator (NetO) version(s): Prior to 2.5. The vulnerability could be remotely exploited with SQL injection."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en HPE Network Orchestrator (NetO) versiones: anteriores a 2.5.&#xa0;La vulnerabilidad podría ser explotada remotamente con una inyección SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:network_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5",
            "matchCriteriaId" : "6141D067-877A-4465-A4AF-51BD6022D2EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04097en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04097en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22310",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-22T19:15:11.773",
      "lastModified" : "2024-11-21T05:49:53.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de filtrado de información en algunos productos Huawei.&#xa0;Debido al almacenamiento apropiado de información específica en el archivo de registro, el atacante puede obtener la información cuando un usuario inicia sesión en el dispositivo.&#xa0;Una explotación con éxito puede causar un filtrado de información.&#xa0;versiones de productos afectados incluyen: NIP6300 versiones V500R001C00, V500R001C20, V500R001C30; NIP6600 versiones V500R001C00, V500R001C20, V500R001C30; Secospace USG6300 versiones V500R001C00, V500R001C20, V500R001C30; Secospace USG6500 versiones V500R001C00, V500R001C20, V500R001C30; Secospace USG6600 versiones V500R001C00, V500R001C20, V500R001C30, V500R001C50, V500R001C60, V500R001C80; USG9500 versiones V500R005C00, V500R005C10"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B469A91-4CD0-44D2-A982-3E612B855E71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1856722C-597D-495D-AFCC-21E5FF6F2359"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F2E0857-39E8-46C2-A723-9F09C052F2F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDC040A6-3E38-4B21-9779-67CF66FDC6B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C996915-83A1-4EA5-A8E1-F609DA879D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11CAA59E-F2A8-4E84-BCC5-CADA8FDA9712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3189382E-6846-4713-A92F-ABD03683F4A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3983A57-2F07-4D21-9093-1DFEAB310E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E990766D-FBD4-404E-A783-3D2D0BC210F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A638ACAF-9A6F-4861-8CDB-E43FBC3C9C5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72CE6722-BA5D-4AAE-9C72-36F06EB4DFF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c80:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0F5C89A-DA13-46D1-BDCF-0BD94F7B7861"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E961C6AA-400A-41CF-A230-FE7182875F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r005c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A32EF67-5C9D-4F2F-BCC9-D5C5C9F69544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-plaintextlog-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-plaintextlog-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22311",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-22T19:15:11.837",
      "lastModified" : "2024-11-21T05:49:53.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include: ManageOne versions 8.0.0, 8.0.1."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de asignación inapropiada de permisos en el producto Huawei ManageOne.&#xa0;Debido a un refuerzo de seguridad inapropiado, el proceso puede ejecutarse con un privilegio superior.&#xa0;Una explotación con éxito podría permitir a determinados usuarios realizar determinadas operaciones con permisos inapropiados.&#xa0;Las versiones de producto afectadas incluyen: ManageOne versiones 8.0.0, 8.0.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C07C03B-18BA-4EA3-A73F-3E6E839252F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47A8E919-FAC0-4011-927F-599AA7688A32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210203-01-manageone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22320",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-22T19:15:11.897",
      "lastModified" : "2024-11-21T05:49:54.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de denegación de servicio en los productos Huawei.&#xa0;Un módulo no puede tratar correctamente mensajes específicos.&#xa0;Unos atacantes pueden explotar esta vulnerabilidad mediante el envío de mensajes maliciosos a un módulo afectado.&#xa0;Esto puede conllevar a una denegación de servicio.&#xa0;Los productos afectados incluyen algunas versiones de IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 y Secospace USG6600"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4E285D-09FB-4123-B46A-E27818ADFFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A659FF-6019-48F8-BF60-D9FC79682435"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E85558D2-1D72-4C8C-AD9B-A491EFE8C878"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA59256-7429-4D82-85FE-229EB033BDA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E728C122-5732-48FF-910C-3241EABA3DE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99B5545E-59AB-4992-87F5-92D3E5DF6D1D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FE889E-58A9-4D93-8054-7B845C44BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F5B2E-5233-4B9F-BA85-0D369C1A8805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B19CF4-92DF-4BB5-B9C7-76901EC5673C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC26B79E-CBCD-4D93-A552-1A20B155F0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A3FD77-200C-40D7-A31E-6D964F9A375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64E57920-13A9-4C42-A2FA-13C72565C6A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BC83416-759F-4121-BEF4-82E14A958A31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38F1E7A-0347-4E45-A0B6-CB8CE0D8A07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954A1F94-2442-4064-9DC5-14EFC2FA62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB70C7-8E9A-4538-A4FF-6FA820D895CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E05A897A-B155-4872-B52C-90F1B396E933"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF51C8C6-2B00-4FA1-9476-B5404150C1F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E3300-4E1E-433A-87D9-983F9C1CE2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2F8A0A-AA2F-4144-923A-4B461B1A3E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CBEDA1-F057-489F-9255-C178272208CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA34227-DB8B-48DF-8150-5C6815B49FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322A0123-38E6-4D84-97F1-15F983DC3725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F1F0EC-4DF0-4857-8A8C-73E1DF0B60C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F28D0C32-5F80-4A19-B352-B6CA2FBEACF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2444C-EE5E-4DFC-A9F8-4744059EF7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203B31A8-8C5C-42E8-8D4F-861F90FC16FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF816E5F-2082-4460-ABF9-93726C5879A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DF54A7-6E29-4BB5-81FC-5EE75D892D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DA1F00-D38C-40AF-A14D-D5EE0B0A3751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30EBF74D-ECC2-49B9-9D71-DA140671688D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA0DA4D-C41D-464F-A202-D794C476DDA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA7BE1F-853E-4CBA-8A90-BAEA0BCC6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80E521E-1BFB-405E-9F8E-4A0734731FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5226BD96-2B00-469B-AADD-CD0541610BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB3FD6B-0EE4-4467-8BAE-AE52FB2906EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE67E91-7805-4CAA-89EE-9226CFBD731B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c20spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5096CD20-E345-4C59-AB98-EEF92C9878C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c20spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3ED8964-355A-4548-9D74-9BD624FE47D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-03-dos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22314",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-22T20:15:17.550",
      "lastModified" : "2024-11-21T05:49:53.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escalamiento de privilegios local en algunas versiones de ManageOne.&#xa0;Un atacante local autenticado podría llevar a cabo operaciones específicas para explotar esta vulnerabilidad.&#xa0;Una explotación con éxito puede causar que el atacante obtenga un privilegio más alto y comprometa el servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc1.b060:*:*:*:*:*:*",
            "matchCriteriaId" : "24872541-A493-48BD-AA2C-7A976FF75F9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc1.b070:*:*:*:*:*:*",
            "matchCriteriaId" : "D962B0A1-0725-4A6F-99EB-E6E42F03243B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b020:*:*:*:*:*:*",
            "matchCriteriaId" : "61EC963F-1160-43D4-B4E4-2CC2B209B4DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1:rc2.b030:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7820BE-0307-40F3-A7BD-66D5B8C7A0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:huawei:manageone:6.5.1.1:b010:*:*:*:*:*:*",
            "matchCriteriaId" : "463A4059-55EF-4862-B8AD-90DCAC0CC871"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210218-01-privilege-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210218-01-privilege-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22321",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-03-22T20:15:17.613",
      "lastModified" : "2024-11-21T05:49:54.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de uso de la memoria previamente liberada en un producto de Huawei.&#xa0;Un módulo no puede tratar operaciones específicas en escenarios especiales.&#xa0;Los atacantes pueden explotar esta vulnerabilidad al realizar operaciones maliciosas.&#xa0;Esto puede causar un uso de la memoria previamente liberada, comprometiendo el servicio normal.&#xa0;Los productos afectados incluyen algunas versiones de NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700, S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 y USG9500"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A7B78-6E19-4656-848F-269DB955070C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A26FE369-FDB8-4425-B51A-465A41FECE7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946F5FF7-412F-40F9-A492-DE8E11E7B919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7EE3877-6344-466D-90B0-68CF4A53A256"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC4803A7-44B2-41BA-814D-151239B92CEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r007c01b102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA273AD6-F7C0-49F3-A33F-E46B86168A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD4C5CC9-FD60-4C64-8F88-CFC71BBEA663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "933755CC-4A0B-42FB-9491-3C841059851D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E46ADD0-4DF7-4C87-88D6-46A2065DB5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB158E3E-8A26-415F-86E9-E63524EAA055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E146F90-3E3F-4F23-81C0-0C4F36293711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s12700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D6FF612-2F2B-4B75-8D97-86205DFCF0CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s12700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "138C1E57-176C-46B1-9704-D9C8391CC802"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A91097D-76DB-4E5D-B520-6BF22E73BEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r009c00spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D085F205-5C80-4A34-89A9-54F9FB8F2F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099E36B0-125F-4B3F-8D4A-01F8882CF53B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA8636-5936-4776-9DF2-1BD294796F0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A843B78A-CDB1-45A0-BBAC-6F3D69AD84DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A59EDC82-83AD-408E-AA8E-15E221C3B009"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s1700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342E032C-BAE5-4F15-8BAE-84F9D9AA58D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22FE26B5-C6D6-4A6C-8526-ED94F4F57C2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB8FC67E-DFD3-482E-B7D6-17464885B8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5561195B-7385-4175-9D29-77E95E4E9AB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A57254C-A4F0-47D2-8A1A-029E79BE863C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9461516A-F5BB-4A52-A315-8C2B559528A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "225A56F2-2EEB-4816-9A20-7A6E37C65FA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s2700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20648023-4CC5-4606-BE8E-70A5C20D7BE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s2700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2CD071-58E4-4061-8217-990453213470"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21FFF548-FBEF-468A-A8DE-1DB1B7C0B3AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA744621-893C-4F7E-80A1-66559BC6D6F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED5093F9-8629-4DA5-AC3A-EE5FFD7A57AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2FEF0B-B4AC-4EDB-AD25-41F4F9DA1DAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E9C52D-0F60-41E5-8646-1F4D908CA82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD7EF17-710B-4363-87B7-CE1B4447BF99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s5700_firmware:v200r011c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A2FFFE5-5B4E-4040-BE25-A90D77AB53FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s5700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E22D3CFF-3353-4EE2-8933-84F395469D0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DA5CF67-A58B-4666-B87E-712507233453"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E52545-B12E-43EC-B132-28FA2E511316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17889C1C-0187-4814-940D-5BA6DDA39ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11F25342-CE07-44CD-BD61-A998DFC8EF8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D31F91CA-80E9-4C2A-AD61-A4FC08C8A83E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C34E6D4-67FE-4AA4-A825-9666A302F771"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s6700_firmware:v200r011c10spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52947109-38C8-41A2-BC59-B43EA2343F43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA7AC10D-B0DD-4206-8642-134DDD585C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D79CD09-3414-4105-AD59-F3D1BAC61B7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37E3F87E-EA36-41ED-8793-F6C166FFC4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82E3273C-3C33-4880-A044-389F5CB6FECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749528C3-5F85-4B80-98AA-FFD5574779F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2341D4F8-67E0-4B10-9D16-F2282D3EDBED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s7700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F2CC30-626B-4FEE-BDAD-6A5990DE6384"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8769C2C4-E333-432B-8943-CFDFAE013379"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38515A04-EC21-40B3-A29C-8D0A5883EA4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r007c01b102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2091CE58-DB15-4D36-ABF9-5DC94D39E358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r008c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AB80F7-1BD2-4169-AC70-708CE84BB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C6DC309-2FC6-4014-9C2B-8EE12C7BB08F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r010c00spc300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBC7227-051E-4244-9A63-760D0714DA35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r011c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D42D4D0E-2E0D-448E-B83D-50A1361C048B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r011c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90A601DF-D90C-43EB-8A56-3890CF0C252D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:s9700_firmware:v200r011c10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B06663D-8499-42B9-83E1-E369F1FD0070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:s9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FAA4BF-1ED0-4059-ADA1-071AF1BF2882"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A8AEAB1-6106-47A2-8207-67E557A8BF80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDD7E147-B39E-4C6F-BA5F-F046F3AE4728"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "627F40B6-8CD1-47EE-8937-F1FAAAB86F0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE084FC-27EB-4CE6-B529-508DA690C9D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB7FBB2-1CC6-4DA3-85AB-66562B0A9198"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AACFD2-9C9D-49E3-A911-0CF58F863EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F14B3F-EA8C-4A01-9968-08ECACDA6CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c60:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B7C57C-7CD4-4FF0-BE51-2F4794FED7AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-uaf-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25917",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-22T20:15:17.693",
      "lastModified" : "2025-04-30T18:15:33.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the U2F USB Device authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user."
      }, {
        "lang" : "es",
        "value" : "En OpenEMR, las versiones 5.0.2 a 6.0.0 son vulnerables a Stored Cross-Site-Scripting (XSS) debido a que la entrada del usuario no se valida correctamente y se renderiza en la página del método de autenticación del dispositivo USB U2F. Un atacante con muchos privilegios podría inyectar código arbitrario en los campos de entrada al crear un nuevo usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.2",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "EDB59E04-3D22-48AB-A391-338529F0A7E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25917",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25917",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25918",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-22T20:15:17.753",
      "lastModified" : "2025-04-30T18:15:33.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly and rendered in the TOTP Authentication method page. A highly privileged attacker could inject arbitrary code into input fields when creating a new user."
      }, {
        "lang" : "es",
        "value" : "En OpenEMR, versiones 5.0.2 a 6.0.0, son vulnerables a un ataque de tipo Cross-Site-Scripting (XSS) Almacenado debido a que la entrada del usuario no es validada apropiadamente. Un atacante muy privilegiado podría inyectar código arbitrario en los campos de entrada al crear un nuevo usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.2",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "EDB59E04-3D22-48AB-A391-338529F0A7E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25918",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25919",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-22T20:15:17.817",
      "lastModified" : "2025-04-30T18:15:34.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEMR, versions 5.0.2 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly. A highly privileged attacker could inject arbitrary code into input fields when creating a new user."
      }, {
        "lang" : "es",
        "value" : "En OpenEMR, versiones 5.0.2 a 6.0.0, son vulnerables a un ataque de tipo Cross-Site-Scripting (XSS) Almacenado debido a que la entrada del usuario no es validada apropiadamente.&#xa0;Un atacante muy privilegiado podría inyectar código arbitrario en los campos de entrada al crear un nuevo usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.2",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "EDB59E04-3D22-48AB-A391-338529F0A7E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25919",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25920",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-22T20:15:17.880",
      "lastModified" : "2025-04-30T18:15:34.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEMR, versions v2.7.2-rc1 to 6.0.0 are vulnerable to Improper Access Control when creating a new user, which leads to a malicious user able to read and send sensitive messages on behalf of the victim user."
      }, {
        "lang" : "es",
        "value" : "En OpenEMR, las versiones v2.7.2-rc1 a 6.0.0, son vulnerables a un Control de Acceso Inapropiado al crear un nuevo usuario, lo que conlleva a que un usuario malicioso sea capaz de leer y enviar mensajes confidenciales en nombre del usuario víctima"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.2",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "6BA35727-F5FF-4579-B090-F0F2C4F69668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25920",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25920",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25921",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-22T20:15:17.943",
      "lastModified" : "2025-04-30T18:15:34.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEMR, versions 2.7.3-rc1 to 6.0.0 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly in the `Allergies` section. An attacker could lure an admin to enter a malicious payload and by that initiate the exploit."
      }, {
        "lang" : "es",
        "value" : "En OpenEMR, las versiones 2.7.3-rc1 a 6.0.0, son vulnerables a un ataque de tipo Cross-Site-Scripting (XSS) Almacenado debido a que la entrada del usuario no es validada apropiadamente en la sección \"Allergies\".&#xa0;Un atacante podría convencer a un administrador para que ingrese una carga útil maliciosa y así iniciar la explotación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.3",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "22010AB0-B63C-4F53-8C59-A2288B9B8874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25921",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25921",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25922",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-03-22T20:15:18.003",
      "lastModified" : "2024-11-21T05:55:36.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In OpenEMR, versions 4.2.0 to 6.0.0 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly. An attacker could trick a user to click on a malicious url and execute malicious code."
      }, {
        "lang" : "es",
        "value" : "En OpenEMR, las versiones 4.2.0 a 6.0.0 son vulnerables a un ataque de tipo Cross-Site-Scripting (XSS) Reflejado debido a que la entrada del usuario no es validada apropiadamente.&#xa0;Un atacante podría engañar a un usuario para que haga clic en una URL maliciosa y ejecute un código malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "EF2BDCDF-E7FD-4DB9-9544-B17562B8F0E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25922",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openemr/openemr/commit/0fadc3e592d84bc9dfe9e0403f8bd6e3c7d8427f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21341",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:12.380",
      "lastModified" : "2025-05-23T17:38:30.480",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. No user is affected who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir a un atacante remoto asignar el 100% del tiempo de CPU en el sistema de destino según el tipo de CPU o la ejecución paralela de dicha carga útil, resultando en una denegación de servicio solo mediante la manipulación del flujo de entrada procesado.&#xa0;Ningún usuario está afectado si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-2p3x-qw9c-25hh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21341.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-2p3x-qw9c-25hh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21341.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21342",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:12.490",
      "lastModified" : "2025-05-23T17:39:23.860",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in a server-side forgery request. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad en el que el flujo procesado en el momento de la descompensación contiene información de tipo para recrear los objetos escritos anteriormente.&#xa0;XStream crea, por tanto, nuevas instancias basadas en este tipo de información.&#xa0;Un atacante puede manipular el flujo de entrada procesado y reemplazar o inyectar objetos, que resulta en una petición de falsificación del lado del servidor.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06594847-96ED-4541-B2F4-C7331B603603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-hvv8-336g-rx3m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21342.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-hvv8-336g-rx3m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21342.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21343",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:12.600",
      "lastModified" : "2025-05-23T17:40:13.823",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad en el que el flujo procesado en el momento de la descompensación contiene información de tipo para recrear los objetos escritos anteriormente.&#xa0;XStream crea, por tanto, nuevas instancias basadas en este tipo de información.&#xa0;Un atacante puede manipular el flujo de entrada procesado y reemplazar o inyectar objetos, que resulta en la eliminación de un archivo en el host local.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-74cv-f58x-f9wf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21343.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-74cv-f58x-f9wf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21343.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21344",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:12.677",
      "lastModified" : "2025-05-23T17:40:53.260",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir a un atacante remoto cargar y ejecutar código arbitrario desde un host remoto solo manipulando el flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.36",
            "matchCriteriaId" : "113BE3AE-09DB-4DEC-8BB6-DBDE8DB2DBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.27",
            "matchCriteriaId" : "B58BDB84-C59D-4498-83D1-8F74B06362EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-59jw-jqf4-3wq3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21344.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-59jw-jqf4-3wq3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21344.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21345",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:12.787",
      "lastModified" : "2025-05-23T17:41:10.117",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir a un atacante remoto que tenga suficientes derechos ejecutar comandos del host solo manipulando el flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-hwpc-8xqv-jvj4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21345.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-hwpc-8xqv-jvj4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21345.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21346",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:12.897",
      "lastModified" : "2025-05-23T17:41:29.880",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir a un atacante remoto cargar y ejecutar código arbitrario desde un host remoto solo manipulando el flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD806C1-CC17-47BD-8BB0-9430C4253BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DC56004-4497-4CDD-AE76-5E3DFAE170F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "274A0CF5-41E8-42E0-9931-F7372A65B9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-4hrm-m67v-5cxr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21346.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-4hrm-m67v-5cxr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21346.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21347",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:13.023",
      "lastModified" : "2025-05-23T17:41:49.730",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir a un atacante remoto cargar y ejecutar código arbitrario desde un host remoto solo manipulando el flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-qpfq-ph7r-qv6f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21347.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-qpfq-ph7r-qv6f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21347.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21348",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:13.100",
      "lastModified" : "2025-05-23T17:42:08.603",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir que un atacante remoto ocupe un hilo que consume el máximo tiempo de CPU y nunca regresará.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.27",
            "matchCriteriaId" : "E1B5F76C-25BD-450C-98CD-B7F4C7149AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-56p8-3fh9-4cvq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21348.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-56p8-3fh9-4cvq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21348.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21349",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:13.193",
      "lastModified" : "2025-05-23T17:42:48.900",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir que un atacante remoto solicite datos de recursos internos que no están disponibles públicamente solo mediante la manipulación del flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.4:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "9F300E13-1B40-4B35-ACA5-4D402CD41055"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B10E38A6-783C-45A2-98A1-12FA1EB3D3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_se:7u321:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0BF15F-D4D2-4A88-BA15-79B624C4AC7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:java_se:8u311:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D63E2911-7DA8-41AC-AB7A-1AA29076F69F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-f6hm-88x3-mfjv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21349.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-f6hm-88x3-mfjv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21349.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21350",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:13.273",
      "lastModified" : "2025-05-23T17:43:08.217",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to execute arbitrary code only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir que un atacante remoto ejecute código arbitrario solo manipulando el flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-43gc-mjxg-gvrq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21350.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-43gc-mjxg-gvrq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21350.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21351",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T00:15:13.367",
      "lastModified" : "2025-05-23T17:34:20.440",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16."
      }, {
        "lang" : "es",
        "value" : "XStream es una biblioteca de Java para serializar objetos a XML y viceversa.&#xa0;En XStream anterior a la versión 1.4.16, se presenta una vulnerabilidad que puede permitir a un atacante remoto cargar y ejecutar código arbitrario desde un host remoto solo manipulando el flujo de entrada procesado.&#xa0;Ningún usuario está afectado, si siguió la recomendación de configurar el framework de seguridad de XStream con una lista blanca limitada a los tipos mínimos requeridos.&#xa0;Si confía en la lista negra predeterminada de XStream del Framework de Seguridad, tendrá que usar al menos la versión 1.4.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.15.14",
            "matchCriteriaId" : "08739311-087C-4B48-8FD5-DE4CCDD1DE2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DF1FC86-4D17-41C5-8307-B3EA9FEDA124"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:activemq:5.16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311BB335-06EE-4B7D-B1D7-FA0D1D2F9673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:jmeter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "0D7DFDE4-E63D-49A0-A4EF-D6C5EF06AFD9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xstream:xstream:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.16",
            "matchCriteriaId" : "61951B4B-1970-447E-AEFA-BFD5E7992640"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2BEE49E-A5AA-42D3-B422-460454505480"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9FC9AB-1070-420F-870E-A5EC43A924A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDC6D658-09EA-4C41-869F-1C2EA163F751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1534C11-E3F5-49F3-8F8D-7C5C90951E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D952E04D-DE2D-4AE0-BFE6-7D9B7E55AC80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_virtual_account_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1111BCFD-E336-4B31-A87E-76C684AC6DE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC723E79-8F35-417B-B9D9-6A707F74C1EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5700C2E9-5FF2-48EF-AD85-3C03EDA76536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_activity_monitoring:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8461A2-428C-4817-92A9-0C671545698D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3784BE26-B268-40F3-9B10-88E50A4400AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5312AC7A-3C16-4967-ACA6-317289A749D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B58BCDA-E173-4D4A-A9C5-E9BFF7E57F58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D299528-8EF0-49AF-9BDE-4B6C6B1DA36C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17A91FD9-9F77-42D3-A4D9-48BC7568ADE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "539DA24F-E3E0-4455-84C6-A9D96CD601B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7637F8B-15F1-42E2-BE18-E1FF7C66587D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.27",
            "matchCriteriaId" : "E1B5F76C-25BD-450C-98CD-B7F4C7149AAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:16.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "490B2C44-CECD-4551-B04F-4076D0E053C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7756147-7168-4E03-93EE-31379F6BE88E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-hrcp-8f3q-4w2c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21351.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "http://x-stream.github.io/changes.html#1.4.16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/x-stream/xstream/security/advisories/GHSA-hrcp-8f3q-4w2c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r8244fd0831db894d5e89911ded9c72196d395a90ae655414d23ed0dd%40%3Cusers.activemq.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ac71b047767205aa22e3a08cb33f3e0586de6b2fac48b425c6e16b0%40%3Cdev.jmeter.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/22KVR6B5IZP3BGQ3HPWIO2FWWCKT3DHP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PVPHZA7VW2RRSDCOIPP2W6O5ND254TU7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QGXIU3YDPG6OGTDHMBLAFN7BPBERXREB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/CVE-2021-21351.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://x-stream.github.io/security.html#workaround",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21338",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.360",
      "lastModified" : "2024-11-21T05:48:03.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that Login Handling is susceptible to open redirection which allows attackers redirecting to arbitrary content, and conducting phishing attacks. No authentication is required in order to exploit this vulnerability. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 se ha descubierto que el manejo del inicio de sesión es susceptible de redirección abierta, lo que permite a los atacantes redirigir a contenido arbitrario, y realizar ataques de phishing. No se requiere autenticación para explotar esta vulnerabilidad. Esto está corregido en las versiones 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.57",
            "matchCriteriaId" : "E257D831-1E13-4091-B658-176CBD37B426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.6.51",
            "matchCriteriaId" : "518930A7-E255-4A56-B76B-1C978A236856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.7.40",
            "matchCriteriaId" : "F10B90F0-DA5C-4A80-BD4F-124B6C82CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.25",
            "matchCriteriaId" : "8CB3125B-114D-4991-BD60-9535D97DD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-core",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-001",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4jhw-2p6j-5wmp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21339",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.453",
      "lastModified" : "2024-11-21T05:48:03.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 user session identifiers were stored in cleartext - without processing of additional cryptographic hashing algorithms. This vulnerability cannot be exploited directly and occurs in combination with a chained attack - like for instance SQL injection in any other component of the system. This is fixed in versions 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 los identificadores de sesión de usuario se almacenaban en texto claro - sin procesar algoritmos de hash criptográficos adicionales. Esta vulnerabilidad no puede ser explotada directamente y ocurre en combinación con un ataque encadenado - como por ejemplo la inyección SQL en cualquier otro componente del sistema. Esto se ha corregido en las versiones 6.2.57, 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.57",
            "matchCriteriaId" : "E257D831-1E13-4091-B658-176CBD37B426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.6.51",
            "matchCriteriaId" : "518930A7-E255-4A56-B76B-1C978A236856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.7.40",
            "matchCriteriaId" : "F10B90F0-DA5C-4A80-BD4F-124B6C82CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.25",
            "matchCriteriaId" : "8CB3125B-114D-4991-BD60-9535D97DD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-core",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-006",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-qx3w-4864-94ch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21340",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.533",
      "lastModified" : "2024-11-21T05:48:03.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that database fields used as _descriptionColumn_ are vulnerable to cross-site scripting when their content gets previewed. A valid backend user account is needed to exploit this vulnerability. This is fixed in versions 10.4.14, 11.1.1 ."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores a la 10.4.14, 11.1.1 se ha descubierto que los campos de la base de datos utilizados como _descriptionColumn_ son vulnerables al cross-site scripting cuando su contenido se previsualiza. Se necesita una cuenta de usuario válida para explotar esta vulnerabilidad. Esto se ha corregido en las versiones 10.4.14, 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-fjh3-g8gq-9q92",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-backend",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-007",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-fjh3-g8gq-9q92",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-backend",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21355",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.627",
      "lastModified" : "2024-11-21T05:48:11.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1, due to the lack of ensuring file extensions belong to configured allowed mime-types, attackers can upload arbitrary data with arbitrary file extensions - however, default _fileDenyPattern_ successfully blocked files like _.htaccess_ or _malicious.php_. Besides that, _UploadedFileReferenceConverter_ transforming uploaded files into proper FileReference domain model objects handles possible file uploads for other extensions as well - given those extensions use the Extbase MVC framework, make use of FileReference items in their direct or inherited domain model definitions and did not implement their own type converter. In case this scenario applies, _UploadedFileReferenceConverter_ accepts any file mime-type and persists files in the default location. In any way, uploaded files are placed in the default location _/fileadmin/user_upload/_, in most scenarios keeping the submitted filename - which allows attackers to directly reference files, or even correctly guess filenames used by other individuals, disclosing this information. No authentication is required to exploit this vulnerability. This is fixed in versions 8.7.40, 9.5.25, 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores a la 8.7.40, 9.5.25, 10.4.14, 11.1.1, debido a la falta de garantía de que las extensiones de archivo pertenecen a los tipos mime permitidos configurados, los atacantes pueden subir datos arbitrarios con extensiones de archivo arbitrarias - sin embargo, _fileDenyPattern_ por defecto bloquea con éxito archivos como _.htaccess_ o _malicious.php_. Además de eso, _UploadedFileReferenceConverter_ transforma los archivos subidos en objetos de modelo de dominio FileReference apropiados y maneja posibles subidas de archivos para otras extensiones también - dado que esas extensiones usan el marco MVC de Extbase, hacen uso de elementos FileReference en sus definiciones de modelo de dominio directas o heredadas y no implementaron su propio convertidor de tipos. En caso de que este escenario se aplique, _UploadedFileReferenceConverter_ acepta cualquier tipo mime de archivo y persigue los archivos en la ubicación predeterminada. De cualquier manera, los archivos subidos se colocan en la ubicación por defecto _/fileadmin/user_upload/_, en la mayoría de los escenarios manteniendo el nombre del archivo enviado - lo que permite a los atacantes referenciar directamente los archivos, o incluso adivinar correctamente los nombres de los archivos utilizados por otras personas, revelando esta información. No se requiere autenticación para explotar esta vulnerabilidad. Esto está corregido en las versiones 8.7.40, 9.5.25, 10.4.14, 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        }, {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.7.40",
            "matchCriteriaId" : "F10B90F0-DA5C-4A80-BD4F-124B6C82CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.25",
            "matchCriteriaId" : "8CB3125B-114D-4991-BD60-9535D97DD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-form",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-002",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-2r6j-862c-m2v2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-form",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21357",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.720",
      "lastModified" : "2024-11-21T05:48:11.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, attackers can by-pass restrictions of predefined options and submit arbitrary data in the Form Designer backend module of the Form Framework. In the default configuration of the Form Framework this allows attackers to explicitly allow arbitrary mime-types for file uploads - however, default _fileDenyPattern_ successfully blocked files like _.htaccess_ or _malicious.php_. Besides that, attackers can persist those files in any writable directory of the corresponding TYPO3 installation. A valid backend user account with access to the form module is needed to exploit this vulnerability. This is fixed in versions 8.7.40, 9.5.25, 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores a la 8.7.40, 9.5.25, 10.4.14, 11.1.1, debido a una validación de entrada inadecuada, los atacantes pueden eludir las restricciones de las opciones predefinidas y enviar datos arbitrarios en el módulo backend del Diseñador de formularios del Marco de formularios. En la configuración por defecto del Form Framework esto permite a los atacantes permitir explícitamente tipos mime arbitrarios para la subida de archivos - sin embargo, el _fileDenyPattern_ por defecto bloquea con éxito archivos como _.htaccess_ o _malicious.php_. Además de eso, los atacantes pueden persistir esos archivos en cualquier directorio con capacidad de escritura de la correspondiente instalación de TYPO3. Se necesita una cuenta de usuario backend válida con acceso al módulo de formularios para explotar esta vulnerabilidad. Esto está corregido en las versiones 8.7.40, 9.5.25, 10.4.14, 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.7.40",
            "matchCriteriaId" : "F10B90F0-DA5C-4A80-BD4F-124B6C82CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.25",
            "matchCriteriaId" : "8CB3125B-114D-4991-BD60-9535D97DD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-form",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-003",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-3vg7-jw9m-pc3f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-form",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21358",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.813",
      "lastModified" : "2024-11-21T05:48:11.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 10.4.14, 11.1.1 it has been discovered that the Form Designer backend module of the Form Framework is vulnerable to cross-site scripting. A valid backend user account with access to the form module is needed to exploit this vulnerability. This is fixed in versions 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores a la 10.4.14, 11.1.1 se ha descubierto que el módulo backend Form Designer del Form Framework es vulnerable a cross-site scripting. Se necesita una cuenta de usuario backend válida con acceso al módulo de formularios para explotar esta vulnerabilidad. Esto se ha solucionado en las versiones 10.4.14, 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "176D2758-7F5E-4131-9F8A-8167038D103C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x79j-wgqv-g8h2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-form",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-004",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x79j-wgqv-g8h2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-form",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21359",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.893",
      "lastModified" : "2024-11-21T05:48:11.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 9.5.25, 10.4.14, 11.1.1 requesting invalid or non-existing resources via HTTP triggers the page error handler which again could retrieve content to be shown as error message from another page. This leads to a scenario in which the application is calling itself recursively - amplifying the impact of the initial attack until the limits of the web server are exceeded. This is fixed in versions 9.5.25, 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores a la 9.5.25, 10.4.14, 11.1.1 la solicitud de recursos inválidos o inexistentes a través de HTTP desencadena el manejador de errores de la página que de nuevo podría recuperar el contenido que se muestra como mensaje de error de otra página. Esto lleva a un escenario en el que la aplicación se llama a sí misma de forma recursiva, amplificando el impacto del ataque inicial hasta que se superan los límites del servidor web. Esto se ha corregido en las versiones 9.5.25, 10.4.14 y 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-405"
        }, {
          "lang" : "en",
          "value" : "CWE-674"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.25",
            "matchCriteriaId" : "8CB3125B-114D-4991-BD60-9535D97DD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4p9g-qgx9-397p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-core",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-005",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-4p9g-qgx9-397p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-core",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21370",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T02:15:12.987",
      "lastModified" : "2024-11-21T05:48:13.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 it has been discovered that content elements of type _menu_ are vulnerable to cross-site scripting when their referenced items get previewed in the page module. A valid backend user account is needed to exploit this vulnerability. This is fixed in versions 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1."
      }, {
        "lang" : "es",
        "value" : "TYPO3 es un sistema de gestión de contenidos web de código abierto basado en PHP. En TYPO3 versiones anteriores a la 7.6.51, 8.7.40, 9.5.25, 10.4.14, 11.1.1 se ha descubierto que los elementos de contenido de tipo _menu_ son vulnerables al cross-site scripting cuando sus elementos referenciados se previsualizan en el módulo de página. Se necesita una cuenta de usuario válida para explotar esta vulnerabilidad. Esto se ha corregido en las versiones 7.6.51, 8.7.40, 9.5.25, 10.4.14 y 11.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.6.51",
            "matchCriteriaId" : "518930A7-E255-4A56-B76B-1C978A236856"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.7.40",
            "matchCriteriaId" : "F10B90F0-DA5C-4A80-BD4F-124B6C82CE8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.5.25",
            "matchCriteriaId" : "8CB3125B-114D-4991-BD60-9535D97DD348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.4.14",
            "matchCriteriaId" : "C031A87F-5A82-48F8-AB02-FED0CDFE08A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.1.1",
            "matchCriteriaId" : "F696292E-3CC6-416B-9F99-6C1287B1D78D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-backend",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-008",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TYPO3/TYPO3.CMS/security/advisories/GHSA-x7hc-x7fm-f7qh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/typo3/cms-backend",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-core-sa-2021-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29065",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:12.873",
      "lastModified" : "2024-11-21T06:00:37.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR RBR850 devices before 3.2.10.11 are affected by authentication bypass."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR RBR850 versiones anteriores a 3.2.10.11, están afectados por una omisión de autenticación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10.11",
            "matchCriteriaId" : "C0B05A46-1FD0-4F51-857C-DA4F838C1A87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063006/Security-Advisory-for-Authentication-Bypass-on-RBR850-PSV-2020-0029",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063006/Security-Advisory-for-Authentication-Bypass-on-RBR850-PSV-2020-0029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29066",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.157",
      "lastModified" : "2024-11-21T06:00:37.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta al RBK852 versiones anteriores a 3.2.17.12, al RBK853 versiones anteriores a 3.2.17.12, al RBK854 versiones anteriores a 3.2.17.12, al RBR850 versiones anteriores a 3.2.17.12 y al RBS850 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063014/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0484",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063014/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29067",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.233",
      "lastModified" : "2024-11-21T06:00:38.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by authentication bypass. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una omisión de autenticación. Esto afecta a RBW30 versiones anteriores a 2.6.2.2, RBS40V versiones anteriores a 2.6.2.4, RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3. 2.17.12, RBK752 versiones anteriores a 3.2.17.12, RBK753 versiones anteriores a 3.2.17.12, RBK753S versiones anteriores a 3.2.17.12, RBK754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.2",
            "matchCriteriaId" : "D8EF8E22-9DC7-4A42-99E0-A6822F647DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA73D22-970D-45F2-81F3-9576C04CCC94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.4",
            "matchCriteriaId" : "1CA086E1-DB23-4130-B746-D56F5A188C3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D05F28-47A2-46AE-992E-132B34F6194B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "D8D90FF3-F5CE-43DF-ACF7-C64DBDCCA185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E1723D5F-FFDB-4E4D-80B7-4B28598D5895"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0D041B9F-37E4-48A9-9841-85EFFF7FA1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E6E6FDC1-BB17-454A-9B3A-5FB1F705C56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063017/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0492",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063017/Security-Advisory-for-Authentication-Bypass-on-Some-WiFi-Systems-PSV-2020-0492",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29068",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.297",
      "lastModified" : "2024-11-21T06:00:38.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a buffer overflow by an authenticated user. This affects R6700v3 before 1.0.4.98, R6400v2 before 1.0.4.98, R7000 before 1.0.11.106, R6900P before 1.3.2.124, R7000P before 1.3.2.124, R7900 before 1.0.4.26, R7850 before 1.0.5.60, R8000 before 1.0.4.58, RS400 before 1.5.0.48, R6400 before 1.0.1.62, R6700 before 1.0.2.16, R6900 before 1.0.2.16, MK60 before 1.0.5.102, MR60 before 1.0.5.102, MS60 before 1.0.5.102, CBR40 before 2.5.0.10, R8000P before 1.4.1.62, R7960P before 1.4.1.62, R7900P before 1.4.1.62, RAX15 before 1.0.1.64, RAX20 before 1.0.1.64, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, RAX200 before 1.0.2.102, RAX45 before 1.0.2.64, RAX50 before 1.0.2.64, EX7500 before 1.0.0.68, EAX80 before 1.0.1.62, EAX20 before 1.0.0.36, RBK752 before 3.2.16.6, RBK753 before 3.2.16.6, RBK753S before 3.2.16.6, RBK754 before 3.2.16.6, RBR750 before 3.2.16.6, RBS750 before 3.2.16.6, RBK852 before 3.2.16.6, RBK853 before 3.2.16.6, RBK854 before 3.2.16.6, RBR850 before 3.2.16.6, RBS850 before 3.2.16.6, RBR840 before 3.2.16.6, RBS840 before 3.2.16.6, R6120 before 1.0.0.70, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6850 before 1.1.0.76, R6350 before 1.1.0.76, R6330 before 1.1.0.76, D7800 before 1.0.1.58, RBK50 before 2.6.1.40, RBR50 before 2.6.1.40, RBS50 before 2.6.1.40, RBK40 before 2.6.1.36, RBR40 before 2.6.1.36, RBS40 before 2.6.1.38, RBK23 before 2.6.1.36, RBR20 before 2.6.1.38, RBS20 before 2.6.1.38, RBK12 before 2.6.1.44, RBK13 before 2.6.1.44, RBK14 before 2.6.1.44, RBK15 before 2.6.1.44, RBR10 before 2.6.1.44, RBS10 before 2.6.1.44, R6800 before 1.2.0.72, R6900v2 before 1.2.0.72, R6700v2 before 1.2.0.72, R7200 before 1.2.0.72, R7350 before 1.2.0.72, R7400 before 1.2.0.72, R7450 before 1.2.0.72, AC2100 before 1.2.0.72, AC2400 before 1.2.0.72, AC2600 before 1.2.0.72, R7800 before 1.0.2.74, R8900 before 1.0.5.24, R9000 before 1.0.5.24, RAX120 before 1.0.1.136, XR450 before 2.3.2.66, XR500 before 2.3.2.66, XR700 before 1.0.1.34, and XR300 before 1.0.3.50."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer por parte de un usuario autenticado. Esto afecta al R6700v3 versiones anteriores a 1.0.4.98, al R6400v2 versiones anteriores a 1.0.4.98, al R7000 versiones anteriores a 1.0.11.106, al R6900P versiones anteriores a 1.3.2.124, al R7000P versiones anteriores a 1.3.2.124, al R7900 versiones anteriores a 1.0.4.26, al R7850 versiones anteriores a 1.0.5.60, al R8000 versiones anteriores a 1.0.4.58, al RS400 versiones anteriores a 1.5.0.48, al R6400 versiones anteriores a 1.0.1. 62, R6700 versiones anteriores a 1.0.2.16, R6900 versiones anteriores a 1.0.2.16, MK60 versiones anteriores a 1.0.5.102, MR60 versiones anteriores a 1.0.5.102, MS60 versiones anteriores a 1.0.5.102, CBR40 versiones anteriores a 2.5.0.10, R8000P versiones anteriores a 1.4.1.62, R7960P versiones anteriores a 1.4.1.62, R7900P versiones anteriores a 1.4.1.62, RAX15 versiones anteriores a 1.0.1.64, RAX20 versiones anteriores a 1. 0.1.64, RAX75 versiones anteriores a 1.0.3.102, RAX80 versiones anteriores a 1.0.3.102, RAX200 versiones anteriores a 1.0.2.102, RAX45 versiones anteriores a 1.0.2.64, RAX50 versiones anteriores a 1.0.2.64, EX7500 versiones anteriores a 1.0.0.68, EAX80 versiones anteriores a 1.0.1.62, EAX20 versiones anteriores a 1.0.0.36, RBK752 versiones anteriores a 3.2.16.6, RBK753 versiones anteriores a 3.2.16. 6, RBK753S versiones anteriores a 3.2.16.6, RBK754 versiones anteriores a 3.2.16.6, RBR750 versiones anteriores a 3.2.16.6, RBS750 versiones anteriores a 3.2.16.6, RBK852 versiones anteriores a 3.2.16. 6, RBK853 versiones anteriores a 3.2.16.6, RBK854 versiones anteriores a 3.2.16.6, RBR850 versiones anteriores a 3.2.16.6, RBS850 versiones anteriores a 3.2.16.6, RBR840 versiones anteriores a 3.2.16. 6, RBS840 versiones anteriores a 3.2.16.6, R6120 versiones anteriores a 1.0.0.70, R6220 versiones anteriores a 1.1.0.100, R6230 versiones anteriores a 1.1.0.100, R6260 versiones anteriores a 1.1.0.76, R6850 versiones anteriores a 1.1.0.76, R6350 versiones anteriores a 1.1.0.76, R6330 versiones anteriores a 1.1.0.76, D7800 versiones anteriores a 1.0.1.58, RBK50 versiones anteriores a 2.6.1.40, RBR50 versiones anteriores a 2. 6.1.40, RBS50 versiones anteriores a 2.6.1.40, RBK40 versiones anteriores a 2.6.1.36, RBR40 versiones anteriores a 2.6.1.36, RBS40 versiones anteriores a 2.6.1.38, RBK23 versiones anteriores a 2.6.1.36, RBR20 versiones anteriores a 2.6.1.38, RBS20 versiones anteriores a 2.6.1.38, RBK12 versiones anteriores a 2.6.1.44, RBK13 versiones anteriores a 2.6.1.44, RBK14 versiones anteriores a 2.6.1. 44, RBK15 versiones anteriores a 2.6.1.44, RBR10 versiones anteriores a 2.6.1.44, RBS10 versiones anteriores a 2.6.1.44, R6800 versiones anteriores a 1.2.0.72, R6900v2 versiones anteriores a 1.2.0. 72, R6700v2 versiones anteriores a 1.2.0.72, R7200 versiones anteriores a 1.2.0.72, R7350 versiones anteriores a 1.2.0.72, R7400 versiones anteriores a 1.2.0.72, R7450 versiones anteriores a 1.2.0.72, AC2100 versiones anteriores a 1. 2.0.72, AC2400 versiones anteriores a 1.2.0.72, AC2600 versiones anteriores a 1.2.0.72, R7800 versiones anteriores a 1.0.2.74, R8900 versiones anteriores a 1.0.5.24, R9000 versiones anteriores a 1.0.5.24, RAX120 versiones anteriores a 1.0.1.136, XR450 versiones anteriores a 2.3.2.66, XR500 versiones anteriores a 2.3.2.66, XR700 versiones anteriores a 1.0.1.34 y XR300 versiones anteriores a 1.0.3.50"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.98",
            "matchCriteriaId" : "4E99E8C5-D88D-409C-8233-944E254D587F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A09A9E8-8C77-4EDB-9483-B3C540EF083A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.98",
            "matchCriteriaId" : "1B80222E-C65C-4AA5-9399-E2017D844117"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11.106",
            "matchCriteriaId" : "D208F2CA-DB20-4C82-8FFF-B99EBFE29713"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5A29C8A-71C1-477F-9D17-CD2E74784BB8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2.124",
            "matchCriteriaId" : "61DE3850-1661-43D1-9E52-31E2E01979EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3524A509-D0CF-40EB-93FE-9538169CEF53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2.124",
            "matchCriteriaId" : "5C6F506A-464D-4BDE-8F9B-D537D3C7E137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC381A4-BDC7-4F40-AD68-F9EEE5370AC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.26",
            "matchCriteriaId" : "D9800CB2-C14A-406B-B1FF-B1B62862EBDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F35362B-CF27-4C04-AD15-8579F1F6B949"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.60",
            "matchCriteriaId" : "4171EB00-3664-43D5-9B62-A3538C358142"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7850:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7780F243-8E08-4E1F-A819-24386B05F817"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.58",
            "matchCriteriaId" : "F030129E-95C6-4C31-92A6-DABCDC1B534B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41BA56D3-4429-43DA-9988-A83CC92D323D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0.48",
            "matchCriteriaId" : "921A8CFC-D86E-4674-998E-31F4F956B5DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rs400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE56058F-FE7A-43D3-A362-2043B74FAE81"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.62",
            "matchCriteriaId" : "478CE991-5E30-438D-94B0-0E15A29E27BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DF14C8-CE32-47AB-B087-D8D6C84C8F98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.16",
            "matchCriteriaId" : "19D625E4-17F4-44EF-9A51-DA0BAD4835F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0D05E55-6C70-419A-9A5D-D89AA8F19499"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.16",
            "matchCriteriaId" : "B1D59AC0-2859-46C0-B050-3BB8E3E9CB06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5B64473-5409-419B-967A-E4D7922D7010"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:mk60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.102",
            "matchCriteriaId" : "99DA73AE-E82E-4886-9237-291B6B32BE9E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:mk60:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2581D68-BF67-43E9-9465-A510DC80C236"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.102",
            "matchCriteriaId" : "3E18CCBB-46CD-423D-AA66-36F223EFD6E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:mr60:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D651DEF9-CC2F-4ADB-9FEE-5C43A8366A75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.102",
            "matchCriteriaId" : "07A1D7A9-29E9-4B1D-90DB-24E0967C9BC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ms60:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7467498D-EEFE-4B57-8031-B9F99751D556"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:cbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.0.10",
            "matchCriteriaId" : "2B05686E-7206-4E3B-BDBD-05C8EA6CABB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:cbr40:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACAD2041-9A20-444A-BB81-8764610D6F00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.62",
            "matchCriteriaId" : "3B377E02-0228-4A2F-90F3-A82E7E964B37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2982807D-D17B-49B8-B0D7-80662EDFC306"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.62",
            "matchCriteriaId" : "EA8D0327-0A72-44EC-9CC2-6CAF6A0C08B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7960p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C64BD39-F245-47DB-981D-36613AD40BFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.62",
            "matchCriteriaId" : "44537647-E0B2-477D-98A5-7EA850BF3321"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C27B00-2FD3-4AE9-90B7-AEFA2631C9E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.64",
            "matchCriteriaId" : "CC5225D5-96AD-43EE-BAA3-37B7FEF97E86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax15:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DED03C1-00A1-49B3-BD19-DCCC489E7FE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.64",
            "matchCriteriaId" : "33505A97-35DB-4EFD-9D47-EA03057C8FFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax20:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B881D3AF-6D5B-4AC9-BB36-E673D88BDC54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.102",
            "matchCriteriaId" : "ADDF0077-E02C-4DDA-A84E-DF3A0237FC66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax75:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCF91BA6-DF2A-4121-9246-83C6DAA89C11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.102",
            "matchCriteriaId" : "81DF924F-FDA4-4588-B8A3-6F18ABBD4976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax80:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EAEF0F-DCED-4ECC-B8DF-4E91AA030D8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.102",
            "matchCriteriaId" : "49D5D1E8-637A-4970-8753-6A3FCA8FAC64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497D21B1-4F55-408F-8D05-18B2B9F55291"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.64",
            "matchCriteriaId" : "5A3B894E-E712-477A-9960-30AFAB2C35CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax45:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FD45DF-A29E-46C7-99DC-09EE74F5A276"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.64",
            "matchCriteriaId" : "A71AE85C-74C4-42C1-BF54-89B6EC38C707"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax50:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DA6A42-4064-4884-9D8C-7273CA8F0498"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.68",
            "matchCriteriaId" : "B59B0C17-2714-48E8-8911-E72488CE32E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "111905EF-0E9E-4321-837F-D7E7C146E9FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:eax80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.62",
            "matchCriteriaId" : "C7EE6BC6-DEDA-4005-9E29-D66D0BC7E5C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:eax80:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06EC4DE7-7424-4D7C-9979-88C58CBB0978"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:eax20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.36",
            "matchCriteriaId" : "62EFA314-85C0-48CC-938E-E2BF42B16746"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:eax20:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24022452-B0A3-4101-875A-46D0B5E60D48"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "FDD03FFF-ECAF-4527-A195-559DF479A0F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31427F8E-7D14-4DE1-AF03-7487073040B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "3E391711-0D34-4CBB-9022-BF809C435616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57204B6D-6D87-4616-91ED-446894C24A3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "C348EA7B-1226-4745-9961-A5B253BE8235"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFAC263-BF84-404C-9A4F-BF9D1D4134E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "85D95CCB-7E4A-4CA5-A503-FB79DBC08DDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2731D467-A9C2-4801-9D41-BBECF0F4C585"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "05A46FA9-5DC8-4408-B4C2-AD5F1CABE7C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CB2B42-ADFE-42A7-8A9D-B5C2ED6F2E7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "2C144D71-6C10-44CD-BFF9-907A92F0432C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5309A5-3F84-46F4-BB50-754E9C52FA88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "B66A716A-7EC5-4F9B-853A-36C0D1AA3BFE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B06308A-9862-4B1E-A100-B9A8B47311B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "02781FF1-A884-44D3-8364-FF8371D47FCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "530F895F-0061-441F-A2BD-CC51A8C13BE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "FAA417FF-DB33-477B-9D73-003CE56C5D78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9217A7B-0410-4E57-BD91-8E20237FB52B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "FE13548D-0A26-45C1-8424-D4705EB105EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77C093D-AF25-4757-880C-698A7902D507"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "041D94DE-78C9-475C-9FAE-0B081C69B55F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A92FEE8-77A2-49DE-BCF7-9416F64E5F28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk842_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "F5C6DF5F-FEFB-4A30-87CC-379E726AE181"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk842:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AC8A705-F376-4B1F-B5AD-024CE43EB997"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr840_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "451C5603-927A-4EB9-BF9D-150FE16A48F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr840:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "057CD043-7ACD-4284-9CC0-171F437B1501"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs840_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.16.6",
            "matchCriteriaId" : "4B22B149-BD16-42A0-BB1D-DEF483F6B5E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs840:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D633C05-5C85-490D-8692-BBA04C36F450"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.70",
            "matchCriteriaId" : "7F898DC9-9250-47DF-844C-F7308365135B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6120:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1B44D10-8A75-4643-8937-9157C7C1014D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.70",
            "matchCriteriaId" : "0754CB8B-A9D4-4444-8426-E1DDBBD2A9D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6220:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D00B9746-B4B1-4473-8417-BF1B10831B50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6230_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.70",
            "matchCriteriaId" : "9D35F61B-5E8F-483B-9F31-A312AB8C717F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6230:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C14B49-D069-41E3-94C3-A49E06022D60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6260_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.76",
            "matchCriteriaId" : "23D4F7E6-C042-434E-87B8-55DB18B08B0A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6260:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E2353F3-A93F-4477-9E2E-4E23EAA5F51C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.76",
            "matchCriteriaId" : "3408536D-FC77-48C5-AD15-C5A170D7417C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6850:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F77BFF-3640-4906-ABCF-E3C6945050E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.76",
            "matchCriteriaId" : "9F105F6F-ECD3-411D-924E-94BCF036C1EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6350:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B54BEAD-CF85-48AB-87EE-F09FAAF1F3D6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6330_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.0.76",
            "matchCriteriaId" : "6524B85E-23AC-4983-8331-96E12899B773"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6330:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D552EC52-5DB8-45BF-BD1B-0554FCEBCD24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.58",
            "matchCriteriaId" : "ACEAC1F2-EEAE-4880-B6C0-FFAAA29685F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C82317F-0843-4B4F-9FE0-8A44BA651D26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.40",
            "matchCriteriaId" : "A0E3BFCB-BFF8-4722-BE48-5FA93CACD3AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4660355E-74B6-40E5-86E0-3BA55589C557"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.40",
            "matchCriteriaId" : "39D6318D-F5A2-4469-B508-075F2825F0FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D9688E5-D944-437C-81AC-03CA64087DC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.40",
            "matchCriteriaId" : "1F44708A-C946-4E0F-9D6C-A91AFB4C9EF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C4E1D7-94CB-4A0B-9E74-89880CBFF11C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.36",
            "matchCriteriaId" : "AAC56D3D-B697-4C9D-ADBB-A45845A3B5D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AADEEDB6-C8F5-41D3-93C8-AB94605554C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.36",
            "matchCriteriaId" : "1E21623E-9977-486F-93B1-858FC407E9D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5428D4B4-DEEC-4A14-BF24-EB480A614FA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.38",
            "matchCriteriaId" : "A32769CF-7D0A-4A3F-AF20-6202CA0C6870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772CF322-9944-4243-BFBB-8F133AE5A373"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.36",
            "matchCriteriaId" : "675E9C59-D39B-47B0-ABEC-32D548650AB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "752FA3EA-C87D-4402-ACFF-11E1DE15501B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.38",
            "matchCriteriaId" : "C1612C65-9BA0-4CAF-93B3-D528287B0790"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1E01AE-DE82-4F20-BCFB-E5A48CCE28AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.38",
            "matchCriteriaId" : "04F03BE5-1440-4BC4-B902-97E702ED0ADF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12E8664-5D49-4377-A8C4-175F15E94083"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.44",
            "matchCriteriaId" : "9EC30751-F447-45A7-8C57-B73042869EA5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26AB2BC-061D-4142-9E37-A22368398876"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.44",
            "matchCriteriaId" : "2E7758BF-0AE4-46DB-A014-734F68AEEAA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52BB59CE-7024-4F7C-B49B-C2444FAA923E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.44",
            "matchCriteriaId" : "B7CD38DB-B4A3-460E-8F89-E85A0E0F5BD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0CD88D0-E4F4-4695-A2BE-44758F6CA4C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.44",
            "matchCriteriaId" : "3E25990D-C38A-44E7-A301-AB9E80A9D5CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87232E4A-7821-4A7A-8D31-67C91DCCA5B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.44",
            "matchCriteriaId" : "8246B8D3-8455-43B1-B0FA-F677B8FF84F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69E984D9-C35E-4925-A3C3-695BCEF56C75"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.44",
            "matchCriteriaId" : "28DA498C-B466-422E-BAD2-A1F9A15B157F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0242C44-637E-4984-B830-9148E265E74B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "B8956A99-1071-42A7-8984-D7134E755CBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3127F5-9624-4002-B8F8-D76A01676ADA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "A660042D-27F6-4110-AB03-BCAFAC194557"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8EB69B-6619-47B6-A073-D0B840D4EB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "AFA2C5B9-92C2-4E70-B166-87AD9973F80E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9706E6-CA53-43E4-91B0-D52655C86860"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "02279B20-D951-46CE-B339-452BC585A4F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7200:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E330A8C5-1D91-4743-A35C-430CB5EAA0A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7350_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "B452611A-43C5-401B-95BD-189020B5C65C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7350:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F27FB281-6C22-45E6-A3A1-DE90C3F2B608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "237C68C0-C2A9-4F71-9E08-547F2A317CBC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8F6B4F-5995-40A4-89B4-325BACA086A2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "63697E3A-AAA3-42E7-8116-93C6548D3AB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7450:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB5E5161-10A9-41A9-9FC4-9A5F6B4536AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ac2100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "4C1280B1-A2DF-4CAB-AB19-6B463206AA3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ac2100:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFA0025-8657-4A20-A282-D1034D8BBEF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ac2400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "76C658A4-BF82-40CE-A5E1-C9F3DA1A9B0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ac2400:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "710011A1-F633-4B5D-9C09-04E518C71DE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ac2600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.72",
            "matchCriteriaId" : "4A3A6655-B468-46FB-84D7-2294D4243C91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ac2600:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "474A7CEB-7133-40FA-8FC5-BC85D712DABF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.74",
            "matchCriteriaId" : "C393DBF4-8281-4611-B591-CDB9DF0AA958"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01CF301B-9DF5-4960-BD62-06E56EDF1031"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.24",
            "matchCriteriaId" : "57314D03-64B1-4973-9D36-5D22A71DBCBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD4841B-0F5C-4B7B-9764-F37605BF7AD9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.24",
            "matchCriteriaId" : "0DCE56F2-5A45-4B31-99EF-1D8455C71E5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AAEB70-4F97-4044-B897-86020787DE01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax120_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.136",
            "matchCriteriaId" : "B697A877-214C-4701-AA9B-FE9C23FDBCEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax120:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B302272A-8BCE-47B7-B7DB-026B22A39367"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.66",
            "matchCriteriaId" : "051E8D2A-0EB0-43A7-9AAA-8519B8CC7FE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA83AEEB-FBEB-40A9-9F61-814596C00922"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.66",
            "matchCriteriaId" : "0BCFB551-95C6-4EEF-83F0-4246F67E6668"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F284951-6DAA-4AA4-A189-44CDB44878A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.34",
            "matchCriteriaId" : "89AB672D-DD24-483E-B69D-7E46AF199483"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AF919EF-8893-4E1A-A854-3FB932682504"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.50",
            "matchCriteriaId" : "D71EDB94-370B-46C3-A14E-3F3FB130DD49"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr300:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AED2DE10-EC70-4A50-9C17-2C02569BD149"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063021/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0155",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063021/Security-Advisory-for-Post-Authentication-Buffer-Overflow-on-Some-Routers-Extenders-and-WiFi-Systems-PSV-2020-0155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29069",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.390",
      "lastModified" : "2024-11-21T06:00:38.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects XR450 before 2.3.2.114, XR500 before 2.3.2.114, and WNR2000v5 before 1.0.0.76."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autentificado. Esto afecta a XR450 versiones anteriores a 2.3.2.114, XR500 versiones anteriores a 2.3.2.114 y WNR2000v5 versiones anteriores a 1.0.0.76"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr2000v5_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.76",
            "matchCriteriaId" : "6E5CCE1F-CC08-4C10-90C6-55ED8D3F3CE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr2000v5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671EC923-DC84-47D6-B943-0F7DA8168334"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063023/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2020-0595",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063023/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-Routers-PSV-2020-0595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29070",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.483",
      "lastModified" : "2024-11-21T06:00:38.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autentificado. Esto afecta a RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12 y RBS850 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063019/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Routers-PSV-2020-0530",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063019/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Routers-PSV-2020-0530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29071",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.560",
      "lastModified" : "2024-11-21T06:00:38.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBR752 before 3.2.17.12, RBR753 before 3.2.17.12, RBR753S before 3.2.17.12, RBR754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autentificado. Esto afecta a RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3.2.17.12, RBR752 versiones anteriores a 3. 2.17.12, RBR753 versiones anteriores a 3.2.17.12, RBR753S versiones anteriores a 3.2.17.12, RBR754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "CCE2E74C-7472-41C9-B48B-4F6D09819694"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A727637-4CB0-4CDF-86D6-91B72E8F1A67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "1B8A2AE8-D24F-4FE9-BCB5-629F879CD921"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749C2A47-CC43-433F-8FC7-EAC9853E32AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "725B56D3-FE36-4A77-B723-A7A3D8DD0443"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08A0E20-90A3-4D49-8E06-97944C3EF312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "EAC29540-B53A-4033-B998-8E6BAB033FF5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE7FE0A5-16D7-4AEC-A3B1-940F44E5492F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063008/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0476",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063008/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.640",
      "lastModified" : "2024-11-21T06:00:39.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an authenticated user. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un usuario autentificado. Esto afecta a RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12 y RBS850 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063018/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0493",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063018/Security-Advisory-for-Post-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0493",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29073",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.703",
      "lastModified" : "2024-11-21T06:00:39.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects R8000P before 1.4.1.66, MK62 before 1.0.6.110, MR60 before 1.0.6.110, MS60 before 1.0.6.110, R7960P before 1.4.1.66, R7900P before 1.4.1.66, RAX15 before 1.0.2.82, RAX20 before 1.0.2.82, RAX45 before 1.0.2.72, RAX50 before 1.0.2.72, RAX75 before 1.0.3.106, RAX80 before 1.0.3.106, and RAX200 before 1.0.3.106."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta al R8000P versiones anteriores a 1.4.1.66, al MK62 versiones anteriores a 1.0.6.110, al MR60 versiones anteriores a 1.0.6.110, al MS60 versiones anteriores a 1.0.6.110, al R7960P versiones anteriores a 1.4.1.66, al R7900P versiones anteriores a 1.4.1.66, al RAX15 versiones anteriores a 1. 0.2.82, RAX20 versiones anteriores a 1.0.2.82, RAX45 versiones anteriores a 1.0.2.72, RAX50 versiones anteriores a 1.0.2.72, RAX75 versiones anteriores a 1.0.3.106, RAX80 versiones anteriores a 1.0.3.106 y RAX200 versiones anteriores a 1.0.3.106"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.66",
            "matchCriteriaId" : "101031E9-479E-4F86-B83A-19376F8C8A45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EF872D-2537-4FEB-8799-499FC9D44339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:mk62_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6.110",
            "matchCriteriaId" : "525B767F-5A8A-4E6C-8585-BCBB05948B2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:mk62:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69A79475-37BE-47BD-A629-DCEF22500B0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:mr60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6.110",
            "matchCriteriaId" : "6F1EBAB4-F713-4AC5-AECC-9E9D61FF3576"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:mr60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65BB3ECD-2F0B-4625-A1DB-F6CEFC46E277"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ms60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6.110",
            "matchCriteriaId" : "9E445DBA-2B45-410C-9288-1A4472452CE1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ms60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F003F064-591C-4D7C-9EC4-D0E553BC6683"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.66",
            "matchCriteriaId" : "5B717BA8-81B7-470C-BF20-A4318D063D77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091CEDB5-0069-4253-86D8-B9FE17CB9F24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.66",
            "matchCriteriaId" : "65F881E3-22B3-40D9-A896-51B13FD09EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.82",
            "matchCriteriaId" : "ED73C5EC-C8D3-4206-BCAA-0901F786DD98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B624B4D3-BCF4-4F95-B401-A88BEC3145A5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.82",
            "matchCriteriaId" : "93EF1D39-E084-40E9-86CF-C590763841A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7038703C-C79D-4DD4-8B16-E1A5FC6694C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax45_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.72",
            "matchCriteriaId" : "7932C371-669C-43C0-94A4-17BD4BDE8C74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax45:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B08BD69-CDCC-4CEB-B887-4E47D2B45D26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.72",
            "matchCriteriaId" : "D8B99059-161F-42D4-8AD8-478ABB7DE4B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C430976E-24C0-4EA7-BF54-F9C188AB9C01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.106",
            "matchCriteriaId" : "C0318AD0-52A7-490F-94C1-D07C97370D2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BAA74D7-36A1-4494-96A2-BD0D2D6BF22F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.106",
            "matchCriteriaId" : "34D7AF28-F117-4E31-AED8-A3179B1BE182"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B5A85C-3588-4263-B9AD-4E56D3F6CB16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.106",
            "matchCriteriaId" : "04513F08-329D-446F-A356-29074C1C0BEA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58EB0F2F-FB5C-47D9-9AE6-087AE517B3F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063013/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2020-0212",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063013/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-Routers-and-WiFi-Systems-PSV-2020-0212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.797",
      "lastModified" : "2024-11-21T06:00:39.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a RBW30 versiones anteriores a 2.6.2.2, RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3.2.17. 12, RBK752 versiones anteriores a 3.2.17.12, RBK753 versiones anteriores a 3.2.17.12, RBK753S versiones anteriores a 3.2.17.12, RBK754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.2",
            "matchCriteriaId" : "D8EF8E22-9DC7-4A42-99E0-A6822F647DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA73D22-970D-45F2-81F3-9576C04CCC94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "D8D90FF3-F5CE-43DF-ACF7-C64DBDCCA185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E1723D5F-FFDB-4E4D-80B7-4B28598D5895"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0D041B9F-37E4-48A9-9841-85EFFF7FA1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E6E6FDC1-BB17-454A-9B3A-5FB1F705C56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063011/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-WiFi-Routers-PSV-2020-0467",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063011/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-WiFi-Routers-PSV-2020-0467",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.857",
      "lastModified" : "2024-11-21T06:00:39.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an authenticated user. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK852 before 3.2.17.12, RBK852 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un usuario autenticado. Esto afecta a RBW30 versiones anteriores a 2.6.2.2, RBK852 versiones anteriores a 3.2.17.12, RBK852 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3.2.17. 12, RBK752 versiones anteriores a 3.2.17.12, RBK753 versiones anteriores a 3.2.17.12, RBK753S versiones anteriores a 3.2.17.12, RBK754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 5.2,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.1,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.2",
            "matchCriteriaId" : "D8EF8E22-9DC7-4A42-99E0-A6822F647DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA73D22-970D-45F2-81F3-9576C04CCC94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "D8D90FF3-F5CE-43DF-ACF7-C64DBDCCA185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E1723D5F-FFDB-4E4D-80B7-4B28598D5895"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0D041B9F-37E4-48A9-9841-85EFFF7FA1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E6E6FDC1-BB17-454A-9B3A-5FB1F705C56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063010/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-WiFi-Systems-PSV-2020-0466",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063010/Security-Advisory-for-Post-Authentication-Stack-Overflow-on-Some-WiFi-Systems-PSV-2020-0466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29076",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:13.920",
      "lastModified" : "2024-11-21T06:00:39.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12 y RBS850 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063015/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0485",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063015/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:14.013",
      "lastModified" : "2024-11-21T06:00:39.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBS40V before 2.6.2.4, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a RBW30 versiones anteriores a 2.6.2.2, RBS40V versiones anteriores a 2.6.2.4, RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3. 2.17.12, RBK752 versiones anteriores a 3.2.17.12, RBK753 versiones anteriores a 3.2.17.12, RBK753S versiones anteriores a 3.2.17.12, RBK754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.2",
            "matchCriteriaId" : "D8EF8E22-9DC7-4A42-99E0-A6822F647DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA73D22-970D-45F2-81F3-9576C04CCC94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.4",
            "matchCriteriaId" : "1CA086E1-DB23-4130-B746-D56F5A188C3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D05F28-47A2-46AE-992E-132B34F6194B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "D8D90FF3-F5CE-43DF-ACF7-C64DBDCCA185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E1723D5F-FFDB-4E4D-80B7-4B28598D5895"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0D041B9F-37E4-48A9-9841-85EFFF7FA1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E6E6FDC1-BB17-454A-9B3A-5FB1F705C56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063016/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0486",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063016/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0486",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29078",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:14.077",
      "lastModified" : "2024-11-21T06:00:40.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3.2.17.12, RBK752 versiones anteriores a 3. 2.17.12, RBK753 versiones anteriores a 3.2.17.12, RBK753S versiones anteriores a 3.2.17.12, RBK754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "D8D90FF3-F5CE-43DF-ACF7-C64DBDCCA185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E1723D5F-FFDB-4E4D-80B7-4B28598D5895"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0D041B9F-37E4-48A9-9841-85EFFF7FA1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E6E6FDC1-BB17-454A-9B3A-5FB1F705C56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063009/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0511",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063009/Security-Advisory-for-Pre-Authentication-Command-Injection-on-Some-WiFi-Systems-PSV-2020-0511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:14.157",
      "lastModified" : "2024-11-21T06:00:40.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by command injection by an unauthenticated attacker. This affects RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, and RBS850 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una inyección de comandos por parte de un atacante no autenticado. Esto afecta a RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12 y RBS850 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063020/Security-Advisory-for-Pre-Authentication-Command-Injection-Some-WiFi-Routers-PSV-2020-0470",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063020/Security-Advisory-for-Pre-Authentication-Command-Injection-Some-WiFi-Routers-PSV-2020-0470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29080",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:14.217",
      "lastModified" : "2024-11-21T06:00:40.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by password reset by an unauthenticated attacker. This affects RBK852 before 3.2.10.11, RBK853 before 3.2.10.11, RBR854 before 3.2.10.11, RBR850 before 3.2.10.11, RBS850 before 3.2.10.11, CBR40 before 2.5.0.10, R7000 before 1.0.11.116, R6900P before 1.3.2.126, R7900 before 1.0.4.38, R7960P before 1.4.1.66, R8000 before 1.0.4.66, R7900P before 1.4.1.66, R8000P before 1.4.1.66, RAX75 before 1.0.3.102, RAX80 before 1.0.3.102, and R7000P before 1.3.2.126."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un restablecimiento de contraseña por parte de un atacante no autenticado. Esto afecta al RBK852 versiones anteriores a 3.2.10.11, al RBK853 versiones anteriores a 3.2.10.11, al RBR854 versiones anteriores a 3.2.10.11, al RBR850 versiones anteriores a 3.2.10.11, al RBS850 versiones anteriores a 3.2.10.11, al CBR40 versiones anteriores a 2.5.0.10, al R7000 versiones anteriores a 1.0.11.116, al R6900P versiones anteriores a 1. 3.2.126, R7900 versiones anteriores a 1.0.4.38, R7960P versiones anteriores a 1.4.1.66, R8000 versiones anteriores a 1.0.4.66, R7900P versiones anteriores a 1.4.1.66, R8000P versiones anteriores a 1.4.1.66, RAX75 versiones anteriores a 1.0.3.102, RAX80 versiones anteriores a 1.0.3.102 y R7000P versiones anteriores a 1.3.2.126"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10.11",
            "matchCriteriaId" : "971A9859-C378-4DEC-9432-364930E662B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10.11",
            "matchCriteriaId" : "003185A9-52A8-42BB-A898-CE9F020AC301"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10.11",
            "matchCriteriaId" : "236C92E0-52FF-4639-819E-3EF0615639A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEB30F51-49A4-448E-971F-BC70B389554C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10.11",
            "matchCriteriaId" : "C0B05A46-1FD0-4F51-857C-DA4F838C1A87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10.11",
            "matchCriteriaId" : "0D842A92-6063-4CF5-B73B-2FD9FCE4225A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:cbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.0.10",
            "matchCriteriaId" : "2B05686E-7206-4E3B-BDBD-05C8EA6CABB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:cbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE0F7E9E-196C-4106-B1C9-C16FA5910A0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11.116",
            "matchCriteriaId" : "D9F1DAD0-F8B8-48D5-B571-C55636B274C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2.126",
            "matchCriteriaId" : "44801589-B49E-4B00-84DD-EFE47526C70C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.38",
            "matchCriteriaId" : "96390A31-03B8-477B-8710-F797CB44E741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.66",
            "matchCriteriaId" : "5B717BA8-81B7-470C-BF20-A4318D063D77"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091CEDB5-0069-4253-86D8-B9FE17CB9F24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.66",
            "matchCriteriaId" : "9F5A371E-41CA-4C5A-8DDC-3BD197F49096"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.66",
            "matchCriteriaId" : "65F881E3-22B3-40D9-A896-51B13FD09EAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.66",
            "matchCriteriaId" : "101031E9-479E-4F86-B83A-19376F8C8A45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EF872D-2537-4FEB-8799-499FC9D44339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.102",
            "matchCriteriaId" : "ADDF0077-E02C-4DDA-A84E-DF3A0237FC66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BAA74D7-36A1-4494-96A2-BD0D2D6BF22F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.102",
            "matchCriteriaId" : "81DF924F-FDA4-4588-B8A3-6F18ABBD4976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B5A85C-3588-4263-B9AD-4E56D3F6CB16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2.126",
            "matchCriteriaId" : "182AB5A2-5D07-4A5E-A863-4EE216D6F423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063007/Security-Advisory-for-Pre-authentication-Password-Reset-on-Some-Routers-and-WiFi-Systems-PSV-2019-0150",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063007/Security-Advisory-for-Pre-authentication-Password-Reset-on-Some-Routers-and-WiFi-Systems-PSV-2019-0150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29081",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:14.310",
      "lastModified" : "2024-11-21T06:00:40.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by a stack-based buffer overflow by an unauthenticated attacker. This affects RBW30 before 2.6.2.2, RBK852 before 3.2.17.12, RBK853 before 3.2.17.12, RBK854 before 3.2.17.12, RBR850 before 3.2.17.12, RBS850 before 3.2.17.12, RBK752 before 3.2.17.12, RBK753 before 3.2.17.12, RBK753S before 3.2.17.12, RBK754 before 3.2.17.12, RBR750 before 3.2.17.12, and RBS750 before 3.2.17.12."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por un desbordamiento del búfer en la región stack de la memoria por parte de un atacante no autenticado. Esto afecta a RBW30 versiones anteriores a 2.6.2.2, RBK852 versiones anteriores a 3.2.17.12, RBK853 versiones anteriores a 3.2.17.12, RBK854 versiones anteriores a 3.2.17.12, RBR850 versiones anteriores a 3.2.17.12, RBS850 versiones anteriores a 3.2.17. 12, RBK752 versiones anteriores a 3.2.17.12, RBK753 versiones anteriores a 3.2.17.12, RBK753S versiones anteriores a 3.2.17.12, RBK754 versiones anteriores a 3.2.17.12, RBR750 versiones anteriores a 3.2.17.12 y RBS750 versiones anteriores a 3.2.17.12"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.2",
            "matchCriteriaId" : "D8EF8E22-9DC7-4A42-99E0-A6822F647DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA73D22-970D-45F2-81F3-9576C04CCC94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "845C1FCC-F54B-452A-B121-1CD1A7867027"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "64DF0B69-B591-47B6-88C1-82544AA3DE9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "106863FF-9BE9-4C18-9A86-C458FF9EBDD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "D8D90FF3-F5CE-43DF-ACF7-C64DBDCCA185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E1723D5F-FFDB-4E4D-80B7-4B28598D5895"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0D041B9F-37E4-48A9-9841-85EFFF7FA1D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "E6E6FDC1-BB17-454A-9B3A-5FB1F705C56B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063012/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-WiFi-Systems-PSV-2020-0465",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063012/Security-Advisory-for-Pre-Authentication-Stack-Overflow-on-Some-WiFi-Systems-PSV-2020-0465",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29082",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T07:15:14.390",
      "lastModified" : "2024-11-21T06:00:40.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain NETGEAR devices are affected by disclosure of sensitive information. This affects RBW30 before 2.6.1.4, RBS40V before 2.6.1.4, RBK752 before 3.2.15.25, RBK753 before 3.2.15.25, RBK753S before 3.2.15.25, RBK754 before 3.2.15.25, RBR750 before 3.2.15.25, RBS750 before 3.2.15.25, RBK852 before 3.2.15.25, RBK853 before 3.2.15.25, RBK854 before 3.2.15.25, RBR850 before 3.2.15.25, and RBS850 before 3.2.15.25."
      }, {
        "lang" : "es",
        "value" : "Determinados dispositivos NETGEAR están afectados por una divulgación de información confidencial.&#xa0;Esto afecta a RBW30 versiones anteriores a 2.6.1.4, RBS40V versiones anteriores a 2.6.1.4, RBK752 versiones anteriores a 3.2.15.25, RBK753 versiones anteriores a 3.2.15.25, RBK753S versiones anteriores a 3.2.15.25, RBK754 versiones anteriores a 3.2.15.25, RBR750 versiones anteriores a 3.2.15.25, RBS750 versiones anteriores a 3.2.15.25, RBK852 versiones anteriores al 3.2.15.25, RBK853 versiones anteriores al 3.2.15.25, RBK854 versiones anteriores al 3.2.15.25, RBR850 versiones anteriores al 3.2.15.25 y RBS850 versiones anteriores al 3.2.15.25"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbw30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.4",
            "matchCriteriaId" : "6F388398-842E-40B1-9ACC-2D9A15D2BF2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbw30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA73D22-970D-45F2-81F3-9576C04CCC94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.1.4",
            "matchCriteriaId" : "E2240C06-A117-48E6-9576-C58F3314A160"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D05F28-47A2-46AE-992E-132B34F6194B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk752_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "EE271234-71E6-4F3A-8F39-DA86D1275331"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A45832BD-114D-42F1-B9F1-7532496D30A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "436BED04-0FD2-499B-9D42-F9E0AAA6CB97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AE9F2F-50F1-4917-BB21-FAEE6AACB14E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk753s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "F35DDDEC-A64B-400E-ABF8-E13F432BD261"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk753s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "192647CA-5BFC-4021-A91D-7CB8761FA137"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk754_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "13C16392-F041-4A90-90C0-C291C0CD545E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk754:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BF464E-63DB-4AC4-9B5D-E3ECDC000305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "905C4D26-8575-429C-B1D2-FC35C773B129"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "F60A549C-0D76-4A83-BBCD-C1D04075809B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk852_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "7300226F-8997-4142-8DAC-682F0E313072"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk852:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F257FE-31CE-4F74-829D-29407D74ADF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk853_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "A553C5A2-EB80-4314-A623-8F489A4E74E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk853:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479CEAD-3B87-4993-80C8-1AE59242CFA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk854_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "C76041B8-E676-4E29-BE18-E1B9C4735D5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk854:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01D12702-8B86-419C-8636-1259FD2D5844"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "86A9DFB9-8429-45DB-84E8-30F37535145E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.15.25",
            "matchCriteriaId" : "B4FC4E2F-711C-432A-91FE-27CB1EE41A33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000063005/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2020-0037",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.netgear.com/000063005/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-WiFi-Systems-PSV-2020-0037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23361",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-23T11:15:12.813",
      "lastModified" : "2023-11-07T03:30:52.673",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27309",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.337",
      "lastModified" : "2024-11-21T05:57:46.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clansphere CMS 2011.4 allows unauthenticated reflected XSS via \"module\" parameter."
      }, {
        "lang" : "es",
        "value" : "Clansphere CMS versión 2011.4, permite un ataque de tipo XSS reflejado no autenticado por medio del parámetro \"module\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csphere:clansphere:2011.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DA5EF3-3208-4402-857C-822FD6BEF2A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Clansphere%202011.4%20%22module%22%20xss.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Clansphere%202011.4%20%22module%22%20xss.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27310",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.413",
      "lastModified" : "2024-11-21T05:57:46.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Clansphere CMS 2011.4 allows unauthenticated reflected XSS via \"language\" parameter."
      }, {
        "lang" : "es",
        "value" : "Clansphere CMS versión 2011.4, permite un ataque de tipo XSS reflejado no autenticado por medio del parámetro \"language\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:csphere:clansphere:2011.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0DA5EF3-3208-4402-857C-822FD6BEF2A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Clansphere%202011.4%20%22language%22%20xss.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Clansphere%202011.4%20%22language%22%20xss.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27526",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.477",
      "lastModified" : "2024-11-21T05:58:09.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the \"page\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en DynPG versión 4.9.2, permite a atacantes remotos inyectar JavaScript por medio del parámetro \"page\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynpg:dynpg:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FEC095-5645-4356-957A-AF65E08F02C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20page%20parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20page%20parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27527",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.540",
      "lastModified" : "2024-11-21T05:58:09.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the \"valueID\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en DynPG versión 4.9.2, permite a atacantes remotos inyectar JavaScript por medio del parámetro \"valueID\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynpg:dynpg:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FEC095-5645-4356-957A-AF65E08F02C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20valueID%20parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20valueID%20parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27528",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.587",
      "lastModified" : "2024-11-21T05:58:09.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the \"refID\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en DynPG versión 4.9.2, permite a atacantes remotos inyectar JavaScript por medio del parámetro \"refID\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynpg:dynpg:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FEC095-5645-4356-957A-AF65E08F02C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20refID%20parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20refID%20parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27529",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.650",
      "lastModified" : "2024-11-21T05:58:10.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the \"limit\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en DynPG versión 4.9.2, permite a atacantes remotos inyectar JavaScript por medio del parámetro \"limit\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynpg:dynpg:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FEC095-5645-4356-957A-AF65E08F02C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20limit%20parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20limit%20parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27530",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.727",
      "lastModified" : "2024-11-21T05:58:10.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allow remote attacker to inject javascript via URI in /index.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en DynPG versión 4.9.2, permite a un atacante remoto inyectar javascript por medio del URI en el archivo /index.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynpg:dynpg:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FEC095-5645-4356-957A-AF65E08F02C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20index.php%20URI",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20index.php%20URI",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27531",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.790",
      "lastModified" : "2024-11-21T05:58:10.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in DynPG version 4.9.2 allows remote attackers to inject JavaScript via the \"query\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en DynPG versión 4.9.2, permite a atacantes remotos inyectar JavaScript por medio del parámetro \"query\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynpg:dynpg:4.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03FEC095-5645-4356-957A-AF65E08F02C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20query%20parameter",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/DynPG%204.9.2%20XSS%20via%20query%20parameter",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-23T14:15:13.837",
      "lastModified" : "2024-11-21T05:58:56.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dolphin CMS 7.4.2 is vulnerable to stored XSS via the Page Builder \"width\" parameter."
      }, {
        "lang" : "es",
        "value" : "Dolphin CMS versión 7.4.2, es vulnerable a un ataque de tipo XSS almacenado por medio del parámetro \"width\" de Page Builder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boonex:dolphin:7.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A898772-BD51-4129-813B-2CCF6E3B63A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1suqBvuoE-3U2QmWpCOXXV4_5rEu_XGJL/view?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49670",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://drive.google.com/file/d/1suqBvuoE-3U2QmWpCOXXV4_5rEu_XGJL/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21376",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T16:15:14.173",
      "lastModified" : "2024-11-21T05:48:13.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 loads various information about the current user such as their id, name and the groups they are in, and these are available on the main webclient pages. This represents an information exposure vulnerability. Some additional information being loaded is not used by the webclient and is being removed in this release. This is fixed in version 5.9.0."
      }, {
        "lang" : "es",
        "value" : "OMERO.web es un software de código abierto basado en Django para administrar imágenes microscópicas.&#xa0;OMERO.web versiones anteriores a 5.9.0 carga diversa información sobre el usuario actual, como su identificación, nombre y los grupos en los que se encuentra, y estos están disponibles en las páginas principales del cliente web.&#xa0;Esto representa una vulnerabilidad de exposición de la información.&#xa0;Parte de la información adicional que se está cargando no es usada por el cliente web y se eliminará en esta versión.&#xa0;Esto es corregido en versión 5.9.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmicroscopy:omero.web:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "FE6BE44A-DB7D-4846-BEBE-9C96D2294B94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/security/advisories/GHSA-gfp2-w5jm-955q",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/omero-web/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openmicroscopy.org/security/advisories/2021-SV1/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/security/advisories/GHSA-gfp2-w5jm-955q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/omero-web/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openmicroscopy.org/security/advisories/2021-SV1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21377",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T16:15:14.283",
      "lastModified" : "2024-11-21T05:48:13.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OMERO.web is open source Django-based software for managing microscopy imaging. OMERO.web before version 5.9.0 supports redirection to a given URL after performing login or switching the group context. These URLs are not validated, allowing redirection to untrusted sites. OMERO.web 5.9.0 adds URL validation before redirecting. External URLs are not considered valid, unless specified in the omero.web.redirect_allowed_hosts setting."
      }, {
        "lang" : "es",
        "value" : "OMERO.web es un software de código abierto basado en Django para administrar imágenes microscópicas.&#xa0;OMERO.web versiones anteriores a 5.9.0 admite el redireccionamiento a una URL determinada después de iniciar sesión o cambiar el contexto del grupo.&#xa0;Estas URL no están comprobadas, permitiendo un redireccionamiento a sitios que no son confiables.&#xa0;OMERO.web versión 5.9.0 agrega comprobación de URL antes de redireccionar.&#xa0;Las URL Externas no se consideran válidas, a menos que se especifiquen en la configuración omero.web.redirect_allowed_hosts"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmicroscopy:omero.web:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.9.0",
            "matchCriteriaId" : "FE6BE44A-DB7D-4846-BEBE-9C96D2294B94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/security/advisories/GHSA-g4rf-pc26-6hmr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/omero-web/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openmicroscopy.org/security/advisories/2021-SV2/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/blob/master/CHANGELOG.md#590-march-2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/commit/952f8e5d28532fbb14fb665982211329d137908c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ome/omero-web/security/advisories/GHSA-g4rf-pc26-6hmr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/omero-web/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openmicroscopy.org/security/advisories/2021-SV2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20219",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-23T17:15:13.607",
      "lastModified" : "2024-11-21T05:46:09.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability was found in n_tty_receive_char_special in drivers/tty/n_tty.c of the Linux kernel. In this flaw a local attacker with a normal user privilege could delay the loop (due to a changing ldata->read_head, and a missing sanity check) and cause a threat to the system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de denegación de servicio en la función n_tty_receive_char_special en el archivo drivers/tty/n_tty.c del kernel de Linux.&#xa0;En este fallo, un atacante local con un privilegio de usuario normal podría retrasar el ciclo (debido a un cambio de ldata-)read_head, y una falta de comprobación de saneamiento) y causar una amenaza a la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-697"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.18",
            "matchCriteriaId" : "3249552B-A101-45A3-9F46-0E0F0BDBA9E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923738",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20222",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-23T17:15:13.687",
      "lastModified" : "2024-11-21T05:46:09.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in keycloak. The new account console in keycloak can allow malicious code to be executed using the referrer URL. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en keycloak.&#xa0;La nueva consola de cuentas en keycloak puede permitir que sea ejecutado un código malicioso usando la URL de referencia.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:keycloak:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "13.0.0",
            "matchCriteriaId" : "3A84FF20-46FA-40D4-AA53-29DA6941BD3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924606",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20227",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-23T17:15:13.747",
      "lastModified" : "2024-11-21T05:46:10.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in SQLite's SELECT query functionality (src/select.c). This flaw allows an attacker who is capable of running SQL queries locally on the SQLite database to cause a denial of service or possible code execution by triggering a use-after-free. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la funcionalidad de consulta SELECT de SQLite (src/select.c).&#xa0;Este fallo permite a un atacante que es capaz de ejecutar consultas SQL localmente en la base de datos SQLite causar una denegación de servicio o una posible ejecución de código desencadenando un uso de la memoria previamente liberada.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sqlite:sqlite:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.33.0",
            "versionEndExcluding" : "3.34.1",
            "matchCriteriaId" : "4323F972-6CFE-4E59-A82B-FB5621827BE3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.1.0",
            "versionEndIncluding" : "12.0.4.0.0",
            "matchCriteriaId" : "F28B94B3-D940-4B1C-9E72-F061515D24F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECC00750-1DBF-401F-886E-E0E65A277409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_oracle_database:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C376719-16BB-4485-AE6F-D66FC0A017F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.26",
            "matchCriteriaId" : "EED6C8C2-F986-4CFD-A343-AD2340F850F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924886",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-04",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-40",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210423-0010/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sqlite.org/releaselog/3_34_1.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924886",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210423-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.sqlite.org/releaselog/3_34_1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20270",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-23T17:15:13.827",
      "lastModified" : "2024-11-21T05:46:15.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only contains the \"exception\" keyword."
      }, {
        "lang" : "es",
        "value" : "Un bucle infinito en SMLLexer en Pygments versiones 1.5 hasta 2.7.3, puede conllevar a una denegación de servicio cuando se lleva a cabo el resaltado de sintaxis de un archivo fuente de Standard ML (SML), como es demostrado por la entrada que solo contiene la palabra clave \"exception\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pygments:pygments:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.5",
            "versionEndIncluding" : "2.7.3",
            "matchCriteriaId" : "EDBA76D7-FE9C-4C7F-9926-36D6A26F9713"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F87326E-0B56-4356-A889-73D026DB1D4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932D137F-528B-4526-9A89-CD59FA1AB0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack_platform:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542B31BD-5767-4B33-9201-40548D1223B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749804DA-4B27-492A-9ABA-6BB562A6B3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1922136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23274",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T17:15:13.903",
      "lastModified" : "2024-11-21T05:51:28.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Config UI component of TIBCO Software Inc.'s TIBCO API Exchange Gateway and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric contains a vulnerability that theoretically allows an unauthenticated attacker with network access to execute a clickjacking attack on the affected system. A successful attack using this vulnerability does not require human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO API Exchange Gateway: versions 2.3.3 and below and TIBCO API Exchange Gateway Distribution for TIBCO Silver Fabric: versions 2.3.3 and below."
      }, {
        "lang" : "es",
        "value" : "El componente Config UI de TIBCO API Exchange Gateway de TIBCO Software Inc. y TIBCO API Exchange Gateway Distribution para TIBCO Silver Fabric, contiene una vulnerabilidad que teóricamente permite a un atacante no autenticado con acceso a la red ejecutar un ataque de clickjacking en el sistema afectado.&#xa0;Un ataque con éxito que use esta vulnerabilidad no requiere la interacción humana de una persona diferente del atacante.&#xa0;Las versiones afectadas son TIBCO API Exchange Gateway de TIBCO Software Inc.: versiones 2.3.3 y anteriores y TIBCO API Exchange Gateway Distribution para TIBCO Silver Fabric: versiones 2.3.3 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:api_exchange_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "FC95D668-5D8F-4E67-BD65-34A6DB32418E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:api_exchange_gateway_distribution:*:*:*:*:*:silver_fabric:*:*",
            "versionEndIncluding" : "2.3.3",
            "matchCriteriaId" : "47B681F1-CDB8-4CB3-98A8-FCF134B32C6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-23-2021-tibco-api-exchange-gateway",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/03/tibco-security-advisory-march-23-2021-tibco-api-exchange-gateway",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23362",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-23T17:15:14.027",
      "lastModified" : "2024-11-21T05:51:34.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package hosted-git-info before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity."
      }, {
        "lang" : "es",
        "value" : "El paquete hosted-git-info anterior a la versión 3.0.8 es vulnerable a la Denegación de Servicio por Expresión Regular (ReDoS) a través de la expresión regular shortcutMatch en la función fromUrl en index.js. La expresión regular afectada muestra una complejidad de tiempo polinómica en el peor de los casos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npmjs:hosted-git-info:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.8.9",
            "matchCriteriaId" : "022F4E7E-F168-4658-AE21-A254CB3B4E04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npmjs:hosted-git-info:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "55697D47-8531-4FBD-AEF5-6E9C0CDF6A83"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commit/bede0dc38e1785e732bf0a48ba6f81a4a908eba3",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commits/v2",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1088356",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HOSTEDGITINFO-1088355",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commit/bede0dc38e1785e732bf0a48ba6f81a4a908eba3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/npm/hosted-git-info/commits/v2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1088356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HOSTEDGITINFO-1088355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21401",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T18:15:13.160",
      "lastModified" : "2024-11-21T05:48:16.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nanopb is a small code-size Protocol Buffers implementation in ansi C. In Nanopb before versions 0.3.9.8 and 0.4.5, decoding a specifically formed message can cause invalid `free()` or `realloc()` calls if the message type contains an `oneof` field, and the `oneof` directly contains both a pointer field and a non-pointer field. If the message data first contains the non-pointer field and then the pointer field, the data of the non-pointer field is incorrectly treated as if it was a pointer value. Such message data rarely occurs in normal messages, but it is a concern when untrusted data is parsed. This has been fixed in versions 0.3.9.8 and 0.4.5. See referenced GitHub Security Advisory for more information including workarounds."
      }, {
        "lang" : "es",
        "value" : "Nanopb es una implementación de Protocol Buffers de tamaño de código pequeño en ansi C. En Nanopb versiones anteriores a 0.3.9.8 y 0.4.5, la decodificación de un mensaje formado específicamente puede causar llamadas \"free()\" o \"realloc()\" no válidas si el tipo de mensaje contiene un campo \"oneof\", y el \"oneof\" contiene directamente un campo pointer como un campo non-pointer.&#xa0;Si los datos del mensaje contienen primero el campo non-pointer y luego el campo pointer, los datos del campo non-pointer son tratados incorrectamente como si fuera un valor pointer.&#xa0;Estos datos de mensajes raramente ocurren en mensajes normales, pero es una preocupación cuando son analizados datos que no son confiables.&#xa0;Esto ha sido corregido en versiones 0.3.9.8 y 0.4.5.&#xa0;Consulte el Aviso de Seguridad de GitHub al que se hace referencia para obtener más información, incluyendo las soluciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nanopb_project:nanopb:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.3.9.8",
            "matchCriteriaId" : "A39AC3AB-38B5-453C-B7A8-AC4B55CA26B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nanopb_project:nanopb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.4.0",
            "versionEndExcluding" : "0.4.5",
            "matchCriteriaId" : "751F562A-CABC-4E22-A0A3-12BF6171B6AE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nanopb/nanopb/blob/c9124132a604047d0ef97a09c0e99cd9bed2c818/CHANGELOG.txt#L1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/commit/e2f0ccf939d9f82931d085acb6df8e9a182a4261",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/issues/647",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/security/advisories/GHSA-7mv5-5mxh-qg88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/blob/c9124132a604047d0ef97a09c0e99cd9bed2c818/CHANGELOG.txt#L1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/commit/e2f0ccf939d9f82931d085acb6df8e9a182a4261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/issues/647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nanopb/nanopb/security/advisories/GHSA-7mv5-5mxh-qg88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3444",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2021-03-23T18:15:13.627",
      "lastModified" : "2024-11-21T06:21:32.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The bpf verifier in the Linux kernel did not properly handle mod32 destination register truncation when the source register was known to be 0. A local attacker with the ability to load bpf programs could use this gain out-of-bounds reads in kernel memory leading to information disclosure (kernel memory), and possibly out-of-bounds writes that could potentially lead to code execution. This issue was addressed in the upstream kernel in commit 9b00f1b78809 (\"bpf: Fix truncation handling for mod32 dst reg wrt zero\") and in Linux stable kernels 5.11.2, 5.10.19, and 5.4.101."
      }, {
        "lang" : "es",
        "value" : "El comprobador bpf en el kernel de Linux no manejó apropiadamente el truncamiento del registro de destino mod32 cuando se sabía que el registro de origen era 0. Un atacante local con la habilidad de cargar programas bpf podría usar esta ganancia para lecturas fuera de límites en la memoria del kernel que conllevan a una divulgación de información (memoria del kernel) y, posiblemente, escrituras fuera de límites que podrían conllevar a una ejecución de código.&#xa0;Este problema se solucionó en el kernel ascendente en el commit 9b00f1b78809 (\"bpf: Fix truncation handling for mod32 dst reg wrt zero\") y en los kernels estables de Linux versiones 5.11.2, 5.10.19 y 5.4.101"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-681"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.101",
            "matchCriteriaId" : "36030D2B-5E11-4302-B7B5-DA19CBB32FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.10.19",
            "matchCriteriaId" : "9BBBC05B-CC76-44E3-976E-E99B2C36EC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.2",
            "matchCriteriaId" : "30C037BA-454E-4E10-A31F-E7DDBE066599"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*",
            "matchCriteriaId" : "815D70A8-47D3-459C-A32C-9FEACA0659D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "902B8056-9E37-443B-8905-8AA93E2447FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164950/Kernel-Live-Patch-Security-Notice-LSN-0082-1.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/23/2",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9b00f1b78809",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0006/",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/23/2",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162117/Kernel-Live-Patch-Security-Notice-LSN-0075-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164950/Kernel-Live-Patch-Security-Notice-LSN-0082-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/23/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=9b00f1b78809",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/10/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210416-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/23/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21402",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T20:15:13.120",
      "lastModified" : "2024-11-21T05:48:17.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from a Jellyfin server's file system. This issue is more prevalent when Windows is used as the host OS. Servers that are exposed to the public Internet are potentially at risk. This is fixed in version 10.7.1. As a workaround, users may be able to restrict some access by enforcing strict security permissions on their filesystem, however, it is recommended to update as soon as possible."
      }, {
        "lang" : "es",
        "value" : "Jellyfin es un sistema multimedia de software libre.&#xa0;En Jellyfin versiones anteriores a 10.7.1, con determinados endpoints, las peticiones bien diseñadas permitirán la lectura de archivos arbitrarios desde el sistema de archivos de un servidor Jellyfin.&#xa0;Este problema es más frecuente cuando es usado Windows como el Sistema Operativo host.&#xa0;Unos servidores que están expuestos a la Internet pública están potencialmente en riesgo.&#xa0;Esto es corregido en versión 10.7.1.&#xa0;Como solución alternativa, los usuarios pueden ser capaces de restringir algunos accesos imponiendo permisos de seguridad estrictos en su sistema de archivos; sin embargo, se recomienda actualizar lo antes posible"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.7.1",
            "matchCriteriaId" : "F1DD62BC-C2DF-4847-8580-CEA58D17D528"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jellyfin/jellyfin/commit/0183ef8e89195f420c48d2600bc0b72f6d3a7fd7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/releases/tag/v10.7.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-wg4c-c9g9-rxhx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/commit/0183ef8e89195f420c48d2600bc0b72f6d3a7fd7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/releases/tag/v10.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-wg4c-c9g9-rxhx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27908",
      "sourceIdentifier" : "security@mautic.org",
      "published" : "2021-03-23T20:15:13.310",
      "lastModified" : "2024-11-21T05:58:45.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are used in publicly facing parts of the application."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones anteriores a Mautic 3.3.2, parámetros secretos, como las credenciales de la base de datos, podían ser expuestos públicamente por un usuario administrador autorizado aprovechando la sintaxis de los parámetros Symfony en cualquiera de los campos de texto libre en la configuración de Mautic que son usadas en las partes de la aplicación de cara al público"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@mautic.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@mautic.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.2",
            "matchCriteriaId" : "D8C98868-2DB4-48C5-8238-3AA1FA7B936B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mautic/mautic/security/advisories/GHSA-4hjq-422q-4vpx",
        "source" : "security@mautic.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mautic/mautic/security/advisories/GHSA-4hjq-422q-4vpx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3392",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-23T20:15:13.440",
      "lastModified" : "2024-11-21T06:21:24.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free flaw was found in the MegaRAID emulator of QEMU. This issue occurs while processing SCSI I/O requests in the case of an error mptsas_free_request() that does not dequeue the request object 'req' from a pending requests queue. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. Versions between 2.10.0 and 5.2.0 are potentially affected."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de uso de la memoria previamente liberada en el emulador MegaRAID de QEMU.&#xa0;Este problema ocurre mientras se procesan peticiones de I/O SCSI en el caso de un error en la función mptsas_free_request() que no saca de la cola el objeto de petición \"req\" desde una cola de peticiones pendientes.&#xa0;Este fallo permite a un usuario invitado privilegiado bloquear el proceso QEMU en el host, resultando en una denegación de servicio.&#xa0;Las versiones entre 2.10.0 y 5.2.0 están potencialmente afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.10.0",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "9FDF6BE3-9F97-46C6-99E7-9BBF7DC9242A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.launchpad.net/qemu/+bug/1914236",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924042",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.launchpad.net/qemu/+bug/1914236",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924042",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28099",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2021-03-23T21:15:13.557",
      "lastModified" : "2024-11-21T05:59:05.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated."
      }, {
        "lang" : "es",
        "value" : "En Netflix OSS Hollow, dado que Files.exists(parent) se ejecuta antes de crear los directorios, un atacante puede crear previamente estos directorios con amplios permisos.&#xa0;Además, dado que se utiliza una fuente no segura de aleatoriedad, los nombres de archivo que se crearán se pueden calcular de forma determinista"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netflix:hollow:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E659DA4-A87C-478F-8A1E-F592AA631374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2021-001.md",
        "source" : "security-report@netflix.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2021-001.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28100",
      "sourceIdentifier" : "security-report@netflix.com",
      "published" : "2021-03-23T21:15:13.650",
      "lastModified" : "2024-11-21T05:59:05.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process."
      }, {
        "lang" : "es",
        "value" : "Priam usa File.createTempFile, que otorga los permisos en ese archivo -rw-r--r--.&#xa0;Un atacante con acceso de lectura al sistema de archivos local puede leer cualquier cosa escrita allí por el proceso Priam"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netflix:priam:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D31E11-583A-4310-906E-B9C4115DB5E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2021-002.md",
        "source" : "security-report@netflix.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Netflix/security-bulletins/blob/master/advisories/nflx-2021-002.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28817",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:13.713",
      "lastModified" : "2024-11-21T06:00:15.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions 8.5.1 and below and TIBCO Rendezvous Developer Edition: versions 8.5.1 and below."
      }, {
        "lang" : "es",
        "value" : "El componente de instalación de Windows de TIBCO Rendezvous y TIBCO Rendezvous Developer Edition de TIBCO Software Inc. contiene una vulnerabilidad que teóricamente permite que un atacante poco privilegiado y con acceso local en algunas versiones del sistema operativo Windows inserte software malicioso.&#xa0;Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad es debido a la falta de restricciones de acceso a determinados archivos y/o carpetas en la instalación.&#xa0;Las versiones afectadas son TIBCO Rendezvous de TIBCO Software Inc.: versiones 8.5.1 y por debajo y TIBCO Rendezvous Developer Edition: versiones 8.5.1 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "51D2D5C7-FF22-45C6-A989-FCA180FA1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rendezvous:*:*:*:*:developer:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "32F2BA6C-5116-42CC-9C7D-8EA76C2F8179"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28818",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:13.823",
      "lastModified" : "2024-11-21T06:00:15.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API, and Rendezvous .Net API components of TIBCO Software Inc.'s TIBCO Rendezvous and TIBCO Rendezvous Developer Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Rendezvous: versions 8.5.1 and below and TIBCO Rendezvous Developer Edition: versions 8.5.1 and below."
      }, {
        "lang" : "es",
        "value" : "Los componentes Rendezvous Routing Daemon (rvrd), Rendezvous Secure Routing Daemon (rvrsd), Rendezvous Secure Daemon (rvsd), Rendezvous Cache (rvcache), Rendezvous Secure C API, Rendezvous Java API y Rendezvous .Net API de TIBCO Software Inc. TIBCO Rendezvous y TIBCO Rendezvous Developer Edition contienen una vulnerabilidad que teóricamente permite que un atacante poco privilegiado y con acceso local en el sistema operativo Windows inserte software malicioso.&#xa0;Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad es debido a que el componente afectado busca artefactos en tiempo de ejecución fuera de la jerarquía de instalación.&#xa0;Las versiones afectadas son TIBCO Rendezvous de TIBCO Software Inc.: versiones 8.5.1 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "51D2D5C7-FF22-45C6-A989-FCA180FA1C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:rendezvous:*:*:*:*:developer:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "32F2BA6C-5116-42CC-9C7D-8EA76C2F8179"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28819",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:13.900",
      "lastModified" : "2024-11-21T06:00:15.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.5.0 and below, TIBCO FTL - Developer Edition: versions 6.5.0 and below, and TIBCO FTL - Enterprise Edition: versions 6.5.0 and below."
      }, {
        "lang" : "es",
        "value" : "El componente de instalación de Windows de TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition y TIBCO FTL - Enterprise Edition, de TIBCO Software Inc, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso local en algunas versiones del sistema operativo Windows para insertar software malicioso.&#xa0;Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad es debido a la falta de restricciones de acceso a determinados archivos y/o carpetas de la instalación.&#xa0;Las versiones afectadas son TIBCO FTL - Community Edition de TIBCO Software Inc.: versiones 6.5.0 y por debajo, TIBCO FTL - Developer Edition: versiones 6.5.0 y por debajo, y TIBCO FTL - Enterprise Edition: versiones 6.5.0 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ftl:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "7503FC52-AACB-4AC5-BBF3-EFF6C143880C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ftl:*:*:*:*:developer:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "DC98906B-85CF-40A1-88C8-EF7C1DA1C013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ftl:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "2A5F45B8-6034-4F52-9868-B354867C5503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28820",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:13.963",
      "lastModified" : "2024-11-21T06:00:15.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The FTL Server (tibftlserver), FTL C API, FTL Golang API, FTL Java API, and FTL .Net API components of TIBCO Software Inc.'s TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition, and TIBCO FTL - Enterprise Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO FTL - Community Edition: versions 6.5.0 and below, TIBCO FTL - Developer Edition: versions 6.5.0 and below, and TIBCO FTL - Enterprise Edition: versions 6.5.0 and below."
      }, {
        "lang" : "es",
        "value" : "Los componentes FTL Server (tibftlserver), FTL C API, FTL Golang API, FTL Java API y FTL .Net API de TIBCO Software Inc. TIBCO FTL - Community Edition, TIBCO FTL - Developer Edition y TIBCO FTL - Enterprise Edition contienen una vulnerabilidad que teóricamente permite que un atacante poco privilegiado y con acceso local en el sistema operativo Windows inserte software malicioso.&#xa0;Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad es debido a que el componente afectado busca artefactos en tiempo de ejecución fuera de la jerarquía de instalación.&#xa0;Las versiones afectadas son TIBCO FTL - Community Edition de TIBCO Software Inc.: versiones 6.5.0 y por debajo, TIBCO FTL - Developer Edition: versiones 6.5.0 y por debajo, y TIBCO FTL - Enterprise Edition: versiones 6.5.0 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ftl:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "7503FC52-AACB-4AC5-BBF3-EFF6C143880C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ftl:*:*:*:*:developer:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "DC98906B-85CF-40A1-88C8-EF7C1DA1C013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:ftl:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "2A5F45B8-6034-4F52-9868-B354867C5503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28821",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:14.040",
      "lastModified" : "2024-11-21T06:00:16.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.5.1 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.5.1 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.5.1 and below."
      }, {
        "lang" : "es",
        "value" : "El componente de Instalación de Windows de TIBCO Enterprise Message Service de TIBCO Software Inc., TIBCO Enterprise Message Service - Community Edition y TIBCO Enterprise Message Service - Developer Edition, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso local en algunas versiones del Sistema operativo Windows insertar software malicioso. Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente. Esta vulnerabilidad es debido a una falta de restricciones de acceso a determinados archivos y/o carpetas en la instalación. Las versiones afectadas son TIBCO Enterprise Message Service de TIBCO Software Inc.: versiones 8.5.1 y por debajo, TIBCO Enterprise Message Service - Community Edition: versiones 8.5.1 y por debajo, y TIBCO Enterprise Message Service - Developer Edition: versiones 8.5.1 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:-:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "135D2A98-8329-4063-9F88-5A72809DE63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:community:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "5C9B40AC-20D4-4F94-B00B-011A31D6AF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:developer:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "4953B7E5-DB02-4CB0-B60A-21A05B4FB628"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28822",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:14.120",
      "lastModified" : "2024-11-21T06:00:16.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration generator (tibemsconf2json), and Enterprise Message Service C API components of TIBCO Software Inc.'s TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, and TIBCO Enterprise Message Service - Developer Edition contain a vulnerability that theoretically allows a low privileged attacker with local access on the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from the affected component searching for run-time artifacts outside of the installation hierarchy. Affected releases are TIBCO Software Inc.'s TIBCO Enterprise Message Service: versions 8.5.1 and below, TIBCO Enterprise Message Service - Community Edition: versions 8.5.1 and below, and TIBCO Enterprise Message Service - Developer Edition: versions 8.5.1 and below."
      }, {
        "lang" : "es",
        "value" : "Los componentes Enterprise Message Service Server (tibemsd), Enterprise Message Service Central Administration (tibemsca), Enterprise Message Service JSON configuration generator (tibemsconf2json), y Enterprise Message Service C API de TIBCO Software Inc. TIBCO Enterprise Message Service, TIBCO Enterprise Message Service - Community Edition, y TIBCO Enterprise Message Service - Developer Edition, contienen una vulnerabilidad que teóricamente permite a un atacante poco privilegiado y con acceso local en el sistema operativo Windows insertar software malicioso. Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente. Esta vulnerabilidad es debido a que el componente afectado busca artefactos en tiempo de ejecución fuera de la jerarquía de instalación. Las versiones afectadas son TIBCO Enterprise Message Service de TIBCO Software Inc.: versiones 8.5.1 y por debajo, TIBCO Enterprise Message Service - Community Edition: versiones 8.5.1 y por debajo, y TIBCO Enterprise Message Service - Developer Edition: versiones 8.5.1 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:-:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "135D2A98-8329-4063-9F88-5A72809DE63B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:community:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "5C9B40AC-20D4-4F94-B00B-011A31D6AF31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:enterprise_message_service:*:*:developer:*:*:*:*:*",
            "versionEndIncluding" : "8.5.1",
            "matchCriteriaId" : "4953B7E5-DB02-4CB0-B60A-21A05B4FB628"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28823",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:14.180",
      "lastModified" : "2024-11-21T06:00:16.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO eFTL - Community Edition, TIBCO eFTL - Developer Edition, and TIBCO eFTL - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO eFTL - Community Edition: versions 6.5.0 and below, TIBCO eFTL - Developer Edition: versions 6.5.0 and below, and TIBCO eFTL - Enterprise Edition: versions 6.5.0 and below."
      }, {
        "lang" : "es",
        "value" : "El componente de instalación de Windows de TIBCO eFTL - Community Edition de TIBCO Software Inc., TIBCO eFTL - Developer Edition y TIBCO eFTL - Enterprise Edition, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso local en algunas versiones del sistema operativo Windows insertar software malicioso.&#xa0;Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad es debido a una falta de restricciones de acceso a determinados archivos y/o carpetas en la instalación.&#xa0;Las versiones afectadas son TIBCO eFTL - Community Edition de TIBCO Software Inc.: versiones 6.5.0 y por debajo, TIBCO eFTL - Developer Edition: versiones 6.5.0 y por debajo, y TIBCO eFTL - Enterprise Edition: versiones 6.5.0 y por debajo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:eftl:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "FCA4319C-1790-426D-96D8-8BA8DF72DBC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:eftl:*:*:*:*:developer:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "6E4A78A7-5FAE-4B70-8EC5-3D409B833D72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:eftl:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "CB170CBF-8BA5-45D1-B540-BD124AD8E32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28824",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-03-23T21:15:14.260",
      "lastModified" : "2024-11-21T06:00:16.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition, TIBCO ActiveSpaces - Developer Edition, and TIBCO ActiveSpaces - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO ActiveSpaces - Community Edition: versions 4.5.0 and below, TIBCO ActiveSpaces - Developer Edition: versions 4.5.0 and below, and TIBCO ActiveSpaces - Enterprise Edition: versions 4.5.0 and below."
      }, {
        "lang" : "es",
        "value" : "El componente de Instalación de Windows de TIBCO ActiveSpaces - Community Edition de TIBCO Software Inc., TIBCO ActiveSpaces - Developer Edition y TIBCO ActiveSpaces - Enterprise Edition, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso local en algunas versiones del sistema operativo Windows insertar software malicioso.&#xa0;Se puede abusar del componente afectado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad es debido a una falta de restricciones de acceso a determinados archivos y/o carpetas en la instalación.&#xa0;Las versiones afectadas son TIBCO ActiveSpaces - Community Edition de TIBCO Software Inc.: versiones 4.5.0 y por debajo, TIBCO ActiveSpaces - Developer Edition: versiones 4.5.0 y por debajo, y TIBCO ActiveSpaces - Enterprise Edition: versiones 4.5"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:activespaces:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "4.6.0",
            "matchCriteriaId" : "5369E364-E23B-4DE0-9710-FDD1D7CDEEC3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:activespaces:*:*:*:*:developer:*:*:*",
            "versionEndExcluding" : "4.6.0",
            "matchCriteriaId" : "DBD505A8-5DD9-4D8F-A9D8-1331D4A8D4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:activespaces:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "4.6.0",
            "matchCriteriaId" : "30110FB4-92BB-4DAE-9AF1-374DFDD6A157"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3409",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-23T21:15:14.697",
      "lastModified" : "2024-11-21T06:21:26.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The patch for CVE-2020-17380/CVE-2020-25085 was found to be ineffective, thus making QEMU vulnerable to the out-of-bounds read/write access issues previously found in the SDHCI controller emulation code. This flaw allows a malicious privileged guest to crash the QEMU process on the host, resulting in a denial of service or potential code execution. QEMU up to (including) 5.2.0 is affected by this."
      }, {
        "lang" : "es",
        "value" : "Se detectó que el parche para CVE-2020-17380/CVE-2020-25085 era ineficaz, por lo que QEMU era vulnerable a problemas de acceso de lectura y escritura fuera de límites que se encontraban anteriormente en el código de emulación del controlador SDHCI.&#xa0;Este fallo permite a un invitado privilegiado malicioso bloquear el proceso QEMU en el host, resultando en una denegación de servicio o una posible ejecución de código.&#xa0;QEMU versiones hasta (incluyendo) 5.2.0 está afectado por esto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.0",
            "matchCriteriaId" : "326C44E5-259C-47D1-B540-E153CD7C907C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928146",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/09/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22864",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2021-03-23T22:15:12.423",
      "lastModified" : "2024-11-21T05:50:47.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configuration options used by GitHub Pages were not sufficiently restricted and made it possible to override environment variables leading to code execution on the GitHub Enterprise Server instance. To exploit this vulnerability, an attacker would need permission to create and build a GitHub Pages site on the GitHub Enterprise Server instance. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.3 and was fixed in 3.0.3, 2.22.9, and 2.21.17. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de ejecución de código remota en el servidor de GitHub Enterprise que podría explotarse al crear un sitio de páginas de GitHub.&#xa0;Las opciones de configuración controladas por el usuario que usaban las páginas de GitHub no estaban lo suficientemente restringidas y permitían anular las variables de entorno lo que conllevaría a una ejecución de código en la instancia del servidor de GitHub Enterprise.&#xa0;Para explotar esta vulnerabilidad, un atacante necesitaría permiso para crear y construir un sitio de páginas de GitHub en la instancia del servidor de GitHub Enterprise.&#xa0;Esta vulnerabilidad afectó a todas las versiones de GitHub Enterprise Server anteriores a 3.0.3 y se corrigió en versiones 3.0.3, 2.22.9 y 2.21.17.&#xa0;Esta vulnerabilidad se reportó por medio del programa GitHub Bug Bounty"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.21.0",
            "versionEndExcluding" : "2.21.17",
            "matchCriteriaId" : "1D306E32-D4C5-48C9-8408-2BD41D9F532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "2.22.9",
            "matchCriteriaId" : "EDB27F5B-D998-4C70-9087-EA3F4574B84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.3",
            "matchCriteriaId" : "F5B66596-7997-45C3-A56C-F1CEA2D1BAE8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.17",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.9",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.3",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21380",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-23T23:15:13.630",
      "lastModified" : "2024-11-21T05:48:14.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of XWiki Platform (and only those with the Ratings API installed), the Rating Script Service expose an API to perform SQL requests without escaping the from and where search arguments. This might lead to an SQL script injection quite easily for any user having Script rights on XWiki. The problem has been patched in XWiki 12.9RC1. The only workaround besides upgrading XWiki would be to uninstall the Ratings API in XWiki from the Extension Manager."
      }, {
        "lang" : "es",
        "value" : "XWiki Platform es una plataforma wiki genérica que ofrece servicios en tiempo de ejecución para aplicaciones creadas sobre ella.&#xa0;En las versiones afectadas de la plataforma XWiki (y solo aquellas con la API Ratings instalada), el Rating Script Service expone una API para llevar a cabo peticiones SQL sin escapar de los argumentos de búsqueda desde y dónde.&#xa0;Esto podría conllevar a una inyección de Script SQL con bastante facilidad para cualquier usuario que tenga derechos de Script en XWiki.&#xa0;El problema ha sido parcheado en XWiki versión 12.9RC1.&#xa0;La única solución alternativa además de actualizar XWiki sería desinstalar la API Ratings en XWiki desde el Extension Manager"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.1",
            "versionEndIncluding" : "12.8",
            "matchCriteriaId" : "8ED2FCAC-A009-4684-B9D0-F09DE16AD91D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E7F4275-7B1E-474A-BE3C-A6F169CD3CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.4:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "34004E8E-213E-4D7F-A6BF-953A5A5C3CA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:6.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "485ABFAB-BF8B-4093-9296-EA5F4AA4A804"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-79rg-7mv3-jrr5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-17662",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-79rg-7mv3-jrr5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jira.xwiki.org/browse/XWIKI-17662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28967",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T07:15:12.710",
      "lastModified" : "2025-07-08T18:03:43.277",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial MATLAB extension before 2.0.1 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace because of lint configuration settings."
      }, {
        "lang" : "es",
        "value" : "La extensión no oficial de MATLAB versiones anteriores a 2.0.1 para Visual Studio Code, permite a atacantes ejecutar código arbitrario por medio de un workspace diseñado debido a un ajuste de configuración lint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gimly:matlab:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "99328DBB-6E95-4657-A3F5-017FFB28DC74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Gimly/vscode-matlab/commit/fc5dc53397677464099e80629e785a25718bf5ec",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Gimly/vscode-matlab/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/Gimly81.matlab/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Gimly/vscode-matlab/commit/fc5dc53397677464099e80629e785a25718bf5ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/Gimly/vscode-matlab/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/Gimly81.matlab/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29133",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T07:15:13.007",
      "lastModified" : "2024-11-21T06:00:45.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lack of verification in haserl, a component of Alpine Linux Configuration Framework, before 0.9.36 allows local users to read the contents of any file on the filesystem."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobación en haserl, un componente de Alpine Linux Configuration Framework, versiones anteriores a 0.9.36, permite a usuarios locales leer el contenido de cualquier archivo en el sistema de archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haserl_project:haserl:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.9.36",
            "matchCriteriaId" : "B6273540-A687-4654-B1FE-47C87995FBAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/14833",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/14833/commits/5bf6b2d094deb22fa8183ce161b90cbe4fd40a70",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12539",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/steaIth/status/1364940271054712842",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/14833",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rapid7/metasploit-framework/pull/14833/commits/5bf6b2d094deb22fa8183ce161b90cbe4fd40a70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://twitter.com/steaIth/status/1364940271054712842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29025",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.300",
      "lastModified" : "2024-11-21T06:00:32.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/my_images.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/my_images.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29026",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.363",
      "lastModified" : "2024-11-21T06:00:32.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/permissions.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/admin/permissions.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.427",
      "lastModified" : "2024-11-21T06:00:33.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/index.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/index.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29028",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.487",
      "lastModified" : "2024-11-21T06:00:33.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/user_activity.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/admin/user_activity.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29029",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.550",
      "lastModified" : "2024-11-21T06:00:33.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/edit_personal_page.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/edit_personal_page.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.627",
      "lastModified" : "2024-11-21T06:00:33.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/index.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/admin/index.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.707",
      "lastModified" : "2024-11-21T06:00:33.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/users_import.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/admin/users_import.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29032",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.767",
      "lastModified" : "2024-11-21T06:00:33.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/preferences.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/preferences.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29033",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T13:15:14.830",
      "lastModified" : "2024-11-21T06:00:34.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in Bitweaver version 3.1.0 allows remote attackers to inject JavaScript via the /users/admin/edit_group.php URI."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en Bitweaver versión 3.1.0, permite a atacantes remotos inyectar JavaScript por medio del URI /users/admin/edit_group.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:bitweaver:bitweaver:3.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EB11B35-7687-4475-B04B-9A0A7A8F908B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Multiple%20URI%20Based%20XSS%20in%20Bitweaver%203.1.0.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27315",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T14:15:13.720",
      "lastModified" : "2024-11-21T05:57:47.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via the comment parameter."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL Ciega en el archivo contactus.php en Doctor Appointment System versión 1.0, permite a un atacante no autenticado insertar consultas SQL maliciosas por medio del parámetro comment"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27316",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T14:15:13.830",
      "lastModified" : "2024-11-21T05:57:47.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blind SQL injection in contactus.php in doctor appointment system 1.0 allows an unauthenticated attacker to insert malicious SQL queries via lastname parameter."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL Ciega en el archivo contactus.php en el doctor appointment versión 1.0, permite a un atacante no autenticado insertar consultas SQL maliciosas por medio del parámetro lastname"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161641/Doctor-Appointment-System-1.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27319",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T14:15:14.033",
      "lastModified" : "2024-11-21T05:57:47.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via email parameter."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL Ciega en el archivo contactus.php en Doctor Appointment System versión 1.0, permite a un atacante no autenticado insertar consultas SQL maliciosas por medio del parámetro email"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27320",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T14:15:14.110",
      "lastModified" : "2024-11-21T05:57:47.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Blind SQL injection in contactus.php in Doctor Appointment System 1.0 allows an unauthenticated attacker to insert malicious SQL queries via firstname parameter."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL Ciega en el archivo contactus.php en Doctor Appointment System versión 1.0, permite a un atacante no autenticado insertar consultas SQL maliciosas por medio del parámetro firstname"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:doctor_appointment_system_project:doctor_appointment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68074324-B3A0-4D9A-B66B-CB3E1DDE661F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161642/Doctor-Appointment-System-1.0-Blind-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14182/doctor-appointment-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28362",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T14:15:14.173",
      "lastModified" : "2024-11-21T05:59:35.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked (with respect to the available data) at this stage, and these variables are susceptible to integer underflow, it is possible to construct an invalid extension header that will cause memory corruption issues and lead to a Denial-of-Service condition. This is related to rpl-ext-header.c."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Contiki versiones hasta 3.0.&#xa0;Cuando se envía un mensaje de error ICMPv6 debido a opciones de encabezado de extensión no válidas en un paquete IPv6 entrante, se intenta eliminar los encabezados de extensión RPL.&#xa0;Debido a que la longitud del paquete y la longitud del encabezado de extensión no están marcadas (con respecto a los datos disponibles) en esta etapa, y estas variables son susceptibles de subdesbordamiento de enteros, es posible construir un encabezado de extensión no válido que causará problemas de corrupción de memoria y conllevará a una condición de denegación de servicio.&#xa0;Esto está relacionado con el archivo rpl-ext-header.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:contiki-os:contiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.0",
            "matchCriteriaId" : "EBD2BE71-F851-4136-816D-EF61154FD2C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/contiki-os/contiki/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/815128",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://github.com/contiki-os/contiki/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/815128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-24T15:15:12.737",
      "lastModified" : "2024-11-21T06:00:30.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in Plone CMS 5.2.3 exists in site-controlpanel via the \"form.widgets.site_title\" parameter."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en Plone CMS versión 5.2.3 en el site-controlpanel por medio del parámetro \"form.widgets.site_title\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:plone:plone:5.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8ECC7FD-E3FF-47F8-8932-55AD502B1B82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/plone/Products.CMFPlone/issues/3255",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49668",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/plone/Products.CMFPlone/issues/3255",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49668",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22176",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:13.727",
      "lastModified" : "2024-11-21T05:49:38.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting with 3.0.1. Improper access control allows demoted project members to access details on authored merge requests"
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 3.0.1.&#xa0;El control de acceso inapropiado permite a miembros del proyecto degradados acceder a los detalles de las peticiones de fusión creadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "3.0.1",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "8D8EAB17-5FD9-4E8C-9109-826E86529170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "3.0.1",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "749861FF-00DB-4176-ACE9-F53E7E6E3412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "4BBAF21A-84DD-4987-B4BE-2A8CAA44210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "9AE735A5-FC67-4B16-B27B-86C51C8771C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "D3009669-C930-4517-914D-5DB9A0E40B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "9F7976E8-BDA5-4104-AC3E-38C02CC613A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22176.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/243491",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/962604",
        "source" : "cve@gitlab.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22176.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/243491",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/962604",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22178",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:13.820",
      "lastModified" : "2024-11-21T05:49:39.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 13.2. Gitlab was vulnerable to SRRF attack through the Prometheus integration."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 13.2.&#xa0;Gitlab era vulnerable a un ataque de tipo SRRF por medio de la integración de Prometheus"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.2.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "9E95D786-857F-4BF8-AA9D-1B14DC066626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.2.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "1520C7D6-AE99-43F6-9C06-F1C83D29AA5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "4BBAF21A-84DD-4987-B4BE-2A8CAA44210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "9AE735A5-FC67-4B16-B27B-86C51C8771C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "D3009669-C930-4517-914D-5DB9A0E40B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "9F7976E8-BDA5-4104-AC3E-38C02CC613A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22178.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/284819",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1037411",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22178.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/284819",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1037411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22179",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:13.930",
      "lastModified" : "2024-11-21T05:49:39.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability was discovered in GitLab versions before 12.2. GitLab was vulnerable to a SSRF attack through the Outbound Requests feature."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad en GitLab versiones anteriores a 12.2.&#xa0;GitLab era vulnerable a un ataque de tipo SSRF por medio de la funcionalidad Outbound Requests"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "7DFCFDDF-2CA7-45E9-89A8-7A167EC4EB05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.2.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "2715BEAE-AF6C-47E8-B811-D06219344A2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "AC1152B0-9CC9-4AAB-B183-5B01A49E9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "6309AD47-AB37-45DB-B807-42EC523473D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0BE6D29D-CC1A-44D2-B91D-05396FE6F0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0EA203BF-FD91-40B7-800A-19259A37FFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22179.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/293733",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1055816",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22179.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/293733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1055816",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22185",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:14.023",
      "lastModified" : "2024-11-21T05:49:40.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input sanitization in wikis in GitLab version 13.8 and up allows an attacker to exploit a stored cross-site scripting vulnerability via a specially-crafted commit to a wiki"
      }, {
        "lang" : "es",
        "value" : "Un saneamiento insuficiente de la entrada en wikis en GitLab versiones 13.8 y posteriores, permite a un atacante explotar una vulnerabilidad de tipo cross-site scripting almacenada por medio de un commit especialmente diseñado para un wiki"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "26177756-A7AE-432F-8379-9752EC65E090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "EA4DB41D-BB15-4B41-A00F-D4AD1C20115D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "02A4523B-FA8E-42C6-B291-C8F7811F7216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "E2A84D4C-6526-43AD-9FEF-01435CF17B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22185.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/299143",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1087061",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22185.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/299143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1087061",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22186",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:14.087",
      "lastModified" : "2024-11-21T05:49:40.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners"
      }, {
        "lang" : "es",
        "value" : "Un problema de autorización en GitLab CE/EE versiones 9.4 y posteriores, permitió a un mantenedor de grupo modificar unas variables de CI/CD de grupo que deberían estar restringidas a los propietarios del grupo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "3BB86AD8-CCFA-46D2-ADF4-FD4EE6D1ED2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "9.4.0",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "54A4AD4D-8577-47DC-B235-3DD80658D23F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "26177756-A7AE-432F-8379-9752EC65E090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "EA4DB41D-BB15-4B41-A00F-D4AD1C20115D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "02A4523B-FA8E-42C6-B291-C8F7811F7216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "E2A84D4C-6526-43AD-9FEF-01435CF17B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22186.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/321653",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22186.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/321653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22192",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:14.167",
      "lastModified" : "2024-11-21T05:49:40.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2 allowing unauthorized authenticated users to execute arbitrary code on the server."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de 13.2, permitiendo a usuarios autenticados no autorizados ejecutar código arbitrario en el servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.2.0",
            "versionEndExcluding" : "13.7.9",
            "matchCriteriaId" : "A9154BFC-CED7-4E1F-A298-CF837B54DF7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.2.0",
            "versionEndExcluding" : "13.7.9",
            "matchCriteriaId" : "BCC130B0-5139-458D-BF47-1937CB3D6F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.6",
            "matchCriteriaId" : "77BF0B77-D9F8-45A2-8BA0-16E7B7F9C96F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.6",
            "matchCriteriaId" : "3517AD59-2E9F-41B8-B4F9-B0D6EA3B8E23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.4",
            "matchCriteriaId" : "64FA7C82-24B6-4D9B-884B-F31F3A90F45B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.4",
            "matchCriteriaId" : "56748771-1CFA-4BD8-917A-D49E80675FF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22192.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/324452",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1125425",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22192.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/324452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1125425",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22193",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T17:15:14.260",
      "lastModified" : "2024-11-21T05:49:40.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting with 7.1. A member of a private group was able to validate the use of a specific name for private project."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de 7.1.&#xa0;Un miembro de un grupo privado pudo ser capaz de comprobar el uso de un nombre específico para un proyecto privado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "2FAE5EA5-A4E0-4605-A8BD-8AF7F005B161"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "8FB5CE7B-5237-4A32-B522-CD65DCD8001A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "AC1152B0-9CC9-4AAB-B183-5B01A49E9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "6309AD47-AB37-45DB-B807-42EC523473D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0BE6D29D-CC1A-44D2-B91D-05396FE6F0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0EA203BF-FD91-40B7-800A-19259A37FFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22193.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/12560",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/605608",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22193.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/12560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/605608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22169",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-24T18:15:12.713",
      "lastModified" : "2024-11-21T05:49:38.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was identified in GitLab EE 13.4 or later which leaked internal IP address via error messages."
      }, {
        "lang" : "es",
        "value" : "Se identificó un problema en GitLab EE versiones 13.4 o posteriores, que filtró la dirección IP interna por medio de mensajes de error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.4.0",
            "versionEndExcluding" : "13.5.6",
            "matchCriteriaId" : "71F43AC6-51CF-42F3-9FB1-78EA333675FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.4",
            "matchCriteriaId" : "1D008652-E883-44CA-987F-A1B64F1B4349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.2",
            "matchCriteriaId" : "CA1FA034-49A4-49AF-95CC-8447B0F24C89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22169.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/289930",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22169.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/289930",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1377",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.150",
      "lastModified" : "2024-11-21T05:44:12.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Address Resolution Protocol (ARP) management of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to prevent an affected device from resolving ARP entries for legitimate hosts on the connected subnets. This vulnerability exists because ARP entries are mismanaged. An attacker could exploit this vulnerability by continuously sending traffic that results in incomplete ARP entries. A successful exploit could allow the attacker to cause ARP requests on the device to be unsuccessful for legitimate hosts, resulting in a denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la administración del Address Resolution Protocol (ARP) del Software Cisco IOS y el Software Cisco IOS XE, podría permitir a un atacante remoto no autenticado impedir que un dispositivo afectado resuelva entradas ARP para hosts legítimos en las subredes conectadas.&#xa0;Esta vulnerabilidad se presenta porque las entradas ARP son mal administradas.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico continuamente que da como resultado entradas ARP incompletas.&#xa0;Una explotación con éxito podría permitir al atacante causar que las peticiones ARP en el dispositivo no sean exitosas para hosts legítimos, lo que resultaría en una condición de denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6\\)i1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAFD220-48D7-46EE-8537-A69C5F8D0F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806D2FF1-EADA-44C8-94BD-6BC18D138150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643D7544-34DA-46D9-831F-421ED00F3579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6354447-07DF-4913-82D9-BF249663499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EC35AA-4BD3-4FBB-878D-3313D37D9AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svs1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC36DC-F4C5-4C4C-9C27-20FD45AA4A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF74559-F418-48EA-9CA7-A9574CAFC97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A1ADB8-DF62-4CB6-8075-2F0956BB0126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C787A4-4AF4-49F1-AA10-F5CF51AE17AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0F2B2A-F273-4166-826F-88B54A480BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194D54FC-F399-4C86-AE04-FB3FD828DDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F98E150B-C806-4CF6-83EC-0C16A44F3EFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C85E0E-A920-4501-AC23-0F7534CF88EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7582DA8C-2360-4E8C-90F8-6194F269CD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C2BB1F-79DF-4471-B75F-C22CEBB5380F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F5A55B3-49E4-4C48-B942-4816504BAA30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BDAB63-EA0E-486D-B146-7E0060F70066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AADD63-CEA3-461B-94EA-0CDAB4A2ED00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB704746-C27B-4C6B-948C-B8C0A3F40782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F354F8F6-70D3-43EE-BF08-DFB87E83E847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62F908B0-7ECE-40F8-8549-29BD1A070606"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "378E67DD-779C-4852-BF29-38C2DFFB1BBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9033ACC7-1CCC-44E7-8275-73499C0E6E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3047E4-BCC3-41A7-9DCD-15C25D14EC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7785E177-C04E-4170-9C35-B4259D14EA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAE727E-E552-4222-8FF0-6146A813BDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7850295-C728-4448-ABA7-D01397DBBE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C104A47-53EE-47FC-BAE5-21925BEE98E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09A26FF-6A8F-4D73-B3E8-0333F994D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28874B-148A-4299-9AA1-67A550B25F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B80CBC-961F-4EE8-A998-C0A827151EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7131776-5DEB-4B96-8483-B81B538E24FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A472B96-0DDE-49DD-A7E3-A82DD6AEB3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757EB1A1-4764-4108-9AB1-F33CF9CEE574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199DCF1B-8A1E-47CC-87A6-64E6F21D8886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B78669-3B28-4F1D-993D-85282A7D0E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD05109E-1183-419D-96A1-9CD5EA5ECC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C73A3A-4B84-476F-AC3C-81DCB527E29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7551128E-9E23-4C42-A681-6BE64D284C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB7BFE1-06ED-4B45-8B4F-2B309B8D6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE2C71-C401-43D1-86DC-725FE5FDF87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758F264-96F9-4EE9-9CA9-AD5407885547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2842F6-4CD5-457C-AC75-241A5AB9534B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE0470-E94A-4CAF-865D-73E2607A0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CCD7E3-C62B-4151-96FF-1175D4896E95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6437E689-A049-4D48-AB7A-49CA7EBDE8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B699D-169E-4932-A480-6EBB90CAE94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C12918-E5BB-465E-9DA4-06B7351DD805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4862C453-8BD7-4D53-B2D6-CE3E44A4915A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C4E1F4-AD64-418C-A308-85501E0F3EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF41C6-A0D0-4149-BC5D-B31C4F5CC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57ED9CDC-FC03-4DA7-A791-CE61D0D8364D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8C3BBA-4829-4006-B7EB-F552D86922C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FE4D84-423F-4A5E-9B06-D5231BF1E03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F980EFA3-BB92-49D3-8D5F-2804BB44ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7a\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1374E243-4EC2-4A81-991C-B5705135CAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7b\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECA6101-94BA-4209-8243-A56AF02963EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc97:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8FB1EA-63FC-4A0C-A4B1-00E8650BF21E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4220D3B1-BD05-4169-91BA-B1AA45084C46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84BAF351-4C7F-44F8-812E-9C402CBBB5FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0595F3D8-8D99-4C82-9EC1-1187C52A6740"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "662ACAD0-7E80-4CB5-8409-03E72A3C59D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.4\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A43EE852-5F22-4387-8332-A12FF3306210"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6465E3DA-90F0-4DD6-82B1-C9DF9FAEBDD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "346BD6D0-AAF2-4C9A-8DD3-8C710302DCA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A5B7053-7F9C-432C-B6F1-DAC00B0C9619"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D029D52-65E5-4129-AB47-E873F53799CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31605A68-9398-4239-A137-DD0516BD2660"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727E596A-295D-4D70-810A-436FC6A4415D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(1\\)sy6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "368210A0-CC15-4FB9-8334-4ED475523C2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C580D9-A2EC-4CBB-87F5-1F5CBA23F73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C427BA8-3A8C-4934-997B-6DDF9CEB96AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90950C85-D631-4F60-AB3E-3ED1D74D56B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD79CA0D-7D90-4955-969A-C25873B0B9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7809674-4738-463E-B522-FC6C419E2A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFD51F00-C219-439F-918E-9AF20A6E053A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57BCB671-7ED0-43D5-894F-8B3DBF44E68E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4802BC7-F326-4F6E-9C74-04032FF35FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDE3BCF-B518-47B0-BD3B-0B75515771E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C9BF5-0C29-4B50-9A86-29F0ECD44F1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1B0621A-D7A2-415B-91ED-674F2FB4227B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)m11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D9D7FDD-8CE6-4E83-A186-734BC5546E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE884ADE-FD51-4F10-89A8-D871E7407C83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B00BF54E-CBFB-4ECD-9EDF-0A8331AF2BE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC22B2CD-5154-4055-A6A7-4C31B84B032B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10082A46-7AD3-4533-9A15-267953D9E642"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED8D1FE-5880-484E-810B-B1CDC2C9F7CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ADD1575-BB35-40CE-8452-3D34E25995B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FE59A3-5BA1-4C68-8959-A5B0CA61CDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B02867-F082-4A57-9E2E-12B0F4C77526"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8389200-0585-456E-8D0B-D725266ADBBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFEF03FA-FBF2-477F-A5E2-67F47610897A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.5\\(3\\)s10a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0969524D-EB41-47F0-8370-2E38ED7493BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DB8C1-7F7D-4562-A317-87E925CAD524"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A1887D9-E339-4DC6-BE24-A5FF15438B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB2645F-C3BF-458F-9D07-6D66E1953730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2303A3-CAF1-4DBA-BB6E-F205C23DCE6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "686FD45C-7722-4D98-A6D7-C36CAC56A4AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "871E33AC-B469-47BA-9317-DC9E3E9BF5C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4091CAC-BFAA-404C-A827-4DA9EADDF621"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0DA9FCA-4166-4084-96AF-E82CC4A4DB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m6b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369A99E0-3451-41D1-8C56-5352EA689950"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33D4A7FA-E4E0-49C2-97FD-A547A1612F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA0B918F-A28C-4B5A-A566-6E588B4F6696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.6\\(3\\)m9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "436114F2-D906-4469-99C4-10B75253B3D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8A00BF-4522-467B-A96E-5C33623DCA2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A434E7-B27C-4663-BE83-39A650D22D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47C106CF-CBD3-4630-8E77-EDB1643F97E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DB7943-5CE1-44F6-B093-5EA65BF71A59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64404B00-4956-47B8-ACDB-88E365E97212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE6A696-5CBC-4552-A54E-55C21BC74D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41237041-1D82-4C6C-BF48-ECEDF9DB08C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m4b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB72CA3-088E-4EFE-BE1C-190C64101851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA584AC4-96AB-4026-84DF-F44F3B97F7E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22EB41FD-4DE2-4753-A18C-C877B81B51D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.7\\(3\\)m7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "158EDE62-04C9-471B-B243-309D49583E67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A58C01B-459E-432F-A49F-68EC45EE6E14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DFE673-9A5E-4369-A7BB-3DE7F8E503C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4125EE35-ED52-4350-A4CE-E90EA8ED6BAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56AD5BA0-4D08-4A92-88BE-60AF29BC35CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2881C5EA-0AC7-4074-A4FD-9FA33E3F60A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "198FF520-7631-49D9-B8A8-2E64F6237CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E067E8-552B-4691-9F6A-C5E8766287BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4162EC-90DE-4194-8ABC-55CCB8C24FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "405CC56E-574F-4983-B492-C8811FAF06E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1829074-66F9-4B3B-A084-B88D838CFC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715A135-61A7-4E56-948D-8A8D5F7C98C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C836C26-DBC1-42CB-9B73-9F248D4F2B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFE8A85-7F63-4E4C-A3FE-7B7E27AD1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0807458A-2453-4575-AE19-0DE15E04B88C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0A0E0-A9D8-4FC3-88BD-FA0E7290A9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1AF57E-79E9-40F2-817A-5E7D2760F1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF9CEA3-054B-4469-A10F-DFCB9057E5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671F6847-6855-41BF-A148-944AEEB32A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7207B1F1-AF21-4C02-A163-4289503A026C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CC0497-24F5-42ED-99A6-4C8642F73F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120DA9BF-1153-41C8-B80D-3F99E0E28A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89812FA8-230C-4F62-8AA8-7F13FA86B805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C116A982-58BF-4523-A5B1-83089E8557D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D17DB28-2559-4837-8B4B-7CC722D73324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92991EE-BB4A-499D-8F14-F7D0E32BE31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCBE369-81ED-4C94-8C44-53C6F4A087CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90005E78-413A-47D7-82B3-A3011E6B118D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D764D126-4604-43DD-9A66-BDD32565D893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA25E3C0-24C1-479C-8C8F-A6FB9C5002FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06067D8B-79BD-4982-909F-7C08BE5660C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAFB8DA-F9EC-4A42-A663-1BB4EF8F5E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672B77C7-0E6B-496D-9ACC-6AD965319B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA1D885-2270-4370-9F3F-CA80B0E96DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895DAB3D-5C14-4D0B-94FA-EB7C7C7BB0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9846AE-1344-4EE4-9FDF-6CE17D9461FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3363DF79-8A5A-4BE2-B04C-253A4A3A0ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25725655-EBDE-4538-8AE1-CF5C81F09C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98F2654-46F3-4C63-A2C2-48B372C655B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4E206B-37BF-4D61-BE90-80BB65C0C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17674BAD-F2F1-4E63-AAE0-FEAC14C37CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4117E2EC-F58A-4B22-AB72-FC63A0D96E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20286676-70FF-471C-9612-74E5F0ECB8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327F7D0-93E8-4005-9ECB-44852C16BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27252883-091A-471D-87FC-E07EADBC6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF9D58E-CD75-47B1-938C-B5C0A73E28FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC3D979-02B2-4EEC-A6C2-A44C9FC694D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C340CE-7F18-448B-B9BE-BFEB1724C882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C1CA89-0FE4-4DC3-BB4B-299114E172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79BC92-0869-447C-AF34-3FBF42375D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D71B3-1CCE-4526-8D91-048212EEDF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F66514-B9C4-422E-B68E-406608302E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC524BA-544C-49B9-A9D6-800D25556532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A07FC8-5649-4A64-8B94-507524FE4551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-arp-mtfhBfjE",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-arp-mtfhBfjE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1382",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.353",
      "lastModified" : "2024-11-21T05:44:13.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with root privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to execute commands with root privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado inyectar comandos arbitrarios para que sean ejecutados con privilegios root en el sistema operativo subyacente.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada en determinados comandos de la CLI.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en el dispositivo y enviar una entrada diseñada a la CLI.&#xa0;El atacante debe estar autenticado como usuario administrativo para ejecutar los comandos afectados.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos con privilegios root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.3.3",
            "matchCriteriaId" : "996DDB79-6BB0-4595-8A4B-B491037B2580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4.1",
            "versionEndIncluding" : "17.4.2",
            "matchCriteriaId" : "FE7D839B-5314-4C27-8C69-869BD25652E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.5.0",
            "versionEndExcluding" : "17.5.1a",
            "matchCriteriaId" : "D7B1963C-CECE-4A97-8426-06A69879F0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.6.0",
            "versionEndExcluding" : "17.6.1a",
            "matchCriteriaId" : "450F3DE3-AC80-4261-AEE5-2E33F9BF201B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-7xfm-92p7-qc57",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwcinj-t68PPW7m",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-7xfm-92p7-qc57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwcinj-t68PPW7m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1383",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.667",
      "lastModified" : "2024-11-21T05:44:13.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la CLI del Software Cisco IOS XE SD-WAN, podrían permitir a un atacante local autenticado acceder al sistema operativo subyacente con privilegios root.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de la entrada de determinados comandos de la CLI.&#xa0;Un atacante podría explotar estas vulnerabilidades al autenticarse en el dispositivo y enviar una entrada diseñada a la CLI.&#xa0;El atacante debe estar autenticado como usuario administrativo para ejecutar los comandos afectados.&#xa0;Una explotación con éxito podría permitir al atacante acceder al sistema operativo subyacente con privilegios root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18B32E3-6B33-4E3D-879A-82E2F0BFC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCB9440-F470-45D1-AAFA-01FB5D76B600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BBFDD70-7AF3-47AE-94CA-56C19F2D6234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4046C325-7EDB-4C95-AA98-541BEC8F9E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8F611B-D347-4A21-90E6-56CF4D8A35A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C87891C-B8D0-4286-B6A7-61037E1A6A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-vw54-f9mw-g46r",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-vw54-f9mw-g46r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1384",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.743",
      "lastModified" : "2024-11-21T05:44:13.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco IOx application hosting environment of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands into the underlying operating system as the root user. This vulnerability is due to incomplete validation of fields in the application packages loaded onto IOx. An attacker could exploit this vulnerability by creating a crafted application .tar file and loading it onto the device. A successful exploit could allow the attacker to perform command injection into the underlying operating system as the root user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el entorno de alojamiento de aplicaciones Cisco IOx del Software Cisco IOS XE, podría permitir a un atacante remoto autenticado inyectar comandos en el sistema operativo subyacente como usuario root.&#xa0;Esta vulnerabilidad es debido a una comprobación incompleta de los campos en los paquetes de aplicaciones cargados en IOx.&#xa0;Un atacante podría explotar esta vulnerabilidad al crear un archivo .tar de aplicación diseñado y cargarlo en el dispositivo.&#xa0;Una explotación con éxito podría permitir al atacante llevar a cabo una inyección de comandos en el sistema operativo subyacente como usuario root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.6.9",
            "matchCriteriaId" : "6255C5F8-3A7F-4836-A1AE-9145031C5274"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.9.0",
            "versionEndExcluding" : "16.9.7",
            "matchCriteriaId" : "1B977A88-8801-4AD7-85D7-F2D2A413C9C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.3.2",
            "versionEndExcluding" : "17.3.3",
            "matchCriteriaId" : "CB06AFCF-95ED-461B-9D10-CF8C3287D9BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4.0",
            "versionEndExcluding" : "17.4.2",
            "matchCriteriaId" : "35AC6945-DFE6-472D-8AB9-A59D0E3AD083"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "843F490D-96D1-4EF1-9B95-D66FEF17FA4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-h332-fj6p-2232",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-cmdinj-RkSURGHG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-h332-fj6p-2232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-cmdinj-RkSURGHG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1385",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.837",
      "lastModified" : "2024-11-21T05:44:13.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the device does not properly validate URIs in IOx API requests. An attacker could exploit this vulnerability by sending a crafted API request that contains directory traversal character sequences to an affected device. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el entorno de alojamiento de aplicaciones Cisco IOx de varias plataformas Cisco, podría permitir a un atacante remoto autenticado llevar a cabo ataques de salto de directorio y leer y escribir archivos en el sistema operativo o host subyacente.&#xa0;Esta vulnerabilidad ocurre porque el dispositivo no comprueba apropiadamente los URI en las peticiones de la API IOx.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición de API diseñada que contiene secuencias de caracteres de salto de directorio hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante leer o escribir archivos arbitrarios en el sistema operativo subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94E067E8-552B-4691-9F6A-C5E8766287BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4162EC-90DE-4194-8ABC-55CCB8C24FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6715A135-61A7-4E56-948D-8A8D5F7C98C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C836C26-DBC1-42CB-9B73-9F248D4F2B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.8\\(3\\)m6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CC4602-D1F5-4843-991A-2903C8336251"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFE8A85-7F63-4E4C-A3FE-7B7E27AD1DF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BA0A0E0-A9D8-4FC3-88BD-FA0E7290A9A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A1AF57E-79E9-40F2-817A-5E7D2760F1E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF9CEA3-054B-4469-A10F-DFCB9057E5E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.9\\(3\\)m3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8313597-49A9-4918-B8D5-8E53C5C9AFAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18B32E3-6B33-4E3D-879A-82E2F0BFC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FCB9440-F470-45D1-AAFA-01FB5D76B600"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4046C325-7EDB-4C95-AA98-541BEC8F9E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8F611B-D347-4A21-90E6-56CF4D8A35A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-hhfw-6cm2-v3w5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-pt-hWGcPf7g",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-hhfw-6cm2-v3w5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-pt-hWGcPf7g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1390",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.917",
      "lastModified" : "2024-11-21T05:44:14.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in one of the diagnostic test CLI commands of Cisco IOS XE Software could allow an authenticated, local attacker to execute arbitrary code on an affected device. To exploit this vulnerability, the attacker would need to have valid user credentials at privilege level 15. This vulnerability exists because the affected software permits modification of the run-time memory of an affected device under specific circumstances. An attacker could exploit this vulnerability by authenticating to the affected device and issuing a specific diagnostic test command at the CLI. A successful exploit could trigger a logic error in the code that was designed to restrict run-time memory modifications. The attacker could take advantage of this logic error to overwrite system memory locations and execute arbitrary code on the underlying Linux operating system (OS) of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en uno de los comandos de CLI de prueba de diagnóstico del Software Cisco IOS XE, podría permitir a un atacante local autenticado ejecutar código arbitrario en un dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante necesitaría tener credenciales de usuario válidas en el nivel de privilegio 15. Esta vulnerabilidad se presenta porque el software afectado permite la modificación de la memoria de tiempo de ejecución de un dispositivo afectado en circunstancias específicas.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en el dispositivo afectado y emitir un comando de prueba de diagnóstico específico en la CLI.&#xa0;Una explotación con éxito podría desencadenar un error lógico en el código que fue diseñado para restringir las modificaciones de la memoria de tiempo de ejecución. El atacante podría aprovechar este error lógico para sobrescribir las ubicaciones de la memoria del sistema y ejecutar código arbitrario en el sistema operativo (OS) subyacente de Linux del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-123"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-OFP-6Nezgn7b",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-OFP-6Nezgn7b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1391",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:13.993",
      "lastModified" : "2024-11-21T05:44:14.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by bypassing the consent token mechanism with the residual scripts on the affected device. A successful exploit could allow the attacker to escalate from privilege level 15 to root privilege."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el depurador dragonite del Software Cisco IOS XE, podría permitir a un atacante local autenticado escalar del nivel de privilegio 15 al privilegio de root.&#xa0;La vulnerabilidad es debido a la presencia de scripts de prueba y comprobación de desarrollo que permanecieron en el dispositivo.&#xa0;Un atacante podría explotar esta vulnerabilidad al omitir el mecanismo del token de consentimiento con los scripts residuales en el dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante escalar del nivel de privilegio 15 al privilegio de root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-489"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:12.2\\(6\\)i1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEAFD220-48D7-46EE-8537-A69C5F8D0F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(2\\)se13a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E212B3A0-5A20-40B7-BBF6-CC420B0C86AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "806D2FF1-EADA-44C8-94BD-6BC18D138150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643D7544-34DA-46D9-831F-421ED00F3579"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svr3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6354447-07DF-4913-82D9-BF249663499F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EC35AA-4BD3-4FBB-878D-3313D37D9AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svs1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DAC36DC-F4C5-4C4C-9C27-20FD45AA4A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09A26FF-6A8F-4D73-B3E8-0333F994D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28874B-148A-4299-9AA1-67A550B25F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B80CBC-961F-4EE8-A998-C0A827151EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7131776-5DEB-4B96-8483-B81B538E24FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE991877-18E0-4374-A441-C2316085CCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ex:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A472B96-0DDE-49DD-A7E3-A82DD6AEB3DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2EB46D-16E0-4C31-8634-C33D70B5381A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757EB1A1-4764-4108-9AB1-F33CF9CEE574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29B2E6F-ED6C-4568-9042-7A1BD96A9E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5c\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7803B445-FE22-4D4B-9F3A-68EFE528195E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199DCF1B-8A1E-47CC-87A6-64E6F21D8886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B78669-3B28-4F1D-993D-85282A7D0E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD05109E-1183-419D-96A1-9CD5EA5ECC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C73A3A-4B84-476F-AC3C-81DCB527E29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7551128E-9E23-4C42-A681-6BE64D284C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB7BFE1-06ED-4B45-8B4F-2B309B8D6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE2C71-C401-43D1-86DC-725FE5FDF87E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1758F264-96F9-4EE9-9CA9-AD5407885547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB2842F6-4CD5-457C-AC75-241A5AB9534B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABE0470-E94A-4CAF-865D-73E2607A0DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9CCD7E3-C62B-4151-96FF-1175D4896E95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6437E689-A049-4D48-AB7A-49CA7EBDE8B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "110B699D-169E-4932-A480-6EBB90CAE94B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C12918-E5BB-465E-9DA4-06B7351DD805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4862C453-8BD7-4D53-B2D6-CE3E44A4915A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0C4E1F4-AD64-418C-A308-85501E0F3EA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF41C6-A0D0-4149-BC5D-B31C4F5CC6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57ED9CDC-FC03-4DA7-A791-CE61D0D8364D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8C3BBA-4829-4006-B7EB-F552D86922C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29FE4D84-423F-4A5E-9B06-D5231BF1E03E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F980EFA3-BB92-49D3-8D5F-2804BB44ABB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e3k:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6D0AA7-E879-4303-AB2D-4FEF3574B60E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7a\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1374E243-4EC2-4A81-991C-B5705135CAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7b\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECA6101-94BA-4209-8243-A56AF02963EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06216CEE-F15D-4B31-A5A3-B2C226E2D25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895DAB3D-5C14-4D0B-94FA-EB7C7C7BB0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9846AE-1344-4EE4-9FDF-6CE17D9461FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3363DF79-8A5A-4BE2-B04C-253A4A3A0ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25725655-EBDE-4538-8AE1-CF5C81F09C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98F2654-46F3-4C63-A2C2-48B372C655B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4E206B-37BF-4D61-BE90-80BB65C0C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17674BAD-F2F1-4E63-AAE0-FEAC14C37CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4117E2EC-F58A-4B22-AB72-FC63A0D96E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20286676-70FF-471C-9612-74E5F0ECB8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327F7D0-93E8-4005-9ECB-44852C16BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27252883-091A-471D-87FC-E07EADBC6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF9D58E-CD75-47B1-938C-B5C0A73E28FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC3D979-02B2-4EEC-A6C2-A44C9FC694D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C340CE-7F18-448B-B9BE-BFEB1724C882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C1CA89-0FE4-4DC3-BB4B-299114E172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79BC92-0869-447C-AF34-3FBF42375D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-FSM-Yj8qJbJc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-FSM-Yj8qJbJc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1392",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.057",
      "lastModified" : "2024-11-21T05:44:14.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI command permissions of Cisco IOS and Cisco IOS XE Software could allow an authenticated, local attacker to retrieve the password for Common Industrial Protocol (CIP) and then remotely configure the device as an administrative user. This vulnerability exists because incorrect permissions are associated with the show cip security CLI command. An attacker could exploit this vulnerability by issuing the command to retrieve the password for CIP on an affected device. A successful exploit could allow the attacker to reconfigure the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en los permisos de comando de la CLI del Software Cisco IOS y Cisco IOS XE, podría permitir a un atacante local autenticado recuperar la contraseña para el Protocolo industrial común (CIP) y luego configurar remotamente el dispositivo como un usuario administrativo.&#xa0;Esta vulnerabilidad se presenta porque los permisos incorrectos están asociados con el comando de la CLI show cip security.&#xa0;Un atacante podría explotar esta vulnerabilidad al emitir el comando para recuperar la contraseña de CIP en un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante reconfigurar el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF55C0A-768F-445A-AF40-2B553363AF18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E7D5CC-521E-4B2A-B6DB-D2A49D31DE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.0\\(1\\)ey2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10D75DC6-D7B1-46D2-ABEF-97D908992FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46EC35AA-4BD3-4FBB-878D-3313D37D9AAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.1\\(3\\)svt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BD52DF-E396-415D-B46E-A8814579A01F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(1\\)ey:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D601E90-6F2A-4C66-97A2-152031C88DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A156FE-590E-49DB-819D-4103D629829D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1F6C767-042C-4277-90F4-F81D9AFFF227"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D33DB919-4F82-43C6-830A-A9D4FC043B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72782F95-948D-489B-A19A-9DAB825DFE4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F904CD0-8609-47F7-988C-613DE26BDBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3A39FE-69F6-4BB9-A9CE-D516A3802538"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B7058-3467-4CCE-B9A4-71CF8143FEC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90447919-CC40-4CA5-A488-2FCF0F25ABE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEF74559-F418-48EA-9CA7-A9574CAFC97E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5A1ADB8-DF62-4CB6-8075-2F0956BB0126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e7b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C787A4-4AF4-49F1-AA10-F5CF51AE17AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0F2B2A-F273-4166-826F-88B54A480BB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "194D54FC-F399-4C86-AE04-FB3FD828DDA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)e10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C85E0E-A920-4501-AC23-0F7534CF88EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50CB7858-C857-41E2-9E5D-9368EEC2825E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10438F4B-281D-4C2F-B4C3-DC3D47B0033A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "681E360E-2287-4BE7-8228-77C235DFA901"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81800178-449A-4B61-9611-5FB2FC4DBC75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7316ED4-FABD-49E0-AA21-394D327435F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A56EF3-4E88-4220-846A-A9BE1E496311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2\\)eb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAA77FEC-51CE-4D0B-9D1F-7BF1A28D30A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2a\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DDB0B25-95E0-4796-A56F-1A59EF7EA283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(2b\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0687FD87-BAED-4776-9B94-3C9EA7CCE79A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757000B2-A8EB-464A-9A2D-EC4D920A0569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "102BF855-ED1C-4D26-85D9-74B2BE0E9CF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B42618DF-F118-41A7-96E5-24C229DA020E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26F6FC68-BF4A-4511-8B46-A93C81E349B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)e5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7582DA8C-2360-4E8C-90F8-6194F269CD1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(3\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9D6FBCE-F1F0-437B-A9B0-57F717C974F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)e5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BDAB63-EA0E-486D-B146-7E0060F70066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBF92BEC-AA46-46DF-8C1E-956F3E506E69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C226FE9-61A0-4873-B277-1B8ADB397B32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D9C3A73-E4E1-4C0F-86D4-B796069E4EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD5BD905-75C3-47AE-8D19-6225BD808B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56DE452A-6852-4879-9187-8A152E6E260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A6367C8-C9D7-4965-BD9C-1DD4A2FCE2D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3047E4-BCC3-41A7-9DCD-15C25D14EC44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7785E177-C04E-4170-9C35-B4259D14EA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAE727E-E552-4222-8FF0-6146A813BDEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7850295-C728-4448-ABA7-D01397DBBE5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea9a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C104A47-53EE-47FC-BAE5-21925BEE98E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ea10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F09A26FF-6A8F-4D73-B3E8-0333F994D1B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65589A68-58A4-4BD4-8A26-C629AE610953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)ec2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8A64C8F-6380-47CA-8116-E3438B953F84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(4\\)jaz:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE38B2F-F6AB-44E2-89BE-F71796FE1942"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F112DE64-0042-4FB9-945D-3107468193E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027FB12-862F-413E-AA2B-4BBD90AE3650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD28874B-148A-4299-9AA1-67A550B25F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45B80CBC-961F-4EE8-A998-C0A827151EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)e2c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7131776-5DEB-4B96-8483-B81B538E24FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5\\)ea:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE991877-18E0-4374-A441-C2316085CCA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(5a\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757EB1A1-4764-4108-9AB1-F33CF9CEE574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "199DCF1B-8A1E-47CC-87A6-64E6F21D8886"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B78669-3B28-4F1D-993D-85282A7D0E96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e0c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD05109E-1183-419D-96A1-9CD5EA5ECC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C73A3A-4B84-476F-AC3C-81DCB527E29A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7551128E-9E23-4C42-A681-6BE64D284C93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(6\\)e1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB7BFE1-06ED-4B45-8B4F-2B309B8D6342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4C12918-E5BB-465E-9DA4-06B7351DD805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7a\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1374E243-4EC2-4A81-991C-B5705135CAD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.2\\(7b\\)e0b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECA6101-94BA-4209-8243-A56AF02963EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71493AA2-49E9-4FF5-AC29-DC2426973EC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85F96295-2E72-4C23-B973-791B4A2B63F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8555124-BAFA-45D4-8208-ED1172D55F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A313DD0B-C9A9-4731-A486-EE1BCBA3B1F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04B9D9B5-807F-494B-9ED2-7F4BDB32432A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6089D71A-8D46-4819-80E9-8A29BCA47EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21678FDA-D2B4-4041-A52D-C7AA562FD086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6EB0CFF-88F5-4193-8896-B3E4BA8D1AD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ja12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E532352-99A6-4E45-B0E7-7F04DA411820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jaa:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3BD12E4-2ADA-4E3D-A12D-FF0E1031D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AAC643B-AA58-42EA-A777-52FCF6065F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jax1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CFB57C3-6CDF-46D1-858D-D5234956653D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jax2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "330125E6-3645-40B5-8E64-009B622090B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02D874DF-54A1-47C7-B3D9-A9CE41A42418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1485E3A5-A586-408A-8325-7572779DD0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2244E538-6B35-44E0-B93E-60B773745A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9DB6B2A-19D2-4684-B07F-5D42EC850A8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC1C381-4795-4992-BE3C-9615E005DE46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80188F84-30DE-46AC-8E0C-984126B77CC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DECBF0A9-D84F-40A2-AC61-A9C59C819787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb6a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F129CF-FB92-49E9-BD86-90DDB8218FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jbb8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C288D58-F765-4403-BF18-CC0A62B1AA60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CF8146-FBF4-48F9-8BF0-61ACB2B3524E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27357CD7-3E9E-4EF2-A5D4-A6BC44952FD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4246ACD7-DBCF-4CE6-B9B8-D44AAB2DEC8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1046E19B-DB53-418A-BFEC-5CD4492E6626"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0062D992-D990-4EC9-BABD-2EFFF84254D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC81B74C-4F63-46E8-ACF4-EB707853580A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C779C9-3B83-4B26-8942-B8475FB3B5D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ACA99D-5784-4F5F-AB83-F55DF8774E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFFB9F99-8751-442B-9419-C2AB522D2ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jc14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E33FD88-8183-40EF-97A1-2766A4BBFBE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D7D48C-9FA1-45DB-B206-437E8ECBF53D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3626B216-43E8-4E60-96E5-7CAA0CB67F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B59D8B-E71A-4671-BA0B-00E56498E280"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956C0089-E5AE-4289-B6D7-A8AB3C39AAA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "333468BC-41F0-46ED-9561-D7D2CE6AC267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09DBAA17-61D7-4EE4-A70D-A7200DF36C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF17EADC-5812-47FD-A243-287837CEC1E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5733BCBA-B3CE-4B18-9F7B-51CE17AAEF89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8CF99C-B097-4964-B07C-FBB28EB37681"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79DC64FF-E6F4-4FEE-87A2-14DF0DA55B23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA4B81F-7FCA-4666-8602-F6C77A4673E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2403659-B7AD-40CE-AF88-FE2BEF0929E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D1F53B1-E9FA-4480-8314-C531073B25CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498030A3-0AFF-4D74-98D6-74C9447E5B79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jd17:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCBDB71-59D7-481E-84FF-8772930F857B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)je:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2955A319-04AC-4D0C-80B7-0C90503908C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0EF13B6-A743-41D1-BB31-F17C3586C8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B4F7A75-1D0B-4F55-868C-99DBB67AE1AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37875B18-434B-4218-BAAF-2B593E188180"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26BAC234-D00C-4407-A1FE-E45A14D1BDAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42E2869-F179-49B7-A4E8-0F4E8EA953CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58711A-F8C9-4F25-97D7-AE8AE64F3912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4E7B19-75DF-4811-BEE9-28E7B15ED6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE3ECC04-345F-4DAE-98F7-04E082BAEC3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A919122-DE62-4032-80DF-F77C1D80B387"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C5B0248-7C59-49F7-A1BC-FE6F5A8E535B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68958043-1212-42AF-A205-DB731ED55114"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84AE6EB6-EF3F-4DE2-ABEC-71F9010BFF0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf12i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6F56B5-BE84-434D-AEC8-EB0764A832FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jf13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06216CEE-F15D-4B31-A5A3-B2C226E2D25B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jg:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746D8C22-4A3E-4EDB-96A1-923EFF2FD5C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jg1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB02DEB-81D4-4A05-BDD5-3B8BC7184159"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jh:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B18C3383-28B0-435E-AF08-9739DADAE4E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jh1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08C9CA39-3515-4226-8453-0B5FC62546D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ji1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AAE85B-A2E3-4758-9DAF-B4BD7C667DA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ji3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1658FFCF-7433-4AFB-9D59-BD6CC14A4D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ji4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2CA6116-2C6B-431B-BA88-63B180A00DA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ji5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2377350-7B69-4C49-889A-D63A3E4C1002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)ji6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2913C352-E21F-4ECE-8A13-BA21CC00D02E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jj:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD90F4A-2A86-4A98-A157-D93C382717A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jj1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FB2D76-9BE1-4C39-A3B0-BD6F45E20E11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1739E9AD-154D-40C2-A761-F7133BC06C3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA700809-C25D-49F8-B930-7459F8AE9DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AEB7B3E-4E91-477F-BD62-9A28578CCA80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58C5D255-C0FE-47E6-A920-3539306F9845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8DF3B4-A424-4B70-9116-28E2C4DFB776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4677B840-6636-4D8C-9E1C-47FEB8F3116A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jk4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "917D5477-E47E-4A01-979A-C9A0993BE34B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E6CCE7-88BB-4F4F-9253-EC67B5076767"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EBD0947-656E-4CB0-9B4F-1A1F7AA360C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D6C6EE-CFD9-49A9-8784-498560847737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5187A9D2-A057-40E7-84E1-89BE32AFA95C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEE60A6-9E75-4B20-A06D-411E774511B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1451BB33-6BE0-4F4A-A193-14E13DECEE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0FC09E-8C60-4EAC-B729-3BE3524E6F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD355DC3-51F1-4CEA-98B1-E08EEE03BFD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn13:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49B4A0C4-B0CF-4040-9EB0-1529BCAD0DF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4071E320-789E-4E1D-982B-C265F4228FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jn15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EC38DE9-5D5D-452A-AC42-C1D24418FDB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BC3CD43-F30A-484B-9285-D925C1262212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F807A36A-9363-40F1-9B20-E5C4D503EB1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5200C1CD-DEAB-44FD-970D-098F3E01F36B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E71841-512D-483C-A911-86EA745AC00E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBB655C5-2D7B-4ED5-89D6-4ED613CF3934"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE556AB-093C-4992-8F5B-F240526AAA64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnb6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BA0BCD1-4E75-4F39-B960-4B6B1B357442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17F3285-80E8-4BE5-8704-3379CF326601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9669DF61-DDC5-498D-906A-494D56BAE450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B0502B-3363-4F3C-A147-8888B894635B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "689327CA-F302-49FC-9365-F09E4A60E8FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnc4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571ECF0D-06C6-4371-891C-FB68A3093F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A38CF1F-37D9-4CBD-8B98-C24637FF7F56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0886F6DC-C590-48A0-BE27-6CD778EB37FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8552242D-0A93-4841-83F9-EA4D7F58938E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnd3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D0667D1-B4EC-4FF0-AC5D-9C1B04D84099"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45D0EFD-784A-4CDB-8FDB-41F6869B4735"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnp1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "942CC01D-ED6E-4731-A61B-75CDF219F760"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jnp3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59CA018E-5160-40AE-953D-9559F23D2EAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpb:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBA595EF-8718-4477-8EEC-EA948C14F091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpb1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CDCADB1-EA01-41AF-9D96-A6EDE42D7A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13763901-2D7B-485D-A957-E30587BCEB88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B213166-77E2-4E13-8769-FA8AF6EEC33A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3C0371-223A-433C-B8A3-C24A499EB82F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A066A001-830B-4407-A5CD-AB99059C190E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpc5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B45095-526D-4BC5-A16B-6B5741F07FD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios:15.3\\(3\\)jpd:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A9F7DF-BB18-46FC-B471-3FC41F4CCD01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.0xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930678B3-1527-4967-9D8F-27FC0DA060AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.1xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58A34268-7618-48D2-8872-27B5B624543B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.3.2xo:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2017A75-CC29-4161-85CB-7A531E5ABB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-SAP-OPLbze68",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-SAP-OPLbze68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1394",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.133",
      "lastModified" : "2024-11-21T05:44:15.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ingress traffic manager of Cisco IOS XE Software for Cisco Network Convergence System (NCS) 520 Routers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition in the web management interface of an affected device. This vulnerability is due to incorrect processing of certain IPv4 TCP traffic that is destined to an affected device. An attacker could exploit this vulnerability by sending a large number of crafted TCP packets to the affected device. A successful exploit could allow the attacker to cause the web management interface to become unavailable, resulting in a DoS condition. Note: This vulnerability does not impact traffic that is going through the device or going to the Management Ethernet interface of the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el administrador de tráfico de la entrada del Software Cisco IOS XE para enrutadores Cisco Network Convergence System (NCS) 520, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en la interfaz de administración web de un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido al procesamiento incorrecto de cierto tráfico IPv4 TCP destinado a un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una gran cantidad de paquetes TCP diseñados al dispositivo afectado.&#xa0;Una explotación con éxito podría permitir que el atacante cause que la interfaz de administración web deje de estar disponible, resultando en una condición de DoS.&#xa0;Nota: esta vulnerabilidad no afecta el tráfico que atraviesa el dispositivo o que se dirige a la interfaz Ethernet de administración del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncs520-tcp-ZpzzOxB",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ncs520-tcp-ZpzzOxB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1398",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.213",
      "lastModified" : "2024-11-21T05:44:15.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the boot logic of Cisco IOS XE Software could allow an authenticated, local attacker with level 15 privileges or an unauthenticated attacker with physical access to execute arbitrary code on the underlying Linux operating system of an affected device. This vulnerability is due to incorrect validations of specific function arguments that are passed to the boot script. An attacker could exploit this vulnerability by tampering with a specific file, which an affected device would process during the initial boot process. On systems that are protected by the Unified Extensible Firmware Interface (UEFI) secure boot feature, a successful exploit could allow the attacker to execute unsigned code at boot time and bypass the image verification check in the secure boot process of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la lógica de arranque del Software Cisco IOS XE, podría permitir a un atacante local autenticado con privilegios de nivel 15 o un atacante no autenticado con acceso físico ejecutar código arbitrario en el sistema operativo Linux subyacente de un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a comprobaciones incorrectas de argumentos de funciones específicas que se pasan al script de arranque.&#xa0;Un atacante podría explotar esta vulnerabilidad al manipular un archivo específico, que un dispositivo afectado procesaría durante el proceso de arranque inicial.&#xa0;En los sistemas que están protegidos por la función de arranque seguro de la Unified Extensible Firmware Interface (UEFI), Una explotación con éxito podría permitir al atacante ejecutar código sin firmar en el momento del arranque y omitir la comprobación de la imagen en el proceso de arranque seguro del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-489"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87687169-312C-41E6-9557-B2536A4CCA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0xas:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E7F768-0ABD-486E-810E-7C444951F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D46F3A2-C0C2-4083-B32F-B94DA4FD213E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312FDFDD-7612-4E79-A12E-7B1540324696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A56292-386C-4FC8-BC54-EF9E465F891B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86176257-7075-476E-BE09-B0E469392BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F719709E-ACE9-4539-BA05-72F7DCB8BFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3B6D68-DA31-45EB-ACFD-AE703B2FA2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0xas:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4293A90D-1FCA-456D-9D70-F5650B80B462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6352A220-8F3E-4E08-8DD3-50E366434333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xcs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007C8D80-2A6B-4C53-8A6B-0C95BCF1CA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12F65A-5B43-4612-8788-B697567C0B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483A3F03-F5CC-45BD-AEB7-83E23601BB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1692889D-BD16-41C6-A226-A9BAF6F64603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D377F-EBEC-4234-8628-2CFD04E43CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE50185-23ED-4640-9037-E45810793C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96637FB9-B552-417B-8C7F-4F4524F69690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C97617-6574-4EFD-8408-A9E21A56E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB188B71-4CF0-49EA-BA00-10FEDF994D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97410577-A005-49B6-981C-535B3484E72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3420FB4D-8A6A-4B37-A4AE-7B35BEEEAF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D71B3-1CCE-4526-8D91-048212EEDF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F66514-B9C4-422E-B68E-406608302E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC524BA-544C-49B9-A9D6-800D25556532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A07FC8-5649-4A64-8B94-507524FE4551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1gsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3170E3-0BCC-4C5F-8E6C-5E91E8C4E7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1hsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCDB353-DD15-4C91-AD2A-73649C012E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1isp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DAAE1-BB3F-4FBA-A6ED-3BABC9196C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B0DE46-C4C4-4DA1-A4CD-9627F13FED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E818D-03BB-4FE4-946B-B967E9764DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186ADB50-A4D4-4B32-884D-3195E7770346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334F278A-CFEB-4145-9D8D-EFC36A1BF258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.5sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B76F26E-7B1C-4894-8CDD-4BA1243E4EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.6sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FB99D7-CDA9-4C3E-9DBB-3AC1CEBA4D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.7sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D05DBA-D3F0-492B-9976-54A7E46F315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596E09DB-97B1-4DCE-AC5E-18CC9ACCAFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78224D59-5C86-4090-9645-170B6583C7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-ACE-75K3bRWe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-ACE-75K3bRWe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1403",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.320",
      "lastModified" : "2024-11-21T05:44:16.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web UI feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to conduct a cross-site WebSocket hijacking (CSWSH) attack and cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient HTTP protections in the web UI on an affected device. An attacker could exploit this vulnerability by persuading an authenticated user of the web UI to follow a crafted link. A successful exploit could allow the attacker to corrupt memory on the affected device, forcing it to reload and causing a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de la Interfaz de Usuario Web del Software Cisco IOS XE, podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de secuestro de WebSocket (CSWSH) entre sitios y causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a protecciones HTTP insuficientes en la interfaz de usuario web de un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario autenticado de la interfaz de usuario web para que siga un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante corromper la memoria del dispositivo afectado, lo que forzaría a recargarlo y causaría una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4046C325-7EDB-4C95-AA98-541BEC8F9E0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-cswsh-FKk9AzT5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-cswsh-FKk9AzT5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1431",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.430",
      "lastModified" : "2024-11-21T05:44:20.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the vDaemon process of Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso vDaemon del Software Cisco IOS XE SD-WAN, podría permitir a un atacante remoto no autenticado causar la recarga de un dispositivo, lo que resultará en una condición de denegación de servicio (DoS).&#xa0;Esta vulnerabilidad es debido al manejo insuficiente de paquetes malformados.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico diseñado hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el dispositivo se recargue, lo que resultaría en una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwdos-4zeEeC9w",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwdos-4zeEeC9w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1432",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.510",
      "lastModified" : "2024-11-21T05:44:21.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system as the root user. The attacker must be authenticated on the affected device as a low-privileged user to exploit this vulnerability. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by injecting arbitrary commands to a file as a lower-privileged user. The commands are then executed on the device by the root user. A successful exploit could allow the attacker to execute arbitrary commands as the root user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado ejecutar comandos arbitrarios en el sistema operativo subyacente como usuario root.&#xa0;El atacante debe estar autenticado en el dispositivo afectado como un usuario poco privilegiado para explotar esta vulnerabilidad.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad al inyectar comandos arbitrarios en un archivo como usuario poco privilegiado.&#xa0;A continuación, el usuario root ejecuta los comandos en el dispositivo.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos arbitrarios como usuario root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C87891C-B8D0-4286-B6A7-61037E1A6A54"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwarbcmdexec-sspOMUr3",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwarbcmdexec-sspOMUr3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1433",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.603",
      "lastModified" : "2024-11-21T05:44:21.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the vDaemon process in Cisco IOS XE SD-WAN Software could allow an unauthenticated, remote attacker to cause a buffer overflow on an affected device. This vulnerability is due to insufficient bounds checking when the device processes traffic. An attacker could exploit this vulnerability by sending crafted traffic to the device. The attacker must have a man-in-the-middle position between Cisco vManage and an associated device that is running an affected version of Cisco IOS XE SD-WAN Software. An exploit could allow the attacker to conduct a controllable buffer overflow attack (and possibly execute arbitrary commands as the root user) or cause a device reload, resulting in a denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso vDaemon en el Software Cisco IOS XE SD-WAN, podría permitir a un atacante remoto no autenticado causar un desbordamiento del búfer en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a la comprobación de límites insuficiente cuando el dispositivo procesa el tráfico.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico diseñado al dispositivo.&#xa0;El atacante debe tener una posición de man-in-the-middle entre Cisco vManage y un dispositivo asociado que esté ejecutando una versión afectada del Software Cisco IOS XE SD-WAN.&#xa0;Una explotación podría permitir al atacante realizar un ataque de desbordamiento de búfer controlable (y posiblemente ejecutar comandos arbitrarios como usuario root) o causar una recarga del dispositivo, lo que resultaría en una condición de denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-buffover-CqdRWLc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-buffover-CqdRWLc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1434",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.667",
      "lastModified" : "2024-11-21T05:44:21.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system. This vulnerability is due to insufficient validation of the parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content of any arbitrary file that resides on the underlying host file system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado sobrescribir archivos arbitrarios en el sistema de archivos subyacente.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de los parámetros de un comando de CLI específico.&#xa0;Un atacante podría explotar esta vulnerabilidad al emitir ese comando con parámetros específicos.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir el contenido de cualquier archivo arbitrario que resida en el sistema de archivos del host subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-arbfile-FUxskKDE",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-arbfile-FUxskKDE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1435",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.760",
      "lastModified" : "2024-11-21T05:44:21.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the root user. This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to the web UI of an affected device with arbitrary commands injected into a portion of the request. A successful exploit could allow the attacker to execute arbitrary commands as the root user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la Interfaz de Usuario Web del Software Cisco IOS XE, podría permitir a un atacante remoto autenticado inyectar comandos arbitrarios que se pueden ejecutar como usuario root.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición diseñada a la Interfaz de Usuario Web de un dispositivo afectado con comandos arbitrarios inyectados en una parte de la petición.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos arbitrarios como usuario root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webcmdinjsh-UFJxTgZD",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-webcmdinjsh-UFJxTgZD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1436",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.820",
      "lastModified" : "2024-11-21T05:44:21.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read access to sensitive files on an affected system. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to view arbitrary files on the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado llevar a cabo ataques de salto de ruta y obtener acceso de lectura a archivos confidenciales en un sistema afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición diseñada a un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante visualizar archivos arbitrarios en el sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwpathtrav-nsrue2Mt",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-sdwpathtrav-nsrue2Mt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1437",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.900",
      "lastModified" : "2024-11-21T05:44:21.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the FlexConnect Upgrade feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, remote attacker to obtain confidential information from an affected device. This vulnerability is due to an unrestricted Trivial File Transfer Protocol (TFTP) configuration. An attacker could exploit this vulnerability by sending a specific TFTP request to an affected device. A successful exploit could allow the attacker to download any file from the filesystem of the affected access point (AP)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad FlexConnect Upgrade del Software Cisco Aironet Series Access Points, podría permitir a un atacante remoto no autenticado obtenga información confidencial de un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una configuración sin restricciones del Trivial File Transfer Protocol (TFTP).&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición TFTP específica a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante descargar cualquier archivo del sistema de archivos del punto de acceso (AP) afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-275"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aironet_access_point_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48036EE-DE42-412A-B3C9-CBCE7414DB33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BFEED4-7AD7-406F-A044-BDEA98133711"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D8A4CB-5B80-4332-BCBC-DA18AD94D215"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749040C6-A21A-4EF3-8213-42EE01CFA303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C559D6F7-B432-4A2A-BE0E-9697CC412C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09051BC5-CFE7-43EF-975D-BF77724E8776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.3.3",
            "matchCriteriaId" : "8BDFBA81-4DF6-4BC8-8D16-2520510ADE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.10.112.0",
            "versionEndExcluding" : "8.10.142.0",
            "matchCriteriaId" : "168B2B18-BFBB-4AE9-BAE5-E178BA2DA844"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-info-disc-BfWqghj",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-info-disc-BfWqghj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1439",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:14.977",
      "lastModified" : "2024-11-21T05:44:22.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the multicast DNS (mDNS) gateway feature of Cisco Aironet Series Access Points Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient input validation of incoming mDNS traffic. An attacker could exploit this vulnerability by sending a crafted mDNS packet to an affected device through a wireless network that is configured in FlexConnect local switching mode or through a wired network on a configured mDNS VLAN. A successful exploit could allow the attacker to cause the access point (AP) to reboot, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad multicast DNS (mDNS) gateway del Software Cisco Aironet Series Access Points, podría permitir a un atacante adyacente no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada del tráfico mDNS entrante.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete mDNS diseñado hacia un dispositivo afectado por medio de una red inalámbrica configurada en el modo de conmutación local FlexConnect o mediante una red cableada en una VLAN mDNS configurada.&#xa0;Una explotación con éxito podría permitir al atacante causar que el punto de acceso (AP) se reinicie, lo que resultaría en una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aironet_access_point_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48036EE-DE42-412A-B3C9-CBCE7414DB33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BFEED4-7AD7-406F-A044-BDEA98133711"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D8A4CB-5B80-4332-BCBC-DA18AD94D215"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749040C6-A21A-4EF3-8213-42EE01CFA303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C559D6F7-B432-4A2A-BE0E-9697CC412C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09051BC5-CFE7-43EF-975D-BF77724E8776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.3.3",
            "matchCriteriaId" : "8BDFBA81-4DF6-4BC8-8D16-2520510ADE2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-mdns-dos-E6KwYuMx",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-aironet-mdns-dos-E6KwYuMx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1441",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.040",
      "lastModified" : "2024-11-21T05:44:22.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the hardware initialization routines of Cisco IOS XE Software for Cisco 1100 Series Industrial Integrated Services Routers and Cisco ESR6300 Embedded Series Routers could allow an authenticated, local attacker to execute unsigned code at system boot time. This vulnerability is due to incorrect validations of parameters passed to a diagnostic script that is executed when the device boots up. An attacker could exploit this vulnerability by tampering with an executable file stored on a device. A successful exploit could allow the attacker to execute unsigned code at boot time and bypass the software image verification check part of the secure boot process of an affected device. To exploit this vulnerability, the attacker would need administrative level credentials (level 15) on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las rutinas de inicialización de hardware del Software Cisco IOS XE para los Enrutadores Cisco 1100 Series Industrial Integrated Services y los Enrutadores Cisco ESR6300 Embedded Series, podría permitir a un atacante local autenticado ejecutar código sin firmar en el momento del inicio del sistema.&#xa0;Esta vulnerabilidad es debido a comprobaciones incorrectas de parámetros pasados ??a un script de diagnóstico que se ejecuta cuando se inicia el dispositivo.&#xa0;Un atacante podría explotar esta vulnerabilidad al manipular un archivo ejecutable almacenado en un dispositivo.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código sin firmar en el momento del arranque y omitir la comprobación de la imagen del software como parte del proceso de arranque seguro de un dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante necesitaría credenciales de nivel administrativo (nivel 15) en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esr6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D19136-4ECB-437F-BA8A-E2FE35A39BF9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ir1101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E80DC31-8EC9-47A2-B961-0A819374A884"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-iot-codexec-k46EFF6q",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-iot-codexec-k46EFF6q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1442",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.133",
      "lastModified" : "2024-11-21T05:44:22.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in a diagnostic command for the Plug-and-Play (PnP) subsystem of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to the level of an Administrator user (level 15) on an affected device. The vulnerability is due to insufficient protection of sensitive information. An attacker with low privileges could exploit this vulnerability by issuing the diagnostic CLI show pnp profile when a specific PnP listener is enabled on the device. A successful exploit could allow the attacker to obtain a privileged authentication token. This token can be used to send crafted PnP messages and execute privileged commands on the targeted system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un comando de diagnóstico para el subsistema Plug-and-Play (PnP) del Software Cisco IOS XE, podría permitir a un atacante local autenticado eleve privilegios al nivel de un usuario administrador (nivel 15) en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una protección insuficiente de la información confidencial.&#xa0;Un atacante con pocos privilegios podría explotar esta vulnerabilidad emitiendo el show pnp profile de la CLI de diagnóstico cuando un oyente PnP específico está habilitado en el dispositivo.&#xa0;Una explotación con éxito podría permitir al atacante obtener un token de autenticación privilegiado.&#xa0;Este token se puede utilizar para enviar mensajes PnP diseñados y ejecutar comandos privilegiados en el sistema de destino"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A9A46-517E-467B-A702-E6F6DD9FCD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671F6847-6855-41BF-A148-944AEEB32A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7207B1F1-AF21-4C02-A163-4289503A026C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7CC0497-24F5-42ED-99A6-4C8642F73F08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120DA9BF-1153-41C8-B80D-3F99E0E28A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89812FA8-230C-4F62-8AA8-7F13FA86B805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C116A982-58BF-4523-A5B1-83089E8557D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D17DB28-2559-4837-8B4B-7CC722D73324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92991EE-BB4A-499D-8F14-F7D0E32BE31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCBE369-81ED-4C94-8C44-53C6F4A087CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90005E78-413A-47D7-82B3-A3011E6B118D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D764D126-4604-43DD-9A66-BDD32565D893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA25E3C0-24C1-479C-8C8F-A6FB9C5002FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06067D8B-79BD-4982-909F-7C08BE5660C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAFB8DA-F9EC-4A42-A663-1BB4EF8F5E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672B77C7-0E6B-496D-9ACC-6AD965319B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA1D885-2270-4370-9F3F-CA80B0E96DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895DAB3D-5C14-4D0B-94FA-EB7C7C7BB0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9846AE-1344-4EE4-9FDF-6CE17D9461FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3363DF79-8A5A-4BE2-B04C-253A4A3A0ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25725655-EBDE-4538-8AE1-CF5C81F09C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98F2654-46F3-4C63-A2C2-48B372C655B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4E206B-37BF-4D61-BE90-80BB65C0C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17674BAD-F2F1-4E63-AAE0-FEAC14C37CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4117E2EC-F58A-4B22-AB72-FC63A0D96E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20286676-70FF-471C-9612-74E5F0ECB8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327F7D0-93E8-4005-9ECB-44852C16BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27252883-091A-471D-87FC-E07EADBC6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF9D58E-CD75-47B1-938C-B5C0A73E28FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC3D979-02B2-4EEC-A6C2-A44C9FC694D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C340CE-7F18-448B-B9BE-BFEB1724C882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C97617-6574-4EFD-8408-A9E21A56E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB188B71-4CF0-49EA-BA00-10FEDF994D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97410577-A005-49B6-981C-535B3484E72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3420FB4D-8A6A-4B37-A4AE-7B35BEEEAF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D71B3-1CCE-4526-8D91-048212EEDF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F66514-B9C4-422E-B68E-406608302E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC524BA-544C-49B9-A9D6-800D25556532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A07FC8-5649-4A64-8B94-507524FE4551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1gsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3170E3-0BCC-4C5F-8E6C-5E91E8C4E7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1hsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCDB353-DD15-4C91-AD2A-73649C012E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1isp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DAAE1-BB3F-4FBA-A6ED-3BABC9196C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B0DE46-C4C4-4DA1-A4CD-9627F13FED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E818D-03BB-4FE4-946B-B967E9764DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186ADB50-A4D4-4B32-884D-3195E7770346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334F278A-CFEB-4145-9D8D-EFC36A1BF258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.5sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B76F26E-7B1C-4894-8CDD-4BA1243E4EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.6sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FB99D7-CDA9-4C3E-9DBB-3AC1CEBA4D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.7sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D05DBA-D3F0-492B-9976-54A7E46F315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596E09DB-97B1-4DCE-AC5E-18CC9ACCAFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78224D59-5C86-4090-9645-170B6583C7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-pnp-priv-esc-AmG3kuVL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1443",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.227",
      "lastModified" : "2024-11-21T05:44:22.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to execute arbitrary code with root privileges on the underlying operating system of an affected device. The vulnerability exists because the affected software improperly sanitizes values that are parsed from a specific configuration file. An attacker could exploit this vulnerability by tampering with a specific configuration file and then sending an API call. A successful exploit could allow the attacker to inject arbitrary code that would be executed on the underlying operating system of the affected device. To exploit this vulnerability, the attacker would need to have a privileged set of credentials to the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la Interfaz de Usuario Web del Software Cisco IOS XE, podría permitir a un atacante remoto autenticado ejecutar código arbitrario con privilegios root en el sistema operativo subyacente de un dispositivo afectado.&#xa0;La vulnerabilidad se presenta porque el software afectado sanea incorrectamente los valores que se analizan de un archivo de configuración específico.&#xa0;Un atacante podría explotar esta vulnerabilidad alterando un archivo de configuración específico y luego mediante el envío de una llamada a la API.&#xa0;Una explotación con éxito podría permitir al atacante inyectar código arbitrario que se ejecutaría en el sistema operativo subyacente del dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante debería tener un conjunto privilegiado de credenciales para el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18B32E3-6B33-4E3D-879A-82E2F0BFC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-os-cmd-inj-Ef6TV5e9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-os-cmd-inj-Ef6TV5e9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1446",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.307",
      "lastModified" : "2024-11-21T05:44:22.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DNS application layer gateway (ALG) functionality used by Network Address Translation (NAT) in Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a logic error that occurs when an affected device inspects certain DNS packets. An attacker could exploit this vulnerability by sending crafted DNS packets through an affected device that is performing NAT for DNS packets. A successful exploit could allow an attacker to cause the device to reload, resulting in a denial of service (DoS) condition on an affected device. The vulnerability can be exploited only by traffic that is sent through an affected device via IPv4 packets. The vulnerability cannot be exploited via IPv6 traffic."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad DNS application layer gateway (ALG) utilizada por la Network Address Translation (NAT) en el Software Cisco IOS XE, podría permitir a un atacante remoto no autenticado causar la recarga de un dispositivo afectado.&#xa0;La vulnerabilidad es debido a un error lógico que ocurre cuando un dispositivo afectado inspecciona determinados paquetes DNS.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes DNS diseñados por medio de un dispositivo afectado que realiza NAT para paquetes DNS.&#xa0;Una explotación con éxito podría permitir a un atacante causar que el dispositivo se recargue, lo que resultaría en una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;La vulnerabilidad solo puede explotarse mediante el tráfico que se envía por medio de un dispositivo afectado mediante paquetes IPv4.&#xa0;La vulnerabilidad no se puede explotar por medio del tráfico IPv6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87687169-312C-41E6-9557-B2536A4CCA01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E979597C-E614-45E9-9AC4-66DE323221BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0xas:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52E7F768-0ABD-486E-810E-7C444951F061"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D46F3A2-C0C2-4083-B32F-B94DA4FD213E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "312FDFDD-7612-4E79-A12E-7B1540324696"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55E908D0-7327-42B7-81C0-FA25BF45929C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5420E152-A00C-406C-8E27-6B7ADE4ABF5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A56292-386C-4FC8-BC54-EF9E465F891B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "036DAA45-B363-47BB-ADBA-992F381572EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86176257-7075-476E-BE09-B0E469392BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCB1EA1E-D995-4732-9685-75AC9042D484"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EA68978-C42E-4A5E-A0D6-7887FA0318B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FF06D7B-A239-4046-A704-01C54D534F35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4622910B-5459-4FA4-A8D0-239AF2EFFE06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F719709E-ACE9-4539-BA05-72F7DCB8BFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C64E-808F-4A6C-B245-7A9996FAFE3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E1040AF-A087-4791-BFC3-36CA3F3208E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F95B900-12A3-4488-BB50-20C972BEE169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3B6D68-DA31-45EB-ACFD-AE703B2FA2D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94227B25-5C86-453C-9DC8-A8201C1D1FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0xas:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4293A90D-1FCA-456D-9D70-F5650B80B462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6352A220-8F3E-4E08-8DD3-50E366434333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10F278DC-5102-4A18-9C72-E8FEEDCC5729"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "513675B5-D62C-442D-8754-DC4F221942B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9D9F45C-E71F-4425-A0C7-DFFEEC93C152"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26FB3B1A-FB8C-4371-A6D2-AB83ECF17F96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48B351B3-3A18-4068-A95D-68942955070E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1xcs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "007C8D80-2A6B-4C53-8A6B-0C95BCF1CA89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D12F65A-5B43-4612-8788-B697567C0B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A005E0C-A744-4AFA-A1D1-2E3228E093FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2ts:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED25B1B-C47A-45E9-8235-081550FB0AD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86B7EC67-B431-4284-8781-9090D134B781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3598539F-0EEB-45D6-8BA5-A2A3F69D556C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CF349D4-BF1C-4127-B6FA-7AD379F62A3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6ABE123-BBA5-46CD-8578-4A1F3CB8BA08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD674BF9-16F6-4817-9ADE-564A402A5F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A4142E2-B8A8-4E78-B4ED-52F63C43C6F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DA3731-E719-4DB7-9783-1C00481141EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "483A3F03-F5CC-45BD-AEB7-83E23601BB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1692889D-BD16-41C6-A226-A9BAF6F64603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DAC081C-9A22-4CBC-A9D0-DD9995801791"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F43F819E-3072-430F-8C52-B43FF28D4687"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F59A9-C1EF-4E9B-B204-1EEC7FDF65BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09A930B7-7B9B-426E-A296-9F29F4A03F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "309952D7-B220-4678-A16D-AA5FF005F782"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C5FC5B-BE2E-4BAC-AC23-58666BDEB553"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503EFE9E-C238-46BA-8CA3-DE8D5DDB9A2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6EC8B17-6EC2-47AF-818D-1DFBDA612FB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278ACF0A-949B-486D-8F6C-ADC2AF25FC17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A30BA4-D760-4321-AAC8-04093AAAEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.12.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42616EA2-DDCF-4B57-BF2A-37968C82DDC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "246251E8-7D4E-4CD4-8D4F-BF360780FA36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09F35F75-75E8-4A20-94C4-5908E404C8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C01C1D8-A191-45B7-A6C5-EE225F05A49E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16D7ACF1-6A30-4D6E-AA69-D2F365E2791C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E50FF89-8E71-4EA0-9AEC-2F800ED9D995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F6E9386-30B4-4E86-9676-E7E005274048"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E70C455-E41C-4B17-847A-5F4281139252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DD0A60B-6848-4B9A-B11D-2C2952D2D48C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A07329-3A7D-4483-AE69-4786FEB23D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E4463-DB0F-4B06-B403-B3606B386F02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E08D377F-EBEC-4234-8628-2CFD04E43CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "665ACEAC-AE81-40F7-8A01-E8DB9DD7DD7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAE50185-23ED-4640-9037-E45810793C85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96637FB9-B552-417B-8C7F-4F4524F69690"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA6851D-6DC1-403F-A511-EE996FE832F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7C97617-6574-4EFD-8408-A9E21A56E1AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.13.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB188B71-4CF0-49EA-BA00-10FEDF994D70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD803F59-1CD2-4CA9-9EB1-3CC4ABCD9547"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9247665-BBE7-4DEF-B97B-4981A0EA5CE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E61E0102-B9B6-41F4-9041-0A5F144D849A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "579C9E7F-6AE4-4DF5-ABCF-DB390E4669E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.14.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A076E1F-3457-410A-8AB6-64416ECB20A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAD93CD1-4188-40B7-A20E-9C3FE8344A27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EEAB7F8-EAB5-4E7A-8A1B-38EC16D601FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2972E680-5A19-4858-9B35-0B959ED319A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BFE916-916F-4936-A331-21A0E8193920"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0EC9A19-26E6-4E69-B4E7-852CB6327EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5484A4-D116-4B79-8369-47979E20AACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97410577-A005-49B6-981C-535B3484E72F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3420FB4D-8A6A-4B37-A4AE-7B35BEEEAF71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5568EABF-8F43-4A87-8DE4-A03E9065BE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E5BB91-B5E7-4961-87DC-26596E5EDED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC72AA6D-9E18-49F7-95CA-A4A5D7A60E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3822447-EB80-4DF2-B7F2-471F55BA99C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA0B441A-3A09-4A58-8A40-D463003A50BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51E1A64A-204D-4567-A2DC-EFEB2AE62B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "970FD986-6D0E-441C-9BF3-C66A25763A7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EEFD3AD-EFA2-4808-801E-B98E4C63AA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1826C997-6D5D-480E-A12E-3048B6C61216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D136C95-F837-49AD-82B3-81C25F68D0EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C35B3F96-B342-4AFC-A511-7A735B961ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4cs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203E52-0A3A-4910-863D-05FEF537C9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4ds:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED2D791-4142-4B9E-8401-6B63357536B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4es:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6442B5-A87E-493B-98D5-F954B5A001BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4gs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8794DA1D-9EE8-4139-B8E9-061A73CFD5F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FBEF4B2-EA12-445A-823E-E0E5343A405E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51EAC484-1C4F-4CA8-B8E1-6EE0E9497A4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BC5E30-71D2-4C17-A1BA-0850A9BC7D50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.5s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "844E7CEC-5CB6-47AE-95F7-75693347C08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E50A67CE-EB1C-4BFA-AB40-BCF6CDF168BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.6s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "147A245E-9A5D-4178-A1AC-5B0D41C3B730"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "169D71B3-1CCE-4526-8D91-048212EEDF08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7bs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F66514-B9C4-422E-B68E-406608302E03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.7s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2438157-4D9C-4E16-9D2A-759A8F6CDDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.8s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12ECC01E-E59F-4AED-AE51-7EE6B5E717E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.9s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC524BA-544C-49B9-A9D6-800D25556532"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A07FC8-5649-4A64-8B94-507524FE4551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.16.10s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BC99316-75AC-45EB-B6BB-DB014ED08ECA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12793F39-13C4-4DBC-9B78-FE361BDDF89D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AEF94C7-CEE6-4696-9F1D-549639A831C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "876767C7-0196-4226-92B1-DDE851B53655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0141D67B-632F-48ED-8837-4CC799616C57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "141FFB5E-EA72-4FC1-B87A-B5E2D5FCFE2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.17.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE444B39-D025-471B-835E-88671212ACAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0as:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE390091-D382-4436-BBB4-D4C33E4F6714"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE81AA43-88D4-4EFC-B8F6-A41EFF437819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.0sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C18E6308-7A34-43E3-9AD8-5FB52B31ACB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A667AEC6-57E3-4D67-A02E-F0BAEBCE16DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80EE163D-D9EC-46A1-826A-54F8F3A3FFBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1csp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CE4CFE4-C00F-4FAE-8FDF-F6C92E92838D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1gsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3170E3-0BCC-4C5F-8E6C-5E91E8C4E7A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1hsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCDB353-DD15-4C91-AD2A-73649C012E08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1isp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D7DAAE1-BB3F-4FBA-A6ED-3BABC9196C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEBCBF7-D1CF-488F-BB3E-F864F901A96A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.1sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06BBE88E-FEFB-4B90-91D1-4F053FA0EA47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D43FA49-1F9D-4FD0-AF18-6E9AB6DF702F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8CCA19-1D1C-45C0-A1A0-CED5885AD580"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.2sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014224BF-926E-470C-A133-84036D8AD533"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10B0DE46-C4C4-4DA1-A4CD-9627F13FED3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3bsp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B58E818D-03BB-4FE4-946B-B967E9764DA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4063CCF8-19BE-4411-B71B-147BB146700B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.3sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DE8E0D1-E4AD-4648-BCF0-AE11B93D22B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "186ADB50-A4D4-4B32-884D-3195E7770346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.4sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "334F278A-CFEB-4145-9D8D-EFC36A1BF258"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.5sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B76F26E-7B1C-4894-8CDD-4BA1243E4EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.6sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5FB99D7-CDA9-4C3E-9DBB-3AC1CEBA4D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.7sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63D05DBA-D3F0-492B-9976-54A7E46F315E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8asp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596E09DB-97B1-4DCE-AC5E-18CC9ACCAFB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.18.8sp:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78224D59-5C86-4090-9645-170B6583C7E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED5527C-A638-4E20-9928-099E32E17743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A685A9A-235D-4D74-9D6C-AC49E75709CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43052998-0A27-4E83-A884-A94701A3F4CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89526731-B712-43D3-B451-D7FC503D2D65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302933FE-4B6A-48A3-97F0-4B943251B717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "296636F1-9242-429B-8472-90352C056106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77993343-0394-413F-ABF9-C1215E9AD800"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "283971DD-DD58-4A76-AC2A-F316534ED416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8F324A5-4830-482E-A684-AB3B6594CEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8120196-8648-49D0-8262-CD4C9C90C37A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33E7CCE2-C685-4019-9B55-B3BECB3E5F76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0699DD6E-BA74-4814-93AB-300329C9D032"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2E2D781-2684-45F1-AC52-636572A0DCA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "479FB47B-AF2E-4FCB-8DE0-400BF325666C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2B4C78-5C31-4F3D-9639-305E15576E79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C09F0A2-B21F-40ED-A6A8-9A29D6E1C6A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BA13F4-EF9C-4368-B8B1-9FD9FAF5CEFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CB889F-B064-4CAC-99AC-903745ACA566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D18B32E3-6B33-4E3D-879A-82E2F0BFC906"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alg-dos-hbBS7SZE",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-alg-dos-hbBS7SZE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1449",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.400",
      "lastModified" : "2024-11-21T05:44:23.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the boot logic of Cisco Access Points Software could allow an authenticated, local attacker to execute unsigned code at boot time. The vulnerability is due to an improper check that is performed by the area of code that manages system startup processes. An attacker could exploit this vulnerability by modifying a specific file that is stored on the system, which would allow the attacker to bypass existing protections. A successful exploit could allow the attacker to execute unsigned code at boot time and bypass the software image verification check part of the secure boot process of an affected device. Note: To exploit this vulnerability, the attacker would need to have access to the development shell (devshell) on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la lógica de arranque del Software Cisco Access Points, podría permitir a un atacante local autenticado ejecutar código sin firmar en el momento del arranque.&#xa0;La vulnerabilidad es debido a una comprobación inapropiada que es llevada a cabo por el área de código que administra los procesos de inicio del sistema.&#xa0;Un atacante podría explotar esta vulnerabilidad al modificar un archivo específico que está almacenado en el sistema, lo que le permitiría omitir las protecciones existentes.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código sin firmar en el momento del arranque y omitir la comprobación de la imagen del software como parte del proceso de arranque seguro de un dispositivo afectado.&#xa0;Nota: Para explotar esta vulnerabilidad, el atacante debería tener acceso al shell de desarrollo (devshell) en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aironet_access_point_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48036EE-DE42-412A-B3C9-CBCE7414DB33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BFEED4-7AD7-406F-A044-BDEA98133711"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D8A4CB-5B80-4332-BCBC-DA18AD94D215"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749040C6-A21A-4EF3-8213-42EE01CFA303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C559D6F7-B432-4A2A-BE0E-9697CC412C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09051BC5-CFE7-43EF-975D-BF77724E8776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.12.5",
            "matchCriteriaId" : "DCD9BB32-1D37-4F86-9E93-B77DAB09B874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.3.3",
            "matchCriteriaId" : "8BDFBA81-4DF6-4BC8-8D16-2520510ADE2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.5.1",
            "matchCriteriaId" : "F2FA8344-3D28-4E46-9B90-C5BD5256ACF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.171.0",
            "matchCriteriaId" : "4303CDF3-6399-41CA-BD2A-3C894DD02064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6",
            "versionEndExcluding" : "8.10.150.0",
            "matchCriteriaId" : "570AC97E-DD6A-4568-8F19-D49B4D5D05A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-privesc-wEVfp8Ud",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-privesc-wEVfp8Ud",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1451",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.477",
      "lastModified" : "2024-11-21T05:44:23.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Easy Virtual Switching System (VSS) feature of Cisco IOS XE Software for Cisco Catalyst 4500 Series Switches and Cisco Catalyst 4500-X Series Switches could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying Linux operating system of an affected device. The vulnerability is due to incorrect boundary checks of certain values in Easy VSS protocol packets that are destined for an affected device. An attacker could exploit this vulnerability by sending crafted Easy VSS protocol packets to UDP port 5500 while the affected device is in a specific state. When the crafted packet is processed, a buffer overflow condition may occur. A successful exploit could allow the attacker to trigger a denial of service (DoS) condition or execute arbitrary code with root privileges on the underlying Linux operating system of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad Easy Virtual Switching System (VSS) del Software Cisco IOS XE, para los Switches Cisco Catalyst de la serie 4500 y los Switches Cisco Catalyst de la serie 4500-X, podría permitir a un atacante remoto no autenticado ejecutar código arbitrario en el sistema operativo Linux subyacente de un dispositivo afectado.&#xa0;La vulnerabilidad es debido a comprobaciones de límites incorrectas de determinados valores en los paquetes del protocolo Easy VSS que están destinados a un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes de protocolo Easy VSS diseñados al puerto UDP 5500 mientras el dispositivo afectado se encuentra en un estado específico.&#xa0;Cuando se procesa el paquete diseñado, puede ocurrir una condición de desbordamiento del búfer. Una explotación con éxito podría permitir al atacante desencadenar una condición de denegación de servicio (DoS) o ejecutar código arbitrario con privilegios root en el sistema operativo Linux subyacente del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2306E8-ABFD-4C37-A911-7B35A654147C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "455DAAB8-83B4-44B9-B2F7-2DC9EA796898"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F462360-3597-420B-ACB8-44A6F622C8B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CA4E70-28BE-434C-811A-C16474CFD87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E77A9A46-517E-467B-A702-E6F6DD9FCD96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD485792-290B-4553-AAB2-DA7427DE7131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB7139C7-3C02-46C9-8F89-CB517A706CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0AD00E6-A155-4CCB-B329-7B536BEBC976"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D365DFD-C99B-4F33-9A90-1162C7A4D3EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "671F6847-6855-41BF-A148-944AEEB32A5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120DA9BF-1153-41C8-B80D-3F99E0E28A8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89812FA8-230C-4F62-8AA8-7F13FA86B805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D17DB28-2559-4837-8B4B-7CC722D73324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.6.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92991EE-BB4A-499D-8F14-F7D0E32BE31E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A56AE607-0AD0-487A-A266-C15EAF40F2CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F8B8DBC-F273-4ADE-97F4-584DE23F1CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "705971E9-7FB4-43EA-A1AE-C91865EADE16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F481A851-D607-4CEF-87C5-147FFBC97D3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "355F4945-4FFA-469F-A799-815F371C637B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.7.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1432B59F-5A66-4A5A-B3F7-E297700ED9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013DD522-1561-4468-A350-C872B78FC291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6907E1FE-760E-4557-A472-1A1F0052B82B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62291CDD-A775-44B4-85F3-CE1D494F55FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658EDFE2-6EC8-4DD3-AACA-C168F942712A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.4e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCBE369-81ED-4C94-8C44-53C6F4A087CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90005E78-413A-47D7-82B3-A3011E6B118D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.5e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D764D126-4604-43DD-9A66-BDD32565D893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.6e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA25E3C0-24C1-479C-8C8F-A6FB9C5002FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.7e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06067D8B-79BD-4982-909F-7C08BE5660C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.8e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EAFB8DA-F9EC-4A42-A663-1BB4EF8F5E44"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.9e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672B77C7-0E6B-496D-9ACC-6AD965319B35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.8.10e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA1D885-2270-4370-9F3F-CA80B0E96DD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9EC727B-AF92-460D-B61D-F45ECEEE5D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5604A84-8240-45B6-9027-B03AA549CD5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2be:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895DAB3D-5C14-4D0B-94FA-EB7C7C7BB0EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.9.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B9846AE-1344-4EE4-9FDF-6CE17D9461FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0ce:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3363DF79-8A5A-4BE2-B04C-253A4A3A0ADA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25725655-EBDE-4538-8AE1-CF5C81F09C5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98F2654-46F3-4C63-A2C2-48B372C655B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4E206B-37BF-4D61-BE90-80BB65C0C582"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.1se:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17674BAD-F2F1-4E63-AAE0-FEAC14C37CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4117E2EC-F58A-4B22-AB72-FC63A0D96E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.10.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20286676-70FF-471C-9612-74E5F0ECB8E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.0e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F327F7D0-93E8-4005-9ECB-44852C16BB4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27252883-091A-471D-87FC-E07EADBC6FFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF9D58E-CD75-47B1-938C-B5C0A73E28FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC3D979-02B2-4EEC-A6C2-A44C9FC694D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.2e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C340CE-7F18-448B-B9BE-BFEB1724C882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3ae:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C1CA89-0FE4-4DC3-BB4B-299114E172AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.11.3e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F79BC92-0869-447C-AF34-3FBF42375D1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:15.2\\(7\\)e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63AD57E-BA66-45B6-AC6E-2BD92A19A036"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F66ECFE-B631-47AE-995F-024A4E586A85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-evss-code-exe-8cw5VSvw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-evss-code-exe-8cw5VSvw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1452",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.540",
      "lastModified" : "2024-11-21T05:44:23.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the ROM Monitor (ROMMON) of Cisco IOS XE Software for Cisco Catalyst IE3200, IE3300, and IE3400 Rugged Series Switches, Cisco Catalyst IE3400 Heavy Duty Series Switches, and Cisco Embedded Services 3300 Series Switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. This vulnerability is due to incorrect validations of specific function arguments passed to a boot script when specific ROMMON variables are set. An attacker could exploit this vulnerability by setting malicious values for a specific ROMMON variable. A successful exploit could allow the attacker to execute unsigned code and bypass the image verification check during the secure boot process of an affected device. To exploit this vulnerability, the attacker would need to have unauthenticated, physical access to the device or obtain privileged access to the root shell on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el ROM Monitor (ROMMON) del Software Cisco IOS XE para los Switches Cisco Catalyst IE3200, IE3300 e IE3400 Rugged Series, los Switches Cisco Catalyst IE3400 Heavy Duty Series y los Switches Cisco Embedded Services 3300 Series, podría permitir a un atacante físico no autenticado ejecutar código sin firmar en el momento del arranque del sistema.&#xa0;Esta vulnerabilidad es debido a comprobaciones incorrectas de argumentos de funciones específicas que se pasan a un script de arranque cuando se establecen variables ROMMON específicas.&#xa0;Un atacante podría explotar esta vulnerabilidad estableciendo valores maliciosos para una variable ROMMON específica.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código sin firmar y omitir la comprobación de la imagen durante el proceso de arranque seguro de un dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante no necesitaría estar autenticado, tener acceso físico al dispositivo u obtener acceso privilegiado al shell root en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_rom_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0",
            "matchCriteriaId" : "9BF9EAFA-363D-4647-AB9F-6A9D6927C7BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3200_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86879AC0-890E-42F4-9561-6851F38FE0AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3300_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19017B10-F630-42CD-ACD2-E817FEF0E7F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_heavy_duty_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04A41A34-58D2-4DBC-ABC9-20A62BC8A838"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_ie3400_rugged_switch:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7CCC02-113E-4EA1-B0CA-9FDF1108BB71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ess_3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B351A8-00DB-4FA6-9536-C3B8938C6D3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-romvar-cmd-inj-N56fYbrw",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-romvar-cmd-inj-N56fYbrw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1453",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.623",
      "lastModified" : "2024-11-21T05:44:23.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the software image verification functionality of Cisco IOS XE Software for the Cisco Catalyst 9000 Family of switches could allow an unauthenticated, physical attacker to execute unsigned code at system boot time. The vulnerability is due to an improper check in the code function that manages the verification of the digital signatures of system image files during the initial boot process. An attacker could exploit this vulnerability by loading unsigned software on an affected device. A successful exploit could allow the attacker to boot a malicious software image or execute unsigned code and bypass the image verification check part of the secure boot process of an affected device. To exploit this vulnerability, the attacker would need to have unauthenticated physical access to the device or obtain privileged access to the root shell on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la funcionalidad de verificación de imagen de software del Software Cisco IOS XE para la familia de Switches Cisco Catalyst 9000, podría permitir a un atacante físico no autenticado ejecutar código sin firmar en el momento del inicio del sistema.&#xa0;La vulnerabilidad es debido a una comprobación incorrecta en la función de código que administra la comprobación de las firmas digitales de los archivos de imagen del sistema durante el proceso de arranque inicial.&#xa0;Un atacante podría explotar esta vulnerabilidad al cargar software sin firmar en un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante iniciar una imagen de software malicioso o ejecutar código sin firmar y omitir la comprobación de la imagen como parte del proceso de inicio seguro de un dispositivo afectado.&#xa0;Para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cat-verify-BQ5hrXgH",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ios-xe-cat-verify-BQ5hrXgH",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1454",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.697",
      "lastModified" : "2024-11-21T05:44:24.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system with root privileges. These vulnerabilities are due to insufficient input validation of certain CLI commands. An attacker could exploit these vulnerabilities by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as an administrative user to execute the affected commands. A successful exploit could allow the attacker to access the underlying operating system with root privileges."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la CLI del Software Cisco IOS XE SD-WAN, podrían permitir a un atacante local autenticado acceder al sistema operativo subyacente con privilegios root.&#xa0;Estas vulnerabilidades son debido a una comprobación de la entrada insuficiente de determinados comandos de la CLI.&#xa0;Un atacante podría explotar estas vulnerabilidades al autenticarse en el dispositivo y enviar una entrada diseñada a la CLI.&#xa0;El atacante debe estar autenticado como usuario administrativo para ejecutar los comandos afectados.&#xa0;Una explotación con éxito podría permitir al atacante acceder al sistema operativo subyacente con privilegios root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D95E8A-8F0B-44E5-B266-09E10BAAEC55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16266B9E-E613-45FA-A02B-51EED8BEFCC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xesdwpinj-V4weeqzU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1460",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.777",
      "lastModified" : "2024-11-21T05:44:24.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco IOx Application Framework of Cisco 809 Industrial Integrated Services Routers (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, and Cisco IC3000 Industrial Compute Gateway could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to insufficient error handling during packet processing. An attacker could exploit this vulnerability by sending a high and sustained rate of crafted TCP traffic to the IOx web server on an affected device. A successful exploit could allow the attacker to cause the IOx web server to stop processing requests, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Cisco IOx Application Framework de los Enrutadores Cisco 809 Industrial Integrated Services (Industrial ISRs), Cisco 829 Industrial ISRs, Cisco CGR 1000 Compute Module, y Cisco IC3000 Industrial Compute Gateway, podría permitir a un atacante remoto no autenticado causar una denegación de servicio. (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a un manejo insuficiente de errores durante el procesamiento de paquetes.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una tasa alta y sostenida de tráfico TCP diseñado al servidor web IOx en un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir que el atacante cause que el servidor web IOx dejara de procesar peticiones, lo que resultaría en una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.9\\(3\\)m3",
            "matchCriteriaId" : "4B678941-70A6-4DE9-BFA5-69C084BA584A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:809_industrial_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4558F1-B87C-439F-AF8F-C19AACAB80E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:829_industrial_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398D63B0-F15B-409B-AFBC-DE6C94FAF815"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:cgr1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.12.0.3",
            "matchCriteriaId" : "E5F1EC30-07EA-48D0-B44E-517A1305785F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:cgr1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C73AA-7DBA-43BD-819B-1CA5228CFB0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ic3000_industrial_compute_gateway_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2",
            "matchCriteriaId" : "7EC81DE1-1460-42FC-AAE4-BA9A2E81C88B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ic3000_industrial_compute_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1DEE8B-C9B3-4E45-BBBD-C3DF2A61C349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-dos-4Fgcjh6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iox-dos-4Fgcjh6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1469",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.900",
      "lastModified" : "2024-11-21T05:44:25.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Jabber para Windows, Cisco Jabber para MacOS y Cisco Jabber para plataformas móviles, podrían permitir a un atacante ejecutar programas arbitrarios en el sistema operativo subyacente con privilegios elevados, acceder a información confidencial, interceptar el tráfico de red protegido o causar una condición de denegación de servicio (DoS).&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "B6380D1F-B6DE-4E5C-84F0-BE7FF455289E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.5.0",
            "versionEndExcluding" : "12.5.4",
            "matchCriteriaId" : "22278595-8F53-4216-B591-2679C5E8D72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "12.6.5",
            "matchCriteriaId" : "A8512272-2D5D-4CB0-AFC7-225E866A64BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.7.0",
            "versionEndExcluding" : "12.7.4",
            "matchCriteriaId" : "E7873CB8-D731-4F40-B6FE-F7AA2B338A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "12.8.5",
            "matchCriteriaId" : "64A0C971-238C-4989-BB3E-AB6A391169DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.5",
            "matchCriteriaId" : "2CDB1EF2-25F8-42EF-A093-5001572E9415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1471",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T20:15:15.977",
      "lastModified" : "2024-11-21T05:44:25.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Jabber para Windows, Cisco Jabber para MacOS y Cisco Jabber para plataformas móviles, podrían permitir a un atacante ejecutar programas arbitrarios en el sistema operativo subyacente con privilegios elevados, acceder a información confidencial, interceptar el tráfico de red protegido o causar una condición de denegación de servicio (DoS).&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "B6380D1F-B6DE-4E5C-84F0-BE7FF455289E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "12.8.7",
            "matchCriteriaId" : "084B4783-26EF-4818-86F2-A1A7EF4F9D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "12.9.0",
            "matchCriteriaId" : "C6758D6B-2A76-4346-8462-78EAD9A5FD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "12.9.0",
            "matchCriteriaId" : "7609CC8D-AFA3-4F5C-BBA5-DD5092327C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.5.0",
            "versionEndExcluding" : "12.5.4",
            "matchCriteriaId" : "22278595-8F53-4216-B591-2679C5E8D72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "12.6.5",
            "matchCriteriaId" : "A8512272-2D5D-4CB0-AFC7-225E866A64BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.7.0",
            "versionEndExcluding" : "12.7.4",
            "matchCriteriaId" : "E7873CB8-D731-4F40-B6FE-F7AA2B338A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "12.8.5",
            "matchCriteriaId" : "64A0C971-238C-4989-BB3E-AB6A391169DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.5",
            "matchCriteriaId" : "2CDB1EF2-25F8-42EF-A093-5001572E9415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.6",
            "matchCriteriaId" : "150EF892-D83A-4CDB-8F3D-F4EB89FDDDF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1220",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:11.350",
      "lastModified" : "2024-11-21T05:43:51.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient error handling in the web UI. An attacker could exploit these vulnerabilities by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. Note: These vulnerabilities do not affect the console connection."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario Web del Software Cisco IOS XE, podrían permitir a un atacante remoto autenticado con privilegios de solo lectura hacer que el software de la interfaz de usuario web deje de responder y consuma instancias de línea vty, lo que resultará en una condición de denegación de servicio (DoS).&#xa0;Estas vulnerabilidades son debido a un manejo insuficiente de errores en la Interfaz de Usuario Web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de paquetes HTTP diseñados a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir el atacante causar que el software de la interfaz de usuario web deje de responder y consumiera todas las líneas vty disponibles, impidiendo el establecimiento de una nueva sesión y dando como resultado una condición de DoS.&#xa0;Se necesitaría una intervención manual para recuperar la Interfaz de Usuario Web y la funcionalidad de la sesión vty.&#xa0;Nota: estas vulnerabilidades no afectan la conexión de la consola"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-z9yqYQAn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-z9yqYQAn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1281",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:11.443",
      "lastModified" : "2024-11-21T05:43:59.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in CLI management in Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to access the underlying operating system as the root user. This vulnerability is due to the way the software handles concurrent CLI sessions. An attacker could exploit this vulnerability by authenticating to the device as an administrative user and executing a sequence of commands. A successful exploit could allow the attacker to obtain access to the underlying operating system as the root user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la administración de la CLI en el Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado acceder al sistema operativo subyacente como usuario root.&#xa0;Esta vulnerabilidad es debido a la forma en que el software maneja las sesiones CLI simultáneas.&#xa0;Un atacante podría explotar esta vulnerabilidad si se autentica en el dispositivo como usuario administrativo y ejecuta una secuencia de comandos.&#xa0;Una explotación con éxito podría permitir al atacante obtener acceso al sistema operativo subyacente como usuario root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-399"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4D4659-A304-459F-8AB3-ED6D84B44C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E54599DB-A85E-4EEA-9985-2CBF90E28A08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B270A04-9961-4E99-806B-441CD674AFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1360069D-0358-4746-8C3F-44C2A40988D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A6B707B-4543-41F1-83DF-49A93BF56FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8F611B-D347-4A21-90E6-56CF4D8A35A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.4.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9A92CE4-B4B0-4C14-AE11-8DFE511406F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-clipriv-9TO2QGVp",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-clipriv-9TO2QGVp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1352",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:11.507",
      "lastModified" : "2024-11-21T05:44:09.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento del protocolo DECnet Phase IV y DECnet/OSI del Software Cisco IOS XE, podría permitir a un atacante adyacente no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación de la entrada insuficiente del tráfico DECnet que recibe un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico DECnet a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el dispositivo afectado se recargue, dando como resultado una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-823"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E8AF15-AB46-4EAB-8872-8C55E8601599"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957318BE-55D4-4585-AA52-C813301D01C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F11B703-8A0F-47ED-AA70-951FF78B94A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "187F699A-AF2F-42B0-B855-27413140C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0B905E-4D92-4FD6-B2FF-41FF1F59A948"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EDEC28-661E-42EF-88F0-F62D0220D2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21B3881-37E9-4C00-9336-12C9C28D1B61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-decnet-dos-cuPWDkyL",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-iosxe-decnet-dos-cuPWDkyL",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1356",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:11.647",
      "lastModified" : "2024-11-21T05:44:10.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker with read-only privileges to cause the web UI software to become unresponsive and consume vty line instances, resulting in a denial of service (DoS) condition. These vulnerabilities are due to insufficient error handling in the web UI. An attacker could exploit these vulnerabilities by sending crafted HTTP packets to an affected device. A successful exploit could allow the attacker to cause the web UI software to become unresponsive and consume all available vty lines, preventing new session establishment and resulting in a DoS condition. Manual intervention would be required to regain web UI and vty session functionality. Note: These vulnerabilities do not affect the console connection."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la Interfaz de Usuario Web del Software Cisco IOS XE, podrían permitir a un atacante remoto autenticado con privilegios de solo lectura causar que el software de la Interfaz de Usuario Web deje de responder y consuma instancias de línea vty, lo que resultará en una condición de denegación de servicio (DoS).&#xa0;Estas vulnerabilidades son debido a un manejo insuficiente de errores en la Interfaz de Usuario Web.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de paquetes HTTP diseñados a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir que el atacante cause que el software de la Interfaz de Usuario Web dejara de responder y consumiera todas las líneas vty disponibles, impidiendo el establecimiento de una nueva sesión y dando como resultado una condición de DoS.&#xa0;Se necesitaría una intervención manual para recuperar la interfaz de usuario web y la funcionalidad de la sesión vty.&#xa0;Nota: estas vulnerabilidades no afectan la conexión de la consola"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.1xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF22C29-84DF-44CA-B574-FE04AB39E344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:3.15.2xbs:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C7C0BA-D618-4B65-B42C-43393167EEE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-z9yqYQAn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xe-webui-dos-z9yqYQAn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1371",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:11.833",
      "lastModified" : "2024-11-21T05:44:12.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the role-based access control of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker with read-only privileges to obtain administrative privileges by using the console port when the device is in the default SD-WAN configuration. This vulnerability occurs because the default configuration is applied for console authentication and authorization. An attacker could exploit this vulnerability by connecting to the console port and authenticating as a read-only user. A successful exploit could allow a user with read-only permissions to access administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el control de acceso basado en roles del Software Cisco IOS XE SD-WAN, podría permitir a un atacante local autenticado con privilegios de solo lectura obtener privilegios administrativos utilizando el puerto de la consola cuando el dispositivo está en la configuración SD-WAN predeterminada.&#xa0;Esta vulnerabilidad ocurre porque se aplica la configuración predeterminada para la autenticación y autorización de la consola.&#xa0;Un atacante podría explotar esta vulnerabilidad si se conecta al puerto de la consola y se autentica como usuario de solo lectura.&#xa0;Una explotación con éxito podría permitir a un usuario con permisos de solo lectura acceder a privilegios administrativos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe_sd-wan:17.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71230E92-DE87-42D4-9382-C7AF488E22B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:cloud_services_router_1000v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237136F5-5A1B-4033-8B7C-CDAD66AF25DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4321_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9421DBEF-AE42-4234-B49F-FCC34B804D7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4351_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE02DBE-EAD5-4F37-8AB7-DF46A605A0E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4451_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82225D40-537F-41D2-B1C4-1B7D06466B06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asr_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91209C16-A620-44A0-9134-8AA456343F29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-esc-rSNVvTf9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1373",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:11.960",
      "lastModified" : "2024-11-21T05:44:12.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Control and Provisioning of Wireless Access Points (CAPWAP) protocol processing of Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family Wireless Controllers could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition of an affected device. The vulnerability is due to insufficient validation of CAPWAP packets. An attacker could exploit this vulnerability by sending a malformed CAPWAP packet to an affected device. A successful exploit could allow the attacker to cause the affected device to crash and reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento del protocolo Control and Provisioning of Wireless Access Points (CAPWAP) del Software Cisco IOS XE Wireless Controller para los Controladores Wireless de la Familia Cisco Catalyst 9000, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) de un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de los paquetes CAPWAP.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete CAPWAP malformado a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el dispositivo afectado se bloquee y se recargue, lo que resultará en una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-126"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "128F95D7-E49F-4B36-8F47-823C0298449E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0972076B-5C87-44B3-90EC-4C200B89318A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "737F22AB-C5A9-4A18-BA3D-38A222491397"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "176ACF88-6112-4179-8492-50C50577B300"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B9ED0E5-CB20-4106-9CF2-8EB587B33543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0E620C-8E09-4F7C-A326-26013173B993"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-cl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF93F1C8-669F-4ECB-8D81-ECDA7B550175"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800-l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E0BA345-B7D7-4975-9199-4DC7875BBFD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-2OA3JgKS",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-capwap-dos-2OA3JgKS",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1374",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:12.023",
      "lastModified" : "2024-11-21T05:44:12.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco IOS XE Wireless Controller software for the Catalyst 9000 Family of switches could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against another user of the web-based management interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected device. An attacker could exploit this vulnerability by authenticating to the device as a high-privileged user, adding certain configurations with malicious code in one of its fields, and persuading another user to click on it. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or to access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del software Cisco IOS XE Wireless Controller para la Familia Catalyst 9000, podría permitir a un atacante remoto autenticado llevar a cabo un ataque de tipo cross-site scripting (XSS) contra otro usuario de la interfaz de administración basada en web de un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por el usuario por la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en el dispositivo como un usuario muy privilegiado, agregar ciertas configuraciones con código malicioso en uno de sus campos y persuadir a otro usuario para que haga clic en él.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2833EAE-94C8-4279-A244-DDB6E2D15DC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B688E46-5BAD-4DEC-8B13-B184B141B169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F583-F645-4DF0-A075-B4F19D71D128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623BF701-ADC9-4F24-93C5-043A6A7FEF5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5311FBE-12BF-41AC-B8C6-D86007834863"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52FB055E-72F9-4CB7-A51D-BF096BD1A55D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FBD681F-7969-42BE-A47E-7C287755DCB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98255E6F-3056-487D-9157-403836EFB9D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "521ACFB0-4FB2-44DB-AD7B-C27F9059DE66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97F69C3-CAA6-491C-A0B6-6DC12B5AB472"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDD58C58-1B0C-4A71-8C02-F555CEF9C253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96852D16-AF50-4C70-B125-D2349E6765D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A15B882A-BA60-4932-A55E-F4A798B30EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC2EE60-4A07-4D92-B9BC-BF07CF4F2BE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DBE4ED-1CD8-4134-9B33-17A91F44F17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0375BF9E-D04B-4E5B-9051-536806ECA44E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2266E5A2-B3F6-4389-B8E2-42CB845EC7F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "012A6CF7-9104-4882-9C95-E6D4458AB778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5214D-9257-498F-A3EB-C4EC18E2FEB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DC5BB06-100F-42C9-8CEB-CC47FD26DDF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3h:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84AE35F-D016-4B8F-8FE2-C2ACB200DFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D07F9539-CFBE-46F7-9F5E-93A68169797D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10182B94-6831-461E-B0FC-9476EAB6EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D136D2BC-FFB5-4912-A3B1-BD96148CB9A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A22256FE-431C-4AD9-9E7F-7EAC2D81B1B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD5B3AB-27C2-4055-A3B7-0112D089FDA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1d:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04081A51-E08F-4114-9276-584E836181D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1f:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62A46516-CEB7-48D4-879B-341963A1FA31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1g:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6EF98FA-6DF9-4935-9639-143E08462BC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A443E93-6C4B-4F86-BA7C-7C2A929E795A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6ECEDD9D-6517-44BA-A95F-D1D5488C0E41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-xss-cAfMtCzv",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ewlc-xss-cAfMtCzv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1375",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:12.100",
      "lastModified" : "2024-11-21T05:44:12.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating system, install and boot a malicious software image, or execute unsigned binaries on an affected device. These vulnerabilities are due to improper checks performed by system boot routines. To exploit these vulnerabilities, the attacker would need privileged access to the CLI of the device. A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system or execute unsigned code and bypass the image verification check part of the secure boot process. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la funcionalidad fast reload del Software Cisco IOS XE que se ejecuta en los Switches Cisco Catalyst 3850, Cisco Catalyst 9300 y Cisco Catalyst 9300L Series, podrían permitir a un atacante local autenticado ejecutar código arbitrario en el sistema operativo subyacente, instalar y arrancar un imagen de software malicioso o ejecutar binarios sin firmar en un dispositivo afectado.&#xa0;Estas vulnerabilidades son debido a comprobaciones incorrectas llevadas a cabo por las rutinas de arranque del sistema.&#xa0;Para explotar estas vulnerabilidades, el atacante necesitaría acceso privilegiado a la CLI del dispositivo.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en el sistema operativo subyacente o ejecutar código sin firmar y omitir la parte de comprobación de imagen del proceso de arranque seguro.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fast-Zqr6DD5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fast-Zqr6DD5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1376",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:12.177",
      "lastModified" : "2024-11-21T05:44:12.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the fast reload feature of Cisco IOS XE Software running on Cisco Catalyst 3850, Cisco Catalyst 9300, and Cisco Catalyst 9300L Series Switches could allow an authenticated, local attacker to either execute arbitrary code on the underlying operating system, install and boot a malicious software image, or execute unsigned binaries on an affected device. These vulnerabilities are due to improper checks performed by system boot routines. To exploit these vulnerabilities, the attacker would need privileged access to the CLI of the device. A successful exploit could allow the attacker to either execute arbitrary code on the underlying operating system or execute unsigned code and bypass the image verification check part of the secure boot process. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la funcionalidad fast reload del Software Cisco IOS XE que se ejecuta en los Switches Cisco Catalyst 3850, Cisco Catalyst 9300 y Cisco Catalyst 9300L Series, podrían permitir a un atacante local autenticado ejecutar código arbitrario en el sistema operativo subyacente, instalar y arrancar un imagen de software malicioso o ejecutar binarios sin firmar en un dispositivo afectado.&#xa0;Estas vulnerabilidades son debido a comprobaciones incorrectas llevadas a cabo por las rutinas de arranque del sistema.&#xa0;Para explotar estas vulnerabilidades, el atacante necesitaría acceso privilegiado a la CLI del dispositivo.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en el sistema operativo subyacente o ejecutar código sin firmar y omitir la parte de comprobación de imagen del proceso de arranque seguro.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE7B2557-821D-4E05-B5C3-67192573D97D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.5.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EE6EC32-51E4-43A3-BFB9-A0D842D08E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F821EBD7-91E2-4460-BFAF-18482CF6CB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D2D24-8F63-46DE-AC5F-8DE33332EBC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9B825E6-5929-4890-BDBA-4CF4BD2314C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65020120-491D-46CD-8C73-974B6F4C11E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7ADDCD0A-6168-45A0-A885-76CC70FE2FC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.4s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F35C623-6043-43A6-BBAA-478E185480CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D83E34F4-F4DD-49CC-9C95-93F9D4D26B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C8F50DB-3A80-4D89-9F7B-86766D37338B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFC70A2-87BC-4898-BCF3-57F7B1DD5F10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.6.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB8DA556-ABF3-48D0-95B8-E57DBE1B5A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57D4F634-03D5-4D9F-901C-7E9CE45F2F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4463A1D1-E169-4F0B-91B2-FA126BB444CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.8.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9C585C-A6EC-4385-B915-046C110BF95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "119A964D-ABC8-424D-8097-85B832A833BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78DE7780-4E8B-4BB6-BDEB-58032EC65851"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F29CEE37-4044-4A3C-9685-C9C021FD346A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5292764A-7D1C-4E04-86EF-809CB68EDD25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FDA817-3A50-4B9E-8F4E-F613BDB3E9EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E16D266-108F-4F8A-998D-F1CA25F2EAAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D55481-C80E-4400-9C3D-9F6B1F7F13CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BF9829-F80E-4837-A420-39B291C4E17B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5AB80E7-0714-44ED-9671-12C877B36A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.9.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961F8312-31B9-44E7-8858-EF8E2134F447"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6BD18B-B9BD-452F-986E-16A6668E46B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1e:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADED0D82-2A4D-4235-BFAC-5EE2D862B652"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.10.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "763664F5-E6CD-4936-B2F8-C5E2D5EA7BB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fast-Zqr6DD5",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fast-Zqr6DD5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1381",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:12.320",
      "lastModified" : "2024-11-21T05:44:13.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker with high privileges or an unauthenticated attacker with physical access to the device to open a debugging console. The vulnerability is due to insufficient command authorization restrictions. An attacker could exploit this vulnerability by running commands on the hardware platform to open a debugging console. A successful exploit could allow the attacker to access a debugging console."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Software Cisco IOS XE, podría permitir a un atacante local autenticado con altos privilegios o un atacante no autenticado con acceso físico al dispositivo abrir una consola de depuración.&#xa0;La vulnerabilidad es debido a restricciones de autorización de comando insuficientes.&#xa0;Un atacante podría explotar esta vulnerabilidad ejecutando comandos en la plataforma de hardware para abrir una consola de depuración.&#xa0;Una explotación con éxito podría permitir al atacante acceder a una consola de depuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-489"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E91F8704-6DAD-474A-84EA-04E4AF7BB9B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "314C7763-A64D-4023-9F3F-9A821AE4151F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5820D71D-FC93-45AA-BC58-A26A1A39C936"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1C85DD-69CC-4AA8-B219-651D57FC3506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB26AE0F-85D8-4EAB-B9BD-457DD81FF0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.11.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B53E377A-0296-4D7A-B97C-576B0026543D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C98DED36-D4B5-48D6-964E-EEEE97936700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD98C9E8-3EA6-4160-970D-37C389576516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8BEFEDA-B01A-480B-B03D-7ED5D08E4B67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9027A528-2588-4C06-810B-5BB313FE4323"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7745ED34-D59D-49CC-B174-96BCA03B3374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1w:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19AF4CF3-6E79-4EA3-974D-CD451A192BA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1x:*:*:*:*:*:*:*",
            "matchCriteriaId" : "313BD54C-073C-4F27-82D5-C99EFC3A20F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1y:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93B96E01-3777-4C33-9225-577B469A6CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1z:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65FC3CC1-CF4F-4A2D-A500-04395AFE8B47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.1za:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027200FC-8AD4-47E4-A404-490AE4F997EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5019B59-508E-40B0-9C92-2C26F58E2FBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443D78BA-A3DA-4D1F-A4DF-2F426DC6B841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1986DB1F-AD0A-42FE-8EC8-F18BA1AD4F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.2t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C6FB4DC-814D-49D2-BBE2-3861AE985A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5750264-2990-4942-85F4-DB9746C5CA2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02352FD8-2A7B-41BD-9E4A-F312ABFDF3EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.3s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9173AD6-6658-4267-AAA7-D50D0B657528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F02EE9D-45B1-43D6-B05D-6FF19472216B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:16.12.4a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1DBBCD-4C5A-43BB-8FB0-6F1AF99ED0D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E306B09C-CB48-4067-B60C-5F738555EEAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD446C51-E713-4E46-8328-0A0477D140D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1s:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF0DD16-D76A-45EA-B01A-20C71AEFA3B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.1t:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDD0CEC-4A19-438D-B2A1-8664A1D8F3C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89369318-2E83-489F-B872-5F2E247BBF8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7EE7C7-D6C1-4C35-8C80-EAF3FC7E7EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51FA707-8DB1-4596-9122-D4BFEF17F400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1r:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C04DF35A-1B6F-420A-8D84-74EB41BF3700"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.1v:*:*:*:*:*:*:*",
            "matchCriteriaId" : "211CC9B2-6108-4C50-AB31-DC527C43053E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75CCB5F1-27F5-4FF9-8389-0A9ABCF7F070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:17.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08DCCBA3-82D2-4444-B5D3-E5FC58D024F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-BLKH-Ouvrnf2s",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-XE-BLKH-Ouvrnf2s",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1411",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:13.210",
      "lastModified" : "2024-11-21T05:44:17.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Jabber para Windows, Cisco Jabber para MacOS y Cisco Jabber para plataformas móviles, podrían permitir a un atacante ejecutar programas arbitrarios en el sistema operativo subyacente con privilegios elevados, acceder a información confidencial, interceptar el tráfico de red protegido o causar una condición de denegación de servicio (DoS).&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "B6380D1F-B6DE-4E5C-84F0-BE7FF455289E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.5.0",
            "versionEndExcluding" : "12.5.4",
            "matchCriteriaId" : "22278595-8F53-4216-B591-2679C5E8D72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "12.6.5",
            "matchCriteriaId" : "A8512272-2D5D-4CB0-AFC7-225E866A64BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.7.0",
            "versionEndExcluding" : "12.7.4",
            "matchCriteriaId" : "E7873CB8-D731-4F40-B6FE-F7AA2B338A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "12.8.5",
            "matchCriteriaId" : "64A0C971-238C-4989-BB3E-AB6A391169DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.5",
            "matchCriteriaId" : "2CDB1EF2-25F8-42EF-A093-5001572E9415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1417",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:13.287",
      "lastModified" : "2024-11-21T05:44:18.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Jabber para Windows, Cisco Jabber para MacOS y Cisco Jabber para plataformas móviles, podrían permitir a un atacante ejecutar programas arbitrarios en el sistema operativo subyacente con privilegios elevados, acceder a información confidencial, interceptar el tráfico de red protegido o causar una condición de denegación de servicio (DoS).&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "B6380D1F-B6DE-4E5C-84F0-BE7FF455289E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.5.0",
            "versionEndExcluding" : "12.5.4",
            "matchCriteriaId" : "22278595-8F53-4216-B591-2679C5E8D72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "12.6.5",
            "matchCriteriaId" : "A8512272-2D5D-4CB0-AFC7-225E866A64BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.7.0",
            "versionEndExcluding" : "12.7.4",
            "matchCriteriaId" : "E7873CB8-D731-4F40-B6FE-F7AA2B338A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "12.8.5",
            "matchCriteriaId" : "64A0C971-238C-4989-BB3E-AB6A391169DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.5",
            "matchCriteriaId" : "2CDB1EF2-25F8-42EF-A093-5001572E9415"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1418",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:13.367",
      "lastModified" : "2024-11-21T05:44:19.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Jabber for Windows, Cisco Jabber for MacOS, and Cisco Jabber for mobile platforms could allow an attacker to execute arbitrary programs on the underlying operating system with elevated privileges, access sensitive information, intercept protected network traffic, or cause a denial of service (DoS) condition. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco Jabber para Windows, Cisco Jabber para MacOS y Cisco Jabber para plataformas móviles, podrían permitir a un atacante ejecutar programas arbitrarios en el sistema operativo subyacente con privilegios elevados, acceder a información confidencial, interceptar el tráfico de red protegido o causar una condición de denegación de servicio (DoS).&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-170"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "12.1.5",
            "matchCriteriaId" : "B6380D1F-B6DE-4E5C-84F0-BE7FF455289E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "12.8.7",
            "matchCriteriaId" : "084B4783-26EF-4818-86F2-A1A7EF4F9D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "12.9.0",
            "matchCriteriaId" : "C6758D6B-2A76-4346-8462-78EAD9A5FD2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "12.9.0",
            "matchCriteriaId" : "7609CC8D-AFA3-4F5C-BBA5-DD5092327C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.5.0",
            "versionEndExcluding" : "12.5.4",
            "matchCriteriaId" : "22278595-8F53-4216-B591-2679C5E8D72C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "12.6.5",
            "matchCriteriaId" : "A8512272-2D5D-4CB0-AFC7-225E866A64BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.7.0",
            "versionEndExcluding" : "12.7.4",
            "matchCriteriaId" : "E7873CB8-D731-4F40-B6FE-F7AA2B338A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "12.8.5",
            "matchCriteriaId" : "64A0C971-238C-4989-BB3E-AB6A391169DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.5",
            "matchCriteriaId" : "2CDB1EF2-25F8-42EF-A093-5001572E9415"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:jabber:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "12.9.0",
            "versionEndExcluding" : "12.9.6",
            "matchCriteriaId" : "150EF892-D83A-4CDB-8F3D-F4EB89FDDDF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cisco-jabber-PWrTATTC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1423",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-24T21:15:13.443",
      "lastModified" : "2024-11-21T05:44:19.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the implementation of a CLI command in Cisco Aironet Access Points (AP) could allow an authenticated, local attacker to overwrite files in the flash memory of the device. This vulnerability is due to insufficient input validation for a specific command. An attacker could exploit this vulnerability by issuing a command with crafted arguments. A successful exploit could allow the attacker to overwrite or create files with data that is already present in other files that are hosted on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de un comando de CLI en Cisco Aironet Access Points (AP), podría permitir a un atacante local autenticado sobrescribir archivos en la memoria flash del dispositivo.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada para un comando específico.&#xa0;Un atacante podría explotar esta vulnerabilidad al emitir un comando con argumentos diseñados.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir o crear archivos con datos que ya están presentes en otros archivos alojados en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:aironet_access_point_software:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D48036EE-DE42-412A-B3C9-CBCE7414DB33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1952B64C-4AE0-4CCB-86C5-8D1FF6A12822"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BFEED4-7AD7-406F-A044-BDEA98133711"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8191FD87-4E55-4F38-8DB0-7E6772AD075B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_1800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F4C00A-D1E2-4B21-A14E-F30B4B818493"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_2800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C28A6B0-10FF-4C6D-8527-2313E163C98E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7636F7E2-E386-4F8C-A0C5-F510D8E21DA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:aironet_4800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D8A4CB-5B80-4332-BCBC-DA18AD94D215"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749040C6-A21A-4EF3-8213-42EE01CFA303"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_iw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C559D6F7-B432-4A2A-BE0E-9697CC412C70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:esw6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09051BC5-CFE7-43EF-975D-BF77724E8776"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.12.5",
            "matchCriteriaId" : "DCD9BB32-1D37-4F86-9E93-B77DAB09B874"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:catalyst_9800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndIncluding" : "17.2",
            "matchCriteriaId" : "54FC2B7F-8BB5-4326-964C-0C7CC6D31412"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_9800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A48E6CF0-7A3B-4D11-8D02-0CD38F2420E9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.171.0",
            "matchCriteriaId" : "4303CDF3-6399-41CA-BD2A-3C894DD02064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wireless_lan_controller_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6",
            "versionEndExcluding" : "8.10.130.0",
            "matchCriteriaId" : "0D84C320-E3E3-4B29-A27F-A95C6C50FFFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-foverwrt-HyVXvrtb",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ap-foverwrt-HyVXvrtb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21385",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-24T21:15:15.070",
      "lastModified" : "2024-11-21T05:48:14.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mifos-Mobile Android Application for MifosX is an Android Application built on top of the MifosX Self-Service platform. Mifos-Mobile before commit e505f62 disables HTTPS hostname verification of its HTTP client. Additionally it accepted any self-signed certificate as valid. Hostname verification is an important part when using HTTPS to ensure that the presented certificate is valid for the host. Disabling it can allow for man-in-the-middle attacks. Accepting any certificate, even self-signed ones allows man-in-the-middle attacks. This problem is fixed in mifos-mobile commit e505f62."
      }, {
        "lang" : "es",
        "value" : "La aplicación de Android Mifos-Mobile para MifosX es una aplicación de Android construida sobre la plataforma de autoservicio MifosX.&#xa0;Mifos-Mobile versiones anteriores al commit e505f62 deshabilita la comprobación del nombre de host HTTPS de su cliente HTTP.&#xa0;Además, aceptó como válido cualquier certificado autofirmado.&#xa0;La comprobación del nombre de host es una parte importante cuando es usado HTTPS para garantizar que el certificado presentado sea válido para el host.&#xa0;Deshabilitarlo puede permitir ataques de tipo man-in-the-middle.&#xa0;Aceptar cualquier certificado, inclusive los autofirmados, permite ataques de tipo man-in-the-middle.&#xa0;Este problema es corregido en mifos-mobile commit e505f62"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        }, {
          "lang" : "en",
          "value" : "CWE-297"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mifos:mifos-mobile:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2021-03-14",
            "matchCriteriaId" : "06D0F700-A34C-4383-97E7-0C7FE2707CDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/openMF/mifos-mobile/commit/e505f62b92b19292bfdabd6e996ab76abfeaa90d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openMF/mifos-mobile/security/advisories/GHSA-9657-33wf-rmvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://openmf.github.io/mobileapps.github.io/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openMF/mifos-mobile/commit/e505f62b92b19292bfdabd6e996ab76abfeaa90d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/openMF/mifos-mobile/security/advisories/GHSA-9657-33wf-rmvx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://openmf.github.io/mobileapps.github.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21386",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-24T21:15:15.177",
      "lastModified" : "2024-11-21T05:48:15.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "APKLeaks is an open-source project for scanning APK file for URIs, endpoints & secrets. APKLeaks prior to v2.0.3 allows remote attackers to execute arbitrary OS commands via package name inside application manifest. An attacker could include arguments that allow unintended commands or code to be executed, allow sensitive data to be read or modified or could cause other unintended behavior through malicious package name. The problem is fixed in version v2.0.6-dev and above."
      }, {
        "lang" : "es",
        "value" : "APKLeaks es un proyecto de código abierto para escanear archivos APK en busca de unos URI, endpoints y secretos.&#xa0;APKLeaks anterior a versión v2.0.3, permite a atacantes remotos ejecutar comandos arbitrarios del sistema operativo por medio del nombre del paquete dentro del manifiesto de la aplicación.&#xa0;Un atacante podría incluir argumentos que permitan ejecutar comandos o códigos no deseados, permitir que sean leídos o modificados datos confidenciales o que puedan causar otros comportamientos no deseados mediante el nombre del paquete malicioso.&#xa0;El problema es corregido en versión v2.0.6-dev y superior"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apkleaks_project:apkleaks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.3",
            "matchCriteriaId" : "AE92E1BE-181B-4541-96D1-24A70FE08833"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dwisiswant0/apkleaks/commit/a966e781499ff6fd4eea66876d7532301b13a382",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwisiswant0/apkleaks/security/advisories/GHSA-8434-v7xw-8m9x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwisiswant0/apkleaks/commit/a966e781499ff6fd4eea66876d7532301b13a382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dwisiswant0/apkleaks/security/advisories/GHSA-8434-v7xw-8m9x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20679",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-25T06:15:17.140",
      "lastModified" : "2024-11-21T05:46:59.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fuji Xerox multifunction devices and printers (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort C7070/C6570/C5570/C4570/C3570/C3070/C7070G/C6570G/C5570G/C4570G/C3570G/C3070G, ApeosPort-VII C4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 5570/4570/5570G/4570G, ApeosPort 3560/3060/2560/3560G/3060G/2560G, ApeosPort-VII 5021/ 4021, ApeosPort-VII P5021, DocuPrint CP 555 d/505 d, DocuPrint P505 d, PrimeLink C9065/C9070, DocuPrint CP475AP, and DocuPrint P475AP) allow an attacker to cause a denial of service (DoS) condition and abnormal end (ABEND) of the affected products via sending a specially crafted command."
      }, {
        "lang" : "es",
        "value" : "Dispositivos multifunción e impresoras Fuji Xerox (DocuCentre-VII C7773/C6673/C5573/C4473/C3373/C3372/C2273, DocuCentre-VII C7788/C6688/C5588, ApeosPort-VII C7773/C6673/C5573/C4473/C3373/C3372 C2273, ApeosPort-VII C7788/C6688/C5588, ApeosPort C7070/C6570/C5570/C4570/C3570/C3070/C7070G/C6570G/C5570G/C4570G/C3570G/C3070G, ApeosPort-VII C4421/C3321, ApeosPort C3060/C2560/C2060/C3060G/C2560G/C2060G, ApeosPort-VII CP4421, ApeosPort Print C5570, ApeosPort 5570/4570/5570G/4570G, ApeosPort 3560/3060/2560/3560G/3060G/2560G, ApeosPort-VII 5021/ 4021, ApeosPort-VII P5021, DocuPrint CP 555 d/505 d, DocuPrint P505 d, PrimeLink C9065/C9070, DocuPrint CP475AP, and DocuPrint P475AP), permiten a un atacante causar una condición de denegación de servicio (DoS) y una finalización anormal (ABEND) de los productos afectados por medio del envío de un comando especialmente diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c7773_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19BC46E5-D16F-4854-9CE7-8BB03FBEA41D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c7773:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398E7090-C1E1-40DC-B551-ABE1399FCF15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c6673_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E875E17-BF1B-433C-8EF6-2407BA2F8C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c6673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C4D2A82-78BC-4592-B5C8-B11FB99C5E9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c5573_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0CAA5E-CC00-4563-BBBE-C130459676EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c5573:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6426C22-347E-4A0D-A398-C6644CB37EB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c4473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82BC2CFA-243B-4F99-9564-28BBC5903670"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c4473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15C084FA-FFAD-4D6D-9D64-9F493604C63D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c3373_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C97942B8-DB45-4221-9B6B-C550B8303CC2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c3373:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78F14DA8-0F79-4E3A-B052-CB0EA2FC8F7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c3372_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161CDCB9-AFA3-4433-9476-622EC7F6B490"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c3372:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC27479-45D2-46B4-92C0-66FE725872A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c2273_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F5AD92-B159-4606-A6BB-528796E53850"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c2273:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2821A270-BECA-4796-A21D-5FC8EC8AC8A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "106FEAB4-E1F7-4FC2-B059-FCD2EDB8DBA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB98F342-4F1C-4298-BB5E-1DE63DC50255"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c4422_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DEF54B1-07BA-4D08-B639-17A388906189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c4422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC0B38D2-93C7-4746-B101-FD589333E1C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c3322_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB330E6-29F3-4155-86F9-DC6F44EB8E9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c3322:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A51B2E6-CAE0-4FD7-B34D-B48669CD9EEF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED77669F-2F7A-47E9-AAA7-C1056DB2DEAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91D838EB-C281-43B0-8813-7313CC9C66CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2060_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD4548D-94F7-4F6B-A120-0B63A8490237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8498A33-F7E2-41BF-AAEF-708FED2BC361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_cp4422_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB9FFAF6-5C33-4C74-83A0-ADE079E8844D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_cp4422:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E450596C-C040-44B0-B6C1-8BE57D63901D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_cp3322_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBAE89E-935A-46DA-8396-DAC5B6D9B580"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_cp3322:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4429191C-713A-4B62-B098-DB412E945CE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_print_c4570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94DAF52A-1EF6-4FD1-805A-8B4E08B2FF74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_print_c4570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF6D9AA-33B3-4782-BBBD-E2816BE56456"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_3570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F556E2DB-6ED1-45E5-9D1C-2DDA8A9271B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_3570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71362846-1785-4B2D-B7AD-AD5432197916"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_1860_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7BC17E4-A9B9-4F0C-B70A-AC490B9AC9BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_1860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC7A8BA-0B0A-43D9-B881-F9E2DE61ED14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_5022_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7077C20A-FE03-4BF3-908A-8D0E7B571CB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_5022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC977D9-7894-451E-B86C-84615A4459F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_p4022_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01B0F1D-42D1-4B90-BDF5-0F408A3F7773"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_p4022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE1FB7CA-2538-4F2B-86E0-AD24B9486FC1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vi_c2264_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBAE7136-A633-4F7E-863E-0227E5CB8A71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vi_c2264:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A58D3A9-2050-4097-979E-BFD08A3ECF3E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docuprint_cp500_d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE14B805-454C-4989-89B2-C9620A4D4F1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docuprint_cp500_d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B797B0-17B9-4D74-ADCC-F231BCBB4E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c7788_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "813DE479-5C84-4AB0-A338-0D9FBED9B4F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c7788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "583D41F8-7C30-4AC9-BB20-F9D3DFADF0E6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c6688_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40647212-F62C-447B-A74E-6D54D33E23C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c6688:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "404A2EDC-63FD-4C92-9BEE-8E5237912BAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docucentre-vii_c5588_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6FEA111-8119-4AA7-9846-3CBAF30196B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docucentre-vii_c5588:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0F14F14-925C-4734-ABB7-6A577D4D72F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c7773_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1F21BE2-CCEF-4515-865D-8FF46C533C48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c7773:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3805368E-6777-4A12-9BFF-75A8DB891DF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c6673_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB64A13-1F72-4ADF-9E9B-A418182CBED7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c6673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4B4CD8-CAC8-4458-9E46-0BCABAAF241B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c5573_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC2EB0F-AF8D-4BD3-B9E9-75B24E8591EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c5573:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A02659B3-095B-4439-B270-23B6EE0D8AA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c4473_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271AAD1E-91AA-48D0-9A08-0A7167D27F5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c4473:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED543D03-36C8-432A-8842-B578205E6340"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c3373_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9EF4F4C-9C05-4622-9B2E-0835696D4816"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c3373:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA91B4E-C985-4744-A704-BCD678CD5E9B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c3372_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EFE6AE-8F61-4EB3-9AE9-3AC9EB38EB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c3372:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9CD48A9-5603-4158-B011-7E86FF387EF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c2273_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9E1230-43A1-4F11-A27F-5074DE522696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c2273:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF66C048-2392-4717-9679-1E71E89A28EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c7788_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E80374AB-ACEB-433B-8AAB-112B6EBAF8A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c7788:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA358231-28DE-4619-86E5-DE630E8348C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c6688_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D75964C-53EE-4169-AC13-740B48A52E0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c6688:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76856682-F88E-43F5-9722-08DFC60CCA4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c5588_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DE2402-11F2-49E1-A82A-1E5C5F2C5D40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c5588:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D525A7D-4790-4F05-AB9B-78DFA72FDBB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c7070_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93074163-0E56-446F-8739-C4EB3252E27E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c7070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3ED075FC-0CD6-4822-A548-9A3BB0131EB0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c6570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4121DF38-EC1C-4694-89B1-2FA6E9F8C35F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c6570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D47CB0EA-CC8E-4082-A31E-747C56177D57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c5570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EE3A07-0ECA-4661-83B7-AB55698C87F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B88935D-3C96-444A-8310-8A1F64610A88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c4570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21C1C62-F188-4CCC-B6B3-87A4A35AABDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c4570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC8EC6AB-C078-4C90-A003-A08E774A19CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c3570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADB0DC6-71F4-4465-87DA-982F3983746D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c3570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB10887E-58A6-40C1-B310-622D994A4553"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c3070_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E953733-2701-4FDB-85A9-3280F2323A04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c3070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA3DC406-66E3-4683-94DB-77864CE25583"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c7070g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "700F41A2-9EDE-46ED-8360-33F7FA98958C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c7070g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B08D16E7-2586-40AE-B443-6C5FFA6F623A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c6570g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "835F520E-512E-432E-985A-18D938476791"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c6570g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B64342-FB10-4890-8D75-130D9FEA83FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c5570g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854287E5-D8DF-4E2A-87EA-A1C1F851C09A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c5570g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EB644E-60A2-463C-93D8-0AFF8654F0FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c4570g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "219C2B87-3715-448E-8DC0-50FEC310A865"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c4570g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "347D15C5-C46D-4A1C-B754-6A32EEEEF260"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c3570g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18335733-623D-4A2E-B53D-CE91676FE1F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c3570g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B2842CA-27B6-4545-8068-2362F7CF21E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c3070g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45C7B727-485E-4077-A829-F9867F748F5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c3070g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74916F6D-8DC9-4F90-80FE-76D9F5723BC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c4421_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4077ACB2-17BC-47D5-B8B9-50E7940C67DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c4421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "432B3F0F-7061-4A92-871D-9DFE7466D1DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_c3321_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96431910-6561-46B3-A35E-4624F3677695"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_c3321:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1A92A46-6ED3-4546-A2CF-02DBBD5536AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c3060_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF172EC2-0868-4098-837C-BF03A769B85E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c3060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C70002C-1159-4EFD-BBAC-ECE7BC37503E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2560_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072BF9C2-FFE9-47EE-83C8-4B368CAC4C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD6B0AA1-AA09-401C-887A-AF96C1A0C77A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2060_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD4548D-94F7-4F6B-A120-0B63A8490237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8498A33-F7E2-41BF-AAEF-708FED2BC361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c3060g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAC0540C-29B1-4D66-9F90-C150028775C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c3060g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44C2AE77-D1A1-4B0F-BB36-1D97F19EF340"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2560g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8579E74D-15D6-4D32-B0A9-A43934BC0189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2560g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8823D2D0-72C2-4D40-BEAB-7AF6B029E61E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_c2060g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12002769-AE88-4DFF-9D12-31C0B7AD1A54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_c2060g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "338FCE35-07C2-4612-915E-339646D98687"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_cp4421_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C0209D-2C8B-4E2E-BACE-C3300DBBDC58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_cp4421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "235F85C7-685E-40DA-800B-87292E5B9C5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_print_c5570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE9407D-69AE-47DD-8486-59AF52992C53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_print_c5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9412061A-31A4-495A-8061-FD99C318FCE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_5570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB8351D8-E12B-437A-9F94-5F4BDAA62808"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651B2697-8761-43F8-A28B-BE8AD9E63400"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_4570_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E622D1EE-785D-4E65-9E44-C4BCE9AA93B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_4570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AAEBB1B-B988-442E-8FAF-71E4E43663D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_5570g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A4B5306-4D57-41B6-8F6E-2F8ECBC7E827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_5570g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA4841E-882A-4648-AB63-5F3CC839A3BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_4570g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA17F4B-AAC2-4CE9-97A4-195A43DA7EF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_4570g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "889F1CBE-F326-42BC-95A6-9F1A0D1E6EC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_3560_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4583053C-9BF8-4469-B4FA-4E92C1795882"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_3560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "475BCBA5-D6C1-4FE0-ACD2-76135B90939F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_3060_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B84BA77-278A-4047-B72F-5935B6D67C6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_3060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C40B9C9-D10E-4ECC-9C3B-C7B44DC9D8B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_2560_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E08A4E-B8BC-4882-83C0-FF1CE38518EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_2560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC9ECE0-F2B9-4C7B-9F37-54765F69F4E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_3560g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9097971-1171-4A03-AC7B-B096656FD80A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_3560g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A881E21-ADA0-4CA2-984B-1FFF03FF854B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_3060g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15B129CB-08C5-4F46-9FE9-975541AEED5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_3060g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EDBA58-4856-4004-8658-7D8421201C5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport_2560g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1C86453-88ED-4929-BB54-44D631B1EEE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport_2560g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65999B11-12F2-4013-A175-FE1CABB0B199"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_5021_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D55470-BDAA-489F-B4F2-23DB97F70F63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_5021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B7E533-656B-4791-AC4B-5A03AB093D21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_4021_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B82F781-DBD2-47AF-B92A-4DA5132E4A85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_4021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5F0B3BE-29CC-412F-A11B-3C83766335F4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:apeosport-vii_p5021_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B90F5C4-23C3-439A-8284-6F27F3EAEC64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:apeosport-vii_p5021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2843E583-1AD8-4395-B8D6-DF175CC821A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docuprint_cp_555_d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1CAACAA-737C-44FF-8854-884B4CF98CDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docuprint_cp_555_d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B4B692F-7CC9-4266-814B-7B19777D8B47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docuprint_cp_505_d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB7F7E0-D93E-4D5A-8CEF-250F0F490B8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docuprint_cp_505_d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79B40B49-D58E-4348-9D39-341951BF8A7F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docuprint_p505_d_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C50958EB-2609-40A1-9D89-B92722097A81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docuprint_p505_d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B0AE644-F762-42E6-9575-626E0836C10C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:primelink_c9065_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CADEDF2-8571-42E9-AE25-C698438B0BC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:primelink_c9065:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D613A53-2F93-496A-B5C8-96968188652E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:primelink_c9070_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E0CD3B8-38A0-42FF-B48E-DC5B71BBFEB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:primelink_c9070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C69317AC-477B-46BA-999F-5801688EFE18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docuprint_cp475ap_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FCCF643-F3EF-42C8-A284-2A30F9DABCEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docuprint_cp475ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A436FE9-5E65-4A15-A60B-667CD83C9B7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fujixerox:docuprint_p475ap_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A2202E-D532-4C81-9A6A-270FBF7DCF22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fujixerox:docuprint_p475ap:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8FA6D96-CA09-4F79-A974-85D001433970"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37607293/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.fujixerox.co.jp/company/news/notice/2021/0319_announce.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37607293/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.fujixerox.co.jp/company/news/notice/2021/0319_announce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.fujixerox.com/eng/company/news/notice/2021/0319_announce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26715",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T09:15:12.633",
      "lastModified" : "2024-11-21T05:56:43.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenID Connect server implementation for MITREid Connect through 1.3.3 contains a Server Side Request Forgery (SSRF) vulnerability. The vulnerability arises due to unsafe usage of the logo_uri parameter in the Dynamic Client Registration request. An unauthenticated attacker can make a HTTP request from the vulnerable server to any address in the internal network and obtain its response (which might, for example, have a JavaScript payload for resultant XSS). The issue can be exploited to bypass network boundaries, obtain sensitive data, or attack other hosts in the internal network."
      }, {
        "lang" : "es",
        "value" : "La implementación del servidor OpenID Connect para MITREid Connect versiones hasta 1.3.3, contiene una vulnerabilidad de Server Side Request Forgery (SSRF).&#xa0;La vulnerabilidad surge debido al uso no seguro del parámetro logo_uri en la petición de registro de cliente dinámico.&#xa0;Un atacante no autenticado puede llevar a cabo una petición  HTTP desde el servidor vulnerable a cualquier dirección en la red interna y obtener su respuesta (que podría, por ejemplo, tener una carga útil de JavaScript para el XSS resultante).&#xa0;El problema puede ser explotado para omitir los límites de la red, obtener datos confidenciales o atacar a otros hosts de la red interna"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitreid:connect:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "FC637AA4-26EF-4FB8-8608-6B658EBEDFF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/hidden-oauth-attack-vectors",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mitreid-connect/OpenID-Connect-Java-Spring-Server/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/hidden-oauth-attack-vectors",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T09:15:13.120",
      "lastModified" : "2024-11-21T06:00:48.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform character-by-character retrieval of password hashes, or retrieve a session token or a private key."
      }, {
        "lang" : "es",
        "value" : "ForgeRock OpenAM versiones anteriores a 13.5.1, permite la inyección LDAP por medio del protocolo Webfinger.&#xa0;Por ejemplo, un atacante no autenticado puede llevar a cabo la recuperación de caracteres del hash de contraseña, o recuperar un token de sesión o una clave privada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forgerock:openam:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.5.1",
            "matchCriteriaId" : "ECF6BEF8-D280-4530-8B69-BF7273D2F35C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugster.forgerock.org/jira/browse/OPENAM-10135",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/hidden-oauth-attack-vectors",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugster.forgerock.org/jira/browse/OPENAM-10135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/research/hidden-oauth-attack-vectors",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1492",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-03-25T15:15:12.950",
      "lastModified" : "2024-11-21T05:44:28.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitrary privileged directories. If successful, an attacker can manipulate files used by Duo Authentication Proxy installer, cause Denial of Service (DoS) by deleting file(s), or replace system files to potentially achieve elevation of privileges. This is only exploitable during new installations, while the installer is running, and is not exploitable once installation has finished. Versions 5.2.1 of Duo Authentication Proxy installer addresses this issue."
      }, {
        "lang" : "es",
        "value" : "El instalador de Duo Authentication Proxy anterior a versión 5.2.1, no comprobaba apropiadamente las rutas de instalación de archivos.&#xa0;Esto permite a un atacante con privilegios de usuario local coaccionar al instalador para que escriba en directorios privilegiados arbitrarios.&#xa0;Si tiene éxito, un atacante puede manipular los archivos usados por el instalador de Duo Authentication Proxy, causar una denegación de servicio (DoS) al eliminar archivos o reemplazar archivos del sistema para lograr potencialmente una elevación de privilegios.&#xa0;Esto solo se puede explotar durante nuevas instalaciones, mientras el instalador se está ejecutando, y no es explotable una vez finalizada la instalación.&#xa0;Las versiones 5.2.1 del instalador de Duo Authentication Proxy solucionan este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-64"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:duo:authentication_proxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "E727A4EF-FB58-4E1F-B565-0E85ADFEE035"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.duo.com/s/article/6789",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.duo.com/s/article/6789",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3449",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2021-03-25T15:15:13.450",
      "lastModified" : "2024-11-21T06:21:33.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j)."
      }, {
        "lang" : "es",
        "value" : "Un servidor OpenSSL TLS puede cometer un fallo si un cliente envía un mensaje ClientHello de renegociación diseñado maliciosamente.&#xa0;Si una renegociación de TLSv1.2 ClientHello omite la extensión signature_algorithms (donde estaba presente en el ClientHello inicial), pero incluye una extensión signature_algorithms_cert, se producirá una desreferencia del puntero NULL, lo que conllevará un bloqueo y un ataque de denegación de servicio.&#xa0;Un servidor solo es vulnerable si tiene TLSv1.2 y la renegociación habilitada (que es la configuración predeterminada).&#xa0;Los clientes de OpenSSL TLS no están afectados por este problema.&#xa0;Todas las versiones de OpenSSL versión 1.1.1 están afectadas por este problema.&#xa0;Los usuarios de estas versiones deben actualizar a OpenSSL versión 1.1.1k.&#xa0;OpenSSL versión 1.0.2 no está afectado por este problema.&#xa0;Corregido en OpenSSL versión 1.1.1k (Afectadas versiones 1.1.1-1.1.1j)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1",
            "versionEndExcluding" : "1.1.1k",
            "matchCriteriaId" : "B213E696-A6D9-45E7-B4E4-E4CFE54ECEB8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "62A178A3-6A52-4981-9A27-FB07AD8AF778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280AA828-6FA9-4260-8EC1-019423B966E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "361B791A-D336-4431-8F68-8135BEFFAEA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:log_correlation_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.9",
            "matchCriteriaId" : "4ACF85D6-6B45-43DA-9C01-F0208186F014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.13.1",
            "matchCriteriaId" : "0AC12300-9051-4C70-9941-9FE5E64B4B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657682A0-54D5-4DC6-A98E-8BAF685926C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8661D361-71B5-4C41-A818-C89EC551D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253603DC-2D92-442A-B3A8-A63E14D8A070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.13.0",
            "versionEndIncluding" : "5.17.0",
            "matchCriteriaId" : "AC1721B5-9FCD-47C3-8338-E02932CF2C05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA7F1FD-9FAB-4654-98B0-4588EEC8B69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868B2C4B-CE6B-41DA-A373-7D4FA51EFE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550F47A2-3393-481E-BC40-CE606BFA8776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43392D27-6C07-41C7-A17F-10C433338CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBF6C4C-195F-49A7-861D-52677D9BE58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90732D53-E802-4E1B-B6C8-B1FDCE7905A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:checkpoint:quantum_security_management_firmware:r80.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A98B128A-C58E-48EC-B691-AF73126A0822"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:checkpoint:quantum_security_management_firmware:r81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "345B990F-C1C4-440B-804E-0A2882FE7C01"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:checkpoint:quantum_security_management:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08601413-25E2-4977-B67A-C11A9D788EA8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:checkpoint:multi-domain_management_firmware:r80.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC067CC-EB90-43F5-9674-089D5C611573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:checkpoint:multi-domain_management_firmware:r81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80B223A7-1039-445D-ABE1-5E481004D956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:checkpoint:multi-domain_management:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1584E1B4-412C-40E2-BF07-4E464692F2AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r80.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0002A29-8B42-445D-9EC4-58BC93194241"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:checkpoint:quantum_security_gateway_firmware:r81:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B0EDB21-9305-4601-AB96-A77BD00F311D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:checkpoint:quantum_security_gateway:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9016DDF6-285C-4E64-88D0-29ECCEF048F8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "570DB369-A31B-4108-A7FD-09F674129603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61516569-C48F-4362-B334-8CA10EDB0EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CAD50-749F-4ADB-A046-BF3585677A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "A8782A14-89B0-45EE-A5CB-FF715F5BA379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "5C40ECC8-933B-47A4-8082-FCF0EF9C973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.15",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "32714AD7-BCD1-4624-9923-5E6D927CF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "CB1A94E1-A6C6-488D-A74C-6C0B24637272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8AF00C6-B97F-414D-A8DF-057E6BFD8597"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "08FA59A8-6A62-4B33-8952-D6E658F8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10864586-270E-4ACF-BDCC-ECFCD299305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38340E3C-C452-4370-86D4-355B6B4E0A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C55C69-E22E-4B80-9371-5CD821D79FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.1.0.1.0",
            "matchCriteriaId" : "C01E8B82-71C7-4A4A-A70A-7B147524AB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0.0",
            "versionEndExcluding" : "10.2.1.0-17sv",
            "matchCriteriaId" : "6E8B6D50-D482-43E9-A20D-FA77FD59AE2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:capture_client:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "349EB4AE-65E3-42DC-8F9C-3A1A155324D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:7.0.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BD8688A-2D55-4A7E-A143-1BD0FCF957B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_rcm1224_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "matchCriteriaId" : "5081E52B-E7C0-46BD-B1D0-2C70ABCC8831"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom_rcm1224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3747CDD7-E833-4B68-A362-77D6A2E9D888"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_lpe9403_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "058D21EA-E94C-4DDC-AD92-967DAC934457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_lpe9403:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52A77C9D-E59C-4397-B834-797D7B334A6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_m-800_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "matchCriteriaId" : "424CD8EA-D8CB-40C7-8E0F-AC4B05C59C99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_m-800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFB9921A-5204-40A3-88AB-B7755F5C6875"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s602_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "matchCriteriaId" : "858B6A84-5D0E-4E23-AE32-A45B51BAC8CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s602:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4D89D82-C2CE-44DC-A05B-B956F20BF4E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s612_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "matchCriteriaId" : "D173626B-9C50-489F-8BA4-1C45E5F96526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s612:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7B48D2-0D17-420D-AAE1-35E5C0BE2924"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s615_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2",
            "matchCriteriaId" : "E967F5FC-6F3E-4982-8813-CA1DAF3BE165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E917CBBB-EF41-4113-B0CA-EB91889235E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s623_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "matchCriteriaId" : "81F315D8-0B26-4442-B330-85124017A482"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s623:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80D9A79-7984-462B-B4B9-6A4429422038"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_s627-2m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1",
            "matchCriteriaId" : "6F20F735-7A70-4A24-9621-786F99C8F87D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_s627-2m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51B40F8-71D2-4D2D-8EC2-CE154A6D7533"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_sc-600_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "matchCriteriaId" : "973B8030-B630-4D67-B897-25A359A96185"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_sc-600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "725C671B-D7A0-48CF-8A31-5F9C4173F1DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5",
            "matchCriteriaId" : "86EA8E3F-81BD-47BC-9834-A9B69CA7E70C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3033B1E-57A6-4AE3-A861-7047CF8EAD79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1700_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "matchCriteriaId" : "BE116AD9-B55F-41C8-8B55-329809DB63E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D9A73DD-4A21-4096-B4B6-A0A825E71006"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xb-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "144CDF5E-7E07-428B-B4DF-C94992B3A44A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xb-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB3CC2D-CBF0-4F53-A412-01BBC39E34C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xc-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "339FFBDF-6957-481F-84CE-878B5CAAD9C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xc-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7719E194-EE3D-4CE8-8C85-CF0D82A553AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf-200ba_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "6FBB13D3-4E04-4D01-B880-C16C4FFA240B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf-200ba:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58377C58-F660-4C17-A3CB-BFC2F28848CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xm-400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "E40058B3-3726-4F6A-AB41-7679487639F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xm-400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "798E900F-5EF9-4B39-B8C2-79FAE659E7F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xp-200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "1E642D10-E701-44DF-863B-D0DAA5530F50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xp-200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F962FC7-0616-467F-8CCA-ADEA224B5F7B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr-300wg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3",
            "matchCriteriaId" : "4A53C2B5-A3FD-44CC-A78B-D2124EF37DB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr-300wg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "434BC9BE-C5DB-4DAF-8E07-DFE4EEA0D7FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr524-8c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "54FBE4D4-F31E-4B61-9216-44C8EC2988AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr524-8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E6B7D8-3F9E-43D6-AEFE-DEE3993679C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr526-8c_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "20511D61-FC1D-453E-BDF6-D3FB9951192A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr526-8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67661569-6233-4C74-9C72-88BD14B257FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr528-6m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "640AC619-B516-46FC-821B-09C4542A3FD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr528-6m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E048C4A-A414-4C87-A865-4D4218AE32EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xr552-12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "1FB979DB-731B-4693-A9F8-B11ED953717C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xr552-12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09743616-31C9-4E47-8A4A-B15D76204BE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1",
            "matchCriteriaId" : "886D2FE6-B054-4E3B-BACB-F08C0A119A80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cloud_connect_7_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B185B70-CAC9-47AC-8639-7A4707C21540"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cloud_connect_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA78457-260C-467B-9785-04B3C8EDF3B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "matchCriteriaId" : "ABEA3BEE-E7AF-4C9A-ADE4-CE7FC1DB7639"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_cp_1242-7_gprs_v2_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "049460B8-6186-44F9-B41F-284A2EC0B3B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_cp_1242-7_gprs_v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205482DA-548C-4757-91F0-1599438873BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_basic_panels_2nd_generation_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45208694-635A-42AC-B668-8B67C60568B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_basic_panels_2nd_generation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8F8BCE-35CE-492A-8BFE-2C36EA51CE5C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_comfort_outdoor_panels_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4C147D9-4649-4289-B18B-55BD6E33521A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_comfort_outdoor_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4830E0D-0128-4E5B-AB81-2B238471AE4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_hmi_ktp_mobile_panels_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54EFA8B5-8DA1-4547-9E15-BDC265C56006"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_hmi_ktp_mobile_panels:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CEB200-E38F-4629-9279-5AF065396678"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_mv500_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4FA1E6-4C5A-4CDC-AD40-E384C0BCA90D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_mv500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A5B50E-0316-4189-8F41-54732CFCF63F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_1243-1_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "matchCriteriaId" : "D254DA1D-C53E-426B-9C69-580CC47CF0AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_1243-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65278BA0-3C81-4D81-9801-D7BE3A1D7680"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_eu_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "matchCriteriaId" : "C06A02ED-0BA3-4A2C-AF0C-689B8AEB34B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_eu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209C7B1E-10F6-4215-AF69-CC36192E0FCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp1243-7_lte_us_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "matchCriteriaId" : "CF8C00EE-1154-440C-A223-A2CE99CE3126"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp1243-7_lte_us:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "171A9543-E677-422F-8AEA-1BC2D0E53593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_1243-8_irc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "matchCriteriaId" : "DB201DD3-8890-453E-A11E-1E13B3DAB3F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_1243-8_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350FD323-C876-4C7A-A2E7-4B0660C87F6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_1542sp-1_irc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "matchCriteriaId" : "61E498B1-87FF-454B-8DF0-61D0D3208491"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_1542sp-1_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1EE2F10-A7A6-486F-AE5C-53AE25BAF200"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_1543-1_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "90FB801F-11B5-438C-98A1-E928BFEA2ADB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_1543-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F56C2BDC-928E-491A-8E7C-F976B3787C7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_1543sp-1_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1",
            "matchCriteriaId" : "8E4BA1E6-64F7-4B96-8302-134057DAB1BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_1543sp-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783B50B8-2FB7-4982-88AA-B4F2AD094796"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_net_cp_1545-1_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0",
            "matchCriteriaId" : "1DCA9544-DD17-4F56-B34C-91A3F37154AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_net_cp_1545-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1256EB4B-DD8A-4F99-AE69-F74E8F789C63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_7_telecontrol_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C25165E-EDE9-42F1-A3B9-0E47630D49CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_7_telecontrol:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BF281FB-26E0-43E4-A2B6-4015661368AC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pcs_neo_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEACFC9-41B7-4EE0-9427-692363880326"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pcs_neo:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3CA343-CA2A-4593-930C-158612CE7A55"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_pdm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0.7",
            "matchCriteriaId" : "7E9AE23E-7DAE-4191-BA4E-A7CD655C4BC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_pdm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E092B735-42D5-48D5-947B-288C0FA2E180"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_process_historian_opc_ua_server_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019",
            "matchCriteriaId" : "D874D636-392A-4750-B976-F411DBCEBA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_process_historian_opc_ua_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14EC9343-7778-40B0-A74D-5C156FF2A229"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf166c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "968FBB4E-5B0B-43D4-B3AD-418028093990"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf166c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391AD485-A49D-43D0-AAE5-1F58B38D4E22"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf185c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5212F097-B65A-4D73-BB6F-49687F8AD980"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf185c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82494B5E-80EE-47ED-B87E-CF8C8907B6FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf186c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D806113B-57EB-4AA0-9D5E-12E30337A93B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf186c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0933EB-82BE-42BB-978B-C9EC2FE1C795"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf186ci_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53FA50A7-2DF6-454E-8A8E-838C392AB417"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf186ci:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EAEB335-BD22-4CEF-A3EA-9D98A09FEBF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf188c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3D41E9-58B3-4251-8710-A8C4A24ABBD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf188c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E21F9909-8D80-40BE-81E0-6ED7FE140A3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf188ci_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC628CB7-0816-4267-9C5D-954BD0233D2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf188ci:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0927991-E820-4FC3-9EFE-96E4C9BFCCCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf360r_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88E64167-16AA-48D7-BCDC-B15D37FA666D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf360r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63F05227-208B-42C8-8D56-A5D106CAD32F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1211c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F1294A-1C26-4D43-9C53-D833F2510536"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1211c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3871C0C9-C65E-4E0B-9CA8-75E60066297F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AF60081-D534-44F5-972F-23257F16F372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07849777-92E7-41D2-9128-F8D20DE15391"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1212fc_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEF1726E-B56F-4D39-AFF4-E79A3CA00DE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1212fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68B3573B-A31E-4489-B2DD-B01B5C1D03CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214_fc_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC4A9F7-9858-4F95-8097-F8D09DA61314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B640800C-9263-4BEA-9DA5-1323932540BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4948734A-0AAD-4D28-B7FF-FFBBB9AA39C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE17584A-BF7A-48B8-A9CB-477663766C63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1214_fc_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC4A9F7-9858-4F95-8097-F8D09DA61314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1214_fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B640800C-9263-4BEA-9DA5-1323932540BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215_fc_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EE37798-B068-40E5-BC03-1D8D303E5926"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215_fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76C7D55C-8D99-4E2F-A254-1BDE2B12A203"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1215c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0C491C-5C4A-4F1C-ABD4-9502A54AAA78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1215c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC4698CF-F935-4707-BA91-7E3650C7956C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1200_cpu_1217c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7657063-1296-4734-B108-A2FF7A01B07F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1200_cpu_1217c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232279DE-CF1C-4A3C-886D-B4CE3F104F09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C477CCD-06C7-4907-8B0C-4FCE7F6DADAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_s7-1500_cpu_1518-4_pn\\/dp_mfp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BC4FA01-8DDB-41E4-B759-7B504F78AEBC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_connect_300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3360ACCE-E735-4E34-B278-0D4460E74CBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_connect_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B854F5B-78C7-41FE-9364-5E71B36342A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:tim_1531_irc_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.2",
            "matchCriteriaId" : "D2B20D95-C4B3-4D13-A3D8-F22AC42DC059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:tim_1531_irc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1D94BEB-BBFB-4258-9835-87DBBB999239"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_logon:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.6.0.2",
            "matchCriteriaId" : "D6F24E40-F3F0-48F3-B3DC-5F98B0564F7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_logon:1.5:sp3_update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "423359E5-9C36-4C6B-AB24-B030E6C61D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_runtime_advanced:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79EE15DC-74D3-4551-AAD0-EA0CB600DA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:simatic_wincc_telecontrol:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3169FD3-CBA2-417C-95EF-4F8AE9FAB5AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_nms:1.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4ED13FC8-63C0-42C6-A51C-C480C45327C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_nms:1.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "E68FE047-8F53-46B8-82D4-9342B1C8CA55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_pni:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1353DC31-FB12-427A-B1B2-9164A4BEE14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinema_server:14.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A5CC25-A323-4D49-8989-5A417D12D646"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinema_server:14.0:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A690BCD3-6497-43F7-8A51-E033B9121DC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinema_server:14.0:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "AA375D44-ECC5-4BD3-A3D5-6D2AA68782D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinema_server:14.0:sp2_update1:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD26C73-B61F-424B-91C2-352E2CAE6666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinema_server:14.0:sp2_update2:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4EA15F-ECA4-477F-948F-490FC90BC66A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinumerik_opc_ua_server:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA14E65-214C-431D-A49A-D8FC142D4541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tia_administrator:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "915B09CB-CA0A-445B-89D3-16AE9B08858E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.12.0",
            "matchCriteriaId" : "25A3180B-21AF-4010-9DAB-41ADFD2D8031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "10.13.0",
            "versionEndIncluding" : "10.24.0",
            "matchCriteriaId" : "43B199B4-D89C-483D-ACAE-6CB2A59EE67C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndIncluding" : "12.12.0",
            "matchCriteriaId" : "564ED5C8-50D7-413A-B88E-E62B6C07336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "12.13.0",
            "versionEndExcluding" : "12.22.1",
            "matchCriteriaId" : "3DEBF7C8-B000-47B9-B597-DC440F2603B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndIncluding" : "14.14.0",
            "matchCriteriaId" : "428DCD7B-6F66-4F18-B780-5BD80143D482"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "14.15.0",
            "versionEndExcluding" : "14.16.1",
            "matchCriteriaId" : "380D03F3-6A7E-43A2-B002-FB2521FD3C58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.14.0",
            "matchCriteriaId" : "3ED4D313-F372-4CC1-BE11-6BBA2F0E90E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/1",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/2",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/3",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/4",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0006/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4875",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210325.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-05",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-06",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-10",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-772220.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=fb9fa6b51defd48157eeb207f52181f735d96148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00029.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210325.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3450",
      "sourceIdentifier" : "openssl-security@openssl.org",
      "published" : "2021-03-25T15:15:13.560",
      "lastModified" : "2024-11-21T06:21:33.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly encoded elliptic curve parameters was added as an additional strict check. An error in the implementation of this check meant that the result of a previous check to confirm that certificates in the chain are valid CA certificates was overwritten. This effectively bypasses the check that non-CA certificates must not be able to issue other certificates. If a \"purpose\" has been configured then there is a subsequent opportunity for checks that the certificate is a valid CA. All of the named \"purpose\" values implemented in libcrypto perform this check. Therefore, where a purpose is set the certificate chain will still be rejected even when the strict flag has been used. A purpose is set by default in libssl client and server certificate verification routines, but it can be overridden or removed by an application. In order to be affected, an application must explicitly set the X509_V_FLAG_X509_STRICT verification flag and either not set a purpose for the certificate verification or, in the case of TLS client or server applications, override the default purpose. OpenSSL versions 1.1.1h and newer are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1h-1.1.1j)."
      }, {
        "lang" : "es",
        "value" : "El flag X509_V_FLAG_X509_STRICT permite llevar a cabo comprobaciones de seguridad adicionales de los certificados presentes en una cadena de certificados. No está establecido por defecto. A partir de la versión 1.1.1h de OpenSSL, se añadió como comprobación estricta adicional la de no permitir certificados en la cadena que tengan parámetros de curva elíptica codificados explícitamente. Un error en la implementación de esta comprobación significaba que el resultado de una comprobación previa para confirmar que los certificados de la cadena son certificados de CA válidos fueron sobrescritos. De este modo, se omite la comprobación de que los certificados que no son de CA no deben poder emitir otros certificados. Si se ha configurado un \"purpose\", se presenta la posibilidad de comprobar posteriormente que el certificado es una CA válida. Todos los valores de \"purpose\" implementados en libcrypto llevan a cabo esta comprobación. Por lo tanto, cuando se establece un propósito, la cadena de certificados seguirá siendo rechazada inclusive cuando se haya usado el flag strict. Se establece un propósito por defecto en las rutinas de verificación de certificados de cliente servidor de libssl, pero puede ser anulado o eliminado por una aplicación. Para que se vea afectada, una aplicación debe establecer explícitamente el flag de verificación X509_V_FLAG_X509_STRICT y no establecer un propósito para la verificación de certificados o, en el caso de las aplicaciones de cliente o servidor TLS, anular el propósito por defecto. Este problema afecta a las versiones 1.1.1h y posteriores de OpenSSL. Los usuarios de estas versiones deben actualizar a OpenSSL versión 1.1.1k. OpenSSL versión 1.0.2 no está afectado por este problema. Corregido en OpenSSL versión 1.1.1k (Afectadas versiones 1.1.1h-1.1.1j)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.1h",
            "versionEndExcluding" : "1.1.1k",
            "matchCriteriaId" : "34F17CB9-A706-45F7-ADCB-F095B0581798"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "62A178A3-6A52-4981-9A27-FB07AD8AF778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:santricity_smi-s_provider_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "255C64D2-51AF-425B-8A01-91DB4D126812"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:santricity_smi-s_provider:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC1E143B-C678-4F62-B51C-CF2A22E11B12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:storagegrid_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA225A10-CED4-484F-ADDB-932FAAECAF5D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151055B2-9F63-420B-97F4-A434BFBC9A06"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:linux:-:*:*:*:cd:*:*:*",
            "matchCriteriaId" : "1662CB7A-B0E8-4D57-AEE4-2115F682D2BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:linux:17.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "7B99877A-BCA1-49D0-99E6-F95409821B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:linux:18.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "6F7913BB-308B-47B0-80FC-F820784843EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:linux:19.0:*:*:*:lts:*:*:*",
            "matchCriteriaId" : "67613657-08D6-4CBF-AAF4-9355054D24C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_volumes_ontap_mediator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280AA828-6FA9-4260-8EC1-019423B966E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storagegrid:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ADFF451-740F-4DBA-BD23-3881945D3E40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.13.1",
            "matchCriteriaId" : "0AC12300-9051-4C70-9941-9FE5E64B4B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_agent:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.1",
            "versionEndIncluding" : "8.2.3",
            "matchCriteriaId" : "DB8B7710-2558-4153-B018-55943E10CBE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657682A0-54D5-4DC6-A98E-8BAF685926C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC5C76C-3474-4B26-8CF0-2DFAFA3D5458"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8661D361-71B5-4C41-A818-C89EC551D900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "253603DC-2D92-442A-B3A8-A63E14D8A070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:nessus_network_monitor:5.13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E112CFF-31F9-4D87-9A1B-AE0FCF69615E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3622F5-5976-4BBC-A147-FC8A6431EA79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_for_storage_management:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61516569-C48F-4362-B334-8CA10EDB0EC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.0",
            "matchCriteriaId" : "86305E47-33E9-411C-B932-08C395C09982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_world_security:a9.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B1CAD50-749F-4ADB-A046-BF3585677A58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_connectors:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "A8782A14-89B0-45EE-A5CB-FF715F5BA379"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "F48F2267-61EA-4F12-ADE9-85CB6F6B290E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "5C40ECC8-933B-47A4-8082-FCF0EF9C973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.15",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "32714AD7-BCD1-4624-9923-5E6D927CF3CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql_workbench:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "CB1A94E1-A6C6-488D-A74C-6C0B24637272"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.57",
            "versionEndIncluding" : "8.59",
            "matchCriteriaId" : "73DC7DDB-3405-4734-9A8E-7E1D4646CDEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.1.0.1.0",
            "matchCriteriaId" : "C01E8B82-71C7-4A4A-A70A-7B147524AB4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:8.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA7F1FD-9FAB-4654-98B0-4588EEC8B69A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "868B2C4B-CE6B-41DA-A373-7D4FA51EFE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "550F47A2-3393-481E-BC40-CE606BFA8776"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway_cloud_service:8.2.19:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43392D27-6C07-41C7-A17F-10C433338CE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway_cloud_service:9.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FBF6C4C-195F-49A7-861D-52677D9BE58D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:web_gateway_cloud_service:10.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90732D53-E802-4E1B-B6C8-B1FDCE7905A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sma100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.2.1.0-17sv",
            "matchCriteriaId" : "B1F6C5D7-AEC1-4792-BBA7-A83542430E1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:sma100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A2B7B-40F5-4AE0-ACC7-E94B82435DBA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:capture_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.6.24",
            "matchCriteriaId" : "1F7545BE-AB25-4BB7-8091-8D03BBD910A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.11",
            "matchCriteriaId" : "F0B75C3A-7E3A-434A-A045-44A071CB193B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:sonicos:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.0.1-r1456",
            "matchCriteriaId" : "50478447-8102-4BC4-9E96-3165B20B8BE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.24.1",
            "matchCriteriaId" : "5C547B5B-8C6D-49AF-90D4-2F6E2F7E512B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "12.22.1",
            "matchCriteriaId" : "3469E4CF-1739-4BE4-B513-4DC771CD2805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.16.1",
            "matchCriteriaId" : "1D2CA9D6-98EE-44B7-9C9D-5A6B55BCA025"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nodejs:node.js:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.14.0",
            "matchCriteriaId" : "3ED4D313-F372-4CC1-BE11-6BBA2F0E90E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/1",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/2",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/3",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/4",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/",
        "source" : "openssl-security@openssl.org"
      }, {
        "url" : "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0006/",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210325.txt",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-05",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-08",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "openssl-security@openssl.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/28/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=2a40b7bc7b94dd7de897a74571e7024f0cf0d63b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CCBFLLVQVILIVGZMBJL3IXZGKWQISYNP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mta.openssl.org/pipermail/openssl-announce/2021-March/000198.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:07.openssl.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202103-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210326-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-openssl-2021-GHY28dJd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openssl.org/news/secadv/20210325.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuApr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22496",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-03-25T16:15:13.977",
      "lastModified" : "2024-11-21T05:50:13.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication Bypass Vulnerability in Micro Focus Access Manager Product, affects all version prior to version 4.5.3.3. The vulnerability could cause information leakage."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Omisión de Autenticación en Micro Focus Access Manager Product afecta a todas las versiones anteriores a 4.5.3.3.&#xa0;La vulnerabilidad podría causar una filtración de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:access_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.3.3",
            "matchCriteriaId" : "BB19642C-21FB-481C-B098-981057EF1A3E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.netiq.com/documentation/access-manager-45-appliance/accessmanager453-p3-release-notes/data/accessmanager453-p3-release-notes.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/access-manager-45-appliance/accessmanager453-p3-release-notes/data/accessmanager453-p3-release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22659",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T16:15:14.040",
      "lastModified" : "2024-11-21T05:50:25.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rockwell Automation MicroLogix 1400 Version 21.6 and below may allow a remote unauthenticated attacker to send a specially crafted Modbus packet allowing the attacker to retrieve or modify random values in the register. If successfully exploited, this may lead to a buffer overflow resulting in a denial-of-service condition. The FAULT LED will flash RED and communications may be lost. Recovery from denial-of-service condition requires the fault to be cleared by the user."
      }, {
        "lang" : "es",
        "value" : "Rockwell Automation MicroLogix 1400 versión 21.6 y anteriores, puede permitir a un atacante remoto no autenticado enviar un paquete Modbus especialmente diseñado que le permita al atacante recuperar o modificar valores aleatorios en el registro.&#xa0;Si es explotado con éxito, esto puede conllevar a un desbordamiento del búfer que resulte en una condición de denegación de servicio.&#xa0;El LED de FALLO parpadeará en ROJO y es posible que se pierdan las comunicaciones.&#xa0;Una recuperación de la condición de denegación de servicio requiere que el fallo sea eliminado por usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:rockwellautomation:micrologix_1400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.6",
            "matchCriteriaId" : "325F851D-26F6-4361-95A8-1CB68746B5E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:rockwellautomation:micrologix_1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196EA0BE-FDF3-46BE-B3DA-5F49208C5D80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129877/loc/en_US#__highlight",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-033-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://rockwellautomation.custhelp.com/app/answers/answer_view/a_id/1129877/loc/en_US#__highlight",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-033-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21783",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2021-03-25T17:15:13.210",
      "lastModified" : "2024-11-21T05:48:57.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código en la funcionalidad del plugin WS-Addressing de Genivia gSOAP versión 2.8.107.&#xa0;Una petición  SOAP especialmente diseñada puede conllevar a una ejecución de código remota.&#xa0;Un atacante puede enviar una petición  HTTP para desencadenar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-680"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genivia:gsoap:2.8.107:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67681E3B-436C-4B75-A472-F99B22E3625F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_signaling_router:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.5.0",
            "matchCriteriaId" : "C88D46AF-459D-4917-9403-0F63FEC83512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.1.0",
            "versionEndIncluding" : "16.4.0",
            "matchCriteriaId" : "1A0E3537-CB5A-40BF-B42C-CED9211B8892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879FE18D-6B1C-4CF7-B409-C379E9F60D0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2BE3FB3-5619-4381-BE4E-FBADB3C747F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_eagle_lnp_application_processor:46.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AB3C447-DA3F-44FF-91FD-8985C0527940"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_lsms:13.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E14AECDA-5C63-40F0-81FF-17BBFA487577"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_lsms:13.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93FC676-40F5-45CA-880E-8084FF911A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_lsms:13.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A946E0B-083B-4315-B979-FAB8EF96F9F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_lsms:13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E6EF0DC-0188-4804-ACBF-25171A710CDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tekelec_virtual_operating_environment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndIncluding" : "3.7.1",
            "matchCriteriaId" : "B4509814-6693-4045-8263-B8C965398741"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1245",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25349",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.303",
      "lastModified" : "2024-11-21T05:54:48.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using unsafe PendingIntent in Slow Motion Editor prior to version 3.5.18.5 allows local attackers unauthorized action without permission via hijacking the PendingIntent."
      }, {
        "lang" : "es",
        "value" : "Usar un PendingIntent no seguro en Slow Motion Editor versiones anteriores a 3.5.18.5, permite a atacantes locales llevar a cabo acciones no autorizadas sin permiso por medio del secuestro de PendingIntent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:slow_motion_editor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.18.5",
            "matchCriteriaId" : "E0B68CB1-4A6D-4CCE-9D46-055BABF0BF4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25350",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.397",
      "lastModified" : "2024-11-21T05:54:48.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information Exposure vulnerability in Samsung Account prior to version 12.1.1.3 allows physically proximate attackers to access user information via log."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Exposición de Información en Samsung Account versiones anteriores a 12.1.1.3, permite a atacantes cercanos físicamente acceder a la información del usuario por medio del registro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:account:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.1.3",
            "matchCriteriaId" : "0B61EDFA-84A2-4066-BA9E-4B77D1D808F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25351",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.507",
      "lastModified" : "2024-11-21T05:54:49.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Access Control in EmailValidationView in Samsung Account prior to version 10.7.0.7 and 12.1.1.3 allows physically proximate attackers to log out user account on device without user password."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en la función EmailValidationView en Samsung Account versiones anteriores a 10.7.0.7 y 12.1.1.3, permite a atacantes cercanos físicamente cerrar la sesión de la cuenta de usuario en el dispositivo sin contraseña de usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:account:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.7.07",
            "matchCriteriaId" : "2E76E290-260D-40F4-BF8E-375687CBC3A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:account:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.1.3",
            "matchCriteriaId" : "0B61EDFA-84A2-4066-BA9E-4B77D1D808F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25352",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.600",
      "lastModified" : "2024-11-21T05:54:49.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using PendingIntent with implicit intent in Bixby Voice prior to version 3.0.52.14 allows attackers to execute privileged action by hijacking and modifying the intent."
      }, {
        "lang" : "es",
        "value" : "Usar un PendingIntent con intención implícita en Bixby Voice versiones anteriores a 3.0.52.14, permite a atacantes ejecutar acciones privilegiadas al secuestrar y modificar la intención"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:bixby_voice:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.52.14",
            "matchCriteriaId" : "E91299C8-80F1-4FE2-807C-A4654B04B315"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25353",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.693",
      "lastModified" : "2024-11-21T05:54:49.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent."
      }, {
        "lang" : "es",
        "value" : "Usar un PendingIntent vacío en Galaxy Themes versiones anteriores a 5.2.00.1215, permite a atacantes locales leer y escribir directorios de archivos privados de la aplicación Galaxy Themes sin permiso por medio del secuestro de PendingIntent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:galaxy_themes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.00.1215",
            "matchCriteriaId" : "EF1295F7-15B5-436C-8F78-705D0B3EE498"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25354",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.773",
      "lastModified" : "2024-11-21T05:54:49.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input check in Samsung Internet prior to version 13.2.1.46 allows attackers to launch non-exported activity in Samsung Browser via malicious deeplink."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada de entrada en Samsung Internet versiones anteriores a 13.2.1.46, permite a atacantes iniciar actividades no exportadas en el Samsung Browser por medio de deeplink maliciosos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:internet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2.1.46",
            "matchCriteriaId" : "DF117F8A-91F0-4386-9FD2-530E2063FF59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25355",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.867",
      "lastModified" : "2024-11-21T05:54:49.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using unsafe PendingIntent in Samsung Notes prior to version 4.2.00.22 allows local attackers unauthorized action without permission via hijacking the PendingIntent."
      }, {
        "lang" : "es",
        "value" : "Usar un PendingIntent no seguro en Samsung Notes versiones anteriores a 4.2.00.22, permite a atacantes locales llevar a cabo acciones no autorizadas sin permiso por medio del secuestro del PendingIntent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.00.22",
            "matchCriteriaId" : "A9D8C265-F25F-4268-84D9-BD95DBC0F715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25366",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:13.943",
      "lastModified" : "2024-11-21T05:54:50.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication."
      }, {
        "lang" : "es",
        "value" : "Un control inapropiado de acceso en Samsung Internet versiones anteriores a 13.2.1.70, permite a atacantes cercanos físicamente omitir la autenticación del modo secreto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 2.9,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:internet:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "13.2.1.70",
            "matchCriteriaId" : "9F708118-97D4-4A6E-941C-AA5BD4FC0AB2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25367",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:14.037",
      "lastModified" : "2024-11-21T05:54:50.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Salto de Ruta en Samsung Notes versiones anteriores a 4.2.00.22, permite a atacantes acceder a archivos locales sin permiso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:notes:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.2.00.22",
            "matchCriteriaId" : "A9D8C265-F25F-4268-84D9-BD95DBC0F715"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25368",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-25T17:15:14.130",
      "lastModified" : "2024-11-21T05:54:51.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro en Samsung Cloud versiones anteriores a 4.7.0.3, permite a atacantes interceptar cuando el proveedor es ejecutado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:cloud:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.7.0.3",
            "matchCriteriaId" : "C6B085ED-7DBB-404D-BBCF-3349FA2FEBF9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20210",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:12.703",
      "lastModified" : "2024-11-21T05:46:08.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.29. Memory leak in the show-status CGI handler when no filter files are configured can lead to a system crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.29.&#xa0;Una pérdida de memoria en el controlador CGI show-status cuando no son configurados archivos de filtro puede conllevar a un bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.29",
            "matchCriteriaId" : "0C2D9175-6366-48B3-BE07-97C0C153D2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928729",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20211",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:12.783",
      "lastModified" : "2024-11-21T05:46:08.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.29. Memory leak when client tags are active can cause a system crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.29.&#xa0;Una pérdida de memoria cuando las etiquetas de cliente están activas puede causar un bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.29",
            "matchCriteriaId" : "0C2D9175-6366-48B3-BE07-97C0C153D2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928733",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20212",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:12.877",
      "lastModified" : "2024-11-21T05:46:08.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.29. Memory leak if multiple filters are executed and the last one is skipped due to a pcre error leading to a system crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.29.&#xa0;Una pérdida de memoria si son ejecutados múltiples filtros y es omitido el último debido a un error pcre conlleva un bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.29",
            "matchCriteriaId" : "0C2D9175-6366-48B3-BE07-97C0C153D2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928736",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20213",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:12.970",
      "lastModified" : "2024-11-21T05:46:08.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.29. Dereference of a NULL-pointer that could result in a crash if accept-intercepted-requests was enabled, Privoxy failed to get the request destination from the Host header and a memory allocation failed."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.29.&#xa0;Una desreferencia de un puntero NULL podría resultar en un bloqueo si se habilitaba accept-intercepted-requests, Privoxy falló en obtener el destino de la petición del encabezado del host y falló en la asignación de memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.29",
            "matchCriteriaId" : "0C2D9175-6366-48B3-BE07-97C0C153D2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928739",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20214",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:13.047",
      "lastModified" : "2024-11-21T05:46:08.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the client-tags CGI handler when client tags are configured and memory allocations fail can lead to a system crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.29.&#xa0;Unas pérdidas de memoria en el manejador CGI de etiquetas de cliente cuando las etiquetas de cliente son configuradas y un fallo de las asignaciones de memoria puede conllevar a un bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.29",
            "matchCriteriaId" : "0C2D9175-6366-48B3-BE07-97C0C153D2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928742",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928742",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20215",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:13.127",
      "lastModified" : "2024-11-21T05:46:08.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.29. Memory leaks in the show-status CGI handler when memory allocations fail can lead to a system crash."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.29.&#xa0;Unas pérdidas de memoria en el manejador CGI show-status cuando un fallo de las asignaciones de memoria puede conllevar a un bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.29",
            "matchCriteriaId" : "0C2D9175-6366-48B3-BE07-97C0C153D2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928746",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1928746",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.29/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20216",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:13.283",
      "lastModified" : "2024-11-21T05:46:08.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.31. A memory leak that occurs when decompression fails unexpectedly may lead to a denial of service. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.31.&#xa0;Una pérdida de memoria ocurre cuando un fallo de descompresión inesperadamente puede conllevar a una denegación de servicio.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.31",
            "matchCriteriaId" : "0C99A4E0-03CB-4F0A-A073-4D98371A555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923256",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/31/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.31/user-manual/whatsnew.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/01/31/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.privoxy.org/3.0.31/user-manual/whatsnew.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20217",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:13.750",
      "lastModified" : "2024-11-21T05:46:09.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Privoxy in versions before 3.0.31. An assertion failure triggered by a crafted CGI request may lead to denial of service. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Privoxy en versiones anteriores a 3.0.31.&#xa0;Un fallo de aserción es desencadenado por una petición CGI diseñada puede conllevar a una denegación de servicio.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:privoxy:privoxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.31",
            "matchCriteriaId" : "0C99A4E0-03CB-4F0A-A073-4D98371A555B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923252",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1923252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26596",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T19:15:14.080",
      "lastModified" : "2024-11-21T05:56:33.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Nokia NetAct 18A. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious content is to include it as a parameter in a URL that is posted publicly or e-mailed directly to victims. Here, the /netact/sct filename parameter is used."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Nokia NetAct 18A.&#xa0;Un usuario malicioso puede cambiar el nombre de un archivo cargado para incluir código JavaScript, que luego es almacenado y ejecutado en el navegador web de la víctima.&#xa0;El mecanismo más común para entregar contenido malicioso es incluirlo como parámetro en una URL que es publicado públicamente o es enviado por correo electrónico directamente a las víctimas.&#xa0;Aquí, es usado el parámetro filename de /netact/sct"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:18a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94B07D6-3A87-4D76-8849-2F61EAC74DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trusted-introducer.org/directory/teams/nokia-psirt.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trusted-introducer.org/directory/teams/nokia-psirt.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T19:15:14.140",
      "lastModified" : "2024-11-21T05:56:33.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Nokia NetAct 18A. A remote user, authenticated to the NOKIA NetAct Web Page, can visit the Site Configuration Tool web site section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Nokia NetAct 18A.&#xa0;Un usuario remoto, autenticado en la página web de NOKIA NetAct, puede visitar la sección del sitio web de la Site Configuration Tool y cargar arbitrariamente archivos potencialmente peligrosos sin restricciones por medio del parámetro dir de /netact/sct junto con el valor operation=upload"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nokia:netact:18a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94B07D6-3A87-4D76-8849-2F61EAC74DA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trusted-introducer.org/directory/teams/nokia-psirt.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trusted-introducer.org/directory/teams/nokia-psirt.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27192",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T19:15:14.250",
      "lastModified" : "2024-11-21T05:57:31.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios locales en clientes Windows de Netop Vision Pro versiones hasta 9.7.1 incluyéndola, permite a un usuario local alcanzar privilegios de administrador mientras usa los clientes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netop:vision_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.7.1",
            "matchCriteriaId" : "DCCBF8C7-68C6-465F-8F49-279474238F9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27193",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T19:15:14.313",
      "lastModified" : "2024-11-21T05:57:32.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system privileges resulting in a privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de permisos predeterminados incorrectos en la API de Netop Vision Pro versiones hasta 9.7.1 incluyéndola, permite a un atacante remoto no autenticado leer y escribir archivos en la máquina remota con privilegios system, resultando una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netop:vision_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.7.1",
            "matchCriteriaId" : "DCCBF8C7-68C6-465F-8F49-279474238F9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27194",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T19:15:14.390",
      "lastModified" : "2024-11-21T05:57:32.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext transmission of sensitive information in Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to gather credentials including Windows login usernames and passwords."
      }, {
        "lang" : "es",
        "value" : "Una transmisión a texto sin cifrar de información confidencial en Netop Vision Pro versiones hasta 9.7.1 incluyéndola, permite a un atacante remoto no autenticado recopilar credenciales, incluyendo los nombres de usuario y contraseñas de inicio de sesión de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netop:vision_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.7.1",
            "matchCriteriaId" : "DCCBF8C7-68C6-465F-8F49-279474238F9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27195",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T19:15:14.470",
      "lastModified" : "2024-11-21T05:57:32.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Authorization vulnerability in Netop Vision Pro up to and including to 9.7.1 allows an attacker to replay network traffic."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Autorización Incorrecta en Netop Vision Pro versiones hasta 9.7.1, incluyéndola, permite a un atacante reproducir el tráfico de red"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netop:vision_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.7.1",
            "matchCriteriaId" : "DCCBF8C7-68C6-465F-8F49-279474238F9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mcafee.com/blogs/other-blogs/mcafee-labs/netop-vision-pro-distance-learning-software-is-20-20-in-hindsight",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29096",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-03-25T19:15:14.533",
      "lastModified" : "2024-11-21T06:00:42.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allows an unauthenticated attacker to achieve arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de la memoria previamente liberada cuando se analiza un archivo especialmente diseñado en Esri ArcReader, ArcGIS Desktop, ArcGIS Engine versiones 10.8.1 (y anteriores) y ArcGIS Pro versiones 2.7 (y anteriores), permite a un atacante no autenticado lograr una ejecución de código arbitrario en el contexto de el usuario actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "2A49E9C8-9522-45F8-B3B8-FB58D40105B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "B3B1EC12-C1FB-408B-823C-8FF6581ED8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcmap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "C055EC7D-F119-4350-9C8D-731873D70D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "93D3FB72-81E3-4DA3-88E7-B12BEDE51A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-370/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-370/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3443",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:14.627",
      "lastModified" : "2024-11-21T06:21:32.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.27 handled component references in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de desreferencia de puntero NULL en la manera en que Jasper versiones anteriores a 2.0.27, manejaban las referencias de componentes en el decodificador de formato de imagen JP2.&#xa0;Un archivo de imagen JP2 especialmente diseñado podría causar que una aplicación que usa la biblioteca Jasper se bloquee al abrirse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.27",
            "matchCriteriaId" : "A96D0E9A-79A2-4538-9242-511D872B08C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939233",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3446",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:14.703",
      "lastModified" : "2024-11-21T06:21:32.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libtpms in versions before 0.8.2. The commonly used integration of libtpms with OpenSSL contained a vulnerability related to the returned IV (initialization vector) when certain symmetric ciphers were used. Instead of returning the last IV it returned the initial IV to the caller, thus weakening the subsequent encryption and decryption steps. The highest threat from this vulnerability is to data confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en libtpms en versiones anteriores a 0.8.2.&#xa0;La integración comúnmente usada de libtpms con OpenSSL contenía una vulnerabilidad relacionada con el IV devuelto (vector de inicialización) cuando se usaban determinados cifrados simétricos.&#xa0;En lugar de devolver el último IV, devolvió el IV inicial a la persona que llama, debilitando así los pasos posteriores de cifrado y descifrado.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.2",
            "matchCriteriaId" : "8A078392-00E4-43DC-BA7C-B707184FE088"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*",
            "matchCriteriaId" : "3AA08768-75AF-4791-B229-AE938C780959"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939664",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3466",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:15.297",
      "lastModified" : "2024-11-21T06:21:36.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libmicrohttpd. A missing bounds check in the post_process_urlencoded function leads to a buffer overflow, allowing a remote attacker to write arbitrary data in an application that uses libmicrohttpd. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. Only version 0.9.70 is vulnerable."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado un fallo en libmicrohttpd. Una comprobación de límites ausente en la función post_process_urlencoded conduce a un desbordamiento del búfer, lo que permite a un atacante remoto escribir datos arbitrarios en una aplicación que utilice libmicrohttpd. La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema. Sólo la versión 0.9.70 es vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:libmicrohttpd:0.9.70:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B308F982-C810-45E2-8178-DB29F9AA839D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939127",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4334XJNDJPYQNFE6S3S2KUJJ7TMHYCWL/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75HDMREKITMGPGE62NP7KE62ZJVLETXN/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5NEPVGP3L2CZHLZ4UB44PEILHKPDBOG/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-08",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4334XJNDJPYQNFE6S3S2KUJJ7TMHYCWL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/75HDMREKITMGPGE62NP7KE62ZJVLETXN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K5NEPVGP3L2CZHLZ4UB44PEILHKPDBOG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202311-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3467",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-25T19:15:15.533",
      "lastModified" : "2024-11-21T06:21:36.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL pointer dereference flaw was found in the way Jasper versions before 2.0.26 handled component references in CDEF box in the JP2 image format decoder. A specially crafted JP2 image file could cause an application using the Jasper library to crash when opened."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de desreferencia de puntero NULL en la manera en que Jasper versiones anteriores a 2.0.26 manejaban las referencias de componentes en el cuadro CDEF en el decodificador de formato de imagen JP2.&#xa0;Un archivo de imagen JP2 especialmente diseñado podría causar que una aplicación que usa la biblioteca Jasper se bloquee al abrirse"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jasper_project:jasper:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.26",
            "matchCriteriaId" : "3685A5B1-8E10-4860-ACB7-560094411E05"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1942097",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWAIUFNIUCGS2IMGGDTWZIUIY7BNLGKF/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1942097",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KWAIUFNIUCGS2IMGGDTWZIUIY7BNLGKF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22888",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-25T20:15:12.507",
      "lastModified" : "2024-11-21T05:50:50.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `status` parameter of campaign-zone-zones.php. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and execute injected JavaScript code."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver versiones anteriores a v5.2.0, es susceptible a una vulnerabilidad de tipo XSS reflejado en el parámetro \"status\" del archivo campaign-zone-zones.php.&#xa0;Un atacante podría engañar a un usuario con acceso a la interfaz de usuario de una instancia de Revive Adserver para hacer clic en una URL específicamente diseñada y ejecutar código JavaScript inyectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "32A65BFA-7E74-4D14-80FD-4D4E5B16CD14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/f472d890",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1097979",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-003/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/f472d890",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1097979",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22889",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-25T20:15:12.617",
      "lastModified" : "2024-11-21T05:50:50.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Revive Adserver before v5.2.0 is vulnerable to a reflected XSS vulnerability in the `statsBreakdown` parameter of stats.php (and possibly other scripts) due to single quotes not being escaped. An attacker could trick a user with access to the user interface of a Revive Adserver instance into clicking on a specifically crafted URL and pressing a certain key combination to execute injected JavaScript code."
      }, {
        "lang" : "es",
        "value" : "Revive Adserver versiones anteriores a v5.2.0, es susceptible a una vulnerabilidad XSS reflejado en el parámetro \"statsBreakdown\" del archivo stats.php (y posiblemente otros scripts) debido a que las comillas simples no se escapan.&#xa0;Un atacante podría engañar a un usuario con acceso a la interfaz de usuario de una instancia de Revive Adserver para que haga clic en una URL diseñada específicamente y presionar una determinada combinación de teclas para ejecutar el código JavaScript inyectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:revive-adserver:revive_adserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.0",
            "matchCriteriaId" : "32A65BFA-7E74-4D14-80FD-4D4E5B16CD14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/2f868414",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1097217",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-003/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/revive-adserver/revive-adserver/commit/2f868414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1097217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.revive-adserver.com/security/revive-sa-2021-003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27438",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T20:15:12.897",
      "lastModified" : "2024-11-21T05:57:59.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1)."
      }, {
        "lang" : "es",
        "value" : "El software contiene una contraseña embebida que usa para su propia autenticación entrante o para la comunicación saliente a componentes externos en el Reason DR60 (todas las versiones de firmware anteriores a 02A04.1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:reason_dr60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "02a04.1",
            "matchCriteriaId" : "86109B55-8EBB-4C76-90C6-755C1469D8B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:reason_dr60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095915F9-9B1A-4C1A-8D1F-80379B0B682C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27440",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T20:15:12.977",
      "lastModified" : "2024-11-21T05:57:59.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The software contains a hard-coded password it uses for its own inbound authentication or for outbound communication to external components on the Reason DR60 (all firmware versions prior to 02A04.1)."
      }, {
        "lang" : "es",
        "value" : "El software contiene una contraseña embebida que usa para su propia autenticación entrante o para la comunicación saliente a componentes externos en el Reason DR60 (todas las versiones de firmware anteriores a 02A04.1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:reason_dr60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "02a04.1",
            "matchCriteriaId" : "86109B55-8EBB-4C76-90C6-755C1469D8B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:reason_dr60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095915F9-9B1A-4C1A-8D1F-80379B0B682C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27448",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T20:15:13.087",
      "lastModified" : "2024-11-21T05:58:00.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1)."
      }, {
        "lang" : "es",
        "value" : "Una falta de comunicación en el sistema de archivos permite a adversarios con acceso al MU320E escalar privilegios en el MU320E (todas las versiones de firmware anteriores a v04A00.1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:mu320e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "04a00.1",
            "matchCriteriaId" : "B2B7FF17-31E3-4B8F-B1BE-DF91D6A0E654"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:mu320e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929DAA0C-CE27-4EE4-BD2A-14C55E3B4CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27450",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T20:15:13.163",
      "lastModified" : "2024-11-21T05:58:00.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SSH server configuration file does not implement some best practices. This could lead to a weakening of the SSH protocol strength, which could lead to additional misconfiguration or be leveraged as part of a larger attack on the MU320E (all firmware versions prior to v04A00.1)."
      }, {
        "lang" : "es",
        "value" : "Un archivo de configuración del servidor SSH no implementa algunas de las mejores prácticas.&#xa0;Esto podría conllevar a un debilitamiento de la fuerza del protocolo SSH, lo que podría conllevar a una configuración incorrecta adicional o aprovecharse como parte de un ataque mayor en el MU320E (todas las versiones de firmware anteriores a la v04A00.1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:mu320e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "04a00.1",
            "matchCriteriaId" : "B2B7FF17-31E3-4B8F-B1BE-DF91D6A0E654"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:mu320e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929DAA0C-CE27-4EE4-BD2A-14C55E3B4CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27452",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T20:15:13.227",
      "lastModified" : "2024-11-21T05:58:01.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The software contains a hard-coded password that could allow an attacker to take control of the merging unit using these hard-coded credentials on the MU320E (all firmware versions prior to v04A00.1)."
      }, {
        "lang" : "es",
        "value" : "El software contiene una contraseña embebida que podría permitir a un atacante tomar el control de la unidad de fusión usando estas credenciales embebidas en el MU320E (todas las versiones de firmware anteriores a v04A00.1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-259"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:mu320e_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "04a00.1",
            "matchCriteriaId" : "B2B7FF17-31E3-4B8F-B1BE-DF91D6A0E654"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:mu320e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "929DAA0C-CE27-4EE4-BD2A-14C55E3B4CEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27454",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-03-25T20:15:13.303",
      "lastModified" : "2024-11-21T05:58:01.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1)."
      }, {
        "lang" : "es",
        "value" : "El software lleva a cabo una operación en un nivel de privilegio mayor que el nivel mínimo requerido, lo que crea nuevas debilidades o amplifica las consecuencias de otras debilidades en el Reason DR60 (todas las versiones de firmware anteriores a 02A04.1)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ge:reason_dr60_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "02a04.1",
            "matchCriteriaId" : "86109B55-8EBB-4C76-90C6-755C1469D8B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:ge:reason_dr60:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "095915F9-9B1A-4C1A-8D1F-80379B0B682C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-082-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29008",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T20:15:13.383",
      "lastModified" : "2024-11-21T06:00:30.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via webmaster-tools.php in the \"to_time\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en SEO Panel versión 4.8.0, permite a atacantes remotos inyectar JavaScript por medio del archivo webmaster-tools.php en el parámetro \"to_time\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/211",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/211",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29009",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T20:15:13.460",
      "lastModified" : "2024-11-21T06:00:31.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the \"type\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en SEO Panel versión 4.8.0, permite a atacantes remotos inyectar JavaScript por medio del archivo archive.php en el parámetro \"type\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/210",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29010",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T20:15:13.523",
      "lastModified" : "2024-11-21T06:00:31.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) issue in SEO Panel 4.8.0 allows remote attackers to inject JavaScript via archive.php in the \"report_type\" parameter."
      }, {
        "lang" : "es",
        "value" : "Un problema de tipo cross-site scripting (XSS) en SEO Panel versión 4.8.0, permite a atacantes remotos inyectar JavaScript por medio del archivo archive.php en el parámetro \"report_type\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seopanel:seo_panel:4.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA338EF9-AC8B-411D-8BE3-9F9A2E68F8E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/212",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/seopanel/Seo-Panel/issues/212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29093",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-03-25T21:15:13.167",
      "lastModified" : "2024-11-21T06:00:42.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use-after-free vulnerability when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de uso de la memoria previamente liberada cuando se analiza un archivo especialmente diseñado en Esri ArcGIS Server versiones 10.8.1 (y anteriores), permite a un atacante autenticado con permisos especializados lograr una ejecución de código arbitrario en el contexto de la cuenta de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "3ABA4B71-7460-4EA5-B432-C75B4090D1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29094",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-03-25T21:15:13.277",
      "lastModified" : "2024-11-21T06:00:42.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de desbordamiento de búfer cuando se analiza un archivo especialmente diseñado en Esri ArcGIS Server versiones 10.8.1 (y anteriores), permiten a un atacante autenticado con permisos especializados lograr una ejecución de código arbitrario en el contexto de la cuenta de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "3ABA4B71-7460-4EA5-B432-C75B4090D1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29095",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-03-25T21:15:13.357",
      "lastModified" : "2024-11-21T06:00:42.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcGIS Server 10.8.1 (and earlier) allows an authenticated attacker with specialized permissions to achieve arbitrary code execution in the context of the service account."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de puntero no inicializado cuando se analiza un archivo especialmente diseñado en Esri ArcGIS Server versiones 10.8.1 (y anteriores), permiten a un atacante autenticado con permisos especializados lograr una ejecución de código arbitrario en el contexto de la cuenta de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "3ABA4B71-7460-4EA5-B432-C75B4090D1F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/security-advisory-server-image",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29097",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-03-25T21:15:13.467",
      "lastModified" : "2024-11-21T06:00:42.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple buffer overflow vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de desbordamiento de búfer cuando se analiza un archivo especialmente diseñado en Esri ArcReader, ArcGIS Desktop, ArcGIS Engine versiones 10.8.1 (y anteriores) y ArcGIS Pro versiones 2.7 (y anteriores), permiten a un atacante no autenticado lograr una ejecución de código arbitrario en el contexto del usuario actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        }, {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "2A49E9C8-9522-45F8-B3B8-FB58D40105B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "B3B1EC12-C1FB-408B-823C-8FF6581ED8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcmap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "C055EC7D-F119-4350-9C8D-731873D70D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "93D3FB72-81E3-4DA3-88E7-B12BEDE51A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-360/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-363/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-364/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-365/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-367/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-368/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-369/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-371/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-360/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-363/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-364/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-365/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-367/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-368/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-369/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-371/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29098",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-03-25T21:15:13.543",
      "lastModified" : "2025-05-05T14:12:43.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple uninitialized pointer vulnerabilities when parsing a specially crafted file in Esri ArcReader, ArcGIS Desktop, ArcGIS Engine 10.8.1 (and earlier) and ArcGIS Pro 2.7 (and earlier) allow an unauthenticated attacker to achieve arbitrary code execution in the context of the current user."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de puntero no inicializado cuando se analiza un archivo especialmente diseñado en Esri ArcReader, ArcGIS Desktop, ArcGIS Engine versiones 10.8.1 (y anteriores) y ArcGIS Pro versiones 2.7 (y anteriores), permiten a un atacante no autenticado lograr una ejecución de código arbitrario en el contexto del usuario actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-824"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "2A49E9C8-9522-45F8-B3B8-FB58D40105B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_pro:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.7",
            "matchCriteriaId" : "B3B1EC12-C1FB-408B-823C-8FF6581ED8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcmap:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "C055EC7D-F119-4350-9C8D-731873D70D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcreader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "93D3FB72-81E3-4DA3-88E7-B12BEDE51A53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/",
        "source" : "psirt@esri.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-361/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-362/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-372/",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis/administration/security-advisory-general-raster/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-361/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-362/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-372/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27372",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T22:15:12.917",
      "lastModified" : "2024-11-21T05:57:51.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Realtek xPON RTL9601D SDK 1.9 stores passwords in plaintext which may allow attackers to possibly gain access to the device with root permissions via the build-in network monitoring tool and execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Realtek xPON RTL9601D SDK versión 1.9, almacena las contraseñas en texto plano, lo que puede permitir que atacantes posiblemente consigan acceso al dispositivo con permisos root por medio de la herramienta de monitoreo de red incorporada y ejecutar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:realtek:xpon_rtl9601d_software_development_kit:1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7B7C1FE-5626-45AB-A169-C316493B357B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:realtek:xpon_rtl9601d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EE02CD8-B788-4488-B7E9-C3FEC3716FB9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.realtek.com/images/safe-report/RTL9601D_CVE-2021-27372.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.realtek.com/images/safe-report/RTL9601D_CVE-2021-27372.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3119",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-25T23:15:13.257",
      "lastModified" : "2024-11-21T06:20:55.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zetetic SQLCipher 4.x before 4.4.3 has a NULL pointer dereferencing issue related to sqlcipher_export in crypto.c and sqlite3StrICmp in sqlite3.c. This may allow an attacker to perform a remote denial of service attack. For example, an SQL injection can be used to execute the crafted SQL command sequence, which causes a segmentation fault."
      }, {
        "lang" : "es",
        "value" : "Zetetic SQLCipher versiones 4.x anteriores a 4.4.3, presenta un problema de desreferencia del puntero NULL relacionado con la función sqlcipher_export en el archivo crypto.cy y sqlite3StrICmp en el archivo sqlite3.c.&#xa0;Esto puede permitir a un atacante llevar a cabo un ataque de denegación de servicio remota.&#xa0;Por ejemplo, puede ser usada una inyección SQL para ejecutar el script SQL diseñado, causando un fallo de segmentación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zetetic:sqlcipher:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "4.4.3",
            "matchCriteriaId" : "8ED7FB70-ED8A-4FF4-B73A-58F495E1D82D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sqlcipher/sqlcipher/commit/cb71f53e8cea4802509f182fa5bead0ac6ab0e7f#diff-9305215a9a0ea69300281fc4af90bc7f3437e34a0e1745d030213152993ddae4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.telekom.com/resource/blob/621186/3fb50ca7a4a97728be18717ed7b0062c/dl-210308-critical-dos-vulnerability-in-sqlcipher-sql-command-processing-data.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/sqlcipher/sqlcipher/commit/cb71f53e8cea4802509f182fa5bead0ac6ab0e7f#diff-9305215a9a0ea69300281fc4af90bc7f3437e34a0e1745d030213152993ddae4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.telekom.com/resource/blob/621186/3fb50ca7a4a97728be18717ed7b0062c/dl-210308-critical-dos-vulnerability-in-sqlcipher-sql-command-processing-data.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T03:16:40.647",
      "lastModified" : "2024-11-21T06:20:47.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "app/views_mod/user/user.py in LibrIT PaSSHport through 2.5 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided search filter because user input gets no sanitization."
      }, {
        "lang" : "es",
        "value" : "El archivo app/views_mod/user/user.py en LibrIT PaSSHport hasta versión 2.5, está afectado por una inyección de LDAP. Un filtrado de información se presenta por el procesamiento de consultas especiales, escapando del filtro de búsqueda proporcionado debido a que la entrada del usuario no es saneada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:librit:passhport:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5",
            "matchCriteriaId" : "80FB2365-DFD9-46AA-B636-FD4E4AAC0D6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LibrIT/passhport/commit/366b03f607729c4538e91b634ecc57c8398522a1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibrIT/passhport/pull/562",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jorgectf.gitlab.io/disclosure/cve-2021-3027/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibrIT/passhport/commit/366b03f607729c4538e91b634ecc57c8398522a1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LibrIT/passhport/pull/562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://jorgectf.gitlab.io/disclosure/cve-2021-3027/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3153",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T03:16:40.723",
      "lastModified" : "2024-11-21T06:21:00.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Terraform Enterprise up to v202102-2 failed to enforce an organization-level setting that required users within an organization to have two-factor authentication enabled. Fixed in v202103-1."
      }, {
        "lang" : "es",
        "value" : "HashiCorp Terraform Enterpriha sidosta v202102-2 no logró aplicar una configuración a nivel de organización que requerían usuarios dentro de una organización para tener habilitada la autenticación de dos factores.&#xa0;Corregido en la versión v202103-1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:terraform_enterprise:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "202102-2",
            "matchCriteriaId" : "822398DE-69D7-4A10-B08C-884A17D6E9FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-06-terraform-enterprise-organization-level-mfa-requirement-was-not-enforced/22401",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-06-terraform-enterprise-organization-level-mfa-requirement-was-not-enforced/22401",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T08:15:12.730",
      "lastModified" : "2024-11-21T05:59:23.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** CA eHealth Performance Manager versiones hasta 6.3.2.12, está afectado por una Escalada de Privilegios por medio de una Dynamically Linked Shared Object Library.&#xa0;Un usuario normal debe crear una biblioteca maliciosa en el RPATH escribible, que se vinculará dinámicamente cuando se ejecutar el ejecutable emtgtctl2.&#xa0;El código de la biblioteca se ejecutará como usuario de ehealth.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:ehealth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.2.12",
            "matchCriteriaId" : "93837978-6B5C-40C4-B54A-C64FE98507C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T08:15:13.027",
      "lastModified" : "2024-11-21T05:59:23.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA eHealth Performance Manager through 6.3.2.12 is affected by Cross Site Scripting (XSS). The impact is: An authenticated remote user is able to inject arbitrary web script or HTML due to incorrect sanitization of user-supplied data and perform a Reflected Cross-Site Scripting attack against the platform users. The affected endpoints are: cgi/nhWeb with the parameter report, aviewbin/filtermibobjects.pl with the parameter namefilter, and aviewbin/query.pl with the parameters System, SystemText, Group, and GroupText. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** CA eHealth Performance Manager versiones hasta 6.3.2.12, está afectado por una vulnerabilidad de tipo Cross Site Scripting (XSS).&#xa0;El impacto es: Un usuario remoto autenticado puede inyectar un script web o HTML arbitrario debido a un saneamiento inapropiado de los datos proporcionados por el usuario y llevar a cabo un ataque de tipo Cross-Site Scripting Reflejado contra usuarios de la plataforma.&#xa0;Los endpoints afectados son: cgi/nhWeb con el parámetro report, aviewbin/filtermibobjects.pl con el parámetro namefilter y aviewbin/query.pl con los parámetros System, SystemText, Group y GroupText.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:ehealth_performance_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.2.12",
            "matchCriteriaId" : "BBF13ACB-2A31-4F4B-8B93-5554495DE03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T08:15:13.103",
      "lastModified" : "2024-11-21T05:59:24.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA eHealth Performance Manager through 6.3.2.12 is affected by Improper Restriction of Excessive Authentication Attempts. An attacker is able to perform an arbitrary number of /web/frames/ authentication attempts using different passwords, and eventually gain access to a targeted account, NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** CA eHealth Performance Manager versiones hasta 6.3.2.12, está afectado por la Restricción Inapropiada de Intentos de Autenticación Excesivos.&#xa0;Un atacante puede ser capaz de llevar a cabo una cantidad arbitrario de intentos de autenticación /web/frames/ usando diferentes contraseñas y, finalmente, conseguir acceso a una cuenta de destino. NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:ehealth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.2.12",
            "matchCriteriaId" : "93837978-6B5C-40C4-B54A-C64FE98507C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T08:15:13.183",
      "lastModified" : "2024-11-21T05:59:24.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malicious library in the writable RPATH, to be dynamically linked when the FtpCollector executable is run. The code in the library will be executed as the root user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** CA eHealth Performance Manager versiones hasta 6.3.2.12, está afectado por una Escalada de Privilegios por medio de una Dynamically Linked Shared Object Library.&#xa0;Para explotar la vulnerabilidad, el usuario de ehealth debe crear una biblioteca maliciosa en el RPATH escribible, que se vinculará dinámicamente cuando se ejecuta el ejecutable FtpCollector.&#xa0;El código de la biblioteca se ejecutará como usuario root.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:ehealth_performance_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.2.12",
            "matchCriteriaId" : "BBF13ACB-2A31-4F4B-8B93-5554495DE03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T08:15:13.230",
      "lastModified" : "2024-11-21T05:59:24.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the script code will be executed as the ehealth user. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** CA eHealth Performance Manager versiones hasta 6.3.2.12, está afectado por una Escalada de Privilegios por medio de un archivo setuid (y/o setgid).&#xa0;Cuando un componente es ejecutado como argumento del ejecutable runpicEhealth, el código del script se ejecutará como el usuario de ehealth.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ca:ehealth_performance_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.3.2.12",
            "matchCriteriaId" : "BBF13ACB-2A31-4F4B-8B93-5554495DE03B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/ca-ehealth-performance-manager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20677",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-26T09:15:11.950",
      "lastModified" : "2024-11-21T05:46:59.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "UNIVERGE Aspire series PBX (UNIVERGE Aspire WX from 1.00 to 3.51, UNIVERGE Aspire UX from 1.00 to 9.70, UNIVERGE SV9100 from 1.00 to 10.70, and SL2100 from 1.00 to 3.00) allows a remote authenticated attacker to cause system down and a denial of service (DoS) condition by sending a specially crafted command."
      }, {
        "lang" : "es",
        "value" : "UNIVERGE Aspire series PBX (UNIVERGE Aspire WX desde versiones 1.00 hasta 3.51, UNIVERGE Aspire UX desde versiones 1.00 hasta 9.70, UNIVERGE SV9100 desde versiones 1.00 hasta 10.70 y SL2100 desde versiones 1.00 hasta 3.00) permite a un atacante autenticado remoto causar la caída del sistema y una denegación de servicio ( DoS) mediante el envío de un comando especialmente diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:necplatforms:univerge_aspire_wx_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "3.51",
            "matchCriteriaId" : "9C1A17B4-9A99-4772-BEE5-D69D6B4B4BEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:necplatforms:univerge_aspire_wx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E57AF072-9F43-4F37-891B-1B68BA1D9C91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:necplatforms:univerge_aspire_ux_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "9.70",
            "matchCriteriaId" : "BE390008-23F2-44BD-863C-C574DD7A97E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:necplatforms:univerge_aspire_ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A68A0CB3-7B3C-431D-A339-4CF1C5EBC0C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:necplatforms:univerge_sv9100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "10.70",
            "matchCriteriaId" : "D611FCE0-8B1B-43C3-BBE9-E7FA6801F947"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:necplatforms:univerge_sv9100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38FE4F0F-5112-4214-A8E0-A4858F368C69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:necplatforms:sl2100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.00",
            "versionEndIncluding" : "3.00",
            "matchCriteriaId" : "36778BAB-500F-444F-93F4-FBBE28ECDB40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:necplatforms:sl2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129B972F-8F69-48B8-B2A2-E3AD109EF05F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN12737530/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.necplatforms.co.jp/en/press/security_adv.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN12737530/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.necplatforms.co.jp/en/press/security_adv.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20681",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-26T09:15:12.043",
      "lastModified" : "2024-11-21T05:47:00.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of JavaScript input in the page editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una neutralización inapropiada de la entrada de JavaScript en la función page editing de  baserCMS versiones anteriores a 4.4.5, permite a atacantes autenticados remotamente inyectar un script arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "E63194A0-F37D-4ADB-B7F3-347021DF734D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://basercms.net/security/JVN64869876",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64869876/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://basercms.net/security/JVN64869876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64869876/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20682",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-26T09:15:12.120",
      "lastModified" : "2024-11-21T05:47:00.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "baserCMS versions prior to 4.4.5 allows a remote attacker with an administrative privilege to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "baserCMS versiones anteriores a 4.4.5, permiten a un atacante remoto con privilegios administrativos ejecutar comandos arbitrarios del Sistema Operativo por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "E63194A0-F37D-4ADB-B7F3-347021DF734D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://basercms.net/security/JVN64869876",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64869876/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://basercms.net/security/JVN64869876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64869876/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20683",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-03-26T09:15:12.167",
      "lastModified" : "2024-11-21T05:47:00.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of JavaScript input in the blog article editing function of baserCMS versions prior to 4.4.5 allows remote authenticated attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una neutralización inapropiada de la entrada de JavaScript en la función blog article editing de baserCMS versiones anteriores a 4.4.5, permite a atacantes autenticados remotos inyectar un script arbitrario por medio de vectores no especificados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:basercms:basercms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.5",
            "matchCriteriaId" : "E63194A0-F37D-4ADB-B7F3-347021DF734D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://basercms.net/security/JVN64869876",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64869876/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://basercms.net/security/JVN64869876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN64869876/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23888",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-03-26T10:15:11.833",
      "lastModified" : "2024-11-21T05:52:00.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated client-side URL redirect vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 could cause an authenticated ePO user to load an untrusted site in an ePO iframe which could steal information from the authenticated user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redireccionamiento de la URL del lado del cliente no comprobada en McAfee ePolicy Orchestrator (ePO) versiones anteriores a 5.10 Update 10, podría causar a un usuario de ePO autenticado cargar un sitio no confiable en un iframe de ePO que podría robar información del usuario autenticado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0",
            "matchCriteriaId" : "A30F7908-5AF6-4761-BC6A-4C18EFAE48E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B00DDE7-7002-45BE-8EDE-65D964922CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE847E0-431D-497D-9C57-C4E59749F6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "46385384-5561-40AA-9FDE-A2DE4FDFAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4E5481-1070-4E1F-8679-1985DE4E785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EEA681-67FF-43B3-8610-0FA17FD279E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "C33BA8EA-793D-4E79-BE9C-235ACE717216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "823DBE80-CB8D-4981-AE7C-28F3FDD40451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10352",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23889",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-03-26T10:15:12.207",
      "lastModified" : "2024-11-21T05:52:00.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting vulnerability in McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows ePO administrators to inject arbitrary web script or HTML via multiple parameters where the administrator's entries were not correctly sanitized."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Scripting en McAfee ePolicy Orchestrator (ePO) versiones anteriores a 5.10 Update 10, permite a administradores de ePO inyectar script web o HTML arbitrario por medio de múltiples parámetros donde las entradas del administrador no son saneadas correctamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0",
            "matchCriteriaId" : "A30F7908-5AF6-4761-BC6A-4C18EFAE48E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B00DDE7-7002-45BE-8EDE-65D964922CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE847E0-431D-497D-9C57-C4E59749F6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "46385384-5561-40AA-9FDE-A2DE4FDFAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4E5481-1070-4E1F-8679-1985DE4E785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EEA681-67FF-43B3-8610-0FA17FD279E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "C33BA8EA-793D-4E79-BE9C-235ACE717216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "823DBE80-CB8D-4981-AE7C-28F3FDD40451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10352",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23890",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-03-26T10:15:12.397",
      "lastModified" : "2024-11-21T05:52:00.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information leak vulnerability in the Agent Handler of McAfee ePolicy Orchestrator (ePO) prior to 5.10 Update 10 allows an unauthenticated user to download McAfee product packages (specifically McAfee Agent) available in ePO repository and install them on their own machines to have it managed and then in turn get policy details from the ePO server. This can only happen when the ePO Agent Handler is installed in a Demilitarized Zone (DMZ) to service machines not connected to the network through a VPN."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de filtrado de información en el controlador de agentes de McAfee ePolicy Orchestrator (ePO) versiones anteriores a 5.10 Update 10, permite a un usuario no autenticado descargar paquetes de productos de McAfee (específicamente McAfee Agent) disponibles en el repositorio de ePO e instalarlos en sus propios equipos para administrarlos y luego a su vez, obtener detalles de la política del servidor de ePO.&#xa0;Esto solo puede suceder cuando el controlador de agentes de ePO está instalado en una zona desmilitarizada (DMZ) para dar servicio a los equipos que no están conectados a la red mediante una VPN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.9.1",
            "matchCriteriaId" : "A9C3323D-D526-4785-9A3E-34CA5C5EBB6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B00DDE7-7002-45BE-8EDE-65D964922CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE847E0-431D-497D-9C57-C4E59749F6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "46385384-5561-40AA-9FDE-A2DE4FDFAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4E5481-1070-4E1F-8679-1985DE4E785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EEA681-67FF-43B3-8610-0FA17FD279E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "C33BA8EA-793D-4E79-BE9C-235ACE717216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "823DBE80-CB8D-4981-AE7C-28F3FDD40451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10352",
        "source" : "trellixpsirt@trellix.com"
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3275",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T13:15:11.663",
      "lastModified" : "2024-11-21T06:21:11.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unauthenticated stored cross-site scripting (XSS) exists in multiple TP-Link products including WIFI Routers (Wireless AC routers), Access Points, ADSL + DSL Gateways and Routers, which affects TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, and Archer C3150v2 devices through the improper validation of the hostname. Some of the pages including dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, and qsReview.htm and use this vulnerable hostname function (setDefaultHostname()) without sanitization."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) almacenado no autenticado en múltiples productos de TP-Link, incluyendo WIFI Routers (enrutadores Wireless AC), Access Points, ADSL + DSL Gateways and Routers, que afectan a dispositivos TD-W9977v1, TL-WA801NDv5, TL-WA801Nv6, TL-WA802Nv5, y Archer C3150v2, por medio de la comprobación inapropiada del nombre de host. Algunas de las páginas, incluyendo dhcp.htm, networkMap.htm, dhcpClient.htm, qsEdit.htm, y qsReview.htm, usan esta función vulnerable de nombre de host (setDefaultHostname()) sin saneamiento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:td-w9977_firmware:v1_0.1.0_0.9.1_up_boot\\(161123\\)_2016-11-23_15.36.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD66B72D-7C89-4FF6-91DC-9FB7B5FD3371"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:td-w9977:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91DDA5EB-0E7B-4700-946D-31EEF26B8D6F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wa801nd_firmware:v5_us_0.9.1_3.16_up_boot\\[170905-rel56404\\]:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2374306B-81BE-4F23-9DDD-68685BD4B223"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wa801nd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39BD9D9A-2AB8-4A13-AB92-E13B82112281"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wa801n_firmware:v6_eu_0.9.1_3.16_up_boot\\[200116-rel61815\\]:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66770164-F118-4C11-8E56-5C73C17046AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wa801n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3CBF27-0233-4107-A8C3-B46A8FC8B610"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wr802n_firmware:v4_us_0.9.1_3.17_up_boot\\[200421-rel38950\\]:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6F74D4-3A51-4B1B-A769-5AF388DFF2FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wr802n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1B4F55-1FCF-4557-A051-2EBC1414DD00"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer-c3150_firmware:v2_170926:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB385F5-A6E7-4DA3-9E23-9E38E95406BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer-c3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AD35872-DC68-46CB-B8DE-FC71CCE157FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/161989/TP-Link-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/smriti548/CVE/blob/main/CVE-2021-3275",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2021/Mar/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/161989/TP-Link-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/smriti548/CVE/blob/main/CVE-2021-3275",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/fulldisclosure/2021/Mar/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tp-link.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22506",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-03-26T14:15:11.967",
      "lastModified" : "2025-10-27T16:58:39.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advance configuration exposing Information Leakage vulnerability in Micro Focus Access Manager product, affects all versions prior to version 5.0. The vulnerability could cause information leakage."
      }, {
        "lang" : "es",
        "value" : "Una configuración avanzada que expone una vulnerabilidad de Filtrado de Información en el producto Micro Focus Access Manager afecta a todas las versiones anteriores a 5.0.&#xa0;La vulnerabilidad podría causar un filtrado de información."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Micro Focus Access Manager Information Leakage Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:access_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0",
            "matchCriteriaId" : "B3A53E36-0652-4D66-B500-588777280039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.microfocus.com/documentation/access-manager/5.0/accessmanager50-release-notes/accessmanager50-release-notes.html",
        "source" : "security@opentext.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.microfocus.com/documentation/access-manager/5.0/accessmanager50-release-notes/accessmanager50-release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22506",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T16:15:12.857",
      "lastModified" : "2024-11-21T06:20:53.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The custom menu item options page in SolarWinds Orion Platform before 2020.2.5 allows Reverse Tabnabbing in the context of an administrator account."
      }, {
        "lang" : "es",
        "value" : "La página de opciones de elementos de menú personalizado en SolarWinds Orion Platform versiones anteriores a 2020.2.5, permite Tabnabbing inverso en el contexto de una cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.5",
            "matchCriteriaId" : "FF6435D5-647D-4BEE-A066-60F62E63E0DE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-5_release_notes.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.solarwinds.com/SuccessCenter/s/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/Success_Center/orionplatform/Content/Release_Notes/Orion_Platform_2020-2-5_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.solarwinds.com/SuccessCenter/s/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1626",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2021-03-26T17:15:12.547",
      "lastModified" : "2024-11-21T05:44:46.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MuleSoft is aware of a Remote Code Execution vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Versions affected: Mule 4.1.x and 4.2.x runtime released before February 2, 2021."
      }, {
        "lang" : "es",
        "value" : "MuleSoft es consciente de una vulnerabilidad de Ejecución de Código Remota que afecta a determinadas versiones de un componente runtime de Mule que puede afectar tanto a CloudHub como a los clientes locales.&#xa0;Versiones afectadas: runtime de Mule versiones 4.1.x y 4.2.x lanzado antes del 2 de febrero de 2021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:mule:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "9805933C-904E-4BB8-9DD6-3D81A4BF0DB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/articleView?id=000357382&type=1&mode=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.salesforce.com/articleView?id=000357382&type=1&mode=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1627",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2021-03-26T17:15:12.640",
      "lastModified" : "2024-11-21T05:44:46.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MuleSoft is aware of a Server Side Request Forgery vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. This affects: Mule 3.8.x,3.9.x,4.x runtime released before February 2, 2021."
      }, {
        "lang" : "es",
        "value" : "MuleSoft es consciente de una vulnerabilidad de Server Side Request Forgery que afecta a determinadas versiones de un componente runtime de Mule que puede afectar tanto a los clientes de CloudHub como a los locales. Esto afecta a: runtime de Mule versiones 3.8.x,3.9.x,4.x lanzado antes del 2 de febrero de 2021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:mule:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "79178CD3-7AAE-4F6A-AA87-75C8FAE82794"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/articleView?id=000357383&type=1&mode=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.salesforce.com/articleView?id=000357383&type=1&mode=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1628",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2021-03-26T17:15:12.717",
      "lastModified" : "2024-11-21T05:44:46.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MuleSoft is aware of a XML External Entity (XXE) vulnerability affecting certain versions of a Mule runtime component that may affect both CloudHub and on-premise customers. Affected versions: Mule 4.x runtime released before February 2, 2021."
      }, {
        "lang" : "es",
        "value" : "MuleSoft es consciente de una vulnerabilidad de XML External Entity (XXE) que afecta a determinadas versiones de un componente runtime de Mule que puede afectar tanto a los clientes de CloudHub como a los clientes locales.&#xa0;Versiones afectadas: runtime de Mule versiones 4.x lanzado antes del 2 de febrero de 2021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesforce:mule:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndIncluding" : "4.2.2",
            "matchCriteriaId" : "BCAA122C-37C7-4AF5-A3B7-624A3F51D102"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://help.salesforce.com/articleView?id=000357384&type=1&mode=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://help.salesforce.com/articleView?id=000357384&type=1&mode=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1629",
      "sourceIdentifier" : "security@salesforce.com",
      "published" : "2021-03-26T17:15:12.780",
      "lastModified" : "2024-11-21T05:44:46.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Tableau Server fails to validate certain URLs that are embedded in emails sent to Tableau Server users."
      }, {
        "lang" : "es",
        "value" : "Tableau Server no puede comprobar determinadas URL que están embebidas en los correos electrónicos enviados a usuarios de Tableau Server."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.4",
            "versionEndExcluding" : "2019.4.18",
            "matchCriteriaId" : "388A8A90-AF80-4E88-8607-5A0904E61B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.1",
            "versionEndExcluding" : "2020.1.15",
            "matchCriteriaId" : "8203E31F-DDC5-4646-9DC1-4920E2E3E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.2",
            "versionEndExcluding" : "2020.2.12",
            "matchCriteriaId" : "5517AD17-3F21-43B3-956C-7E1016154530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.3",
            "versionEndExcluding" : "2020.3.7",
            "matchCriteriaId" : "8C94514D-348F-474D-89A0-5C4D0041DD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.4",
            "versionEndExcluding" : "2020.4.3",
            "matchCriteriaId" : "DEC00D02-0C3C-4E5E-9D79-81638AC9AFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2019.4",
            "versionEndExcluding" : "2019.4.18",
            "matchCriteriaId" : "388A8A90-AF80-4E88-8607-5A0904E61B10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.1",
            "versionEndExcluding" : "2020.1.15",
            "matchCriteriaId" : "8203E31F-DDC5-4646-9DC1-4920E2E3E84E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.2",
            "versionEndExcluding" : "2020.2.12",
            "matchCriteriaId" : "5517AD17-3F21-43B3-956C-7E1016154530"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.3",
            "versionEndExcluding" : "2020.3.7",
            "matchCriteriaId" : "8C94514D-348F-474D-89A0-5C4D0041DD1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tableau:tableau_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2020.4",
            "versionEndExcluding" : "2020.4.3",
            "matchCriteriaId" : "DEC00D02-0C3C-4E5E-9D79-81638AC9AFB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html",
        "source" : "security@salesforce.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/22",
        "source" : "security@salesforce.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://help.salesforce.com/articleView?id=000357424&type=1&mode=1",
        "source" : "security@salesforce.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162138/Tableau-Server-Open-Redirection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://help.salesforce.com/articleView?id=000357424&type=1&mode=1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20193",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T17:15:12.843",
      "lastModified" : "2025-05-05T14:15:04.557",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the src/list.c of tar 1.33 and earlier. This flaw allows an attacker who can submit a crafted input file to tar to cause uncontrolled consumption of memory. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se detectó un fallo en el archivo src/list.c de tar versiones 1.33 y anteriores.&#xa0;Este fallo permite a un atacante que puede enviar un archivo de entrada diseñado a tar causar un consumo no controlado de memoria.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:tar:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.33",
            "matchCriteriaId" : "27615E6C-D506-472C-9277-9E25BBC6CA7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1917565",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/bugs/?59897",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-29",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1917565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.savannah.gnu.org/cgit/tar.git/commit/?id=d9d4435692150fa8ff68e1b1a473d187cc3fd777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://savannah.gnu.org/bugs/?59897",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20197",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T17:15:12.920",
      "lastModified" : "2025-12-03T15:15:46.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an open race window when writing output in the following utilities in GNU binutils version 2.35 and earlier:ar, objcopy, strip, ranlib. When these utilities are run as a privileged user (presumably as part of a script updating binaries across different users), an unprivileged user can trick these utilities into getting ownership of arbitrary files through a symlink."
      }, {
        "lang" : "es",
        "value" : "Se presenta una ventana de carrera abierta cuando se escribe la salida en las siguientes utilidades en GNU binutils versiones 2.35 y anteriores: ar, objcopy, strip, ranlib.&#xa0;Cuando estas utilidades son ejecutadas como un usuario privilegiado (presumiblemente como parte de un script que actualiza binarios entre diferentes usuarios), un usuario sin privilegios puede engañar a estas utilidades para que obtengan la propiedad de archivos arbitrario por medio de un enlace simbólico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.35",
            "matchCriteriaId" : "E5AFCE8F-B5F2-4757-BC22-33800E6C2833"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1913743",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0009/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=26945",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1913743",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=26945",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20271",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T17:15:13.000",
      "lastModified" : "2024-11-21T05:46:15.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability."
      }, {
        "lang" : "es",
        "value" : "Se detectó un fallo en la funcionalidad de comprobación de firmas de RPM cuando se lee un archivo de paquete. Este fallo permite a un atacante que pueda convencer a una víctima de instalar un paquete aparentemente verificable, cuyo encabezado de firma fue modificado, causar una corrupción de la base de datos de RPM y ejecutar código. La mayor amenaza de esta vulnerabilidad es la integridad de los datos, la confidencialidad y la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15.0",
            "versionEndExcluding" : "4.15.1.3",
            "matchCriteriaId" : "5017E785-D9A4-40BE-ADD8-4421BB138131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.16.0",
            "versionEndExcluding" : "4.16.1.3",
            "matchCriteriaId" : "F22989FC-E9C0-4189-BDFE-69346C3F8495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.15.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "6E77F834-98D9-45CA-A442-97362CEAB09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.15.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "40503D12-35BC-4515-A293-F39A37B23A38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.15.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "19299515-DF82-48A3-BA65-0DE705E75CA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.16.0:alpha:*:*:*:*:*:*",
            "matchCriteriaId" : "0565E985-6BD3-45E1-928C-B67E18B7B56E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.16.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "96BDFF27-D2ED-48F9-91FB-377D1244A0A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.16.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "EA51C420-EFCB-4068-A981-E99722C5FAD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:4.16.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "653B69E5-0E47-49EF-AD3D-218C86252E7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:starwindsoftware:starwind_virtual_san:v8:build14398:*:*:*:*:*:*",
            "matchCriteriaId" : "2561CD5F-82A9-464E-B571-44634187B497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1934125",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-43",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.starwindsoftware.com/security/sw-20220805-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1934125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rpm-software-management/rpm/commit/d6a86b5e69e46cc283b1e06c92343319beb42e21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YILPBTPSBRYL4POBI3F4YUSVPSOQNJBY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.starwindsoftware.com/security/sw-20220805-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20284",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T17:15:13.063",
      "lastModified" : "2024-11-21T05:46:16.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in GNU Binutils 2.35.1, where there is a heap-based buffer overflow in _bfd_elf_slurp_secondary_reloc_section in elf.c due to the number of symbols not calculated correctly. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se detectó un fallo en GNU Binutils versión 2.35.1, donde se presenta un desbordamiento de búfer en la región heap de la memoria en la función _bfd_elf_slurp_secondary_reloc_section en el archivo elf.c debido a que el número de símbolos no se calculó correctamente.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:2.35.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA2B34EB-DBF4-45BD-8C56-C4D8C8664420"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1937784",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0010/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=26931",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1937784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=26931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20285",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T17:15:13.140",
      "lastModified" : "2025-04-11T12:27:55.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in upx canPack in p_lx_elf.cpp in UPX 3.96. This flaw allows attackers to cause a denial of service (SEGV or buffer overflow and application crash) or possibly have unspecified other impacts via a crafted ELF. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se detectó un fallo en upx canPack en el archivo p_lx_elf.cpp en UPX versión 3.96. Este fallo permite a atacantes causar una denegación de servicio (SEGV o desbordamiento de búfer y bloqueo de la aplicación) o posiblemente tener otros impactos no especificados por medio de un ELF diseñado. La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:C",
            "baseScore" : 8.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:upx:upx:3.96:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2AC603-0693-418E-AA91-8942C20109C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1937787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/421",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1937787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/upx/upx/issues/421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20289",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T17:15:13.217",
      "lastModified" : "2024-11-21T05:46:17.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in RESTEasy in all versions of RESTEasy up to 4.6.0.Final. The endpoint class and method names are returned as part of the exception response when RESTEasy cannot convert one of the request URI path or query values to the matching JAX-RS resource method's parameter value. The highest threat from this vulnerability is to data confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se detectó un fallo en RESTEasy en todas las versiones de RESTEasy hasta 4.6.0.Final.&#xa0;Los nombres de métodos y clases de endpoint son devueltos como parte de la respuesta de excepción cuando RESTEasy no puede convertir uno de los valores de consulta o ruta del URI de petición a el valor del parámetro de método del recurso JAX-RS correspondiente.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:resteasy:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.6.0",
            "matchCriteriaId" : "EDB9A229-3B62-487E-B31D-580445DAFE8D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.4",
            "matchCriteriaId" : "5D115261-69F8-4854-B5DE-656858132B62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAAB7154-4DE8-4806-86D0-C1D33B84417B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1935927",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1935927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21403",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T18:15:12.360",
      "lastModified" : "2024-11-21T05:48:17.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In github.com/kongchuanhujiao/server before version 1.3.21 there is an authentication Bypass by Primary Weakness vulnerability. All users are impacted. This is fixed in version 1.3.21."
      }, {
        "lang" : "es",
        "value" : "En github.com/kongchuanhujiao/server versiones anteriores a 1.3.21, se presenta una Omisión de autenticación por una vulnerabilidad de Debilidad Primaria.&#xa0;Todos los usuarios están afectados.&#xa0;Esto es corregido en la versión 1.3.21."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-305"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kongchuanhujiao_project:kongchuanhujiao:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.21",
            "matchCriteriaId" : "11A4F437-0527-4C8C-A4B3-DBAE999BAADA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kongchuanhujiao/server/security/advisories/GHSA-8wrg-m8vm-5fvj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kongchuanhujiao/server/commit/9a125624f219e496bdf4b07b404816d5a309bdc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kongchuanhujiao/server/security/advisories/GHSA-8wrg-m8vm-5fvj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T18:15:12.453",
      "lastModified" : "2024-11-21T06:00:53.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MicroSeven MYM71080i-B 2.0.5 through 2.0.20 devices send admin credentials in cleartext to pnp.microseven.com TCP port 7007. An attacker on the same network as the device can capture these credentials."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MicroSeven MYM71080i-B versiones 2.0.5 hasta 2.0.20, envían credenciales de administrador en texto sin cifrar al puerto TCP 7007 de pnp.microseven.com. Un atacante en la misma red que el dispositivo puede capturar estas credenciales."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microseven:mym71080i-b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.5",
            "versionEndIncluding" : "2.0.20",
            "matchCriteriaId" : "DBA08ED4-6ED2-4AD6-AB5B-F7991E28969A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:microseven:mym71080i-b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76D5283C-9C5A-4921-B27B-491470406C21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.microseven.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cybergladius.com/cve-2021-29255-vulnerability-disclosure/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.microseven.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cybergladius.com/cve-2021-29255-vulnerability-disclosure/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22886",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-03-26T19:15:11.913",
      "lastModified" : "2024-11-21T05:50:50.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rocket.Chat before 3.11, 3.10.5, 3.9.7, 3.8.8 is vulnerable to persistent cross-site scripting (XSS) using nested markdown tags allowing a remote attacker to inject arbitrary JavaScript in a message. This flaw leads to arbitrary file read and RCE on Rocket.Chat desktop app."
      }, {
        "lang" : "es",
        "value" : "Rocket.Chat versiones anteriores a 3.11, 3.10.5, 3.9.7, 3.8.8, es vulnerable a ataques de tipo cross-site scripting (XSS) persistente que usan etiquetas markdown anidadas que permiten a un atacante remoto inyectar JavaScript arbitrario en un mensaje.&#xa0;Este fallo conlleva a una lectura de archivos arbitraria y una RCE en la aplicación de escritorio Rocket.Chat."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.8",
            "matchCriteriaId" : "86A30DEE-F0BD-42BD-8BE7-EAFC4EB83A94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.7",
            "matchCriteriaId" : "A5B4CA06-527F-4600-A11A-ABFA54D754C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.10.0",
            "versionEndExcluding" : "3.10.5",
            "matchCriteriaId" : "D9EFC543-2F10-4521-9814-ABBD237364EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc0:*:*:*:*:*:*",
            "matchCriteriaId" : "894B212B-12E9-49D0-9DCC-A8DA2BE98FCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "B996994C-FEC5-4524-94F4-E8F7CD666BC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "506868F8-3FEE-478E-BAA2-889C53A79977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "49553F24-2CC0-48E6-BA55-4CE0283C1E6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "C4B247DC-ECB0-4859-8F6D-6CAA2C01B57E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "B3962CCC-17F4-4F4B-AE82-A53DB5ED19A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc6:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4771F7-A143-44C9-8FED-B9111C22D058"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket.chat:rocket.chat:3.11.0:rc7:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA36B0C-3A4D-44EA-BAB8-A9B2D7F672D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.rocket.chat/guides/security/security-updates",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RocketChat/Rocket.Chat/pull/20430",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1014459",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.rocket.chat/guides/security/security-updates",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/RocketChat/Rocket.Chat/pull/20430",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1014459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25369",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-26T19:15:12.040",
      "lastModified" : "2025-10-30T15:37:05.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en el archivo sec_log versiones anteriores a SMR MAR-2021 Release 1, expone información confidencial del kernel al espacio de usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-11-08",
      "cisaActionDue" : "2022-11-29",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Samsung Mobile Devices Improper Access Control Vulnerability",
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "96273BC2-D835-48C8-8EAF-0FD6EAA94F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858555E6-5D30-4BBF-A5CD-FD1882209ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18D4924F-44AB-4E63-8040-D0B96F147BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8150E4FA-8F29-4974-BDE8-ED192879DEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D021B217-C481-43D1-A3E6-375E40BD4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72145BA5-C781-4E36-BB39-33DD92B2F801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E3ED73-5CF8-451F-914B-123B2312110D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6986831F-0AF0-4719-BA45-4485D44D6707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "08E7C018-1293-4E29-83EB-AF177CA6B179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB1563D-A951-4A9C-B348-0684DA242B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D52A71AE-3D39-4F29-806B-603FE098510A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "10C1DF2B-8371-4259-9139-7260EACEE98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B93A5F5F-BF53-44D3-9583-811CC284DF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E1950A-282D-4065-AAA5-9BBB7F8D2C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4996EB5E-1FAB-4799-AE46-8176D74C49D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28950DDB-004F-4E01-9BBD-F5A320556D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "48B55CF5-CF20-48F7-A806-1234436566E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3FE371-E773-4AF6-A8DC-0FD9EF615647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "45104240-9D60-47EA-8582-1F912FE7A1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7D7092-5423-4CD1-819D-B784106D1342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA7EA43-3CD8-4529-9071-3FB14EE30F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9693C8-FE11-4E03-8D4A-0D6FE77627DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4561F7F-6B1F-412D-A174-5F9709ACF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A54F7006-979F-4DF5-A350-77DC3A68536E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9282540E-26C5-4140-9074-480DB7F5DE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB304E43-DCCB-42E1-8B44-0825C9C437FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "59BF1A24-8AC5-482F-B872-38D625FC669F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7719C-8C21-4203-9ED9-E4C048FA5CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2427A8F0-035E-4DB5-8B91-EBD8E826F6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25369",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25370",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-26T19:15:12.147",
      "lastModified" : "2026-01-14T18:40:57.570",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect implementation handling file descriptor in dpu driver prior to SMR Mar-2021 Release 1 results in memory corruption leading to kernel panic."
      }, {
        "lang" : "es",
        "value" : "Un descriptor de archivo con manejo de implementación incorrecta en el controlador dpu versiones anteriores a SMR Mar-2021 Release 1, resulta en una corrupción de memoria que conlleva a un pánico del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-11-08",
      "cisaActionDue" : "2022-11-29",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Samsung Mobile Devices Memory Corruption Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:8.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "96273BC2-D835-48C8-8EAF-0FD6EAA94F09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F5C8C-AF0C-47F4-A3B0-A6D924FB72BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-apr-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "858555E6-5D30-4BBF-A5CD-FD1882209ABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18D4924F-44AB-4E63-8040-D0B96F147BC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-aug-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8150E4FA-8F29-4974-BDE8-ED192879DEFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D021B217-C481-43D1-A3E6-375E40BD4FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "72145BA5-C781-4E36-BB39-33DD92B2F801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E3ED73-5CF8-451F-914B-123B2312110D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6986831F-0AF0-4719-BA45-4485D44D6707"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "08E7C018-1293-4E29-83EB-AF177CA6B179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB1563D-A951-4A9C-B348-0684DA242B05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B9A3B41-AAC9-4E23-A265-959A9852B94C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D52A71AE-3D39-4F29-806B-603FE098510A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "10C1DF2B-8371-4259-9139-7260EACEE98D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B93A5F5F-BF53-44D3-9583-811CC284DF86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jul-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "60E1950A-282D-4065-AAA5-9BBB7F8D2C5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4996EB5E-1FAB-4799-AE46-8176D74C49D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jun-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "28950DDB-004F-4E01-9BBD-F5A320556D53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "48B55CF5-CF20-48F7-A806-1234436566E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-mar-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BF3FE371-E773-4AF6-A8DC-0FD9EF615647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "45104240-9D60-47EA-8582-1F912FE7A1F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-may-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F7D7092-5423-4CD1-819D-B784106D1342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA7EA43-3CD8-4529-9071-3FB14EE30F45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9693C8-FE11-4E03-8D4A-0D6FE77627DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4561F7F-6B1F-412D-A174-5F9709ACF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A54F7006-979F-4DF5-A350-77DC3A68536E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2018-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9282540E-26C5-4140-9074-480DB7F5DE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BB304E43-DCCB-42E1-8B44-0825C9C437FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "59BF1A24-8AC5-482F-B872-38D625FC669F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-sep-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC7719C-8C21-4203-9ED9-E4C048FA5CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:9.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2427A8F0-035E-4DB5-8B91-EBD8E826F6DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "49DA0B6E-5E55-4893-8225-299E20DA2DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "EF52B720-DC8C-4EF0-B20B-7FA8B192FAFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0B5D2C-7AED-4330-ADAD-60F78A6A08DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7C7B9407-D5E0-49EB-A05D-C5E02060AF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F10815EF-AA9D-4899-B4EF-ED7A96E46959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "91EA248A-4D4D-4A50-AC33-7098E17B7892"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jul-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A43712-94EF-4670-A2FD-4363CBE850DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jun-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FDCC210B-4083-494C-A233-FE2CA672004B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-mar-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA38AA3-A747-424E-B07E-F7931FA353F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-may-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48628C-6780-46B4-B717-8589658B0DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2019-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCFFC02-EFEF-4A4C-A9A3-8BF355E36601"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-nov-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CB4658B8-9120-48E1-8A92-3430CBC6DC9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-oct-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7685DB5C-C3C2-44E2-AB00-CEE65C68460B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-sep-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "47335942-37FB-4A1D-837A-5D0B2883ED10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C26195A5-31BE-4116-8F31-9F25BE57AB52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25370",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25371",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-26T19:15:12.227",
      "lastModified" : "2025-10-30T15:36:48.320",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el controlador DSP versiones anteriores a SMR Mar-2021 Release 1, permite a atacantes cargar bibliotecas ELF arbitrarias dentro de DSP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-06-29",
      "cisaActionDue" : "2023-07-20",
      "cisaRequiredAction" : "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable",
      "cisaVulnerabilityName" : "Samsung Mobile Devices Unspecified Vulnerability",
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-912"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9385885D-654A-496E-8029-7C6D9B077193"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC599902-095F-411E-B112-1BA9A643C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25371",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25372",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-03-26T19:15:12.303",
      "lastModified" : "2026-01-14T18:43:48.383",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper boundary check in DSP driver prior to SMR Mar-2021 Release 1 allows out of bounds memory access."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada de límites en el controlador DSP versiones anteriores a SMR Mar-2021 Release 1, permite un acceso a la memoria fuera de límites."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2023-06-29",
      "cisaActionDue" : "2023-07-20",
      "cisaRequiredAction" : "Apply updates per vendor instructions or discontinue use of the product if updates are unavailable",
      "cisaVulnerabilityName" : "Samsung Mobile Devices Improper Boundary Check Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "18C71F11-7599-4AE1-B455-C7A50D8D5F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:10.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "878AAF2D-E54A-4145-A618-81341ED4B0C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "25B42CE0-67DE-4611-8D70-DEEC975E32BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC082E25-1B7D-473D-A066-1463E6321CD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9385885D-654A-496E-8029-7C6D9B077193"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:samsung:exynos_9830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC599902-095F-411E-B112-1BA9A643C6C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-25372",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21332",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T20:15:11.843",
      "lastModified" : "2024-11-21T05:48:02.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the password reset endpoint served via Synapse was vulnerable to cross-site scripting (XSS) attacks. The impact depends on the configuration of the domain that Synapse is deployed on, but may allow access to cookies and other browser data, CSRF vulnerabilities, and access to other resources served on the same domain or parent domains. This is fixed in version 1.27.0."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para VoIP y mensajería instantánea federada abierta.&#xa0;En Synapse versiones anteriores a 1.27.0, el endpoint de restablecimiento de contraseña servido por medio de Synapse era vulnerable a ataques de tipo cross-site scripting (XSS).&#xa0;El impacto depende de la configuración del dominio en el que es implementado Synapse, pero puede permitir el acceso a cookies y otros datos del navegador, vulnerabilidades de tipo CSRF y acceso a otros recursos que se encuentran en el mismo dominio o dominios principales.&#xa0;Esto es corregido en la versión 1.27.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 6.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.27.0",
            "matchCriteriaId" : "E8EA28E9-E52F-44E4-8B22-A35D16744A0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/commit/e54746bdf7d5c831eabe4dcea76a7626f1de73df",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9200",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.27.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-246w-56m2-5899",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/matrix-org/synapse/commit/e54746bdf7d5c831eabe4dcea76a7626f1de73df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.27.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-246w-56m2-5899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21333",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T20:15:11.953",
      "lastModified" : "2024-11-21T05:48:02.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.27.0, the notification emails sent for notifications for missed messages or for an expiring account are subject to HTML injection. In the case of the notification for missed messages, this could allow an attacker to insert forged content into the email. The account expiry feature is not enabled by default and the HTML injection is not controllable by an attacker. This is fixed in version 1.27.0."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para VoIP y mensajería instantánea federada abierta.&#xa0;En Synapse versiones anteriores a 1.27.0, los correos electrónicos de notificación enviados para notificaciones de mensajes perdidos o para una cuenta que vence están sujetos a una inyección de HTML.&#xa0;En el caso de la notificación de mensajes perdidos, esto podría permitir a un atacante insertar contenido forjado en el correo electrónico.&#xa0;La funcionalidad expiry de la cuenta no está habilitada por defecto y la inyección de HTML por un atacante no es controlable .&#xa0;Esto es corregido en la versión 1.27.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.27.0",
            "matchCriteriaId" : "E8EA28E9-E52F-44E4-8B22-A35D16744A0C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/commit/e54746bdf7d5c831eabe4dcea76a7626f1de73df",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9200",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.27.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-c5f8-35qr-q4fm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/matrix-org/synapse/commit/e54746bdf7d5c831eabe4dcea76a7626f1de73df",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9200",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/releases/tag/v1.27.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-c5f8-35qr-q4fm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22172",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-26T20:15:12.127",
      "lastModified" : "2024-11-21T05:49:38.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authorization in GitLab 12.8+ allows a guest user in a private project to view tag data that should be inaccessible on the releases page"
      }, {
        "lang" : "es",
        "value" : "Una autorización inapropiada en GitLab versión 12.8+, permite a un usuario invitado en un proyecto privado visualizar datos de etiquetas que deberían ser inaccesibles en la página de lanzamientos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "BFDED9F9-132A-41D2-AC91-2C29753D25C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "A1AADA10-AD3D-417F-8B0C-FDDD9B1248E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "AC1152B0-9CC9-4AAB-B183-5B01A49E9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "6309AD47-AB37-45DB-B807-42EC523473D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0BE6D29D-CC1A-44D2-B91D-05396FE6F0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0EA203BF-FD91-40B7-800A-19259A37FFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22172.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/212911",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/833334",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22172.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/212911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/833334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22180",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-26T20:15:12.220",
      "lastModified" : "2024-11-21T05:49:39.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 13.4. Improper access control allows unauthorized users to access details on analytic pages."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones desde 13.4.&#xa0;Un control de acceso inapropiado permite a usuarios no autorizados acceder a los detalles de las páginas analíticas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "26DFE35C-07CA-4F21-85F1-C7C45F271D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.6.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "5372BB03-55E7-4694-8BA5-501AA62E47BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "4BBAF21A-84DD-4987-B4BE-2A8CAA44210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "9AE735A5-FC67-4B16-B27B-86C51C8771C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "D3009669-C930-4517-914D-5DB9A0E40B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "9F7976E8-BDA5-4104-AC3E-38C02CC613A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22180.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/295662",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1064645",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22180.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/295662",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1064645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22184",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-26T20:15:12.297",
      "lastModified" : "2024-11-21T05:49:39.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information disclosure issue in GitLab starting from version 12.8 allowed a user with access to the server logs to see sensitive information that wasn't properly redacted."
      }, {
        "lang" : "es",
        "value" : "Un problema de divulgación de información en GitLab desde la versión 12.8, permitió a un usuario con acceso a los registros del servidor visualizar información confidencial que no se redactó apropiadamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "BFDED9F9-132A-41D2-AC91-2C29753D25C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.8.0",
            "versionEndExcluding" : "13.6.6",
            "matchCriteriaId" : "A1AADA10-AD3D-417F-8B0C-FDDD9B1248E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "AC1152B0-9CC9-4AAB-B183-5B01A49E9170"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.6",
            "matchCriteriaId" : "6309AD47-AB37-45DB-B807-42EC523473D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0BE6D29D-CC1A-44D2-B91D-05396FE6F0F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.2",
            "matchCriteriaId" : "0EA203BF-FD91-40B7-800A-19259A37FFD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22184.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/281676",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22184.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/281676",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22194",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-03-26T20:15:12.390",
      "lastModified" : "2024-11-21T05:49:41.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In all versions of GitLab, marshalled session keys were being stored in Redis."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones de GitLab, las claves de sesión marshalled estaban siendo almacenadas en Redis"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "CFF5D21B-B9A0-419A-B48E-0423EDDB5A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "193651E6-E501-4A55-B275-D25ED7C1DA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "26177756-A7AE-432F-8379-9752EC65E090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "EA4DB41D-BB15-4B41-A00F-D4AD1C20115D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "02A4523B-FA8E-42C6-B291-C8F7811F7216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "E2A84D4C-6526-43AD-9FEF-01435CF17B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22194.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/262107",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22194.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/262107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21389",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T21:15:13.520",
      "lastModified" : "2024-11-21T05:48:15.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BuddyPress is an open source WordPress plugin to build a community site. In releases of BuddyPress from 5.0.0 before 7.2.1 it's possible for a non-privileged, regular user to obtain administrator rights by exploiting an issue in the REST API members endpoint. The vulnerability has been fixed in BuddyPress 7.2.1. Existing installations of the plugin should be updated to this version to mitigate the issue."
      }, {
        "lang" : "es",
        "value" : "BuddyPress es un plugin de WordPress de código abierto para crear un sitio comunitario.&#xa0;En versiones de BuddyPress de 5.0.0 versiones anteriores a 7.2.1, es posible para un usuario regular sin privilegios obtener derechos de administrador al explotar un problema en el endpoint de los miembros de la API REST.&#xa0;La vulnerabilidad ha sido corregida en BuddyPress versión 7.2.1.&#xa0;Las instalaciones existentes del plugin deben actualizarse a esta versión para mitigar el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:buddypress:buddypress:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "22E0A24D-C677-49B3-AD8D-4D5F342F1CBF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://buddypress.org/2021/03/buddypress-7-2-1-security-release/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://codex.buddypress.org/releases/version-7-2-1/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/buddypress/BuddyPress/security/advisories/GHSA-m6j4-8r7p-wpp3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://buddypress.org/2021/03/buddypress-7-2-1-security-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://codex.buddypress.org/releases/version-7-2-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/buddypress/BuddyPress/security/advisories/GHSA-m6j4-8r7p-wpp3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21411",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T21:15:13.630",
      "lastModified" : "2024-11-21T05:48:18.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OAuth2-Proxy is an open source reverse proxy that provides authentication with Google, Github or other providers. The `--gitlab-group` flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the flag settings, authorization wasn't restricted. Additionally, any authenticated users had whichever groups were set in `--gitlab-group` added to the new `X-Forwarded-Groups` header to the upstream application. While adding GitLab project based authorization support in #630, a bug was introduced where the user session's groups field was populated with the `--gitlab-group` config entries instead of pulling the individual user's group membership from the GitLab Userinfo endpoint. When the session groups where compared against the allowed groups for authorization, they matched improperly (since both lists were populated with the same data) so authorization was allowed. This impacts GitLab Provider users who relies on group membership for authorization restrictions. Any authenticated users in your GitLab environment can access your applications regardless of `--gitlab-group` membership restrictions. This is patched in v7.1.0. There is no workaround for the Group membership bug. But `--gitlab-project` can be set to use Project membership as the authorization checks instead of groups; it is not broken."
      }, {
        "lang" : "es",
        "value" : "OAuth2-Proxy es un proxy inverso de código abierto que proporciona autenticación con Google, Github u otros proveedores. El flag \"--gitlab-group\" para la autorización basada en grupos en el proveedor GitLab dejó de funcionar en la versión v7.0.0. Independientemente de la configuración del flag, la autorización no estaba restringida. Además, cualquier usuario autenticado tenía los grupos que habían sido establecidos en \"--gitlab-group\" añadidos al nuevo encabezado \"X-Forwarded-Groups\" para la aplicación de origen. Al añadir la compatibilidad con la autorización basada en proyectos de GitLab en el número 630, se introdujo un error por el que el campo groups de la sesión del usuario se rellenaba con las entradas de configuración de \"--gitlab-group\" en lugar de extraer la pertenencia al grupo del usuario individual desde el endpoint de GitLab Userinfo. Cuando los grupos de la sesión se comparaban con los grupos permitidos para la autorización, coincidían incorrectamente (ya que ambas listas se rellenaban con los mismos datos), por lo que se permitía la autorización. Esto afecta a usuarios del proveedor de GitLab que se basan en la pertenencia a grupos para las restricciones de autorización. Cualquier usuario autenticado en su entorno de GitLab puede acceder a sus aplicaciones independientemente de las restricciones de pertenencia a grupos de \"--gitlab-group\". Esto ha  sido corregido en la versión 7.1.0. No se presenta una solución para el error de Group membership. Pero \"--gitlab-project\" puede ser configurado para usar Project membership como la comprobación de la autorización en lugar de los grupos; esto no está roto."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oauth2_proxy_project:oauth2_proxy:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "A5AAF6F8-6CAE-4E37-9DD9-28C967852020"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.gitlab.com/ee/user/group/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/commit/0279fa7dff1752f1710707dbd1ffac839de8bbfc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.1.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-652x-m2gr-hppm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/oauth2-proxy/oauth2-proxy/v7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.gitlab.com/ee/user/group/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/commit/0279fa7dff1752f1710707dbd1ffac839de8bbfc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/releases/tag/v7.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/oauth2-proxy/oauth2-proxy/security/advisories/GHSA-652x-m2gr-hppm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/oauth2-proxy/oauth2-proxy/v7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20206",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-26T22:15:12.617",
      "lastModified" : "2024-11-21T05:46:07.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as \"../\" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una limitación inapropiada del fallo en el nombre de la ruta en containernetworking/cni en versiones anteriores a 0.8.1.&#xa0;Cuando se especifica el plugin a cargar en el campo \"type\" en la configuración de red, es posible usar elementos especiales como separadores \"../\" para hacer referencia a binarios en otras partes del sistema.&#xa0;Este fallo permite a un atacante ejecutar otros binarios existentes que no sean los plugins y tipos de cni, como \"reboot\".&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad, la integridad y la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:container_network_interface:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.1",
            "matchCriteriaId" : "03195E86-5FBC-4A4B-AAE8-B0A4AF78BBFC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1919391",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMCONTAINERNETWORKINGCNIPKGINVOKE-1070549",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1919391",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMCONTAINERNETWORKINGCNIPKGINVOKE-1070549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21372",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T22:15:12.697",
      "lastModified" : "2024-11-21T05:48:13.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nimble is a package manager for the Nim programming language. In Nim release version before versions 1.2.10 and 1.4.4, Nimble doCmd is used in different places and can be leveraged to execute arbitrary commands. An attacker can craft a malicious entry in the packages.json package list to trigger code execution."
      }, {
        "lang" : "es",
        "value" : "Nimble es un administrador de paquetes para el lenguaje de programación Nim.&#xa0;En la versión de lanzamiento de Nim versiones anteriores a 1.2.10 y 1.4.4, Nimble doCmd es usado en diferentes lugares y puede ser aprovechado para ejecutar comandos arbitrarios.&#xa0;Un atacante puede crear una entrada maliciosa en la lista de paquetes packages.json para desencadenar una ejecución del código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "895C273A-28A1-4592-8A50-9A8FAAD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "FBDDF104-9FC9-4CED-9F87-26CF1DA2EF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/commit/7bd63d504a4157b8ed61a51af47fb086ee818c37",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/commit/7bd63d504a4157b8ed61a51af47fb086ee818c37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/security/security/advisories/GHSA-rg9f-w24h-962p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21373",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T22:15:12.773",
      "lastModified" : "2024-11-21T05:48:13.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, \"nimble refresh\" fetches a list of Nimble packages over HTTPS by default. In case of error it falls back to a non-TLS URL http://irclogs.nim-lang.org/packages.json. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution."
      }, {
        "lang" : "es",
        "value" : "Nimble es un administrador de paquetes para el lenguaje de programación Nim.&#xa0;En las versiones de lanzamiento de Nim anteriores a 1.2.10 y 1.4.4, la \"nimble refresh\" extrae una lista de paquetes de Nimble por medio de HTTPS por defecto.&#xa0;En caso de error, recurre a una URL no TLS http://irclogs.nim-lang.org/packages.json.&#xa0;Un atacante capaz de ejecutar MitM puede entregar una lista de paquetes modificada que contenga paquetes de software malicioso.&#xa0;Si los paquetes son instalados y usados, el ataque se convierte en una ejecución de código que no es confiable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:H/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-348"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "895C273A-28A1-4592-8A50-9A8FAAD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "FBDDF104-9FC9-4CED-9F87-26CF1DA2EF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/security/security/advisories/GHSA-8w52-r35x-rgp8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21374",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T22:15:12.867",
      "lastModified" : "2024-11-21T05:48:13.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nimble is a package manager for the Nim programming language. In Nim release versions before versions 1.2.10 and 1.4.4, \"nimble refresh\" fetches a list of Nimble packages over HTTPS without full verification of the SSL/TLS certificate due to the default setting of httpClient. An attacker able to perform MitM can deliver a modified package list containing malicious software packages. If the packages are installed and used the attack escalates to untrusted code execution."
      }, {
        "lang" : "es",
        "value" : "Nimble es un administrador de paquetes para el lenguaje de programación Nim.&#xa0;En las versiones de lanzamiento de Nim anteriores a 1.2.10 y 1.4.4, \"nimble refresh\" extrae una lista de paquetes de Nimble por medio de HTTPS sin una comprobación completa del certificado SSL/TLS debido a la configuración predeterminada de httpClient.&#xa0;Un atacante capaz de ejecutar un MitM puede entregar una lista de paquetes modificada que contenga paquetes de software malicioso.&#xa0;Si los paquetes son instalados y usados, el ataque se convierte en una ejecución de código que no es confiable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:L",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-348"
        }, {
          "lang" : "en",
          "value" : "CWE-349"
        }, {
          "lang" : "en",
          "value" : "CWE-599"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.10",
            "matchCriteriaId" : "895C273A-28A1-4592-8A50-9A8FAAD7D98C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nim-lang:nim:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.4.0",
            "versionEndExcluding" : "1.4.4",
            "matchCriteriaId" : "FBDDF104-9FC9-4CED-9F87-26CF1DA2EF4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/Nim/pull/16940",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://consensys.net/diligence/vulnerabilities/nim-insecure-ssl-tls-defaults-remote-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/Nim/pull/16940",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/nimble/blob/master/changelog.markdown#0130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nim-lang/security/security/advisories/GHSA-c2wm-v66h-xhxx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21396",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-26T22:15:12.947",
      "lastModified" : "2024-11-21T05:48:16.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wire-server is an open-source back end for Wire, a secure collaboration platform. In wire-server from version 2021-02-16 and before version 2021-03-02, the client metadata of all users was exposed in the `GET /users/list-clients` endpoint. The endpoint could be used by any logged in user who could request client details of any other user (no connection required) as far as they can find their User ID. The exposed metadata included id, class, type, location, time, and cookie. A user on a Wire backend could use this endpoint to find registration time and location for each device for a given list of users. As a workaround, remove `/list-clients` from nginx config. This has been fixed in version 2021-03-02."
      }, {
        "lang" : "es",
        "value" : "wire-server es un back-end de código abierto para Wire, una plataforma de colaboración segura.&#xa0;En wire-server desde la versión 16-02-2021 y versiones anteriores a 02-03-2021, los metadatos del cliente de todos los usuarios estaban expuestos en el endpoint \"GET/users/list-clients\".&#xa0;El endpoint puede ser usado por cualquier usuario con inicio de sesión y que pueda pedir los detalles del cliente de cualquier otro usuario (no se requiere conexión) en la medida en que pueda encontrar su ID de usuario.&#xa0;Los metadatos expuestos incluían id, clase, tipo, ubicación, hora y cookie.&#xa0;Un usuario en un backend Wire podría usar este endpoint para encontrar la hora y la ubicación de registro para cada dispositivo para una lista determinada de usuarios.&#xa0;Como solución alternativa, elimine \"/list-clients\" de la configuración de nginx.&#xa0;Esto ha sido corregido en la versión 02-03-2021."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2021-02-16",
            "versionEndExcluding" : "2021-03-02",
            "matchCriteriaId" : "A94419C1-B8CA-4FC7-9DE7-A7E672A524D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wireapp/wire-server/commit/7ba2bf4140282557cf215e0b2c354d4d08cd3421",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/releases/tag/v2021-03-02",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/security/advisories/GHSA-qx8q-rhq2-rg4j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/commit/7ba2bf4140282557cf215e0b2c354d4d08cd3421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/releases/tag/v2021-03-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-server/security/advisories/GHSA-qx8q-rhq2-rg4j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29264",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T22:15:13.023",
      "lastModified" : "2024-11-21T06:00:54.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.10. drivers/net/ethernet/freescale/gianfar.c in the Freescale Gianfar Ethernet driver allows attackers to cause a system crash because a negative fragment size is calculated in situations involving an rx queue overrun when jumbo packets are used and NAPI is enabled, aka CID-d8861bab48b6."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.10.&#xa0;El archivo drivers/net/ethernet/freescale/gianfar.c en el controlador Freescale Gianfar Ethernet permite a atacantes causar un bloqueo del sistema porque es calculado un tamaño de fragmento negativo en situaciones que implican un desbordamiento de la cola rx cuando son usados paquetes gigantes y NAPI está habilitado, también se conoce como CID -d8861bab48b6."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.10",
            "matchCriteriaId" : "588B59BC-8D2A-4315-9383-2CE62CC9A2E4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d8861bab48b6c1fc3cdbcab8ff9d1eaea43afe7f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=d8861bab48b6c1fc3cdbcab8ff9d1eaea43afe7f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29265",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T22:15:13.087",
      "lastModified" : "2024-11-21T06:00:54.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.7. usbip_sockfd_store in drivers/usb/usbip/stub_dev.c allows attackers to cause a denial of service (GPF) because the stub-up sequence has race conditions during an update of the local and shared status, aka CID-9380afd6df70."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones anteriores a 5.11.7.&#xa0;La función usbip_sockfd_store en el archivo drivers/usb/usbip/stub_dev.c permite a atacantes causar una denegación de servicio (GPF) porque la secuencia de stub-up presenta condiciones de carrera durante una actualización del estado local y compartido, también se conoce como CID-9380afd6df70."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.7,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.7",
            "matchCriteriaId" : "A65F66F3-2C5F-4133-9474-3D12606F5492"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9380afd6df70e24eacbdbde33afc6a3950965d22",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=9380afd6df70e24eacbdbde33afc6a3950965d22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29266",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T22:15:13.147",
      "lastModified" : "2024-11-21T06:00:54.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.9. drivers/vhost/vdpa.c has a use-after-free because v->config_ctx has an invalid value upon re-opening a character device, aka CID-f6bbf0010ba0."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones anteriores a 5.11.9.&#xa0;El  archivo drivers/vhost/vdpa.c presenta un uso de la memoria previamente liberada porque v-) config_ctx presenta un valor no válido al volver a abrir un dispositivo de caracteres, también se conoce como CID-f6bbf0010ba0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.8",
            "versionEndExcluding" : "5.10.26",
            "matchCriteriaId" : "FB681D75-286D-4569-ACB3-EE473CCC93F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.9",
            "matchCriteriaId" : "C9AC2D4F-D052-400B-A640-77F3D1B04F5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.9",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f6bbf0010ba004f5e90c7aefdebc0ee4bd3283b9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?id=f6bbf0010ba004f5e90c7aefdebc0ee4bd3283b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29249",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-26T23:15:11.523",
      "lastModified" : "2024-11-21T06:00:52.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server before 1.0.6.0, when the payment button is used, has a privacy vulnerability."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones anteriores a 1.0.6.0, cuando es usado el botón de pago, presenta una vulnerabilidad de privacidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.6.0",
            "matchCriteriaId" : "B6D1B717-841B-4D4B-9FAC-29113EA7288B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/btcpay-server-1-0-6-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/btcpay-server-1-0-6-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-27T18:15:13.457",
      "lastModified" : "2024-11-21T06:00:55.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "remark42 before 1.6.1 allows XSS, as demonstrated by \"Locator: Locator{URL:\" followed by an XSS payload. This is related to backend/app/store/comment.go and backend/app/store/service/service.go."
      }, {
        "lang" : "es",
        "value" : "comment42 versiones anteriores a 1.6.1, permite un ataque de tipo XSS, como es demostrado por \"Locator:Locator{URL:\" seguido de una carga útil XSS.&#xa0;Esto está relacionado con los archivos backend/app/store/comment.go y backend/app/store/service/service.go."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remark42:remark42:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.6.1",
            "matchCriteriaId" : "DE5032AA-F5E5-4401-BA73-5D9693828F9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/umputun/remark42/compare/v1.6.0...v1.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/umputun/remark42/compare/v1.6.0...v1.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29272",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-27T18:15:13.737",
      "lastModified" : "2024-11-21T06:00:55.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "bluemonday before 1.0.5 allows XSS because certain Go lowercasing converts an uppercase Cyrillic character, defeating a protection mechanism against the \"script\" string."
      }, {
        "lang" : "es",
        "value" : "bluemonday versiones anteriores a 1.0.5, permite un ataque de tipo XSS porque determinadas minúsculas Go se convierten a un carácter Cyrillic en mayúsculas, anulando un mecanismo de protección contra la cadena \"script\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microco:bluemonday:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "716A3EB0-4537-4918-AFDA-4CC97A500B79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/microcosm-cc/bluemonday/releases/tag/v1.0.5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/microcosm-cc/bluemonday/releases/tag/v1.0.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29274",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T04:15:13.130",
      "lastModified" : "2024-11-21T06:00:55.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine 4.1.x before 4.1.2 allows XSS because an issue's subject is mishandled in the auto complete tip."
      }, {
        "lang" : "es",
        "value" : "Redmine versiones 4.1.x  anteriores a 4.1.2, permite un ataque de tipo XSS porque el tema de un problema es manejado inapropiadamente en la sugerencia de autocompletar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "1A1390D7-9645-4FF3-9D85-3ACFF241260F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.redmine.org/issues/33846",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/issues/33846",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T13:15:12.380",
      "lastModified" : "2024-11-21T06:00:24.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) Web management administrator password can be changed by sending a specially crafted HTTP GET request. The administrator username has to be known (default:admin) whereas no previous authentication is required."
      }, {
        "lang" : "es",
        "value" : "La contraseña de administración Web de Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1), puede ser cambiado mediante el envío de una petición HTTP GET especialmente diseñada.&#xa0;El nombre de usuario del administrador debe ser conocido (predeterminado: admin), mientras que no sea requerida una autenticación previa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:acexy:wireless-n_wifi_repeater_firmware:28.08.06.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4EBA90-1BC8-4A54-B5C8-E6A681249E3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acexy:wireless-n_wifi_repeater:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B718A0D-7C4B-456A-A3DA-BD74F4A087D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acexy.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wireless-n.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://acexy.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "http://wireless-n.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T13:15:12.787",
      "lastModified" : "2024-11-21T06:00:24.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The /password.html page of the Web management interface of the Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1) contains the administrator account password in plaintext. The page can be intercepted on HTTP."
      }, {
        "lang" : "es",
        "value" : "La página /password.html de la interfaz de administración web del Acexy Wireless-N WiFi Repeater REV 1.0 (28.08.06.1), contiene la contraseña de la cuenta de administrador en texto plano.&#xa0;La página puede ser interceptada en HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:acexy:wireless-n_wifi_repeater_firmware:28.08.06.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F4EBA90-1BC8-4A54-B5C8-E6A681249E3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:acexy:wireless-n_wifi_repeater:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B718A0D-7C4B-456A-A3DA-BD74F4A087D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://acexy.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://acexy.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://blog-ssh3ll.medium.com/acexy-wireless-n-wifi-repeater-vulnerabilities-8bd5d14a2990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23358",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-29T14:15:18.047",
      "lastModified" : "2025-11-03T22:15:47.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized."
      }, {
        "lang" : "es",
        "value" : "El paquete underscore desde la versión 1.13.0-0 y anterior a la versión 1.13.0-2, desde la versión 1.3.2 y anterior a la versión 1.12.1, son vulnerables a una ejecución de código arbitraria por medio de la función template, particularmente cuando una propiedad variable es pasada como un argumento ya que no es saneado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underscorejs:underscore:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.3.2",
            "versionEndExcluding" : "1.12.1",
            "matchCriteriaId" : "D9AD5E3F-19FE-436D-9772-67697CF90FA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:underscorejs:underscore:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.13.0-0",
            "versionEndExcluding" : "1.13.0-2",
            "matchCriteriaId" : "189D2A24-FEEA-4052-9EE3-DAA855476F24"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tenable:tenable.sc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.18.0",
            "matchCriteriaId" : "04CA4C0E-255A-4763-AC31-7FE81F720EA3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jashkenas/underscore/blob/master/modules/template.js%23L71",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1%40%3Cissues.cordova.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306%40%3Cissues.cordova.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba%40%3Cissues.cordova.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039%40%3Cissues.cordova.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf%40%3Cissues.cordova.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00038.html",
        "source" : "report@snyk.io",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV/",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1081504",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBJASHKENAS-1081505",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1081503",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4883",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-14",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2025/Apr/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/jashkenas/underscore/blob/master/modules/template.js%23L71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r5df90c46f7000c4aab246e947f62361ecfb849c5a553dcdb0ef545e1%40%3Cissues.cordova.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r770f910653772317b117ab4472b0a32c266ee4abbafda28b8a6f9306%40%3Cissues.cordova.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raae088abdfa4fbd84e1d19d7a7ffe52bf8e426b83e6599ea9a734dba%40%3Cissues.cordova.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc84926bacd377503a3f5c37b923c1931f9d343754488d94e6f08039%40%3Cissues.cordova.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re69ee408b3983b43e9c4a82a9a17cbbf8681bb91a4b61b46f365aeaf%40%3Cissues.cordova.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/03/msg00038.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EOKATXXETD2PF3OR36Q5PD2VSVAR6J5Z/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FGEE7U4Z655A2MK5EW4UQQZ7B64XJWBV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240808-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241108-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1081504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBJASHKENAS-1081505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1081503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-UNDERSCORE-1080984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4883",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/tns-2021-14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21727",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-03-29T16:15:13.133",
      "lastModified" : "2024-11-21T05:48:53.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ZTE product has a DoS vulnerability. A remote attacker can amplify traffic by sending carefully constructed IPv6 packets to the affected devices, which eventually leads to device denial of service. This affects:<ZXHN F623><All versions up to V6.0.0P3T33>"
      }, {
        "lang" : "es",
        "value" : "Un producto ZTE presenta una vulnerabilidad de DoS.&#xa0;Un atacante remoto puede amplificar el tráfico mediante el envío de paquetes IPv6 cuidadosamente construidos hacia los dispositivos afectados, lo que eventualmente conlleva a una denegación de servicio del dispositivo.&#xa0;Esto afecta a: (ZXHN F623) (Todas las versiones hasta V6.0.0P3T33)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxhn_f623_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.0.0p3t34",
            "matchCriteriaId" : "9CB260C1-1CE3-4016-8C9E-117DA72A9DF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxhn_f623:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6746E033-5814-4D1A-869A-371ECA32323F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014744",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014744",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27352",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T16:15:13.257",
      "lastModified" : "2024-11-21T05:57:49.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An open redirect vulnerability in Ilch CMS version 2.1.42 allows attackers to redirect users to an attacker's site after a successful login."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de redireccionamiento abierto en Ilch CMS versión 2.1.42, permite a atacantes redireccionar a usuarios al sitio de un atacante después de un inicio de sesión exitoso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ilch:ilch_cms:2.1.42:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66E98223-B5B2-4593-ABAC-AE0FC46FEBD1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drive.google.com/file/d/1kSDlPASBCgJEINxTSIsjMWrU4u4T5XCc/view?usp=sharing",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Ilch%202.1.42%20Open%20redirect",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ilch.de/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://drive.google.com/file/d/1kSDlPASBCgJEINxTSIsjMWrU4u4T5XCc/view?usp=sharing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xoffense/POC/blob/main/Ilch%202.1.42%20Open%20redirect",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.ilch.de/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29267",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T16:15:13.320",
      "lastModified" : "2024-11-21T06:00:54.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sherlock SherlockIM through 2021-03-29 allows Cross Site Scripting (XSS) by leveraging the api/Files/Attachment URI to attack help-desk staff via the chatbot feature."
      }, {
        "lang" : "es",
        "value" : "Sherlock SherlockIM hasta el 29-03-2021, permite un ataque de tipo Cross Site Scripting (XSS) al aprovechar el URI api/Files/Attachment para atacar al personal de help-desk por medio de la funcionalidad chatbot"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sherlockim:sherlockim:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-03-29",
            "matchCriteriaId" : "0EA2F8FA-61CA-4EC2-8DE1-A647D558268F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Security-AVS/CVE-2021-29267",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sherlockim.ae",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Security-AVS/CVE-2021-29267",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sherlockim.ae",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28670",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T18:15:13.203",
      "lastModified" : "2024-11-21T06:00:04.503",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox AltaLink B8045/B8090 before 103.008.030.32000, C8030/C8035 before 103.001.030.32000, C8045/C8055 before 103.002.030.32000 and C8070 before 103.003.030.32000 allow unauthorized users, by leveraging the Scan To Mailbox feature, to delete arbitrary files from the disk."
      }, {
        "lang" : "es",
        "value" : "Xerox AltaLink B8045/B8090 versiones anteriores a 103.008.030.32000, C8030/C8035 versiones anteriores a 103.001.030.32000, C8045/C8055 versiones anteriores a 103.002.030.32000 y C8070 versiones anteriores a 103.003.030.32000, permiten a usuarios no autorizados, aprovechar la funcionalidad Scan To Mailbox, para eliminar archivos arbitrarios del disco"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "8B498244-F73F-44F4-9745-35D7FFD6FBB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF2A9AE-2CB4-409E-8A2A-32686CF09BFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "BCD62ED0-A2BA-4A1C-A177-92949DAB8AA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D4AD70-A8F6-4961-9B69-F350763C2825"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "8EAA621D-F05B-448E-BA98-5B42BA0C6B30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8065:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C0C841-9B23-43A6-9DD7-2228334C282D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "B80CFD5F-0348-4CD5-A87C-D83D574A84DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8075:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90DAAFD-7B30-4E76-BE07-4184E034F050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "24B87C71-D26B-42DE-AE88-FD143057CA98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8090:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C738D737-896F-47BC-B6D2-9C4A10A8D4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.001.020.23120",
            "matchCriteriaId" : "23F04A66-0E11-435A-A025-83ABB60B3247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1A3836-D2C1-4DD4-97BB-35D3EA62850A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.001.020.23120",
            "matchCriteriaId" : "85D7949D-40D6-48B0-B5DB-584E51F60525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3214817D-E787-486D-A1B7-2606B923FF27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.002.020.23120",
            "matchCriteriaId" : "7148C34D-0B83-4669-96EB-C9AB42EE82ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497F5F82-300D-4B58-8E15-69EFCEE007AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.002.020.23120",
            "matchCriteriaId" : "CC6BAC8F-BB30-4422-BC94-58B873BF6778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C6B82D-8E8B-459C-ABC6-2BBD92089899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.003.020.23120",
            "matchCriteriaId" : "F79D4707-4A24-4F95-AF5C-18AF28611EBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D39895D-8CCA-4E26-85D1-D2067FBBBF8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/12/cert_Security_Mini_Bulletin_XRX20X_for_ALB80xx-C80xxv.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/12/cert_Security_Mini_Bulletin_XRX20X_for_ALB80xx-C80xxv.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29416",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T18:15:13.407",
      "lastModified" : "2024-11-21T06:01:03.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PortSwigger Burp Suite before 2021.2. During viewing of a malicious request, it can be manipulated into issuing a request that does not respect its upstream proxy configuration. This could leak NetNTLM hashes on Windows systems that fail to block outbound SMB."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en PortSwigger Burp Suite versiones anteriores a 2021.2.&#xa0;Durante la visualización de una petición maliciosa, puede ser manipulado para emitir una petición que no respeta su configuración de proxy ascendente.&#xa0;Esto podría filtrar hashes NetNTLM en sistemas Windows que no bloquean un SMB saliente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portswigger:burp_suite:*:*:*:*:community:*:*:*",
            "versionEndExcluding" : "2021.2",
            "matchCriteriaId" : "42A66DAC-1D7D-4BFE-960E-A160B7AD3DAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portswigger:burp_suite:*:*:*:*:professional:*:*:*",
            "versionEndExcluding" : "2021.2",
            "matchCriteriaId" : "E8CA0D23-B6F2-4514-81CC-863480BD619E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackerone.com/reports/1054382",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/burp/releases/professional-community-2020-12?requestededition=professional",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1054382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/burp/releases/professional-community-2020-12?requestededition=professional",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29417",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T19:15:13.437",
      "lastModified" : "2024-11-21T06:01:03.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal."
      }, {
        "lang" : "es",
        "value" : "gitjacker versiones anteriores a 0.1.0, permite a atacantes remotos ejecutar código arbitrario por medio de un directorio .git diseñado debido a un salto de directorio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitjacker_project:gitjacker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.1.0",
            "matchCriteriaId" : "9CB891B7-E772-437A-85D8-20B936BBBE7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liamg/gitjacker/compare/v0.0.3...v0.1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/liamg/gitjacker/releases/tag/v0.1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/liamg/gitjacker/compare/v0.0.3...v0.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/liamg/gitjacker/releases/tag/v0.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25143",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-29T20:15:13.157",
      "lastModified" : "2024-11-21T05:54:26.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote denial of service (dos) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.9 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de denegación de servicio (DOS) remota en algunos productos Aruba Instant Access Point (IAP) en las versiones: Aruba Instant versiones 8.3.x: 8.3.0.12 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.9 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.4 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.13",
            "matchCriteriaId" : "53DD06C6-1746-4961-AABE-D92147A10859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.10",
            "matchCriteriaId" : "B5C7DF37-240A-4A9F-B21D-E60C51DC5765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.5",
            "matchCriteriaId" : "9CE69D1D-F180-4E4D-A76B-7459684D410B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.0",
            "matchCriteriaId" : "5D7126AE-7675-4607-A81C-F5D0DA2CF3F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25144",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-29T20:15:13.203",
      "lastModified" : "2024-11-21T05:54:26.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de desbordamiento del búfer remoto en algunos productos Aruba Instant Access Point (IAP) en las versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.16 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.12 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.6 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.2 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.17",
            "matchCriteriaId" : "737C67B1-4A51-49A9-B0D6-B27DDD184AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.13",
            "matchCriteriaId" : "53DD06C6-1746-4961-AABE-D92147A10859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.7",
            "matchCriteriaId" : "50EFCD61-95EA-4D50-9EB4-8CB11C849962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.3",
            "matchCriteriaId" : "62E74FC3-5F40-4ACE-8B83-BE28BC92AB1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.0",
            "matchCriteriaId" : "5D7126AE-7675-4607-A81C-F5D0DA2CF3F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26714",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T20:15:13.267",
      "lastModified" : "2024-11-21T05:56:43.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Enterprise License Manager portal in Mitel MiContact Center Enterprise before 9.4 could allow a user to access restricted files and folders due to insufficient access control. A successful exploit could allow an attacker to view and modify application data via Directory Traversal."
      }, {
        "lang" : "es",
        "value" : "El portal Enterprise License Manager en Mitel MiContact Center Enterprise versiones anteriores a 9.4, podría permitir a un usuario acceder a archivos y carpetas restringidos debido a un control insuficiente de acceso.&#xa0;Un explotación con éxito podría permitir a un atacante visualizar y modificar los datos de la aplicación por medio de un Salto de Directorio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitel:micontact_center_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.4",
            "matchCriteriaId" : "5A188F31-9F50-45C7-ADA8-379DA3128838"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mitel.com/support/security-advisories/mitel-product-security-advisory-21-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28668",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T20:15:13.327",
      "lastModified" : "2024-11-21T06:00:04.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 has several SQL injection vulnerabilities."
      }, {
        "lang" : "es",
        "value" : "Xerox AltaLink B80xx versiones anteriores a 103.008.020.23120, C8030/C8035 versiones anteriores a 103.001.020.23120, C8045/C8055 versiones anteriores a 103.002.020.23120 y C8070 versiones anteriores a 103.003.020.23120, presenta varias vulnerabilidades de inyección SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "8B498244-F73F-44F4-9745-35D7FFD6FBB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF2A9AE-2CB4-409E-8A2A-32686CF09BFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "BCD62ED0-A2BA-4A1C-A177-92949DAB8AA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D4AD70-A8F6-4961-9B69-F350763C2825"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "8EAA621D-F05B-448E-BA98-5B42BA0C6B30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8065:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C0C841-9B23-43A6-9DD7-2228334C282D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "B80CFD5F-0348-4CD5-A87C-D83D574A84DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8075:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90DAAFD-7B30-4E76-BE07-4184E034F050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "24B87C71-D26B-42DE-AE88-FD143057CA98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8090:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C738D737-896F-47BC-B6D2-9C4A10A8D4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.001.020.23120",
            "matchCriteriaId" : "23F04A66-0E11-435A-A025-83ABB60B3247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1A3836-D2C1-4DD4-97BB-35D3EA62850A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.001.020.23120",
            "matchCriteriaId" : "85D7949D-40D6-48B0-B5DB-584E51F60525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3214817D-E787-486D-A1B7-2606B923FF27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.002.020.23120",
            "matchCriteriaId" : "7148C34D-0B83-4669-96EB-C9AB42EE82ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497F5F82-300D-4B58-8E15-69EFCEE007AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.002.020.23120",
            "matchCriteriaId" : "CC6BAC8F-BB30-4422-BC94-58B873BF6778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C6B82D-8E8B-459C-ABC6-2BBD92089899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.003.020.23120",
            "matchCriteriaId" : "F79D4707-4A24-4F95-AF5C-18AF28611EBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D39895D-8CCA-4E26-85D1-D2067FBBBF8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28669",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T20:15:13.390",
      "lastModified" : "2024-11-21T06:00:04.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox AltaLink B80xx before 103.008.020.23120, C8030/C8035 before 103.001.020.23120, C8045/C8055 before 103.002.020.23120 and C8070 before 103.003.020.23120 provide the ability to set configuration attributes without administrative rights."
      }, {
        "lang" : "es",
        "value" : "Xerox AltaLink B80xx versiones anteriores a 103.008.020.23120, C8030/C8035 versiones anteriores a 103.001.020.23120, C8045/C8055 versiones anteriores a 103.002.020.23120 y C8070 versiones anteriores a 103.003.020.23120, proporcionan la habilidad de ajustar atributos de configuración sin derechos administrativos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8045_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "8B498244-F73F-44F4-9745-35D7FFD6FBB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADF2A9AE-2CB4-409E-8A2A-32686CF09BFB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8055_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "BCD62ED0-A2BA-4A1C-A177-92949DAB8AA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06D4AD70-A8F6-4961-9B69-F350763C2825"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8065_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "8EAA621D-F05B-448E-BA98-5B42BA0C6B30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8065:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05C0C841-9B23-43A6-9DD7-2228334C282D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8075_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "B80CFD5F-0348-4CD5-A87C-D83D574A84DD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8075:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90DAAFD-7B30-4E76-BE07-4184E034F050"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_b8090_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.008.020.23120",
            "matchCriteriaId" : "24B87C71-D26B-42DE-AE88-FD143057CA98"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_b8090:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C738D737-896F-47BC-B6D2-9C4A10A8D4C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.001.020.23120",
            "matchCriteriaId" : "23F04A66-0E11-435A-A025-83ABB60B3247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC1A3836-D2C1-4DD4-97BB-35D3EA62850A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.001.020.23120",
            "matchCriteriaId" : "85D7949D-40D6-48B0-B5DB-584E51F60525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3214817D-E787-486D-A1B7-2606B923FF27"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8045_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.002.020.23120",
            "matchCriteriaId" : "7148C34D-0B83-4669-96EB-C9AB42EE82ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8045:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "497F5F82-300D-4B58-8E15-69EFCEE007AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8055_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.002.020.23120",
            "matchCriteriaId" : "CC6BAC8F-BB30-4422-BC94-58B873BF6778"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C6B82D-8E8B-459C-ABC6-2BBD92089899"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:altalink_c8070_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "103.003.020.23120",
            "matchCriteriaId" : "F79D4707-4A24-4F95-AF5C-18AF28611EBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:altalink_c8070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D39895D-8CCA-4E26-85D1-D2067FBBBF8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/09/cert_Security_Mini_Bulletin_XRX20R_for_ALB80xx-C80xx-2.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T20:15:13.453",
      "lastModified" : "2024-11-21T06:00:05.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox Phaser 6510 before 64.61.23 and 64.59.11 (Bridge), WorkCentre 6515 before 65.61.23 and 65.59.11 (Bridge), VersaLink B400 before 37.61.23 and 37.59.01 (Bridge), B405 before 38.61.23 and 38.59.01 (Bridge), B600/B610 before 32.61.23 and 32.59.01 (Bridge), B605/B615 before 33.61.23 and 33.59.01 (Bridge), B7025/30/35 before 58.61.23 and 58.59.11 (Bridge), C400 before 67.61.23 and 67.59.01 (Bridge), C405 before 68.61.23 and 68.59.01 (Bridge), C500/C600 before 61.61.23 and 61.59.01 (Bridge), C505/C605 before 62.61.23 and 62.59.11 (Bridge), C7000 before 56.61.23 and 56.59.01 (Bridge), C7020/25/30 before 57.61.23 and 57.59.01 (Bridge), C8000/C9000 before 70.61.23 and 70.59.01 (Bridge), allows remote attackers with \"a weaponized clone file\" to execute arbitrary commands in the Web User Interface."
      }, {
        "lang" : "es",
        "value" : "Xerox Phaser 6510 versiones anteriores a 64.61.23 y 64.59.11 (Bridge), WorkCentre 6515 versiones anteriores a 65.61.23 y 65.59.11 (Bridge), VersaLink B400 versiones anteriores a 37.61.23 y 37.59.01 (Bridge), B405 versiones anteriores a 38.61.23 y 38.59 .01 (Bridge), B600/B610 versiones anteriores a 32.61.23 y 32.59.01 (Bridge), B605/B615 versiones anteriores a 33.61.23 y 33.59.01 (Bridge), B7025/30/35 versiones anteriores a 58.61.23 y 58.59.11 ( Bridge), C400 versiones anteriores a 67.61.23 y 67.59.01 (Bridge), C405 versiones anteriores a 68.61.23 y 68.59.01 (Bridge), C500/C600 versiones anteriores a 61.61.23 y 61.59.01 (Bridge), C505/C605 versiones anteriores a 62.61. 23 y 62.59.11 (Bridge), C7000 versiones anteriores a 56.61.23 y 56.59.01 (Bridge), C7020/25/30 versiones anteriores a 57.61.23 y 57.59.01 (Bridge), C8000/C9000 versiones anteriores a 70.61.23 y 70.59.01 (Bridge), permite a atacantes remotos con \"a weaponized clone file\" ejecutar comandos arbitrarios en la interfaz de usuario web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "64.59.11",
            "matchCriteriaId" : "5633F976-7DC2-4885-9E11-9AAC43AC6F4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6DAC0-C2AF-4596-8083-FF2AD9850F5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "65.59.11",
            "matchCriteriaId" : "750494D1-9A26-4438-9314-73287CA902FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF327B8-0027-4782-9E70-9B1B761BB535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "37.59.01",
            "matchCriteriaId" : "BF420769-56A8-4524-A9F3-2383903A3415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.59.01",
            "matchCriteriaId" : "E1BF5358-BCD6-45DC-8BFB-D2A4F8BAD483"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5919C7E6-3005-4737-AAD3-A6531C605DC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.59.01",
            "matchCriteriaId" : "C8A47E31-C28E-4F13-B61B-08E652D73B52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C631EF-0AA0-4D06-868D-099862B5550A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.59.01",
            "matchCriteriaId" : "44CAC202-CA06-462A-AFD8-C1C354C22E37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1980B9F3-19AB-4815-8452-AE42821263ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.59.01",
            "matchCriteriaId" : "9D5034A2-5C77-4A15-8FC9-09B55EC8B538"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80723C2-0840-4190-9089-DE15CC43278F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.59.01",
            "matchCriteriaId" : "5023922A-C99E-47D0-8BBC-763D71EAF60E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A10DC-991A-45B3-A12C-10B1C8F743D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "94323AC6-C591-4164-AC01-BFBB823BDF74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6EA77E-C999-462B-9605-878940771608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.61.23",
            "matchCriteriaId" : "89DE11B7-F214-45C6-8D7B-2EEEE62779A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "22707910-6725-4EEC-9141-5A6A1B9A72B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9FF2BE-5998-4795-8237-9111D47B7C18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "67.59.01",
            "matchCriteriaId" : "C86E3187-F1C3-450D-9AB0-53A7A70C010B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "68.59.01",
            "matchCriteriaId" : "EE4D3C46-6C3A-48EB-A549-2EF2401534B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.59.01",
            "matchCriteriaId" : "570FE8D7-76FA-4228-B1CB-406262E6F526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.59.01",
            "matchCriteriaId" : "74B71E96-FD70-4178-9FBB-4CF715D5E97B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.59.11",
            "matchCriteriaId" : "FD79A2AB-0644-4068-A3C7-A3E17A6C741D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.59.11",
            "matchCriteriaId" : "7F16FFDC-4BD7-4DA8-96E5-143BB11E23CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.59.01",
            "matchCriteriaId" : "5A2F8FB6-57E9-4090-8235-B13B4F71901A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A937272-E36B-420D-8407-D44C78ACEC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "86FF6E4B-1AA6-4596-AA0D-1EB3EBF2B76C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2112B6B-C983-4323-AAE5-364272C2C070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "C48BB6CD-C8A1-41C6-B3E6-7127FDC5DD83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "F88A9A3D-294C-4243-8B48-BA8FECFE5ECB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.59.01",
            "matchCriteriaId" : "3DF772C7-4B2B-45C1-A50A-71065AA20BCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1A0557-4A74-45F7-8B98-447454BF8A58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.59.01",
            "matchCriteriaId" : "9E0DD467-6A5A-412C-87CC-44E06C6FC9D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297DF3C-E132-4300-B891-9732EE003C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "64.61.23",
            "matchCriteriaId" : "A755766A-EE5A-4E5B-8448-C6474FF7FFCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6DAC0-C2AF-4596-8083-FF2AD9850F5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "65.61.23",
            "matchCriteriaId" : "84195A6F-DBC6-4C7A-86EF-6944E6DF7160"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF327B8-0027-4782-9E70-9B1B761BB535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "37.61.23",
            "matchCriteriaId" : "92CB9621-CC8D-4569-8D4F-7EE813A2AE6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.61.23",
            "matchCriteriaId" : "0F320B1A-5388-4587-A5ED-072F37FCD9D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5919C7E6-3005-4737-AAD3-A6531C605DC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.61.23",
            "matchCriteriaId" : "731CA570-FFD7-4DBA-BC6E-E6AFAEA5C6E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1980B9F3-19AB-4815-8452-AE42821263ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.61.23",
            "matchCriteriaId" : "0CE28D21-8324-4019-9797-7ADE680366C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80723C2-0840-4190-9089-DE15CC43278F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.61.23",
            "matchCriteriaId" : "57E18B31-80A0-4579-9B12-236118E9BAB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A10DC-991A-45B3-A12C-10B1C8F743D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.61.23",
            "matchCriteriaId" : "8C86554C-D031-4339-9B8A-CECEFAC27477"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6EA77E-C999-462B-9605-878940771608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "67.61.23",
            "matchCriteriaId" : "58DC7078-1462-47EB-A744-78E3E31A3D0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "68.61.23",
            "matchCriteriaId" : "70581112-C19E-44F1-B1BF-2E93C1E770E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.61.23",
            "matchCriteriaId" : "A60F0DA0-1B80-4C7E-A001-3823E998BA34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.61.23",
            "matchCriteriaId" : "8B834A75-9B12-4DAE-9FD4-13BC278192AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.61.23",
            "matchCriteriaId" : "CC1D3530-D0D0-4D0B-89E3-2451FC41E135"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.61.23",
            "matchCriteriaId" : "FD2A10AB-FC89-41CE-845B-D28DD3CB9CF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.61.23",
            "matchCriteriaId" : "43D3684D-4200-4DAA-9D81-D0EC2E9380E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A937272-E36B-420D-8407-D44C78ACEC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.61.23",
            "matchCriteriaId" : "6ADE62F9-35C7-4B9C-94E6-E68066D49B89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2112B6B-C983-4323-AAE5-364272C2C070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.61.23",
            "matchCriteriaId" : "935A4B2E-4C87-4EEB-8C21-0765967B9D97"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.61.23",
            "matchCriteriaId" : "2A382E35-9DCD-4A1A-A559-9F1E07D65C58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.61.23",
            "matchCriteriaId" : "07311E12-51C3-4D63-ACB0-2BDBB967AE0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1A0557-4A74-45F7-8B98-447454BF8A58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.61.23",
            "matchCriteriaId" : "15005DB7-8AFF-4765-ACAD-B5F4FD00D3CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297DF3C-E132-4300-B891-9732EE003C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.61.23",
            "matchCriteriaId" : "4FF423B5-F23C-4611-82B6-8B3B5A9CA01C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C631EF-0AA0-4D06-868D-099862B5550A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.61.23",
            "matchCriteriaId" : "89DE11B7-F214-45C6-8D7B-2EEEE62779A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.61.23",
            "matchCriteriaId" : "8AD91346-DD28-40D6-9BF7-0EB9BBB4B10C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9FF2BE-5998-4795-8237-9111D47B7C18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20K_for_PH6510_WC6515_VLB4xx_C4xx_B6XX_B70xx_C5xx_C6xx_C7xxx.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2020/06/cert_Security_Mini_Bulletin_XRX20K_for_PH6510_WC6515_VLB4xx_C4xx_B6XX_B70xx_C5xx_C6xx_C7xxx.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3391",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T20:15:13.533",
      "lastModified" : "2024-11-21T06:21:23.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MobileIron Mobile@Work through 2021-03-22 allows attackers to distinguish among valid, disabled, and nonexistent user accounts by observing the number of failed login attempts needed to produce a Lockout error message"
      }, {
        "lang" : "es",
        "value" : "MobileIron Mobile@Work hasta el 22 de marzo de 2021, permite a atacantes distinguir entre cuentas de usuario válidas, desactivadas e inexistentes al observar el número de intentos fallidos de inicio de sesión necesarios para producir un mensaje de error de bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobileiron:mobile\\@work:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "11.0.0.0.115r",
            "matchCriteriaId" : "4E437DFA-FB46-4857-9E4E-05C6E94D8D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mobileiron:mobile\\@work:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "12.11.1",
            "matchCriteriaId" : "CCE5A364-960D-49FB-B12F-9CB46013EB1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/optiv/rustyIron",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.optiv.com/explore-optiv-insights/source-zero/mobileiron-mdm-contains-static-key-allowing-account-enumeration",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/optiv/rustyIron",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mobileiron.com/en/blog/mobileiron-security-updates-available",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://www.optiv.com/explore-optiv-insights/source-zero/mobileiron-mdm-contains-static-key-allowing-account-enumeration",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27239",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.377",
      "lastModified" : "2024-11-21T05:57:39.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6400 and R6700 firmware version 1.0.4.98 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the upnpd service, which listens on UDP port 1900 by default. A crafted MX header field in an SSDP message can trigger an overflow of a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11851."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de los enrutadores NETGEAR R6400 y R6700 versión de firmware 1.0.4.98.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del servicio upnpd, que escucha en el puerto UDP 1900 por defecto.&#xa0;Un campo de encabezado MX diseñado en un mensaje SSDP puede desencadenar un desbordamiento de un búfer en la región stack de la memoria de longitud corregida.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-11851"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6220_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.68",
            "matchCriteriaId" : "ADF65DC4-51D5-4C38-B28D-7EA93B1734A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3EEA190-2E9C-4586-BF81-B115532FBA23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.102",
            "matchCriteriaId" : "888A8E0F-93DD-436D-B00C-F469C3BD6E5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D30939B-86E3-4C78-9B05-686B4994C8B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.66",
            "matchCriteriaId" : "08668CFE-EE8B-4EE9-8B9D-FFCB45EE27D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7000:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8780623-F362-4FA5-8B33-37E9CB3FEE12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.60",
            "matchCriteriaId" : "160F53B0-8430-4D85-8ABC-0A64B27DDFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "814A0114-9A1D-4EA0-9AF4-6968514E4F01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:dc112a_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.54",
            "matchCriteriaId" : "9A59578F-1A3F-428B-A995-572C8E93C15C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:dc112a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F87FFC46-137D-45B8-B437-F15565FB33D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.94",
            "matchCriteriaId" : "5E273CF7-2DB6-4641-8753-810949D631B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F45B620-60B8-40F3-A055-181ADD71EFFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.72",
            "matchCriteriaId" : "3A9F4EEE-E2D2-42B2-BC5C-844055677C1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44336289-F9DA-4779-8C1A-0221E29E2E2F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.48",
            "matchCriteriaId" : "049629DD-9E4F-4F47-98B0-C9FD457B74A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "321BE843-52C4-4638-A321-439CA7B3A6F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.50",
            "matchCriteriaId" : "685E2CA4-AA89-4574-8DB1-7C06D9F0FF2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10938043-F7DF-42C3-8C16-F92CAF8E5576"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.68",
            "matchCriteriaId" : "930E739E-EFDC-49AB-9155-A71C2B25FCD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4CDF6B-3829-44D0-9675-71D7BE83CAA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.102",
            "matchCriteriaId" : "E02F15FF-76B1-43DD-85E0-A34E764E638D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52AE9AD2-BC8D-477D-A3D3-891AE52FA5F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.102",
            "matchCriteriaId" : "357EDE1B-75BA-4515-B0E9-2B70EF993244"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6700:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A09A9E8-8C77-4EDB-9483-B3C540EF083A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r6900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2.132",
            "matchCriteriaId" : "839A9EBE-5F14-4695-8040-7D5607F8E248"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r6900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C41908FF-AE64-4949-80E3-BEE061B2DA8A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.11.116",
            "matchCriteriaId" : "D9F1DAD0-F8B8-48D5-B571-C55636B274C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.2.132",
            "matchCriteriaId" : "EAF3EA40-79FB-4D2C-A8AF-A04820745C4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE55F4D-E98B-46D3-B870-041141934CD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7100lg_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.64",
            "matchCriteriaId" : "1AC36017-5BCF-4CF6-91D0-278279943847"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7100lg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "366FA778-3C2A-42AF-9141-DAD7043B406C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.68",
            "matchCriteriaId" : "EF7A1DF8-E9A0-4312-AC37-DEB46E37EE50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF94D73-B6D0-4334-9A41-83AA92B7C6DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.38",
            "matchCriteriaId" : "96390A31-03B8-477B-8710-F797CB44E741"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C484840F-AF30-4B5C-821A-4DB9BE407BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.68",
            "matchCriteriaId" : "DAB3F350-9094-4B64-8ED9-517069EB56F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D6A70D-66AF-4064-9F1B-4358D4B1F016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7960p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.68",
            "matchCriteriaId" : "0ECEE38A-B0BB-43F8-AB4D-26572B789BFB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7960p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "091CEDB5-0069-4253-86D8-B9FE17CB9F24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.4.68",
            "matchCriteriaId" : "D10E41DC-982F-444A-9A4D-82EC2BA64199"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B39F095-8FE8-43FD-A866-7B613B495984"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1.68",
            "matchCriteriaId" : "61DF6302-36B7-49CF-8F2C-4C2247112EB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7EF872D-2537-4FEB-8799-499FC9D44339"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.144",
            "matchCriteriaId" : "60634A15-B02A-4C33-A1A4-F6340CFD6B8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A9B77E7-7439-48C6-989F-5E22CB4D3044"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.144",
            "matchCriteriaId" : "F8E565CF-8408-4502-97BD-01CEF15D0744"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63500DE4-BDBD-4F86-AB99-7DB084D0B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.88",
            "matchCriteriaId" : "609B0EC8-FCD3-4522-A06A-7CB521586A22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58EB0F2F-FB5C-47D9-9AE6-087AE517B3F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax75_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.102",
            "matchCriteriaId" : "ADDF0077-E02C-4DDA-A84E-DF3A0237FC66"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax75:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BAA74D7-36A1-4494-96A2-BD0D2D6BF22F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rax80_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.102",
            "matchCriteriaId" : "81DF924F-FDA4-4588-B8A3-6F18ABBD4976"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rax80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06B5A85C-3588-4263-B9AD-4E56D3F6CB16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "B6AE1767-9D9A-4E9E-B088-6727FACFDE5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C13F5C69-FA9B-472A-9036-0C2967BDCDE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "01E0EF50-145F-407A-8915-4EFFCD833505"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D92E4C8E-222A-476C-8273-F7171FC61F0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40v_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.4",
            "matchCriteriaId" : "1CA086E1-DB23-4130-B746-D56F5A188C3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D05F28-47A2-46AE-992E-132B34F6194B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs750_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "F614A1AB-F0C0-45D7-8D91-ECA3C1AA9165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B529194C-C440-4BC3-850F-0613FC548F86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs850_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.17.12",
            "matchCriteriaId" : "0DC5A075-0619-409C-B057-41015B8C54B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221CA950-E984-44CD-9E1B-3AADE3CEBE52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rs400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0.68",
            "matchCriteriaId" : "8509E165-B497-4483-95E6-7BEB2AB40946"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rs400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2700644E-0940-4D05-B3CA-904D91739E58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wndr3400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "065AE552-7268-45C5-92CA-B56602C9313D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wndr3400:v3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1992E44C-122C-41BC-8FDC-5F9EBEE1FB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:wnr3500l_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.0.66",
            "matchCriteriaId" : "2FCE2862-B111-45A9-85D9-8BABEFE4F856"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:wnr3500l:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8DE4BFA-41DE-4748-ACC7-14362333A059"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3.56",
            "matchCriteriaId" : "4AF96D62-1D28-4FE5-AFC3-FB93A1BB4D45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5590CF28-B88A-4755-904B-1BC1778FBEDD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-206/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062820/Security-Advisory-for-Stack-based-Buffer-Overflow-Remote-Code-Execution-Vulnerability-on-Some-Routers-PSV-2020-0432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-206/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27240",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.533",
      "lastModified" : "2024-11-21T05:57:40.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Patch Manager 2020.2.1. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the DataGridService WCF service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of Administrator. Was ZDI-CAN-12009."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar los privilegios en las instalaciones afectadas de SolarWinds Patch Manager versión 2020.2.1.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del servicio WCF de DataGridService.&#xa0;El problema resulta de una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una deserialización de datos no confiables.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de Administrator.&#xa0;Era ZDI-CAN-12009"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:patch_manager:2020.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0265F0-4E73-40F4-92B5-5F65526CFAE3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-207/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-207/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27241",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.593",
      "lastModified" : "2024-11-21T05:57:40.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5653.561). An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the AvastSvc.exe module. By creating a directory junction, an attacker can abuse the service to delete a directory. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-12082."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales eliminar directorios arbitrarios en las instalaciones afectadas de Avast Premium Security versión 20.8.2429 (Build 20.8.5653.561).&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del módulo AvastSvc.exe.&#xa0;Al crear una unión de directorio, un atacante puede abusar del servicio para eliminar un directorio.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para crear una condición de denegación de servicio en el sistema.&#xa0;Era ZDI-CAN-12082"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:avast:premium_security:20.8.2429:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2686D810-4654-4FF3-A785-A2B43139967E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-208/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-208/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27242",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.687",
      "lastModified" : "2024-11-21T05:57:40.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the hypervisor. Was ZDI-CAN-11926."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.0.1-48919.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema resulta de una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede causar una condición de corrupción de la memoria.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código en el contexto del hipervisor.&#xa0;Era ZDI-CAN-11926"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.0.1:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "249D33E0-876B-4964-8CAE-E987F7DCB6C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-209/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-209/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27243",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.767",
      "lastModified" : "2024-11-21T05:57:40.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-11924."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.0.1-48919.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema resulta de una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede causar un desbordamiento de enteros antes de asignar un búfer.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hipervisor.&#xa0;Era ZDI-CAN-11924"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.0.1:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "249D33E0-876B-4964-8CAE-E987F7DCB6C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-210/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-210/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27244",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.843",
      "lastModified" : "2024-11-21T05:57:40.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-11925."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales divulgar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 16.0.1-48919.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema resulta de una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un búfer asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hipervisor.&#xa0;Era ZDI-CAN-11925"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.0.1:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "249D33E0-876B-4964-8CAE-E987F7DCB6C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-211/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-211/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27245",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:12.953",
      "lastModified" : "2024-11-21T05:57:40.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220 AC1750 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of IPv6 connections. The issue results from the lack of proper filtering of IPv6 SSH connections. An attacker can leverage this in conjunction with other vulnerabilities to execute code in the context of root. Was ZDI-CAN-12309."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite una omisión del firewall en las instalaciones afectadas de TP-Link Archer A7 antes de los enrutadores Archer C7(EE. UU.)_V5_210125 y Archer A7(EE. UU.)_V5_200220 AC1750.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del manejo de las conexiones IPv6.&#xa0;El problema resulta de una falta de filtrado apropiado de las conexiones SSH IPv6.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-12309"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-693"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_a7_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "c7\\(us\\)_v5_210125",
            "matchCriteriaId" : "63702440-447F-40AF-84B9-CAE8DF07F990"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_a7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8436480B-77AE-4910-AD80-2AC21F36992A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:archer_a7_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "a7\\(us\\)_v5_200220",
            "matchCriteriaId" : "F767618F-6E2D-4BCC-BAAD-5DC3EF8BC4B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:archer_a7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8436480B-77AE-4910-AD80-2AC21F36992A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-214/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-214/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27272",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:13.017",
      "lastModified" : "2024-11-21T05:57:44.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ReportTemplateController class. When parsing the path parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-12123."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos eliminar archivos arbitrarios en las instalaciones afectadas de NETGEAR ProSAFE Network Management System versión 1.6.0.26.&#xa0;Aunque es requerida una autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser omitido.&#xa0;El fallo específico se presenta dentro de la clase ReportTemplateController.&#xa0;Cuando se analiza el parámetro path, el proceso no comprueba apropiadamente una ruta suministrada por el usuario antes de usarla en operaciones de archivo.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para crear una condición de denegación de servicio en el sistema.&#xa0;Era ZDI-CAN-12123"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1F32B-238F-4435-9229-345EB07DE7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062723/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0537",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-355/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062723/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-355/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27273",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:13.093",
      "lastModified" : "2024-11-21T05:57:44.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the SettingConfigController class. When parsing the fileName parameter, the process does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-12121."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de NETGEAR ProSAFE Network Management System versión 1.6.0.26.&#xa0;Aunque es requerida una autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser omitido.&#xa0;El fallo específico se presenta dentro de la clase SettingConfigController.&#xa0;Cuando se analiza el parámetro fileName, el proceso no comprueba apropiadamente una cadena proporcionada por el usuario antes de usarla para ejecutar una llamada al sistema.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de SYSTEM.&#xa0;Era ZDI-CAN-12121"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1F32B-238F-4435-9229-345EB07DE7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062686/Security-Advisory-for-Post-Authentication-Command-Injection-on-NMS300-PSV-2020-0559",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-356/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062686/Security-Advisory-for-Post-Authentication-Command-Injection-on-NMS300-PSV-2020-0559",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-356/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27274",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:13.187",
      "lastModified" : "2024-11-21T05:57:44.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Authentication is not required to exploit this vulnerability. The specific flaw exists within the MFileUploadController class. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-12124."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de NETGEAR ProSAFE Network Management System versión 1.6.0.26.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro de la clase MFileUploadController.&#xa0;El problema resulta de una falta de comprobación apropiada de una ruta suministrada por el usuario antes de usarla en operaciones de archivos.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de SYSTEM.&#xa0;Era ZDI-CAN-12124"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1F32B-238F-4435-9229-345EB07DE7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062688/Security-Advisory-for-Pre-Authentication-Command-Injection-on-NMS300-PSV-2020-0560",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-357/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062688/Security-Advisory-for-Pre-Authentication-Command-Injection-on-NMS300-PSV-2020-0560",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-357/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27275",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:13.267",
      "lastModified" : "2024-11-21T05:57:44.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the ConfigFileController class. When parsing the realName parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose sensitive information or to create a denial-of-service condition on the system. Was ZDI-CAN-12125."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos divulgar información confidencial y eliminar archivos arbitrarios en las instalaciones afectadas de NETGEAR ProSAFE Network Management System versión 1.6.0.26.&#xa0;Aunque es requerida una autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser omitido.&#xa0;El fallo específico se presenta dentro de la clase ConfigFileController.&#xa0;Cuando se analiza el parámetro realName, el proceso no comprueba apropiadamente una ruta suministrada por el usuario antes de usarla en operaciones de archivo.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para divulgar información confidencial o crear una condición de denegación de servicio en el sistema.&#xa0;Era ZDI-CAN-12125"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1F32B-238F-4435-9229-345EB07DE7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062687/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0561",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-358/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062687/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-358/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27276",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-29T21:15:13.437",
      "lastModified" : "2024-11-21T05:57:44.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the MibController class. When parsing the realName parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-12122."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos eliminar archivos arbitrarios en las instalaciones afectadas de NETGEAR ProSAFE Network Management System  versión 1.6.0.26.&#xa0;Aunque es requerida una autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser omitido.&#xa0;El fallo específico se presenta dentro de la clase MibController.&#xa0;Cuando se analiza el parámetro realName, el proceso no comprueba apropiadamente una ruta suministrada por el usuario antes de usarla en operaciones de archivo.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para crear una condición de denegación de servicio en el sistema.&#xa0;Era ZDI-CAN-12122"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netgear:prosafe_network_management_system:1.6.0.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C1F32B-238F-4435-9229-345EB07DE7D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062722/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0500",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-359/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062722/Security-Advisory-for-Denial-of-Service-on-NMS300-PSV-2020-0500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-359/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T21:15:13.547",
      "lastModified" : "2024-11-21T06:00:04.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 have a remote Command Execution vulnerability in the Web User Interface that allows remote attackers with \"a weaponized clone file\" to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Xerox Phaser 6510 versiones anteriores a 64.65.51 y 64.59.11 (Bridge), WorkCentre 6515 versiones anteriores a 65.65.51 y 65.59.11 (Bridge), VersaLink B400 versiones anteriores a 37.65.51 y 37.59.01 (Bridge), B405 versiones anteriores a 38.65.51 y 38.59 .01 (Bridge), B600/B610 versiones anteriores a 32.65.51 y 32.59.01 (Bridge), B605/B615 versiones anteriores a 33.65.51 y 33.59.01 (Bridge), B7025/30/35 versiones anteriores a 58.65.51 y 58.59.11 ( Bridge), C400 versiones anteriores a 67.65.51 y 67.59.01 (Bridge), C405 versiones anteriores a 68.65.51 y 68.59.01 (Bridge), C500/C600 versiones anteriores a 61.65.51 y 61.59.01 (Bridge), C505/C605 versiones anteriores a 62.65. 51 y 62.59.01 (Bridge), C7000 versiones anteriores a 56.65.51 y 56.59.01 (Bridge), C7020/25/30 versiones anteriores a 57.65.51 y 57.59.01 (Bridge), C8000/C9000 versiones anteriores a 70.65.51 y 70.59.01 (Bridge), C8000W versiones anteriores a 72.65.51, presentan una vulnerabilidad de ejecución de comandos remota en la interfaz de usuario web que permite a atacantes remotos con \"a weaponized clone file\" ejecutar comandos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "64.59.11",
            "matchCriteriaId" : "5633F976-7DC2-4885-9E11-9AAC43AC6F4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6DAC0-C2AF-4596-8083-FF2AD9850F5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "65.59.11",
            "matchCriteriaId" : "750494D1-9A26-4438-9314-73287CA902FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF327B8-0027-4782-9E70-9B1B761BB535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "37.59.01",
            "matchCriteriaId" : "BF420769-56A8-4524-A9F3-2383903A3415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.59.01",
            "matchCriteriaId" : "E1BF5358-BCD6-45DC-8BFB-D2A4F8BAD483"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5919C7E6-3005-4737-AAD3-A6531C605DC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.59.01",
            "matchCriteriaId" : "C8A47E31-C28E-4F13-B61B-08E652D73B52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C631EF-0AA0-4D06-868D-099862B5550A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.59.01",
            "matchCriteriaId" : "44CAC202-CA06-462A-AFD8-C1C354C22E37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1980B9F3-19AB-4815-8452-AE42821263ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.59.01",
            "matchCriteriaId" : "9D5034A2-5C77-4A15-8FC9-09B55EC8B538"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80723C2-0840-4190-9089-DE15CC43278F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.59.01",
            "matchCriteriaId" : "5023922A-C99E-47D0-8BBC-763D71EAF60E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A10DC-991A-45B3-A12C-10B1C8F743D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "94323AC6-C591-4164-AC01-BFBB823BDF74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6EA77E-C999-462B-9605-878940771608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "AA9A0266-919C-4A1B-B81F-156D8695C88F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "22707910-6725-4EEC-9141-5A6A1B9A72B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9FF2BE-5998-4795-8237-9111D47B7C18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "67.59.01",
            "matchCriteriaId" : "C86E3187-F1C3-450D-9AB0-53A7A70C010B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "68.59.01",
            "matchCriteriaId" : "EE4D3C46-6C3A-48EB-A549-2EF2401534B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.59.01",
            "matchCriteriaId" : "570FE8D7-76FA-4228-B1CB-406262E6F526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.59.01",
            "matchCriteriaId" : "74B71E96-FD70-4178-9FBB-4CF715D5E97B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.59.01",
            "matchCriteriaId" : "262D05E0-80BF-448D-9AAF-0B7648578AC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.59.01",
            "matchCriteriaId" : "DD1973D8-F1AE-4D78-AA04-C5D67CA38A90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.59.01",
            "matchCriteriaId" : "5A2F8FB6-57E9-4090-8235-B13B4F71901A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A937272-E36B-420D-8407-D44C78ACEC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "86FF6E4B-1AA6-4596-AA0D-1EB3EBF2B76C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2112B6B-C983-4323-AAE5-364272C2C070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "C48BB6CD-C8A1-41C6-B3E6-7127FDC5DD83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "F88A9A3D-294C-4243-8B48-BA8FECFE5ECB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.59.01",
            "matchCriteriaId" : "3DF772C7-4B2B-45C1-A50A-71065AA20BCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1A0557-4A74-45F7-8B98-447454BF8A58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.59.01",
            "matchCriteriaId" : "9E0DD467-6A5A-412C-87CC-44E06C6FC9D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297DF3C-E132-4300-B891-9732EE003C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "64.65.51",
            "matchCriteriaId" : "653B7C66-AF28-4291-85E6-34DDA5A87F0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6DAC0-C2AF-4596-8083-FF2AD9850F5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "65.65.51",
            "matchCriteriaId" : "337586F8-B995-403E-B5F1-BDDE7B6F943C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF327B8-0027-4782-9E70-9B1B761BB535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "37.65.51",
            "matchCriteriaId" : "558E7E0D-2A96-417F-8D06-4EC7C2AFBD36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.65.51",
            "matchCriteriaId" : "E0461B49-6FE4-463A-BBFF-893A2D22C0A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5919C7E6-3005-4737-AAD3-A6531C605DC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.65.51",
            "matchCriteriaId" : "74D87A46-F240-41F5-82DA-D84CFEE88E6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1980B9F3-19AB-4815-8452-AE42821263ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.65.51",
            "matchCriteriaId" : "05B9EEE4-6F93-43DD-A1CC-DF69CC89ED7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80723C2-0840-4190-9089-DE15CC43278F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.65.51",
            "matchCriteriaId" : "653D7D9B-4A77-42C2-93E8-A74640BBE463"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A10DC-991A-45B3-A12C-10B1C8F743D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.65.51",
            "matchCriteriaId" : "AE7F2A3F-0FBA-43BC-88BD-CC3744852525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6EA77E-C999-462B-9605-878940771608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "67.65.51",
            "matchCriteriaId" : "EFA4EE31-4F98-4036-9FA7-965F7AD672D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "68.65.51",
            "matchCriteriaId" : "B22293E7-E22D-4DEF-AD5F-D32AE16DE98D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.65.51",
            "matchCriteriaId" : "A4AD4291-3782-491E-92C6-53F09EE1684A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.65.51",
            "matchCriteriaId" : "9A7E308C-B348-45E8-86FA-841D3B65104A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.65.51",
            "matchCriteriaId" : "3A67E21D-4BD7-4EDE-BCC0-CC75BE91ED6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.65.51",
            "matchCriteriaId" : "50869EEA-C324-4624-9B10-8C79E5598317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.65.51",
            "matchCriteriaId" : "BF1794A6-C464-4D35-B1FE-60904349BD50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A937272-E36B-420D-8407-D44C78ACEC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.65.51",
            "matchCriteriaId" : "CB0B729C-01EC-47E9-81AA-66A4F05A986B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2112B6B-C983-4323-AAE5-364272C2C070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.65.51",
            "matchCriteriaId" : "1A14506C-18DF-45E8-B407-5FB1BB454039"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.65.51",
            "matchCriteriaId" : "9F25AFA1-3701-4E91-BE88-AC755B9F7617"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.65.51",
            "matchCriteriaId" : "379F02B6-817B-4250-A46D-2F17C123E8E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1A0557-4A74-45F7-8B98-447454BF8A58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.65.51",
            "matchCriteriaId" : "E2DE5967-2045-4C72-88B9-A49F520F8D43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297DF3C-E132-4300-B891-9732EE003C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "72.65.51",
            "matchCriteriaId" : "D609EA4F-631A-4BFF-A221-5C67F602F71E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955EEB44-F267-4463-A7D0-462664EC0C85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.65.51",
            "matchCriteriaId" : "94DCCD95-730E-4DA3-8775-D347942D3175"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C631EF-0AA0-4D06-868D-099862B5550A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.65.51",
            "matchCriteriaId" : "6FE6E891-AC7F-4BB4-A06D-ED2B2A47466E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.65.51",
            "matchCriteriaId" : "B11F2D76-1081-4783-9820-9EF7D8653E90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9FF2BE-5998-4795-8237-9111D47B7C18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-29T21:15:13.593",
      "lastModified" : "2024-11-21T06:00:04.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Xerox Phaser 6510 before 64.65.51 and 64.59.11 (Bridge), WorkCentre 6515 before 65.65.51 and 65.59.11 (Bridge), VersaLink B400 before 37.65.51 and 37.59.01 (Bridge), B405 before 38.65.51 and 38.59.01 (Bridge), B600/B610 before 32.65.51 and 32.59.01 (Bridge), B605/B615 before 33.65.51 and 33.59.01 (Bridge), B7025/30/35 before 58.65.51 and 58.59.11 (Bridge), C400 before 67.65.51 and 67.59.01 (Bridge), C405 before 68.65.51 and 68.59.01 (Bridge), C500/C600 before 61.65.51 and 61.59.01 (Bridge), C505/C605 before 62.65.51 and 62.59.01 (Bridge), C7000 before 56.65.51 and 56.59.01 (Bridge), C7020/25/30 before 57.65.51 and 57.59.01 (Bridge), C8000/C9000 before 70.65.51 and 70.59.01 (Bridge), C8000W before 72.65.51 allows remote attackers to execute arbitrary code through a buffer overflow in Web page parameter handling."
      }, {
        "lang" : "es",
        "value" : "Xerox Phaser 6510 versiones anteriores a 64.65.51 y 64.59.11 (Bridge), WorkCentre 6515 versiones anteriores a 65.65.51 y 65.59.11 (Bridge), VersaLink B400 versiones anteriores a 37.65.51 y 37.59.01 (Bridge), B405 versiones anteriores a 38.65.51 y 38.59 .01 (Bridge), B600/B610 versiones anteriores a 32.65.51 y 32.59.01 (Bridge), B605/B615 versiones anteriores a 33.65.51 y 33.59.01 (Bridge), B7025/30/35 versiones anteriores a 58.65.51 y 58.59.11 ( Bridge), C400 versiones anteriores a 67.65.51 y 67.59.01 (Bridge), C405 versiones anteriores a 68.65.51 y 68.59.01 (Bridge), C500/C600 versiones anteriores a 61.65.51 y 61.59.01 (Bridge), C505/C605 versiones anteriores a 62.65. 51 y 62.59.01 (Bridge), C7000 versiones anteriores a 56.65.51 y 56.59.01 (Bridge), C7020/25/30 versiones anteriores a 57.65.51 y 57.59.01 (Bridge), C8000/C9000 versiones anteriores a 70.65.51 y 70.59.01 (Bridge), C8000W versiones anteriores a 72.65.51, permite a atacantes remotos ejecutar código arbitrario por medio de un desbordamiento del búfer en el manejo de parámetros de la página Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "64.59.11",
            "matchCriteriaId" : "5633F976-7DC2-4885-9E11-9AAC43AC6F4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6DAC0-C2AF-4596-8083-FF2AD9850F5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "65.59.11",
            "matchCriteriaId" : "750494D1-9A26-4438-9314-73287CA902FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF327B8-0027-4782-9E70-9B1B761BB535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "37.59.01",
            "matchCriteriaId" : "BF420769-56A8-4524-A9F3-2383903A3415"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.59.01",
            "matchCriteriaId" : "E1BF5358-BCD6-45DC-8BFB-D2A4F8BAD483"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5919C7E6-3005-4737-AAD3-A6531C605DC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.59.01",
            "matchCriteriaId" : "C8A47E31-C28E-4F13-B61B-08E652D73B52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C631EF-0AA0-4D06-868D-099862B5550A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.59.01",
            "matchCriteriaId" : "44CAC202-CA06-462A-AFD8-C1C354C22E37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1980B9F3-19AB-4815-8452-AE42821263ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.59.01",
            "matchCriteriaId" : "9D5034A2-5C77-4A15-8FC9-09B55EC8B538"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80723C2-0840-4190-9089-DE15CC43278F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.59.01",
            "matchCriteriaId" : "5023922A-C99E-47D0-8BBC-763D71EAF60E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A10DC-991A-45B3-A12C-10B1C8F743D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "94323AC6-C591-4164-AC01-BFBB823BDF74"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6EA77E-C999-462B-9605-878940771608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "AA9A0266-919C-4A1B-B81F-156D8695C88F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.59.11",
            "matchCriteriaId" : "22707910-6725-4EEC-9141-5A6A1B9A72B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9FF2BE-5998-4795-8237-9111D47B7C18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "67.59.01",
            "matchCriteriaId" : "C86E3187-F1C3-450D-9AB0-53A7A70C010B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "68.59.01",
            "matchCriteriaId" : "EE4D3C46-6C3A-48EB-A549-2EF2401534B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.59.01",
            "matchCriteriaId" : "570FE8D7-76FA-4228-B1CB-406262E6F526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.59.01",
            "matchCriteriaId" : "74B71E96-FD70-4178-9FBB-4CF715D5E97B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.59.01",
            "matchCriteriaId" : "262D05E0-80BF-448D-9AAF-0B7648578AC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.59.01",
            "matchCriteriaId" : "DD1973D8-F1AE-4D78-AA04-C5D67CA38A90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.59.01",
            "matchCriteriaId" : "5A2F8FB6-57E9-4090-8235-B13B4F71901A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A937272-E36B-420D-8407-D44C78ACEC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "86FF6E4B-1AA6-4596-AA0D-1EB3EBF2B76C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2112B6B-C983-4323-AAE5-364272C2C070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "C48BB6CD-C8A1-41C6-B3E6-7127FDC5DD83"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.59.01",
            "matchCriteriaId" : "F88A9A3D-294C-4243-8B48-BA8FECFE5ECB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.59.01",
            "matchCriteriaId" : "3DF772C7-4B2B-45C1-A50A-71065AA20BCB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1A0557-4A74-45F7-8B98-447454BF8A58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.59.01",
            "matchCriteriaId" : "9E0DD467-6A5A-412C-87CC-44E06C6FC9D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297DF3C-E132-4300-B891-9732EE003C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:phaser_6510_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "64.65.51",
            "matchCriteriaId" : "653B7C66-AF28-4291-85E6-34DDA5A87F0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:phaser_6510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA6DAC0-C2AF-4596-8083-FF2AD9850F5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:workcentre_6515_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "65.65.51",
            "matchCriteriaId" : "337586F8-B995-403E-B5F1-BDDE7B6F943C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:workcentre_6515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EF327B8-0027-4782-9E70-9B1B761BB535"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "37.65.51",
            "matchCriteriaId" : "558E7E0D-2A96-417F-8D06-4EC7C2AFBD36"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6371B2E-7D30-4EE1-BA02-C80BAD217C80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.65.51",
            "matchCriteriaId" : "E0461B49-6FE4-463A-BBFF-893A2D22C0A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5919C7E6-3005-4737-AAD3-A6531C605DC5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b610_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.65.51",
            "matchCriteriaId" : "74D87A46-F240-41F5-82DA-D84CFEE88E6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1980B9F3-19AB-4815-8452-AE42821263ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.65.51",
            "matchCriteriaId" : "05B9EEE4-6F93-43DD-A1CC-DF69CC89ED7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80723C2-0840-4190-9089-DE15CC43278F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b615_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "33.65.51",
            "matchCriteriaId" : "653D7D9B-4A77-42C2-93E8-A74640BBE463"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF7A10DC-991A-45B3-A12C-10B1C8F743D0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.65.51",
            "matchCriteriaId" : "AE7F2A3F-0FBA-43BC-88BD-CC3744852525"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6EA77E-C999-462B-9605-878940771608"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "67.65.51",
            "matchCriteriaId" : "EFA4EE31-4F98-4036-9FA7-965F7AD672D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0332FC06-B7B4-49CB-BACC-DEF2A8EEE0F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c405_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "68.65.51",
            "matchCriteriaId" : "B22293E7-E22D-4DEF-AD5F-D32AE16DE98D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D7B6C70-5272-47B2-BC5F-B1F9DFCA7C42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.65.51",
            "matchCriteriaId" : "A4AD4291-3782-491E-92C6-53F09EE1684A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "053A2DDD-5314-455D-8793-ADA8CEEDF7F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "61.65.51",
            "matchCriteriaId" : "9A7E308C-B348-45E8-86FA-841D3B65104A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCD5A6F-DF0C-4C82-88BA-7CC5FE1EED2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c505_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.65.51",
            "matchCriteriaId" : "3A67E21D-4BD7-4EDE-BCC0-CC75BE91ED6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c505:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A83540-B071-4EE3-A98D-1BEE3C8FD3E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c605_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "62.65.51",
            "matchCriteriaId" : "50869EEA-C324-4624-9B10-8C79E5598317"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73BF6B1C-15E4-4C01-A571-1E6FB737ECAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "56.65.51",
            "matchCriteriaId" : "BF1794A6-C464-4D35-B1FE-60904349BD50"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A937272-E36B-420D-8407-D44C78ACEC65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.65.51",
            "matchCriteriaId" : "CB0B729C-01EC-47E9-81AA-66A4F05A986B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2112B6B-C983-4323-AAE5-364272C2C070"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7025_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.65.51",
            "matchCriteriaId" : "1A14506C-18DF-45E8-B407-5FB1BB454039"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7025:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3812A4B0-D2DA-4180-9AC8-FF547A501C0C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "57.65.51",
            "matchCriteriaId" : "9F25AFA1-3701-4E91-BE88-AC755B9F7617"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD3D52F-B865-4217-8CF0-ACEABDB68378"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.65.51",
            "matchCriteriaId" : "379F02B6-817B-4250-A46D-2F17C123E8E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1A0557-4A74-45F7-8B98-447454BF8A58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "70.65.51",
            "matchCriteriaId" : "E2DE5967-2045-4C72-88B9-A49F520F8D43"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4297DF3C-E132-4300-B891-9732EE003C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_c8000w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "72.65.51",
            "matchCriteriaId" : "D609EA4F-631A-4BFF-A221-5C67F602F71E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_c8000w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "955EEB44-F267-4463-A7D0-462664EC0C85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b600_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "32.65.51",
            "matchCriteriaId" : "94DCCD95-730E-4DA3-8775-D347942D3175"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C631EF-0AA0-4D06-868D-099862B5550A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.65.51",
            "matchCriteriaId" : "6FE6E891-AC7F-4BB4-A06D-ED2B2A47466E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FB9A38-795D-4D74-A1E9-CEBAC7502D1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:xerox:versalink_b7035_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "58.65.51",
            "matchCriteriaId" : "B11F2D76-1081-4783-9820-9EF7D8653E90"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:xerox:versalink_b7035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE9FF2BE-5998-4795-8237-9111D47B7C18"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://securitydocs.business.xerox.com/wp-content/uploads/2021/03/cert_Security_Mini_Bulletin_XRX21D_for_PH6510_WC6515_VersaLink-1.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25145",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T00:15:12.580",
      "lastModified" : "2024-11-21T05:54:26.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthorized disclosure of information vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de divulgación remota de información no autorizada en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant 6.4.x: 6.4.4.8-4.2.4.18 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.10 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.5 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.0.0 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.11",
            "matchCriteriaId" : "F054DF3E-94DE-4FAF-8BC4-E89176651310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.6",
            "matchCriteriaId" : "CB92B04F-DD65-42BA-9931-FF86427FBC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.0",
            "matchCriteriaId" : "F0E5DE06-241B-4A83-B0A8-0CEF0D5D825F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25148",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T00:15:12.643",
      "lastModified" : "2024-11-21T05:54:26.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de modificación remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.5.x: 6.5.4.17 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.13 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.10 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.4 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.18",
            "matchCriteriaId" : "240DF132-2037-44E6-B064-D0C482B8F2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.14",
            "matchCriteriaId" : "28CAD6E6-4324-444F-9D12-B35D3D08AEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.11",
            "matchCriteriaId" : "F054DF3E-94DE-4FAF-8BC4-E89176651310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.5",
            "matchCriteriaId" : "9CE69D1D-F180-4E4D-A76B-7459684D410B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.0",
            "matchCriteriaId" : "5D7126AE-7675-4607-A81C-F5D0DA2CF3F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25149",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T00:15:12.707",
      "lastModified" : "2024-11-21T05:54:26.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote buffer overflow vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.16 and below; Aruba Instant 8.3.x: 8.3.0.12 and below; Aruba Instant 8.5.x: 8.5.0.6 and below; Aruba Instant 8.6.x: 8.6.0.2 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de desbordamiento de búfer remoto en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.16 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.12 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.6 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.2 y  anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.17",
            "matchCriteriaId" : "737C67B1-4A51-49A9-B0D6-B27DDD184AD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.13",
            "matchCriteriaId" : "53DD06C6-1746-4961-AABE-D92147A10859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.7",
            "matchCriteriaId" : "50EFCD61-95EA-4D50-9EB4-8CB11C849962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.3",
            "matchCriteriaId" : "62E74FC3-5F40-4ACE-8B83-BE28BC92AB1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.0",
            "matchCriteriaId" : "5D7126AE-7675-4607-A81C-F5D0DA2CF3F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25146",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T01:15:12.737",
      "lastModified" : "2024-11-21T05:54:26.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.5 and below; Aruba Instant 8.7.x: 8.7.0.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución remota de comandos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.5.x: 6.5.4.17 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.13 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.10 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.5 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.0.0 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.18",
            "matchCriteriaId" : "240DF132-2037-44E6-B064-D0C482B8F2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.14",
            "matchCriteriaId" : "28CAD6E6-4324-444F-9D12-B35D3D08AEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.11",
            "matchCriteriaId" : "F054DF3E-94DE-4FAF-8BC4-E89176651310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.6",
            "matchCriteriaId" : "CB92B04F-DD65-42BA-9931-FF86427FBC5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.0",
            "matchCriteriaId" : "F0E5DE06-241B-4A83-B0A8-0CEF0D5D825F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25150",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T01:15:12.800",
      "lastModified" : "2024-11-21T05:54:27.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.17 and below; Aruba Instant 8.3.x: 8.3.0.13 and below; Aruba Instant 8.5.x: 8.5.0.10 and below; Aruba Instant 8.6.x: 8.6.0.4 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución remota de comandos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.5.x: 6.5.4.17 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.13 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.10 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.4 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.18",
            "matchCriteriaId" : "240DF132-2037-44E6-B064-D0C482B8F2E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.14",
            "matchCriteriaId" : "28CAD6E6-4324-444F-9D12-B35D3D08AEDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.11",
            "matchCriteriaId" : "F054DF3E-94DE-4FAF-8BC4-E89176651310"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.5",
            "matchCriteriaId" : "9CE69D1D-F180-4E4D-A76B-7459684D410B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.7.0",
            "matchCriteriaId" : "5D7126AE-7675-4607-A81C-F5D0DA2CF3F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25155",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T01:15:12.863",
      "lastModified" : "2024-11-21T05:54:27.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de modificación remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.6 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.0 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.7",
            "matchCriteriaId" : "7C26250B-FA0B-4DEA-A3CD-701465A89A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.1",
            "matchCriteriaId" : "4D7D09D1-F5E2-4CD8-A50F-97CD6A800106"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163524/Aruba-Instant-8.7.1.0-Arbitrary-File-Modification.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163524/Aruba-Instant-8.7.1.0-Arbitrary-File-Modification.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25156",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.470",
      "lastModified" : "2024-11-21T05:54:28.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary directory create vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de creación de directorio arbitrario remoto en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.6 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.0 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.7",
            "matchCriteriaId" : "7C26250B-FA0B-4DEA-A3CD-701465A89A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.1.0",
            "versionEndExcluding" : "8.7.1.1",
            "matchCriteriaId" : "037510F1-36AA-48A6-86F1-D015D0D7F746"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25157",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.580",
      "lastModified" : "2024-11-21T05:54:28.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.6 and below; Aruba Instant 8.7.x: 8.7.1.0 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de lectura remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.6 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.0 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.7",
            "matchCriteriaId" : "7C26250B-FA0B-4DEA-A3CD-701465A89A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.1",
            "matchCriteriaId" : "4D7D09D1-F5E2-4CD8-A50F-97CD6A800106"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25158",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.673",
      "lastModified" : "2024-11-21T05:54:28.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file read vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de lectura remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.7 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.1 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.8",
            "matchCriteriaId" : "1D73052E-BA70-4DBC-8D23-8EF750AFB59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.2",
            "matchCriteriaId" : "F889114B-15B5-4224-8B58-179F33C4959B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25159",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.767",
      "lastModified" : "2024-11-21T05:54:28.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de modificación remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.7 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.1 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.8",
            "matchCriteriaId" : "1D73052E-BA70-4DBC-8D23-8EF750AFB59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.2",
            "matchCriteriaId" : "F889114B-15B5-4224-8B58-179F33C4959B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25160",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.860",
      "lastModified" : "2024-11-21T05:54:28.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary file modification vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de modificación remota de archivos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.7 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.1 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.8",
            "matchCriteriaId" : "1D73052E-BA70-4DBC-8D23-8EF750AFB59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.2",
            "matchCriteriaId" : "F889114B-15B5-4224-8B58-179F33C4959B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25161",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.937",
      "lastModified" : "2024-11-21T05:54:28.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote cross-site scripting (xss) vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (xss) remota en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.7 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.1 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.8",
            "matchCriteriaId" : "1D73052E-BA70-4DBC-8D23-8EF750AFB59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.2",
            "matchCriteriaId" : "F889114B-15B5-4224-8B58-179F33C4959B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25162",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T02:15:16.987",
      "lastModified" : "2024-11-21T05:54:28.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote execution of arbitrary commands vulnerability was discovered in some Aruba Instant Access Point (IAP) products in version(s): Aruba Instant 6.4.x: 6.4.4.8-4.2.4.17 and below; Aruba Instant 6.5.x: 6.5.4.18 and below; Aruba Instant 8.3.x: 8.3.0.14 and below; Aruba Instant 8.5.x: 8.5.0.11 and below; Aruba Instant 8.6.x: 8.6.0.7 and below; Aruba Instant 8.7.x: 8.7.1.1 and below. Aruba has released patches for Aruba Instant that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución remota de comandos arbitrarios en algunos productos Aruba Instant Access Point (IAP) en versiones: Aruba Instant versiones 6.4.x: 6.4.4.8-4.2.4.17 y anteriores;&#xa0;Aruba Instant versiones 6.5.x: 6.5.4.18 y anteriores;&#xa0;Aruba Instant versiones 8.3.x: 8.3.0.14 y anteriores;&#xa0;Aruba Instant versiones 8.5.x: 8.5.0.11 y anteriores;&#xa0;Aruba Instant versiones 8.6.x: 8.6.0.7 y anteriores;&#xa0;Aruba Instant versiones 8.7.x: 8.7.1.1 y anteriores.&#xa0;Aruba ha lanzado parches para Aruba Instant que abordan esta vulnerabilidad de seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0.0",
            "versionEndIncluding" : "6.4.4.8-4.2.4.18",
            "matchCriteriaId" : "60DB6954-B71C-4473-A746-7D8D588360A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0.0",
            "versionEndExcluding" : "6.5.4.19",
            "matchCriteriaId" : "625B5BED-1E8C-434D-948B-A9C99A3A1336"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.3.0.0",
            "versionEndExcluding" : "8.3.0.15",
            "matchCriteriaId" : "429A4826-11FA-4E69-A006-97ECBD144D0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.0.12",
            "matchCriteriaId" : "76A177FA-BFBC-4E9E-AA2E-8FA49D66A06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0.0",
            "versionEndExcluding" : "8.6.0.8",
            "matchCriteriaId" : "1D73052E-BA70-4DBC-8D23-8EF750AFB59B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:arubanetworks:instant:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0.0",
            "versionEndExcluding" : "8.7.1.2",
            "matchCriteriaId" : "F889114B-15B5-4224-8B58-179F33C4959B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_w1750d_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.7.0",
            "versionEndExcluding" : "8.7.1.3",
            "matchCriteriaId" : "DDC134F8-5D6A-4D37-9BC7-CA0C772F8823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_w1750d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBC30055-239F-4BB1-B2D1-E5E35F0D8911"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163522/Aruba-Instant-IAP-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-723417.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-007.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29376",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T07:15:12.007",
      "lastModified" : "2024-11-21T06:01:00.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ircII before 20210314 allows remote attackers to cause a denial of service (segmentation fault and client crash, disconnecting the victim from an IRC server) via a crafted CTCP UTC message."
      }, {
        "lang" : "es",
        "value" : "ircII versiones anteriores a 20210314, permite a atacantes remotos causar una denegación de servicio (fallo de segmentación y fallo del cliente, desconectando a la víctima desde un servidor IRC) por medio de un mensaje CTCP UTC diseñado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eterna:ircii:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20210314",
            "matchCriteriaId" : "E8502E5C-6FAA-46D1-BB68-45319CDA11B4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.eterna.com.au/ircii/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00023.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/24/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.eterna.com.au/ircii/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/24/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29418",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T07:15:13.113",
      "lastModified" : "2024-11-21T06:01:03.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situations) allows attackers to bypass access control that is based on IP addresses. NOTE: this issue exists because of an incomplete fix for CVE-2021-28918."
      }, {
        "lang" : "es",
        "value" : "El paquete netmask versiones anteriores a 2.0.1 para Node.js, maneja inapropiadamente determinados caracteres inesperados en una cadena de direcciones IP, como un dígito octal de 9. Esto (en algunas situaciones) permite a atacantes omitir el control de acceso que es basado en direcciones IP.&#xa0;NOTA: este problema se presenta debido a una corrección incompleta para el CVE-2021-28918."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmask_project:netmask:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "3CFF67CA-6DE5-47E3-9D52-EA33D9F3B17C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rs/node-netmask/commit/3f19a056c4eb808ea4a29f234274c67bc5a848f4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rs/node-netmask/commit/3f19a056c4eb808ea4a29f234274c67bc5a848f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26919",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-30T08:15:11.340",
      "lastModified" : "2024-11-21T05:57:02.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker to execute arbitrary code from a hacker-controlled malicious MySQL server within Druid server processes. This issue was addressed in Apache Druid 0.20.2"
      }, {
        "lang" : "es",
        "value" : "Apache Druid, permite a usuarios leer datos de otros sistemas de bases de datos usando JDBC.&#xa0;Esta funcionalidad permite a usuarios confiables con los permisos apropiados configurar búsquedas o enviar tareas de ingestión.&#xa0;El controlador MySQL JDBC admite determinadas propiedades que, si no se mitigan, pueden permitir a un atacante ejecutar código arbitrario desde un servidor MySQL malicioso controlado por un hacker dentro de los procesos del servidor Druid.&#xa0;Este problema se solucionó en Apache Druid versión 0.20.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:druid:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.20.2",
            "matchCriteriaId" : "7FDA9ED4-9440-490F-B4E5-141D4F23C03F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r443e2916c612fbd119839c0fc0729327d6031913a75081adac5b43ad%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r470f8c92eb5df45f41b3ae609b6315b6c5ff51b3ceb2f09f00ca620f%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6bc68264170046448f823d12c17fd1fd875251d97d60869f58709872%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7a531ec123570cb7875ff991cf115f99e9ef99a48b3cf3fa4f9d9864%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra85fa7d31f9bec1148ffd2e4030934927caa8bff89bca9f61f75e697%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd87451fce34df54796e66321c40d743a68fb4553d72e7f6f0bc62ebd%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re0910cf4c784897774427fecd95912fb565a6bd06d924a55e70bbbfc%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re4c5deb0aae4bace69844d15c9fd1699e907ebfee93bc3926474d110%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf3ea2a4018e87e6c45d36cf8479af7727dcc276edabd2f7cf59e0c5f%40%3Cdev.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r443e2916c612fbd119839c0fc0729327d6031913a75081adac5b43ad%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r470f8c92eb5df45f41b3ae609b6315b6c5ff51b3ceb2f09f00ca620f%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6bc68264170046448f823d12c17fd1fd875251d97d60869f58709872%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7a531ec123570cb7875ff991cf115f99e9ef99a48b3cf3fa4f9d9864%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra85fa7d31f9bec1148ffd2e4030934927caa8bff89bca9f61f75e697%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd87451fce34df54796e66321c40d743a68fb4553d72e7f6f0bc62ebd%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re0910cf4c784897774427fecd95912fb565a6bd06d924a55e70bbbfc%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re4c5deb0aae4bace69844d15c9fd1699e907ebfee93bc3926474d110%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf3ea2a4018e87e6c45d36cf8479af7727dcc276edabd2f7cf59e0c5f%40%3Cdev.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21628",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.187",
      "lastModified" : "2024-11-21T05:48:43.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Build With Parameters Plugin 1.5 and earlier does not escape parameter names and descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins Build With Parameters Plugin versiones 1.5 y anteriores, no escapan unos nombres y descripciones de parámetros, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes con permiso Job/Configure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:build_with_parameters:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "CB0002E1-09AB-4422-AC42-12EB4D95CF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2231",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21629",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.327",
      "lastModified" : "2024-11-21T05:48:43.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Build With Parameters Plugin 1.5 and earlier allows attackers to build a project with attacker-specified parameters."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins Build With Parameters Plugin versiones 1.5 y anteriores, permite a atacantes construir un proyecto con parámetros especificados por el atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:build_with_parameters:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.5",
            "matchCriteriaId" : "CB0002E1-09AB-4422-AC42-12EB4D95CF79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2257",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21630",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.407",
      "lastModified" : "2024-11-21T05:48:43.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins Extra Columns Plugin versiones 1.22 y anteriores, no escapan los valores de los parámetros en la columna de parámetros de compilación, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes con permiso Job/Configure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:extra_columns:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.22",
            "matchCriteriaId" : "B2F819F4-AD94-48CE-ABB8-7F653364546C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2222",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21631",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.470",
      "lastModified" : "2024-11-21T05:48:43.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Cloud Statistics Plugin 0.26 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Overall/Read permission and knowledge of random activity IDs to view related provisioning exception error messages."
      }, {
        "lang" : "es",
        "value" : "Jenkins Cloud Statistics Plugin versiones 0.26 y anteriores, no lleva a cabo una comprobación de permisos en un endpoint HTTP, permitiendo a atacantes con permiso Overall/Read y conocimiento del ID de actividad aleatoria visualizar unos mensajes de error de excepción de aprovisionamiento relacionados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:cloud_statistics:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "0.26",
            "matchCriteriaId" : "8CD7EF08-C375-4873-A496-D9C7D94F24A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2246",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2246",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21632",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.547",
      "lastModified" : "2024-11-21T05:48:44.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobación de permiso en Jenkins OWASP Dependency-Track Plugin versiones 3.1.0 y anteriores, permite a atacantes con permiso Overall/Read conectarse a una URL especificada por un atacante, capturando unas credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-track:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "2C69B149-669C-4BF3-ACD1-0395416F384A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2250",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21633",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.627",
      "lastModified" : "2024-11-21T05:48:44.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins OWASP Dependency-Track Plugin 3.1.0 and earlier allows attackers to connect to an attacker-specified URL, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins OWASP Dependency-Track Plugin versiones 3.1.0 y anteriores, permite a atacantes conectarse a una URL especificada por un atacante, capturando credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:owasp_dependency-track:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.1.0",
            "matchCriteriaId" : "2C69B149-669C-4BF3-ACD1-0395416F384A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2250",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21634",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.687",
      "lastModified" : "2024-11-21T05:48:44.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Jabber (XMPP) notifier and control Plugin 1.41 and earlier stores passwords unencrypted in its global configuration file on the Jenkins controller where they can be viewed by users with access to the Jenkins controller file system."
      }, {
        "lang" : "es",
        "value" : "El plugin de notificación y control de Jenkins Jabber (XMPP) versiones 1.41 y anteriores, almacena unas contraseñas sin cifrar en su archivo de configuración global en el controlador de Jenkins, donde pueden ser visualizadas por unos usuarios con acceso al sistema de archivos del controlador de Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jabber_\\(xmpp\\)_notifier_and_control:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.41",
            "matchCriteriaId" : "CC2E96AC-AD67-418C-A735-696E35E84D1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2162",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21635",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.767",
      "lastModified" : "2024-11-21T05:48:44.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins REST List Parameter Plugin 1.3.0 and earlier does not escape a parameter name reference in embedded JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins REST List Parameter Plugin versiones 1.3.0 y anteriores, no escapan una referencia de nombre de parámetro en JavaScript insertado, resultando en una vulnerabilidad de tipo cross-site scripting (XSS) almacenado explotable por atacantes con permiso Job/Configure."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:rest_list_parameter:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "550F4117-C6C5-44C6-9A03-0A38C0B21A43"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2261",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2261",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21636",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.843",
      "lastModified" : "2024-11-21T05:48:44.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to enumerate credentials ID of credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobación de permiso en Jenkins Team Foundation Server Plugin versiones 5.157.1 y  anteriores, permite a atacantes con permiso Overall/Read enumerar unos ID de credenciales de las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:team_foundation_server:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "5.157.1",
            "matchCriteriaId" : "62126186-5625-40DE-A7A4-0F5F0B7E0A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20%281%29",
        "source" : "jenkinsci-cert@googlegroups.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20%281%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21637",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.907",
      "lastModified" : "2024-11-21T05:48:44.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing permission check in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobación de permiso en Jenkins Team Foundation Server Plugin versiones 5.157.1 y anteriores, permite a atacantes con permiso general y de lectura conectarse a una URL especificada por un atacante usando unos ID de credenciales especificadas por el atacante obtenidas por medio de otro método, capturando las credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:team_foundation_server:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "5.157.1",
            "matchCriteriaId" : "62126186-5625-40DE-A7A4-0F5F0B7E0A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21638",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-03-30T12:16:10.987",
      "lastModified" : "2024-11-21T05:48:44.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Team Foundation Server Plugin 5.157.1 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins Team Foundation Server Plugin versiones 5.157.1 y anteriores, permite a atacantes conectarse a una URL especificada por un atacante usando unos ID de credenciales especificados por el atacante obtenidas por medio de otro método, capturando credenciales almacenadas en Jenkins."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:team_foundation_server:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "5.157.1",
            "matchCriteriaId" : "62126186-5625-40DE-A7A4-0F5F0B7E0A91"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20%282%29",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/03/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-03-30/#SECURITY-2283%20%282%29",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T12:16:11.047",
      "lastModified" : "2024-11-21T06:00:24.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field."
      }, {
        "lang" : "es",
        "value" : "CMS Made Simple (CMSMS) versión 2.2.15, permite un XSS autenticado por medio del script /admin/addbookmark.php a través del campo Site Admin ) My Preferences ) Title."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47371FA0-89B6-4625-B43D-AFC56252F4CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dev.cmsmadesimple.org/bug/view/12432",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162287/CMS-Made-Simple-2.2.15-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://dev.cmsmadesimple.org/bug/view/12432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162287/CMS-Made-Simple-2.2.15-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T12:16:11.500",
      "lastModified" : "2024-11-21T06:00:58.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ovidentia CMS 6.x contains a SQL injection vulnerability in the \"id\" parameter of index.php. The \"checkbox\" property into \"text\" data can be extracted and displayed in the text region or in source code."
      }, {
        "lang" : "es",
        "value" : "Ovidentia CMS versiones 6.x, contiene una vulnerabilidad de inyección SQL en el parámetro \"id\" del archivo index.php.&#xa0;La propiedad \"checkbox\" en los datos \"text\" puede ser extraídos y mostrados en la región de texto o en el código fuente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ovidentia:ovidentia:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.7.7",
            "matchCriteriaId" : "F943BE79-6A73-4299-ADB0-E63CF63CDE5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://ovidentia.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49707",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://ovidentia.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49707",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T14:15:13.607",
      "lastModified" : "2024-11-21T05:56:51.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-link DIR-816 A2 v1.10 is affected by a remote code injection vulnerability. An HTTP request parameter can be used in command string construction in the handler function of the /goform/dir_setWanWifi, which can lead to command injection via shell metacharacters in the statuscheckpppoeuser parameter."
      }, {
        "lang" : "es",
        "value" : "D-link DIR-816 A2 versión v1.10 está afectado por una vulnerabilidad de inyección de código remoto.&#xa0;Se puede usar un parámetro de petición HTTP en la construcción de cadenas de comandos en la función del manejador de /goform/dir_setWanWifi, que puede conllevar a una inyección de comandos por medio de metacaracteres de shell en el parámetro statuscheckpppoeuser."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-816_firmware:1.10b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12CE36E-C7F7-4FE7-BA46-8EC5B61F617E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3AC507-7219-401E-AC60-12D96382E4B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GD008/vuln/blob/main/DIR-816.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GD008/vuln/blob/main/DIR-816.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21409",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-30T15:15:14.573",
      "lastModified" : "2024-11-21T05:48:17.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP/1.1. This is a followup of GHSA-wm47-8v5p-wjpj/CVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final."
      }, {
        "lang" : "es",
        "value" : "Netty es un framework de aplicación de red de código abierto y asíncrono event-driven para el desarrollo rápido de servidores y clientes de protocolo de alto rendimiento mantenibles.&#xa0;En Netty (io.netty:netty-codec-http2) versiones anteriores a 4.1.61.Final se presenta una vulnerabilidad que permite el trafico no autorizado de peticiones.&#xa0;El encabezado content-length no es comprobado correctamente si la petición solo usa un único Http2HeaderFrame con endStream establecido en verdadero.&#xa0;Esto podría conllevar al trafico no autorizado de peticiones si la petición se envía a un peer remoto y se traduce a HTTP/1.1.&#xa0;Este es un seguimiento de GHSA-wm47-8v5p-wjpj/CVE-2021-21295 que no pudo solucionar este caso.&#xa0;Esto se corrigió como parte de la versión 4.1.61.Final."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-444"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netty:netty:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.61",
            "matchCriteriaId" : "BC283248-0EB5-46CA-A68C-4FF004D606F8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_api_services:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EC98B22-FFAA-4B59-8E63-EBAA4336AD13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CF9A061-2421-426D-9854-0A4E55B2961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F95EDC3D-54BB-48F9-82F2-7CCF335FCA78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_corporate_lending_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72B735F-4E52-484A-9C2C-23E6E2070385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B36A1D4-F391-4EE3-9A65-0A10568795BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55116032-AAD1-4FEA-9DA8-2C4CBD3D3F61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_credit_facilities_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0275F820-40BE-47B8-B167-815A55DF578E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E14324D-B9EE-4C06-ACC7-255189ED6300"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBEBB60F-6EAB-4AE5-B777-5044C657FBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_trade_finance_process_management:14.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185C1EA-71E6-4972-8637-08A33CC00841"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF57C7A-92C9-4D71-A7B1-CC9DEFAA8193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA64A1D-34F9-4441-857A-25C165E6DBB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_brm_-_elastic_charging_engine:12.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06594847-96ED-4541-B2F4-C7331B603603"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_console:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC12B43F-30F6-4B05-AB3A-E91D8404D5A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_design_studio:7.4.2.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "040DA31B-2A0C-46F6-8EDF-9B88F9FB0F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1214FDF-357A-4BB9-BADE-50FB2BD16D10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:helidon:1.4.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E7626D2-D9FF-416A-9581-852CED0D8C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:helidon:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99344A5D-F4B7-49B4-9AE6-0E2FB3874EA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.2.6.3",
            "matchCriteriaId" : "BE34D4F7-5C18-4578-8D0A-722FDF931333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.12",
            "matchCriteriaId" : "7167D144-C4AE-487F-B59A-888E10EA59DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.12.0",
            "versionEndIncluding" : "17.12.11",
            "matchCriteriaId" : "8B1C88FD-C2EC-4C96-AC7E-6F95C8763B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.8.0",
            "versionEndIncluding" : "18.8.11",
            "matchCriteriaId" : "53E2276C-9515-46F6-A621-213A3047B9A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.12.0",
            "versionEndIncluding" : "19.12.10",
            "matchCriteriaId" : "3EF7E2B4-B741-41E9-8EF6-6C415AB9EF54"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.13.7",
            "matchCriteriaId" : "64839EBF-078E-492A-897C-9AFFB7678ED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21295",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0ca82fec33334e571fe5b388272260778883e307e15415d7b1443de2%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r101f82d8f3b5af0bf79aecbd5b2dd3b404f6bb51d1a54c2c3d29bed9%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b3cb056364794f919aaf26ceaf7423de64e7fdd05a914066e7d5219%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2732aa3884cacfecac4c54cfaa77c279ba815cad44b464a567216f83%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r31044fb995e894749cb821c6fe56f487c16a97028e6e360e59f09d58%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a98827bb4a7edbd69ef862f2351391845697c40711820d10df52ca5%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b8be87acf5b9c098a2ee350b5ca5716fe7afeaf0a21a4ee45a90687%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5cbea8614812289a9b98d0cfc54b47f54cef424ac98d5e315b791795%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f2f120b2b8d099226473db1832ffb4d7c1d6dc2d228a164bf293a8e%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r61564d86a75403b854cdafee67fc69c8b88c5f6802c2c838f4282cc8%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r69efd8ef003f612c43e4154e788ca3b1f837feaacd16d97854402355%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6dac9bd799ceac499c7a7e152a9b0dc7f2fe7f89ec5605d129bb047b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r70c3a7bfa904f06a1902f4df20ee26e4f09a46b8fd3eb304dc57a2de%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7879ddcb990c835c6b246654770d836f9d031dee982be836744e50ed%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b54563abebe3dbbe421e1ba075c2030d8d460372f8c79b7789684b6%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r823d4b27fcba8dad5fe945bdefce3ca5a0031187966eb6ef3cc22ba9%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r967002f0939e69bdec58f070735a19dd57c1f2b8f817949ca17cddae%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ec78dc409f3f1edff88f21cab53737f36aad46f582a9825389092e0%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9fe840c36b74f92b8d4a089ada1f9fd1d6293742efa18b10e06b66d2%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898%40%3Cdev.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra66e93703e3f4bd31bdfd0b6fb0c32ae96b528259bb1aa2b6d38e401%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa413040db6d2197593cc03edecfd168732e697119e6447b0a25d525%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rac8cf45a1bab9ead5c9a860cbadd6faaeb7792203617b6ec3874736d%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafc77f9f03031297394f3d372ccea751b23576f8a2ae9b6b053894c5%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rba2a9ef1d0af882ab58fadb336a58818495245dda43d32a7d7837187%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbde2f13daf4911504f0eaea43eee4f42555241b5f6d9d71564b6c5fa%40%3Cjira.kafka.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcae42fba06979934208bbd515584b241d3ad01d1bb8b063512644362%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdd206d9dd7eb894cc089b37fe6edde2932de88d63a6d8368b44f5101%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdd5715f3ee5e3216d5e0083a07994f67da6dbb9731ce9e7a6389b18e%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1911e05c08f3ec2bab85744d788773519a0afb27272a31ac2a0b4e8%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re39391adcb863f0e9f3f15e7986255948f263f02e4700b82453e7102%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re4b0141939370304d676fe23774d0c6fbc584b648919825402d0cb39%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324%40%3Cissues.flink.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/re9e6ed60941da831675de2f8f733c026757fb4fa28a7b6c9f3dfb575%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/redef0fb5474fd686781007de9ddb852b24f1b04131a248d9a4789183%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf148b2bf6c2754153a8629bc7495e216bd0bd4c915695486542a10b4%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf38e4dcdefc7c59f7ba0799a399d6d6e37b555d406a1dfc2fcbf0b35%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf521ff2be2e2dd38984174d3451e6ee935c845948845c8fccd86371d%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b%40%3Cissues.kudu.apache.org%3E",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0003/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4885",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21295",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/commit/b0fa4d5aab4215f3c22ce6123dd8dd5f38dc0432",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-f256-j965-7f32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/netty/netty/security/advisories/GHSA-wm47-8v5p-wjpj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0b09f3e31e004fe583f677f7afa46bd30110904576c13c5ac818ac2c%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0ca82fec33334e571fe5b388272260778883e307e15415d7b1443de2%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r101f82d8f3b5af0bf79aecbd5b2dd3b404f6bb51d1a54c2c3d29bed9%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1b3cb056364794f919aaf26ceaf7423de64e7fdd05a914066e7d5219%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2732aa3884cacfecac4c54cfaa77c279ba815cad44b464a567216f83%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r31044fb995e894749cb821c6fe56f487c16a97028e6e360e59f09d58%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a98827bb4a7edbd69ef862f2351391845697c40711820d10df52ca5%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b8be87acf5b9c098a2ee350b5ca5716fe7afeaf0a21a4ee45a90687%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4ea2f1a9d79d4fc1896e085f31fb60a21b1770d0a26a5250f849372d%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r584cf871f188c406d8bd447ff4e2fd9817fca862436c064d0951a071%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5baac01f9e06c40ff7aab209d5751b3b58802c63734e33324b70a06a%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5cbea8614812289a9b98d0cfc54b47f54cef424ac98d5e315b791795%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f2f120b2b8d099226473db1832ffb4d7c1d6dc2d228a164bf293a8e%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r602e98daacc98934f097f07f2eed6eb07c18bfc1949c8489dc7bfcf5%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r61564d86a75403b854cdafee67fc69c8b88c5f6802c2c838f4282cc8%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r69efd8ef003f612c43e4154e788ca3b1f837feaacd16d97854402355%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6dac9bd799ceac499c7a7e152a9b0dc7f2fe7f89ec5605d129bb047b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r70c3a7bfa904f06a1902f4df20ee26e4f09a46b8fd3eb304dc57a2de%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7879ddcb990c835c6b246654770d836f9d031dee982be836744e50ed%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7b54563abebe3dbbe421e1ba075c2030d8d460372f8c79b7789684b6%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r823d4b27fcba8dad5fe945bdefce3ca5a0031187966eb6ef3cc22ba9%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r855b4b6814ac829ce2d48dd9d8138d07f33387e710de798ee92c011e%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r967002f0939e69bdec58f070735a19dd57c1f2b8f817949ca17cddae%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9ec78dc409f3f1edff88f21cab53737f36aad46f582a9825389092e0%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9fe840c36b74f92b8d4a089ada1f9fd1d6293742efa18b10e06b66d2%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra64d56a8a331ffd7bdcd24a9aaaeeedeacd5d639f5a683389123f898%40%3Cdev.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra655e5cec74d1ddf62adacb71d398abd96f3ea2c588f6bbf048348eb%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra66e93703e3f4bd31bdfd0b6fb0c32ae96b528259bb1aa2b6d38e401%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa413040db6d2197593cc03edecfd168732e697119e6447b0a25d525%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rac8cf45a1bab9ead5c9a860cbadd6faaeb7792203617b6ec3874736d%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafc77f9f03031297394f3d372ccea751b23576f8a2ae9b6b053894c5%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rba2a9ef1d0af882ab58fadb336a58818495245dda43d32a7d7837187%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbde2f13daf4911504f0eaea43eee4f42555241b5f6d9d71564b6c5fa%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca0978b634a0c3ebee4126ec29c7f570b165fae3f8f3658754c1cbd3%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcae42fba06979934208bbd515584b241d3ad01d1bb8b063512644362%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd4a6b7dec38ea6cd28b6f94bd4b312629a52b80be3786d5fb0e474bc%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd8f72411fb75b98d366400ae789966373b5c3eb3f511e717caf3e49e%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdd206d9dd7eb894cc089b37fe6edde2932de88d63a6d8368b44f5101%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdd5715f3ee5e3216d5e0083a07994f67da6dbb9731ce9e7a6389b18e%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re1911e05c08f3ec2bab85744d788773519a0afb27272a31ac2a0b4e8%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re39391adcb863f0e9f3f15e7986255948f263f02e4700b82453e7102%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re4b0141939370304d676fe23774d0c6fbc584b648919825402d0cb39%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re7c69756a102bebce8b8681882844a53e2f23975a189363e68ad0324%40%3Cissues.flink.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re9e6ed60941da831675de2f8f733c026757fb4fa28a7b6c9f3dfb575%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/redef0fb5474fd686781007de9ddb852b24f1b04131a248d9a4789183%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf148b2bf6c2754153a8629bc7495e216bd0bd4c915695486542a10b4%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf38e4dcdefc7c59f7ba0799a399d6d6e37b555d406a1dfc2fcbf0b35%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf521ff2be2e2dd38984174d3451e6ee935c845948845c8fccd86371d%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf934292a4a1c189827f625d567838d2c1001e4739b158638d844105b%40%3Cissues.kudu.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4885",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23363",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-30T15:15:15.480",
      "lastModified" : "2024-11-21T05:51:34.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package kill-by-port before 0.0.2. If (attacker-controlled) user input is given to the killByPort function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete kill-by-port versiones anteriores a 0.0.2.&#xa0;Si se proporciona una entrada de usuario (controlada por el atacante) para la función killByPort, es posible que un atacante ejecute comandos arbitrarios.&#xa0;Esto se debe al uso de la función exec child_process sin saneamiento de entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kill-by-port_project:kill-by-port:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.0.2",
            "matchCriteriaId" : "2B88295A-4BAB-4BDC-80AC-F35DF542DCF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GuyMograbi/kill-by-port/blob/16dcbe264b6b4a5ecf409661b42836dd286fd43f/index.js%23L8",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/GuyMograbi/kill-by-port/commit/ea5b1f377e196a4492e05ff070eba8b30b7372c4",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLBYPORT-1078531",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GuyMograbi/kill-by-port/blob/16dcbe264b6b4a5ecf409661b42836dd286fd43f/index.js%23L8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/GuyMograbi/kill-by-port/commit/ea5b1f377e196a4492e05ff070eba8b30b7372c4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLBYPORT-1078531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27261",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:15.573",
      "lastModified" : "2024-11-21T05:57:42.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12269."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de una estructura asignada.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12269."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-343/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-343/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27262",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:15.697",
      "lastModified" : "2024-11-21T05:57:42.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12270."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos revelar información confidencial sobre instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D insertados en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un objeto asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12270."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-344/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-344/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27263",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:15.793",
      "lastModified" : "2024-11-21T05:57:43.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12290."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos revelar información confidencial sobre instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D insertados en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un objeto asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12290."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-345/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-345/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27264",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:15.887",
      "lastModified" : "2024-11-21T05:57:43.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12291."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos revelar información confidencial sobre instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D insertados en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un objeto asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12291."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-346/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-346/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27265",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:15.963",
      "lastModified" : "2024-11-21T05:57:43.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12292."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos revelar información confidencial sobre instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D insertados en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un objeto asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12292."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-347/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-347/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27266",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:16.027",
      "lastModified" : "2024-11-21T05:57:43.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated object. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-12293."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos revelar información confidencial sobre instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D insertados en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un objeto asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12293."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-348/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-348/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27267",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:16.120",
      "lastModified" : "2024-11-21T05:57:43.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12294."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D en archivos PDF.&#xa0;El problema es debido a la falta de validación de la existencia de un objeto versiones anteriores a realizar operaciones en el objeto.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12294."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-349/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-349/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27268",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:16.197",
      "lastModified" : "2024-11-21T05:57:43.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12295."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D en archivos PDF.&#xa0;El problema es debido a la falta de validación de la existencia de un objeto versiones anteriores a realizar operaciones en el objeto.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12295."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-350/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-350/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27269",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:16.260",
      "lastModified" : "2024-11-21T05:57:43.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process Was ZDI-CAN-12390."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo especifico se presenta dentro del manejo de objetos U3D en archivos PDF.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una escritura más allá del final de una estructura asignada.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual Was ZDI-CAN-12390."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-351/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-351/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27270",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:16.353",
      "lastModified" : "2024-11-21T05:57:43.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPEG2000 images. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12230."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de Foxit PhantomPDF versión 10.1.0.37527.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El defecto específico existe dentro del análisis de imágenes JPEG2000.&#xa0;El problema es debido a la falta de una comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de una estructura asignada.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Era ZDI-CAN-12230."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-352/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-352/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27271",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-03-30T15:15:16.417",
      "lastModified" : "2024-11-21T05:57:44.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF 10.1.0.37527. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of U3D objects embedded in PDF files. The issue results from the lack of proper validation of user-supplied data, which can result in an out-of-bounds read condition. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12438."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a los atacantes remotos ejecutar código arbitrario en las instalaciones afectadas de Foxit PhantomPDF 10.1.0.37527. Se requiere la interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso. El fallo específico existe en el manejo de objetos U3D incrustados en archivos PDF. El problema se debe a la falta de validación adecuada de los datos suministrados por el usuario, lo que puede dar lugar a una condición de lectura fuera de los límites. Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. Era ZDI-CAN-12438"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_reader:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "7F74D8E7-0FC8-4857-87C8-79DDD2FD548D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:phantompdf:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.1.0.37527",
            "matchCriteriaId" : "81AF61F5-7F3C-4939-8E89-6DCC23EA2FBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-353/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-353/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20482",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T16:15:15.100",
      "lastModified" : "2024-11-21T05:46:38.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Cloud Pak for Automation 20.0.2 and 20.0.3 IF002 are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 197504."
      }, {
        "lang" : "es",
        "value" : "IBM Cloud Pak for Automation versiones 20.0.2 y 20.0.3 IF002, son vulnerables a un ataque de tipo External Entity Injection (XXE) al procesar datos XML.&#xa0;Un atacante remoto podría aprovechar esta vulnerabilidad para exponer información confidencial o consumir recursos de la memoria.&#xa0;ID de IBM X-Force: 197504."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3AABDC6B-F5A0-40A9-976D-642DDAE0B007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:cloud_pak_for_automation:20.0.3:interim_fix002:*:*:*:*:*:*",
            "matchCriteriaId" : "A052487D-600F-491A-8DE2-711FD04D56F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/197504",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437577",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/197504",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21398",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-30T16:15:15.177",
      "lastModified" : "2024-11-21T05:48:16.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3"
      }, {
        "lang" : "es",
        "value" : "PrestaShop es una solución de comercio electrónico de código abierto totalmente escalable.&#xa0;En PrestaShop versiones anteriores a 1.7.7.3, un atacante puede inyectar HTML cuando el Grid Column Type DataColumn es usada incorrectamente.&#xa0;El problema se soluciona en la versión 1.7.7.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.7.7.0",
            "versionEndExcluding" : "1.7.7.3",
            "matchCriteriaId" : "C889506B-7548-4C1F-9670-D5BCDDCA5F30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/aaaba8177f3b3c510461b5e3249e30e60f900205",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fhhq-4x46-qx77",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/commit/aaaba8177f3b3c510461b5e3249e30e60f900205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-fhhq-4x46-qx77",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20352",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.383",
      "lastModified" : "2024-11-21T05:46:26.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 194710."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194710",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/194710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20447",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.477",
      "lastModified" : "2024-11-21T05:46:36.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 196623."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196623",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20502",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.603",
      "lastModified" : "2024-11-21T05:46:41.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 198059."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de  tipo XML External Entity Injection (XXE) al procesar datos XML.&#xa0;Un atacante remoto podría aprovechar esta vulnerabilidad para exponer información confidencial o consumir recursos de la memoria.&#xa0;IBM X-Force ID: 198059."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198059",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198059",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20503",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.667",
      "lastModified" : "2024-11-21T05:46:41.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198182."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;ID de IBM X-Force: 198182."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198182",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20504",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.727",
      "lastModified" : "2024-11-21T05:46:41.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 198231."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198231",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20506",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.790",
      "lastModified" : "2024-11-21T05:46:41.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 198231."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198233",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20518",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.853",
      "lastModified" : "2024-11-21T05:46:42.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198437."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 198437."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198437",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20520",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-03-30T17:15:16.917",
      "lastModified" : "2024-11-21T05:46:42.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572."
      }, {
        "lang" : "es",
        "value" : "Los Productos de IBM Jazz Foundation son vulnerables a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a los usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 198572."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C056314-C5ED-4CCA-B01E-34B3DA7AF6F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA1E70C2-4189-4DA2-8A14-6FE04D4093CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_quality_assistant_on-premises:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D75A41A-B2E2-463C-8B10-56F6473866EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DBDD077-488A-45C6-AD72-3D79361509E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198572",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198572",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6437579",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21412",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-30T18:15:15.840",
      "lastModified" : "2024-11-21T05:48:18.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential for arbitrary code execution in npm package @thi.ng/egf `#gpg`-tagged property values (only if `decrypt: true` option is enabled). PR with patch has been submitted and will has been released as of v0.4.0 By default the EGF parse functions do NOT attempt to decrypt values (since GPG only available in non-browser env). However, if GPG encrypted values are used/required: 1. Perform a regex search for `#gpg`-tagged values in the EGF source file/string and check for backtick (\\`) chars in the encrypted value string 2. Replace/remove them or skip parsing if present."
      }, {
        "lang" : "es",
        "value" : "Un potencial para una ejecución de código arbitraria en los valores de propiedad `#gpg`-tagged de @thi.ng/egf del paquete npm (solo si la opción `decrypt: true` está habilitada).&#xa0;Se ha enviado el PR con parche y se lanzará a partir de la versión v0.4.0 Por defecto, las funciones de análisis de EGF NO intentan descifrar valores (ya que GPG solo está disponible en entornos que no son del navegador).&#xa0;Sin embargo, si los valores cifrados GPG son usados o requeridos: 1. Realice una búsqueda de expresiones regulares para los valores `#gpg`-tagged en el archivo o cadena de origen EGF y compruebe los caracteres de comillas invertidas (\\`) en la cadena de valores cifrados 2. Reemplace u omita el análisis sintáctico si está presente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:\\@thi.ng\\/egf_project:\\@thi.ng\\/egf:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.4.0",
            "matchCriteriaId" : "1E041F81-B590-4D49-8173-368C0F6AA0BF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/thi-ng/umbrella/blob/develop/packages/egf/CHANGELOG.md#040-2021-03-27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thi-ng/umbrella/commit/88f61656e5f5cfba960013b8133186389efaf243",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thi-ng/umbrella/security/advisories/GHSA-rj44-gpjc-29r7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40thi.ng/egf",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/thi-ng/umbrella/blob/develop/packages/egf/CHANGELOG.md#040-2021-03-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thi-ng/umbrella/commit/88f61656e5f5cfba960013b8133186389efaf243",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/thi-ng/umbrella/security/advisories/GHSA-rj44-gpjc-29r7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40thi.ng/egf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26579",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-03-30T18:15:15.967",
      "lastModified" : "2024-11-21T05:56:31.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability in HPE Unified Data Management (UDM) could allow the local disclosure of privileged information (CWE-321: Use of Hard-coded Cryptographic Key in a product). HPE has provided updates to versions 1.2009.0 and 1.2101.0 of HPE Unified Data Management (UDM). Version 1.2103.0 of HPE Unified Data Management (UDM) removes all hard-coded cryptographic keys."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad en HPE Unified Data Management (UDM), podría permitir la divulgación local de información privilegiada (CWE-321: Uso de clave criptográfica enviada en un producto).&#xa0;HPE ha proporcionado actualizaciones a las versiones 1.2009.0 y 1.2101.0 de HPE Unified Data Management (UDM).&#xa0;La versión 1.2103.0 de HPE Unified Data Management (UDM) elimina todas las claves criptográficas embebidas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:unified_data_management:1.2009.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8803C9-13D2-4330-99BC-C29CFF1FF3E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:unified_data_management:1.2101.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71C0E81-CE2F-469F-9CCC-9A6E45B8976E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04112en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbmu04112en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3474",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-30T18:15:17.933",
      "lastModified" : "2024-11-21T06:21:37.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There's a flaw in OpenEXR in versions before 3.0.0-beta. A crafted input file that is processed by OpenEXR could cause a shift overflow in the FastHufDecoder, potentially leading to problems with application availability."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo en OpenEXR en versiones anteriores a 3.0.0-beta.&#xa0;Un archivo de entrada diseñado que es procesado por OpenEXR podría causar un desbordamiento de cambios en FastHufDecoder, lo que podría generar problemas con la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24831",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939142",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24831",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3475",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-30T18:15:18.013",
      "lastModified" : "2024-11-21T06:21:37.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a flaw in OpenEXR in versions before 3.0.0-beta. An attacker who can submit a crafted file to be processed by OpenEXR could cause an integer overflow, potentially leading to problems with application availability."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo en OpenEXR en versiones anteriores a 3.0.0-beta.&#xa0;Un atacante que pueda enviar un archivo diseñado para que lo procese OpenEXR podría causar un desbordamiento de enteros, lo que podría conllevar a problemas con la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25297",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939144",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3476",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-30T18:15:18.077",
      "lastModified" : "2024-11-21T06:21:38.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in OpenEXR's B44 uncompression functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to OpenEXR could trigger shift overflows, potentially affecting application availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la funcionalidad uncompression B44 de OpenEXR en versiones anteriores a 3.0.0-beta.&#xa0;Un atacante que pueda enviar un archivo diseñado a OpenEXR podría desencadenar desbordamientos de turno, lo que podría afectar la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24787",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939145",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24787",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29642",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T19:15:15.863",
      "lastModified" : "2024-11-21T06:01:32.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GistPad before 0.2.7 allows a crafted workspace folder to change the URL for the Gist API, which leads to leakage of GitHub access tokens."
      }, {
        "lang" : "es",
        "value" : "GistPad versiones anteriores a 0.2.7, permite a una carpeta de workspace diseñada cambiar la URL de la API de Gist, lo que conlleva a un filtrado de tokens de acceso de GitHub."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gistpad_project:gistpad:*:*:*:*:*:visual_studio:*:*",
            "versionEndExcluding" : "0.2.7",
            "matchCriteriaId" : "9F0B8CF3-767C-4E8D-868F-5C3C316045D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/lostintangent/gistpad/commit/230b05e8dea8d7ac5aae998bbe0a591d7f081b70",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/7",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/lostintangent/gistpad/commit/230b05e8dea8d7ac5aae998bbe0a591d7f081b70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T21:15:14.093",
      "lastModified" : "2024-11-21T06:01:33.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.11. tipc_nl_retrieve_key in net/tipc/node.c does not properly validate certain data sizes, aka CID-0217ed2848e8."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el kernel de Linux en versiones anteriores a la 5.11.11. tipc_nl_retrieve_key en net/tipc/node.c no valida correctamente ciertos tamaños de datos, también conocido como CID-0217ed2848e8."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.11",
            "matchCriteriaId" : "2375C9CB-E013-429D-9E0A-FBC249C5E180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0217ed2848e8538bcf9172d97ed2eeb4a26041bb",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=0217ed2848e8538bcf9172d97ed2eeb4a26041bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29647",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T21:15:14.157",
      "lastModified" : "2024-11-21T06:01:33.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.11. qrtr_recvmsg in net/qrtr/qrtr.c allows attackers to obtain sensitive information from kernel memory because of a partially uninitialized data structure, aka CID-50535249f624."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el kernel de Linux en versiones anteriores a la  5.11.11. qrtr_recvmsg en net/qrtr/qrtr.c permite a los atacantes obtener información sensible de la memoria del kernel debido a una estructura de datos parcialmente no inicializada, también se conoce como CID-50535249f624."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.11",
            "matchCriteriaId" : "2375C9CB-E013-429D-9E0A-FBC249C5E180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=50535249f624d0072cd885bcdce4e4b6fb770160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29648",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T21:15:14.217",
      "lastModified" : "2024-11-21T06:01:34.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.11. The BPF subsystem does not properly consider that resolved_ids and resolved_sizes are intentionally uninitialized in the vmlinux BPF Type Format (BTF), which can cause a system crash upon an unexpected access attempt (in map_create in kernel/bpf/syscall.c or check_btf_info in kernel/bpf/verifier.c), aka CID-350a5c4dd245."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el kernel de Linux en versiones anteriores a la 5.11.11. El subsistema BPF no considera adecuadamente que resolved_ids y resolved_sizes están intencionadamente sin inicializar en el Formato de Tipo BPF (BTF) de vmlinux, lo que puede causar un fallo del sistema ante un intento de acceso inesperado (en map_create en kernel/bpf/syscall.c o check_btf_info en kernel/bpf/verifier.c), también conocido como CID-350a5c4dd245."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.11",
            "matchCriteriaId" : "2375C9CB-E013-429D-9E0A-FBC249C5E180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=350a5c4dd2452ea999cc5e1d4a8dbf12de2f97ef",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=350a5c4dd2452ea999cc5e1d4a8dbf12de2f97ef",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29649",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T21:15:14.343",
      "lastModified" : "2024-11-21T06:01:34.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.11. The user mode driver (UMD) has a copy_process() memory leak, related to a lack of cleanup steps in kernel/usermode_driver.c and kernel/bpf/preload/bpf_preload_kern.c, aka CID-f60a85cad677."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el kernel de Linux en versiones anteriores a la 5.11.11. El controlador de modo de usuario (UMD) tiene una fuga de memoria copy_process(), relacionada con una falta de pasos de limpieza en kernel/usermode_driver.c y kernel/bpf/preload/bpf_preload_kern.c, también conocido como CID-f60a85cad677."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.11",
            "matchCriteriaId" : "2375C9CB-E013-429D-9E0A-FBC249C5E180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f60a85cad677c4f9bb4cadd764f1d106c38c7cf8",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=f60a85cad677c4f9bb4cadd764f1d106c38c7cf8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29650",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-30T21:15:14.593",
      "lastModified" : "2024-11-21T06:01:34.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en el kernel de Linux en versiones anteriores a la 5.11.11. El subsistema netfilter permite a los atacantes causar una denegación de servicio (panic) porque net/netfilter/x_tables.c e include/linux/netfilter/x_tables.h carecen de una barrera de memoria completa al asignar un nuevo valor de tabla, también conocido como CID-175e476b8cdf."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.11",
            "matchCriteriaId" : "2375C9CB-E013-429D-9E0A-FBC249C5E180"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=175e476b8cdf2a4de7432583b49c871345e4f8a1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=175e476b8cdf2a4de7432583b49c871345e4f8a1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RZGMUP6QEHJJEKPMLKOSPWYMW7PXFC2M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VTADK5ELGTATGW2RK3K5MBJ2WGYCPZCM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WKRNELXLVFDY6Y5XDMWLIH3VKIMQXLLR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21413",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-30T23:15:14.190",
      "lastModified" : "2024-11-21T05:48:18.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isolate. Reference objects allow access to the underlying reference's full prototype chain. In an environment where the implementer has exposed a Reference instance to an attacker they would be able to use it to acquire a Reference to the nodejs context's Function object. Similar application-specific attacks could be possible by modifying the local prototype of other API objects. Access to NativeModule objects could allow an attacker to load and run native code from anywhere on the filesystem. If combined with, for example, a file upload API this would allow for arbitrary code execution. This is addressed in v4.0.0 through a series of related changes."
      }, {
        "lang" : "es",
        "value" : "isolated-vm es una biblioteca para nodejs que le da acceso a la interfaz Isolate de v8.&#xa0;Las versiones de isolated-vm anteriores a v4.0.0 presentan unas limitaciones de la API que puede facilitar a implementadores una exposición de supuestos aislamientos seguros para los permisos del aislamiento de nodejs principal.&#xa0;Los objetos de referencia permiten el acceso a la cadena de prototipos completa de la referencia subyacente.&#xa0;En un entorno donde el implementador ha expuesto una instancia de Referencia a un atacante, podría ser capaz de usarla para adquirir una Referencia al objeto de Función del contexto de nodejs.&#xa0;Se podrían realizar ataques específicos de aplicaciones similares al modificar el prototipo local de otros objetos API.&#xa0;Un acceso a los objetos NativeModule podría permitir a un atacante cargar y ejecutar código nativo desde cualquier lugar del sistema de archivos.&#xa0;Si es combinado con, por ejemplo,&#xa0;una API de carga de archivos, esto permitiría una ejecución de código arbitrario.&#xa0;Esto es abordado en versión v4.0.0 mediante una serie de cambios relacionados."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-913"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isolated-vm_project:isolated-vm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.0.0",
            "matchCriteriaId" : "6050FC4E-0C96-4300-8F43-78C1C6E27A0E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/laverdet/isolated-vm/blob/main/CHANGELOG.md#v400",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/commit/2646e6c1558bac66285daeab54c7d490ed332b15",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/commit/27151bfecc260e96714443613880e3b2e6596704",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/security/advisories/GHSA-mmhj-4w6j-76h7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/blob/main/CHANGELOG.md#v400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/commit/2646e6c1558bac66285daeab54c7d490ed332b15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/commit/27151bfecc260e96714443613880e3b2e6596704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/laverdet/isolated-vm/security/advisories/GHSA-mmhj-4w6j-76h7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28657",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-03-31T08:15:11.267",
      "lastModified" : "2024-11-21T06:00:02.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later."
      }, {
        "lang" : "es",
        "value" : "Un archivo cuidadosamente diseñado o corrupto puede desencadenar un bucle infinito en MP3Parser de Tika versiones hasta Tika 1.25 incluyéndola.&#xa0;Los usuarios de Apache Tika deben actualizar a versión 1.26 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tika:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.25",
            "matchCriteriaId" : "D8A4BC01-4CD4-4542-81CD-73BC4FF1CACB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9059A907-508B-4844-8D7B-0FA68C0DF6A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:healthcare_foundation:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "209C3126-3524-4DB6-800C-7335752C2264"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:healthcare_foundation:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E67501BE-206A-49FD-8CBA-22935DF917F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "08FA59A8-6A62-4B33-8952-D6E658F8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10864586-270E-4ACF-BDCC-ECFCD299305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38340E3C-C452-4370-86D4-355B6B4E0A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:communications_messaging_server:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7569C0BD-16C1-441E-BAEB-840C94BE73EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0004/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r4cbc3f6981cd0a1a482531df9d44e4c42a7f63342a7ba78b7bff8a1b%40%3Cnotifications.james.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r915add4aa52c60d1b5cf085039cfa73a98d7fae9673374dfd7744b5a%40%3Cdev.tika.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21773",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2021-03-31T14:15:17.827",
      "lastModified" : "2024-11-21T05:48:56.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in the TIFF header count-processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en la funcionalidad de procesamiento de conteos de encabezado de TIFF de Accusoft ImageGear versión 19.8.&#xa0;Un archivo malformado especialmente diseñado puede conllevar a una corrupción de la memoria.&#xa0;Un atacante puede proporcionar un archivo malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accusoft:imagegear:19.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A9BA4C-8C2D-44A6-A424-1056DFD01662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1227",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1227",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21776",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2021-03-31T14:15:18.127",
      "lastModified" : "2024-11-21T05:48:56.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in the SGI Format Buffer Size Processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en la funcionalidad SGI Format Buffer Size Processing de Accusoft ImageGear versión 19.8.&#xa0;Un archivo malformado especialmente diseñado puede conllevar a una corrupción de la memoria.&#xa0;Un atacante puede proporcionar un archivo malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accusoft:imagegear:19.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A9BA4C-8C2D-44A6-A424-1056DFD01662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1232",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1232",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21782",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2021-03-31T14:15:18.203",
      "lastModified" : "2024-11-21T05:48:57.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in the SGI format buffer size processing functionality of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en la funcionalidad SGI Format Buffer Size Processing de Accusoft ImageGear versión 19.8.&#xa0;Un archivo malformado especialmente diseñado puede conllevar a una corrupción de la memoria.&#xa0;Un atacante puede proporcionar un archivo malicioso para desencadenar esta vulnerabilidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accusoft:imagegear:19.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A9BA4C-8C2D-44A6-A424-1056DFD01662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1244",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23981",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:18.907",
      "lastModified" : "2024-11-21T05:52:08.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A texture upload of a Pixel Buffer Object could have confused the WebGL code to skip binding the buffer used to unpack it, resulting in memory corruption and a potentially exploitable information leak or crash. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9."
      }, {
        "lang" : "es",
        "value" : "Una carga de textura de un Objeto de Búfer de Píxeles podría haber confundido el código WebGL para omitir el enlace del búfer usado para descomprimirlo, resultando en la corrupción de la memoria y una filtración o bloqueo de información potencialmente explotable. Esta vulnerabilidad afecta a Firefox ESR  versión 78.9, Firefox versiones anteriores a 87, and Thunderbird versiones anteriores a 78.9."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "907D294D-2667-4A67-A4B7-2DDE46BE592D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "AB6DE7E3-8F1B-4525-8992-FCDC7CC063D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1692832",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1692832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23982",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.000",
      "lastModified" : "2024-11-21T05:52:09.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9."
      }, {
        "lang" : "es",
        "value" : "Usando técnicas que se basaron en la investigación de slipstream, una página web maliciosa podría haber escaneado tanto los hosts de una red interna como los servicios que se ejecutan en la máquina local del usuario usando conexiones WebRTC. Esta vulnerabilidad afecta a Firefox ESR versiones anteriores a 78.9, Firefox versiones anteriores a 87, y Thunderbird versiones anteriores a 78.9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "907D294D-2667-4A67-A4B7-2DDE46BE592D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "AB6DE7E3-8F1B-4525-8992-FCDC7CC063D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1677046",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1677046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23983",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.077",
      "lastModified" : "2024-11-21T05:52:09.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By causing a transition on a parent node by removing a CSS rule, an invalid property for a marker could have been applied, resulting in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 87."
      }, {
        "lang" : "es",
        "value" : "Al causar una transición en un nodo principal mediante la eliminación de una regla CSS, se podría haber aplicado una propiedad no válida para un marcador, resultando en una corrupción de la memoria y un bloqueo potencialmente explotable.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 87."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1692684",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1692684",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23984",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.170",
      "lastModified" : "2024-11-21T05:52:09.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious extension could have opened a popup window lacking an address bar. The title of the popup lacking an address bar should not be fully controllable, but in this situation was. This could have been used to spoof a website and attempt to trick the user into providing credentials. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9."
      }, {
        "lang" : "es",
        "value" : "Una extensión maliciosa podría haber abierto una ventana emergente sin una barra de direcciones. El título de la ventana emergente que carece de una barra de direcciones no debería ser totalmente controlable, pero en esta situación sí lo era. Esto podría haber sido usado para falsificar un sitio web e intentar engañar al usuario para que proporcione credenciales. Esta vulnerabilidad afecta a Firefox ESR versiones anteriores a 78.9, Firefox versiones anteriores a 87, and Thunderbird versiones anteriores a 78.9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "907D294D-2667-4A67-A4B7-2DDE46BE592D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "AB6DE7E3-8F1B-4525-8992-FCDC7CC063D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1693664",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1693664",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23985",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.267",
      "lastModified" : "2024-11-21T05:52:09.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If an attacker is able to alter specific about:config values (for example malware running on the user's computer), the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker (able to make a direct network connection to the victim) to monitor the user's browsing activity and (plaintext) network traffic. This was addressed by providing a visual cue when Devtools has an open network socket. This vulnerability affects Firefox < 87."
      }, {
        "lang" : "es",
        "value" : "Si un atacante puede ser capaz de alterar valores específicos de about:config (por ejemplo, malware que se ejecuta en la computadora del usuario), la funcionalidad de depuración remota de Devtools podría haber sido habilitada de una manera que el usuario no pudo notar.&#xa0;Esto habría permitido a un atacante remoto (capaz de establecer una conexión de red directa con la víctima) monitorear la actividad de navegación del usuario y el tráfico de la red (texto plano).&#xa0;Esto se solucionó al proporcionar una pista visual cuando Devtools presenta un conector de red abierto.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 87."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1659129",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1659129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23986",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.343",
      "lastModified" : "2024-11-21T05:52:09.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this cross-origin request could have been read by the extension, allowing a same-origin policy bypass by the extension, which should not have cross-origin permissions. This cross-origin request was made without cookies, so the sensitive information disclosed by the violation was limited to local-network resources or resources that perform IP-based authentication. This vulnerability affects Firefox < 87."
      }, {
        "lang" : "es",
        "value" : "Una extensión maliciosa con el permiso de \"search\" podría haber instalado un nuevo motor de búsqueda cuyo favicon hiciera referencia a una URL de origen cruzado.&#xa0;La respuesta a esta petición de origen cruzado podría haber sido leída por la extensión, permitiendo a la extensión omitir la política del mismo origen, que no debería tener permisos de origen cruzado.&#xa0;Esta petición de origen cruzado fue hecha sin cookies, por lo que la información confidencial divulgada por la infracción se limitó a los recursos de la red local o los recursos que llevan a cabo la autenticación basada en IP.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 87."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1692623",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=1692623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23987",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.420",
      "lastModified" : "2024-11-21T05:52:09.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.9, Firefox < 87, and Thunderbird < 78.9."
      }, {
        "lang" : "es",
        "value" : "Los desarrolladores y miembros de la comunidad de Mozilla informaron de fallos de seguridad de memoria presentes en Firefox 86 y Firefox ESR 78.8. Algunos de estos fallos mostraban evidencias de corrupción de memoria y suponemos que con suficiente esfuerzo algunos de ellos podrían haber sido explotados para ejecutar código arbitrario. Esta vulnerabilidad afecta a Firefox ESR versiones anteriores a 78.9, Firefox versiones anteriores a 87 y Thunderbird versiones anteriores a 78.9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "907D294D-2667-4A67-A4B7-2DDE46BE592D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "78.9",
            "matchCriteriaId" : "AB6DE7E3-8F1B-4525-8992-FCDC7CC063D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1513519%2C1683439%2C1690169%2C1690718",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1513519%2C1683439%2C1690169%2C1690718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-11/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-12/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23988",
      "sourceIdentifier" : "security@mozilla.org",
      "published" : "2021-03-31T14:15:19.500",
      "lastModified" : "2024-11-21T05:52:09.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mozilla developers reported memory safety bugs present in Firefox 86. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 87."
      }, {
        "lang" : "es",
        "value" : "Los desarrolladores de Mozilla, reportaron bugs de seguridad de la memoria presentes en Firefox versión 86. Algunos de estos bugs mostraron evidencia de corrupción de la memoria y suponemos que con suficiente esfuerzo algunos de ellos podrían haber sido explotados para ejecutar código arbitrario.&#xa0;Esta vulnerabilidad afecta a Firefox versiones anteriores a 87."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "87.0",
            "matchCriteriaId" : "3533FF74-0FD6-447B-9C37-D491D18EA529"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684994%2C1686653",
        "source" : "security@mozilla.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "security@mozilla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.mozilla.org/buglist.cgi?bug_id=1684994%2C1686653",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mozilla.org/security/advisories/mfsa2021-10/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T14:15:20.127",
      "lastModified" : "2024-11-21T05:59:23.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "PbootCMS 3.0.4 contains a SQL injection vulnerability through index.php via the search parameter that can reveal sensitive information through adding an admin account."
      }, {
        "lang" : "es",
        "value" : "PbootCMS versión 3.0.4, contiene una vulnerabilidad de inyección SQL mediante el archivo index.php por medio del parámetro search que puede revelar información confidencial al agregar una cuenta de administrador."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pbootcms:pbootcms:3.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9CE3D8-2936-4481-ABDE-142A22D10678"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/M40k1n9/vulner/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/M40k1n9/vulner/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3470",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-31T14:15:20.937",
      "lastModified" : "2024-11-21T06:21:37.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap overflow issue was found in Redis in versions before 5.0.10, before 6.0.9 and before 6.2.0 when using a heap allocator other than jemalloc or glibc's malloc, leading to potential out of bound write or process crash. Effectively this flaw does not affect the vast majority of users, who use jemalloc or glibc malloc."
      }, {
        "lang" : "es",
        "value" : "Se encontró un problema de desbordamiento de pila en Redis en las versiones anteriores a 5.0.10, versiones anteriores a 6.0.9 y versiones anteriores a 6.2.0, cuando se usaba un asignador de pila que no fuera jemalloc o malloc de glibc, conllevando a un posible bloqueo del proceso o de escritura fuera de límites.&#xa0;Efectivamente, este fallo no afecta a la gran mayoría de usuarios que usan jemalloc o glibc malloc."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.10",
            "matchCriteriaId" : "5016C2D8-D4B2-414C-802F-7BDD3F7D3EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.9",
            "matchCriteriaId" : "0E9C8D2F-1A31-4590-8D0A-649F12BE0F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:6.2.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "29F3AA59-B998-425A-B8F3-D5D1E3EC6040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:6.2.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "5D60A9F7-0EC8-415C-ABB7-9A997C72EEE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:6.2.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "1E0C28B7-B676-4F58-89F2-91163181D15B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1943623",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1943623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3477",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-31T14:15:21.047",
      "lastModified" : "2024-11-21T06:21:38.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger an integer overflow, subsequently leading to an out-of-bounds read. The greatest risk of this flaw is to application availability."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo en los cálculos de tamaño de la muestra de mosaicos profundos de OpenEXR versiones anteriores a la 3.0.0-beta.&#xa0;Un atacante que pueda ser capaz de enviar un archivo diseñado para que sea procesado por OpenEXR podría desencadenar un desbordamiento de enteros, posteriormente conllevando a una lectura fuera de límites.&#xa0;El mayor riesgo de este fallo es la disponibilidad de la aplicación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939159",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=26956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3478",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-31T14:15:21.127",
      "lastModified" : "2024-11-21T06:21:38.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There's a flaw in OpenEXR's scanline input file functionality in versions before 3.0.0-beta. An attacker able to submit a crafted file to be processed by OpenEXR could consume excessive system memory. The greatest impact of this flaw is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo en la funcionalidad scanline input file de OpenEXR en versiones anteriores a 3.0.0-beta.&#xa0;Un atacante capaz de enviar un archivo diseñado para que sea procesado por OpenEXR podría consumir una cantidad excesiva de la memoria del sistema.&#xa0;El mayor impacto de este fallo es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939160",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=27409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3479",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-03-31T14:15:21.203",
      "lastModified" : "2024-11-21T06:21:38.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There's a flaw in OpenEXR's Scanline API functionality in versions before 3.0.0-beta. An attacker who is able to submit a crafted file to be processed by OpenEXR could trigger excessive consumption of memory, resulting in an impact to system availability."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo en la funcionalidad de la API Scanline de OpenEXR en versiones anteriores a 3.0.0-beta.&#xa0;Un atacante que pueda ser capaz de enviar un archivo diseñado para que sea procesado por OpenEXR podría desencadenar un consumo excesivo de la memoria, resultando en un impacto para la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25370",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939149",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22986",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T15:15:15.153",
      "lastModified" : "2025-10-27T17:06:56.680",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x  anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6 y versiones 12.1.x anteriores a 12.1.5.3 y BIG-IQ versiones 7.1 .0.x anteriores a 7.1.0.3 y versiones 7.0.0.x anteriores a 7.0.0.2, la interfaz REST de iControl presenta una vulnerabilidad de ejecución de comandos remota no autenticada.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.1.0",
            "matchCriteriaId" : "5262CA69-964F-4915-8AB6-0CDB655F3432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.0.2",
            "matchCriteriaId" : "669308DF-64EF-4A94-BF07-4E832BED05E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.0.3",
            "matchCriteriaId" : "F668DC7D-4B88-4AD8-B31C-E5AFEF49A983"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162059/F5-iControl-Server-Side-Request-Forgery-Remote-Command-Execution.html",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162066/F5-BIG-IP-16.0.x-Remote-Code-Execution.html",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K03009991",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162059/F5-iControl-Server-Side-Request-Forgery-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162066/F5-BIG-IP-16.0.x-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K03009991",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22986",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22988",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T15:15:15.433",
      "lastModified" : "2024-11-21T05:51:04.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x  anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x  anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, TMUI, también se conoce como la utilidad Configuration, presenta una vulnerabilidad de ejecución de comandos remota autenticada en páginas no divulgadas.&#xa0;Nota: No son evaluadas las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K70031188",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K70031188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23348",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-03-31T15:15:15.543",
      "lastModified" : "2024-11-21T05:51:33.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package portprocesses before 1.0.5. If (attacker-controlled) user input is given to the killProcess function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a los paquetes portprocesses versiones anteriores a 1.0.5.&#xa0;Si es proporcionada una entrada del usuario (controlada por el atacante) para la función killProcess, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portprocesses_project:portprocesses:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "DF532005-59A7-48C3-8412-ADC381400705"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rrainn/PortProcesses/blob/fffceb09aff7180afbd0bd172e820404b33c8299/index.js%23L23",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/rrainn/PortProcesses/commit/86811216c9b97b01b5722f879f8c88a7aa4214e1",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rrainn/PortProcesses/security/advisories/GHSA-vm67-7vmg-66vm",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PORTPROCESSES-1078536",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rrainn/PortProcesses/blob/fffceb09aff7180afbd0bd172e820404b33c8299/index.js%23L23",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/rrainn/PortProcesses/commit/86811216c9b97b01b5722f879f8c88a7aa4214e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rrainn/PortProcesses/security/advisories/GHSA-vm67-7vmg-66vm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PORTPROCESSES-1078536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22987",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T17:15:12.823",
      "lastModified" : "2024-11-21T05:51:04.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3 when running in Appliance mode, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, cuando se ejecuta en modo Appliance, la Traffic Management User Interface (TMUI), también se conoce como la utilidad Configuration, tiene una vulnerabilidad de ejecución de comandos remota autenticada en páginas no reveladas.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K18132488",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K18132488",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22989",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T17:15:12.887",
      "lastModified" : "2024-11-21T05:51:04.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, when running in Appliance mode with Advanced WAF or BIG-IP ASM provisioned, the TMUI, also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, cuando se ejecuta en modo Appliance con Advanced WAF o BIG-IP ASM aprovisionado, TMUI, también se conoce como la utilidad Configuration, tiene una vulnerabilidad de ejecución de comandos remota autenticada en páginas no reveladas.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K56142644",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K56142644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22990",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T17:15:12.947",
      "lastModified" : "2024-11-21T05:51:04.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, on systems with Advanced WAF or BIG-IP ASM provisioned, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has an authenticated remote command execution vulnerability in undisclosed pages. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, en sistemas con Advanced WAF o ASM BIG-IP aprovisionados, la Traffic Management User Interface (TMUI), también se conoce como la utilidad Configuration, tiene una vulnerabilidad de ejecución de comandos remota autenticada en páginas no reveladas.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K45056101",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K45056101",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22992",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T17:15:13.010",
      "lastModified" : "2024-11-21T05:51:05.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, a malicious HTTP response to an Advanced WAF/BIG-IP ASM virtual server with Login Page configured in its policy may trigger a buffer overflow, resulting in a DoS attack. In certain situations, it may allow remote code execution (RCE), leading to complete system compromise. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, una respuesta HTTP maliciosa para un servidor virtual de Advanced WAF o ASM BIG-IP con la página de inicio de sesión configurada en su política puede desencadenar un desbordamiento del búfer, resultando en un ataque de DoS.&#xa0;En determinadas situaciones, puede permitir una ejecución de código remota (RCE), conllevando a un compromiso completo del sistema.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K52510511",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K52510511",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22995",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T17:15:13.073",
      "lastModified" : "2024-11-21T05:51:05.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ high availability (HA) when using a Quorum device for automatic failover does not implement any form of authentication with the Corosync daemon. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones 7.x y 6.x (corregidas en versión 8.0.0), la alta disponibilidad (HA) de BIG-IQ cuando se usa un dispositivo Quorum para la conmutación automática por error no implementa ninguna forma de autenticación con el demonio Corosync.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.1.0",
            "matchCriteriaId" : "F37D18F2-8C6A-4557-85DC-2A751595423C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndIncluding" : "7.1.0",
            "matchCriteriaId" : "C88B0206-093A-4A18-8322-A1CD1D4ACF2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K13155201",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K13155201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T17:15:13.197",
      "lastModified" : "2024-11-21T06:01:35.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial vscode-rufo extension before 0.0.4 for Visual Studio Code allows attackers to execute arbitrary binaries if the user opens a crafted workspace folder."
      }, {
        "lang" : "es",
        "value" : "La extensión no oficial vscode-rufo versiones anteriores a 0.0.4 para Visual Studio Code permite a los atacantes ejecutar binarios arbitrarios si el usuario abre una carpeta de espacio de trabajo diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vscode-rufo_project:vscode-rufo:*:*:*:*:*:visual_studio:*:*",
            "versionEndExcluding" : "0.0.4",
            "matchCriteriaId" : "6A08FCCE-9D2D-478F-9575-1F8075CB1E49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jnbt/vscode-rufo/commit/bc0d212436f76d12cbdab287802fa5bc743f818a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/jnbt.vscode-rufo/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jnbt/vscode-rufo/commit/bc0d212436f76d12cbdab287802fa5bc743f818a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/jnbt.vscode-rufo/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21418",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-03-31T18:15:14.503",
      "lastModified" : "2024-11-21T05:48:19.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ps_emailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1"
      }, {
        "lang" : "es",
        "value" : "ps_emailsubscription es un módulo de suscripción al boletín para la plataforma PrestaShop.&#xa0;Un empleado puede inyectar javascript en el campo de condición del boletín que luego se ejecutará en la oficina principal. El problema se ha solucionado en la versión 2.6.1."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prestashop:ps_emailsubscription:*:*:*:*:*:prestashop:*:*",
            "versionStartIncluding" : "2.6.0",
            "versionEndExcluding" : "2.6.1",
            "matchCriteriaId" : "A29287B9-1B47-4CE8-AE05-170793901CC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/PrestaShop/ps_emailsubscription/commit/664ffb225e2afb4a32640bbedad667dc6e660b70",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/ps_emailsubscription/releases/tag/v2.6.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/ps_emailsubscription/security/advisories/GHSA-vwfx-hh3w-fj99",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/prestashop/ps_emailsubscription",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/ps_emailsubscription/commit/664ffb225e2afb4a32640bbedad667dc6e660b70",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/ps_emailsubscription/releases/tag/v2.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PrestaShop/ps_emailsubscription/security/advisories/GHSA-vwfx-hh3w-fj99",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/prestashop/ps_emailsubscription",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21975",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-03-31T18:15:14.597",
      "lastModified" : "2025-10-30T20:06:02.760",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Server Side Request Forgery in vRealize Operations Manager API (CVE-2021-21975) prior to 8.4 may allow a malicious actor with network access to the vRealize Operations Manager API can perform a Server Side Request Forgery attack to steal administrative credentials."
      }, {
        "lang" : "es",
        "value" : "una vulnerabilidad de Server Side Request Forgery en la API vRealize Operations Manager (CVE-2021-21975) anterior a la versión 8.4, puede permitir que un actor malicioso con acceso de red a la API vRealize Operations Manager pueda realizar un ataque de tipo Server Side Request Forgery para robar credenciales administrativas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-18",
      "cisaActionDue" : "2022-02-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "VMware Server Side Request Forgery in vRealize Operations Manager API",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEACD8D-30EF-44FE-839B-DA69E6CED23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36847AD6-88CC-4228-AB4E-5161B381267C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC3C214-DEFC-48D9-8728-31F19095375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF5CF56-8DE1-42F5-9EC1-E5666DD7FA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36668618-33C3-460A-879B-A9741405C9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8266FD66-3BB6-4720-9D9F-06EFB38FA4B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4C25D3-BC49-4727-B7A2-28C0F2E647EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9AB6FF-D508-42FF-8FB9-24B96AE2F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328785AE-390C-4CA2-9771-4A26387E4E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298B797F-C3B6-445C-AADB-8633B446F10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97BA12F-A60D-4398-9CA8-DE2F7BACBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19009EB-02D3-424A-947D-7B66EFCCE422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89656A51-0840-4A27-B05B-7E54B0CF0521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EB0C0C-56CF-4A8F-A36F-E0E180B9059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54544F5-5929-4609-A91C-FCA0FDBFE862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7985EA2-E167-4BB9-91CA-D57110413B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC6471F-2FB5-4C7A-9B5D-0B08A8E2C08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F35204-5A57-4086-B782-77A25471F9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536C689B-F40A-4090-B7F9-3D16C6B2A82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A32960-1C18-4DA5-A870-C15C432B6CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCFFA39-F7EA-4065-B0B5-A1E2B120EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B612FDA-4210-44FE-9B5C-F678EA2CD6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0256D20-63D3-4DE9-9637-94033F11FC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3318D91-40AC-4649-8FCD-4557C8F934B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06C29AB-1EAF-43EF-96C3-9E3468911B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43723EC2-295E-4AF7-B654-70F9E42F4807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB84C30-EE5D-4C15-A74E-7B2B3E0DED4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0004.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21975",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21983",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-03-31T18:15:14.723",
      "lastModified" : "2024-11-21T05:49:22.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Arbitrary file write vulnerability in vRealize Operations Manager API (CVE-2021-21983) prior to 8.4 may allow an authenticated malicious actor with network access to the vRealize Operations Manager API can write files to arbitrary locations on the underlying photon operating system."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de escritura arbitraria de archivos en la API vRealize Operations Manager (CVE-2021-21983) anterior a la versión 8.4, puede permitir que un actor malicioso autenticado con acceso de red para la API vRealize Operations Manager pueda escribir archivos en ubicaciones arbitrarias en el sistema operativo photon subyacente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BEACD8D-30EF-44FE-839B-DA69E6CED23A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36847AD6-88CC-4228-AB4E-5161B381267C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC3C214-DEFC-48D9-8728-31F19095375E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF5CF56-8DE1-42F5-9EC1-E5666DD7FA59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36668618-33C3-460A-879B-A9741405C9D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8266FD66-3BB6-4720-9D9F-06EFB38FA4B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D4C25D3-BC49-4727-B7A2-28C0F2E647EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9AB6FF-D508-42FF-8FB9-24B96AE2F03F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "328785AE-390C-4CA2-9771-4A26387E4E3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298B797F-C3B6-445C-AADB-8633B446F10F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97BA12F-A60D-4398-9CA8-DE2F7BACBA8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.9.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E19009EB-02D3-424A-947D-7B66EFCCE422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:3.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89656A51-0840-4A27-B05B-7E54B0CF0521"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EB0C0C-56CF-4A8F-A36F-E0E180B9059E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:cloud_foundation:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A54544F5-5929-4609-A91C-FCA0FDBFE862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7985EA2-E167-4BB9-91CA-D57110413B63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:7.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC6471F-2FB5-4C7A-9B5D-0B08A8E2C08C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5F35204-5A57-4086-B782-77A25471F9EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "536C689B-F40A-4090-B7F9-3D16C6B2A82C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A32960-1C18-4DA5-A870-C15C432B6CE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FCFFA39-F7EA-4065-B0B5-A1E2B120EBA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B612FDA-4210-44FE-9B5C-F678EA2CD6FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_operations_manager:8.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0256D20-63D3-4DE9-9637-94033F11FC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3318D91-40AC-4649-8FCD-4557C8F934B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06C29AB-1EAF-43EF-96C3-9E3468911B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43723EC2-295E-4AF7-B654-70F9E42F4807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:vrealize_suite_lifecycle_manager:8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB84C30-EE5D-4C15-A74E-7B2B3E0DED4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html",
        "source" : "security@vmware.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0004.html",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162349/VMware-vRealize-Operations-Manager-Server-Side-Request-Forgery-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22991",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:14.787",
      "lastModified" : "2025-10-27T17:06:52.600",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, undisclosed requests to a virtual server may be incorrectly handled by the Traffic Management Microkernel (TMM) URI normalization, which may trigger a buffer overflow, resulting in a DoS attack. In certain situations, it may theoretically allow bypass of URL based access control or remote code execution (RCE). Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6 y versiones 12.1.x anteriores a 12.1.5.3, unas peticiones no reveladas a un servidor virtual pueden ser manejadas incorrectamente por la normalización del URI de Traffic Management Microkernel (TMM), lo que puede desencadenar un desbordamiento del búfer, resultando en un ataque de DoS.&#xa0;En determinadas situaciones, teóricamente puede permitir la omisión del control de acceso basado en URL o una ejecución de código remota (RCE).&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-01-18",
      "cisaActionDue" : "2022-02-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "F5 BIG-IP Traffic Management Microkernel Buffer Overflow",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K56715231",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K56715231",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22991",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22993",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:14.847",
      "lastModified" : "2024-11-21T05:51:05.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP Advanced WAF and BIG-IP ASM versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3, DOM-based XSS on DoS Profile properties page. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP Advanced WAF y BIG-IP ASM versiones 16.0.x anteriores de 16.0.1.1, versiones 15.1.x anteriores a 15.1.2, versiones 14.1.x anteriores a 14.1.3.1, versiones 13.1.x anteriores a 13.1.3.6 y versiones 12.1.x anteriores a 12.1 .5.3, un XSS basado en DOM en la página de propiedades de DoS Profile.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "BF641654-BDC0-4483-B6BA-D5566427E5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "6E0224A2-82E3-459A-8BEC-A2FC7B526230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.3.1",
            "matchCriteriaId" : "A0B1C52A-361A-46BD-9531-96C69F011EBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2",
            "matchCriteriaId" : "24B9D974-3C1E-4467-A844-F9FDCD39A7FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K55237223",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K55237223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22994",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:14.910",
      "lastModified" : "2024-11-21T05:51:05.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, undisclosed endpoints in iControl REST allow for a reflected XSS attack, which could lead to a complete compromise of the BIG-IP system if the victim user is granted the admin role. This vulnerability is due to an incomplete fix for CVE-2020-5948. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, los endpoints no revelados en iControl REST permiten un ataque XSS reflejado, lo que podría conllevar a un compromiso completo del sistema BIG-IP si se le otorga el rol de administrador al usuario víctima.&#xa0;Esta vulnerabilidades es debido a una solución incompleta para CVE-2020-5948.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K66851119",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K66851119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22996",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:14.973",
      "lastModified" : "2024-11-21T05:51:05.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all 7.x versions (fixed in 8.0.0), when set up for auto failover, a BIG-IQ Data Collection Device (DCD) cluster member that receives an undisclosed message may cause the corosync process to abort. This behavior may lead to a denial-of-service (DoS) and impact the stability of a BIG-IQ high availability (HA) cluster. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones 7.x (corregidas en 8.0.0), cuando se configura para la conmutación automática por error, un miembro del clúster BIG-IQ Data Collection Device (DCD) que recibe un mensaje no revelado puede hacer que el proceso de corosync se anule.&#xa0;Este comportamiento puede conducir a una denegación de servicio (DoS) y afectar la estabilidad de un clúster de alta disponibilidad (HA) de BIG-IQ.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "6AE4086B-82C9-4EDF-AF32-6641A7D29D3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K16352404",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K16352404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22997",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.037",
      "lastModified" : "2024-11-21T05:51:05.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all 7.x and 6.x versions (fixed in 8.0.0), BIG-IQ HA ElasticSearch service does not implement any form of authentication for the clustering transport services, and all data used by ElasticSearch for transport is unencrypted. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones 7.x y 6.x (corregidas en 8.0.0), el servicio BIG-IQ HA ElasticSearch no implementa ninguna forma de autenticación para los servicios de transporte de clustering, y todos los datos utilizados por ElasticSearch para el transporte están sin cifrar.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "04F480EF-41AA-4BD8-805E-B7F8B248D8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K34074377",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K34074377",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22998",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.097",
      "lastModified" : "2024-11-21T05:51:05.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, SYN flood protection thresholds are not enforced in secure network address translation (SNAT) listeners. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones  11.6.x anteriores a 11.6.5.3, los umbrales de protección contra inundaciones SYN no se aplican en escuchas de secure network address translation (SNAT).&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K31934524",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K31934524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22999",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.160",
      "lastModified" : "2024-11-21T05:51:07.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On versions 15.0.x before 15.1.0 and 14.1.x before 14.1.4, the BIG-IP system provides an option to connect HTTP/2 clients to HTTP/1.x servers. When a client is slow to accept responses and it closes a connection prematurely, the BIG-IP system may indefinitely retain some streams unclosed. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En las versiones 15.0.x anteriores a 15.1.0 y 14.1.x anteriores a 14.1.4, el sistema BIG-IP ofrece una opción para conectar clientes HTTP/2 a servidores HTTP/1.x.&#xa0;Cuando un cliente tarda en aceptar respuestas y cierra una conexión prematuramente, el sistema BIG-IP puede retener indefinidamente algunos flujos sin cerrar.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "FC5CA1E2-341C-42A9-88AC-E6C83DED0B9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "16EBA08B-8FBD-47BE-A5BE-F5145788E8CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "E916F91A-28F6-4CF2-A5EA-E4F4A2598039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "9228FA0A-8745-4731-A214-5A8AC0AA902A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "8BC7ABB7-2FA9-42CA-9BEF-241A91F317FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "E08E3F72-4CEF-4607-8B27-515E6471B9D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "9B58CDE9-5ADF-451E-B1F2-25C0954995B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "9BE59364-3DB3-4528-AFC4-D3A39872514D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "F14F10D9-4F2D-4C6D-8B0C-9775ED35DFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "14CEF743-6C3B-4D90-99BF-6A27B37ADAEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "542EB351-79B1-4A9D-A5A1-2F3E0E88963C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "895E610D-52F6-45CA-B205-D110A1DC6BEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "4B114C6C-E950-4B75-B341-022799ABBACF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "15.1.0",
            "matchCriteriaId" : "E71B1ACE-371A-4B0E-9BF0-8357E4C773E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K02333782",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K02333782",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23000",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.223",
      "lastModified" : "2024-11-21T05:51:07.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 13.1.3.4-13.1.3.6 and 12.1.5.2, if the tmm.http.rfc.enforcement BigDB key is enabled in a BIG-IP system, or the Bad host header value is checked in the AFM HTTP security profile associated with a virtual server, in rare instances, a specific sequence of malicious requests may cause TMM to restart. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 13.1.3.4-13.1.3.6 y 12.1.5.2, si la clave de BigDB tmm.http.rfc.enforcement está habilitada en un sistema BIG-IP, o si el valor del encabezado de host Bad está validado en la seguridad HTTP de AFM asociado con un servidor virtual, en raras ocasiones, una secuencia específica de peticiones maliciosas puede hacer que TMM se reinicie.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0653389C-2FEB-4D87-8676-F996DDF96F9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306CEBB8-05D0-4FD3-96F7-8C48FD6530A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "EB013399-9106-4161-A32F-5A4E3460EC34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7059A1-E7AA-43FA-A209-9DDACE6EC169"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "5EAEAA05-C796-48F7-B0FA-41FDFE075650"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F39931-3100-454E-824D-F20525F913AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "4704D724-D27E-4F5C-9762-E4B100460891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87F22480-54E4-430E-A3A3-DEE2A5F0BF40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E6410FB0-0508-4A1F-B5E1-07FCA68A8125"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8EED92E-1030-4AB4-B968-A7F22E75D982"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "24E2B6EA-1EB2-4DEE-8D0A-C6598A6AA8F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F962E586-1232-4DA3-ABBB-0384E506E94D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "66BC3C55-0397-4D00-BBEC-3D8A8856152E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E2A9103-599A-4346-9955-1E6F1F9D7FFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "7C884AFB-63A6-4C6C-90B0-C56A088F4DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7D85A60-A381-474C-9716-68D7B8D0C04B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "3C01EF28-1BF8-4AF9-92B5-72DDC579E16C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA4D2F7C-11D7-4CC3-A0FB-CCB9605D5701"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "294B3405-8CC0-48D8-870F-30AE84D7A753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E792C2FB-1D47-4C01-8F60-B1F78BA77B6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "ECE22F5F-0AE3-4CEC-9C1E-807D07574629"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D6CAB31-2845-4500-8ED4-6CA403D39549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "1984FE46-80A9-4B34-ABED-7B6A2E536555"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07BAF7BB-8EED-4EA3-8E5E-38361FFABCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "79E0719A-0568-4B57-AD43-B70F706B294A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C3F3067-14FF-4AA1-9A9D-FD0BDCB929FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.3.4",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "781AF4EF-1448-4BF4-B7CA-71E84AAE0D6E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:12.1.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A96D133-AB13-43B6-A1D1-1B7E69D8A989"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K34441555",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K34441555",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23001",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.300",
      "lastModified" : "2024-11-21T05:51:07.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the upload functionality in BIG-IP Advanced WAF and BIG-IP ASM allows an authenticated user to upload files to the BIG-IP system using a call to an undisclosed iControl REST endpoint. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En las versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones 11.6.x anteriores a 11.6.5.3 , la funcionalidad de carga en BIG-IP Advanced WAF y BIG-IP ASM permite a un usuario autenticado cargar archivos al sistema BIG-IP mediante una llamada a un endpoint iControl REST no revelado.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K06440657",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K06440657",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23002",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.380",
      "lastModified" : "2024-11-21T05:51:07.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using BIG-IP APM 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, or all 12.1.x and 11.6.x versions or Edge Client versions 7.2.1.x before 7.2.1.1, 7.1.9.x before 7.1.9.8, or 7.1.8.x before 7.1.8.5, the session ID is visible in the arguments of the f5vpn.exe command when VPN is launched from the browser on a Windows system. Addressing this issue requires both the client and server fixes. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "Cuando se usa BIG-IP APM versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2.1, versiones 14.1.x anteriores a 14.1.4, versiones 13.1.x anteriores a 13.1.3.6, o todas las versiones 12.1.x y 11.6.x o Edge Client versiones 7.2.1.x anteriores a 7.2.1.1, versiones 7.1.9.x anteriores a 7.1.9.8 o versiones 7.1.8.x anteriores a 7.1.8.5, el ID de sesión es visible en los argumentos del comando f5vpn.exe cuando VPN está iniciado desde el navegador en un sistema Windows.&#xa0;Abordar este problema requiere correcciones tanto del cliente como del servidor.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.5",
            "versionEndExcluding" : "7.1.8.5",
            "matchCriteriaId" : "8BBCE39D-283C-4D80-A83D-D4C94F2C4D92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.9",
            "versionEndExcluding" : "7.1.9.8",
            "matchCriteriaId" : "6CB004A6-19ED-43E4-BE0B-76A742120B7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:access_policy_manager_clients:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.1",
            "versionEndExcluding" : "7.2.1.1",
            "matchCriteriaId" : "B60E89ED-5C0A-4B21-A5C5-2F902E4A2891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndIncluding" : "11.6.5",
            "matchCriteriaId" : "2FBA9552-4645-4BFF-91A4-47B6A3414325"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndIncluding" : "12.1.5",
            "matchCriteriaId" : "6C3B5688-0235-4D4F-A26C-440FF24A1B43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K71891773",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K71891773",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23003",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.443",
      "lastModified" : "2024-11-21T05:51:07.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, the Traffic Management Microkernel (TMM) process may produce a core file when undisclosed MPTCP traffic passes through a standard virtual server. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2, versiones 14.1.x anteriores a 14.1.3.1, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones 11.6.x anteriores a 11.6.5.3, el proceso Traffic Management Microkernel (TMM) puede producir un archivo central cuando el tráfico MPTCP no revelado pasa a través de un servidor virtual estándar.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K43470422",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K43470422",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23004",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.503",
      "lastModified" : "2024-11-21T05:51:08.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2, 14.1.x before 14.1.3.1, 13.1.x before 13.1.3.6, 12.1.x before 12.1.5.3, and 11.6.x before 11.6.5.3, Multipath TCP (MPTCP) forwarding flows may be created on standard virtual servers without MPTCP enabled in the applied TCP profile. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 16.0.x anteriores a 16.0.1.1, versiones 15.1.x anteriores a 15.1.2, versiones 14.1.x anteriores a 14.1.3.1, versiones 13.1.x anteriores a 13.1.3.6, versiones 12.1.x anteriores a 12.1.5.3 y versiones 11.6.x anteriores a 11.6.5.3, Los flujos de reenvío de Multipath TCP (MPTCP) se pueden crear en servidores virtuales estándar sin MPTCP habilitado en el perfil de TCP aplicado.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E15123D0-D8DF-4344-9F7D-74C24921B763"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "14DE89CF-F8EE-4E09-9755-81F9A2F44F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "8C3A0A32-E425-4939-A30D-95A046ABBABB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "FB553A20-D521-4A32-AD49-8FFD5A95E684"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "6ED8C663-038B-4071-9FF9-AE609F2DA4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "A7706F70-BF89-480E-9AA6-3FE447375138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "8BE506FD-EF38-4146-8040-DC61367271EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "F76ED86B-7C48-4921-AF97-68307C181E7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "FE73E240-2CB5-40CB-8E58-08989F5D0156"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DD3FC6D2-5816-47C0-81AE-DED62570F090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "F0AC967D-8D6D-44F5-88EF-A50F18979774"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "0A84A8D4-9047-46D2-9C26-03C977D47AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "9ABE075E-E346-4C75-AFFF-AAE9283BA785"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "12A27D41-6DEC-4887-A9A0-FE5AAD01FA98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "39DDA652-065C-4AF9-A014-E0DAFF60B61B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "DB183373-A897-43DF-A544-364E59358F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "61BA4596-EFD4-483F-952D-4298B6CEFA9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "6B9117DA-6AA9-4704-A092-B1D426E6370D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "1C0E0367-761C-4872-800E-66F10886DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "6B8AB156-1960-4220-8FD2-BF7FBCD91F85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "C33FF2CF-2B91-489D-BD48-0CF9B7F0B8A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F2442894-A473-49A5-95B6-6312C3407FE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "B462A70A-2504-4E8C-85C3-D771CDB34038"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "4AE6833C-FF7C-4249-BF98-453645EEF8D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "73AC7A6C-72C3-49D5-AA54-AA11EA757506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "8ADB41C0-B8DD-4E31-AE7B-959B4DE938B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "E153E94C-35B3-46DF-96B4-0C41EC542954"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "78F5DCAD-BE4E-4D57-82CD-ADAB32691A9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "5591E2A0-9D8E-42D2-99E0-62738897762D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "51E3E0A3-8A75-43F8-8E8A-0C07345B88FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "5EE110A7-9B40-4EBD-AE4E-CB95E96AAF10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "A921F4E5-6BA7-4978-B47E-D1B173FF493F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "2BF4F8C6-1C43-4A54-9FD6-011253744FC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "8B318D4F-0D42-46CD-A5A9-02337BB1D2F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "50F6CC82-CAC7-426C-94F0-9E8E26CF61E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7BB77EFF-A064-4475-A93C-5D5BA9313724"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "FA9C81B8-9287-41E2-AE4E-E349CE4F68C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "88ACF2C5-FD3D-49BE-8F32-13559A0C4A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "090FC11A-C085-4603-84E0-3ABD6C571E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "AE2899E6-ABEF-4B61-AB8D-AF060D571196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "29A3450E-EA73-4E17-B371-92F55EF6E1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "40239D12-142E-4D36-A89E-0F7AB91B665A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94B4C2BC-F9E4-4AC3-A002-2954BD33A104"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "7689C97E-D5FB-427F-9FBA-A41CA0EC7F06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "29A0B309-E321-4F87-9C36-CAE4C213C14B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "F7C6025C-7283-4568-929B-CFA11423E179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "D4D4B28E-43B5-4132-A4EC-B20B9F85964A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "87CA1319-92D4-4C2F-B5D4-A2E86F538007"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "61CAFB28-FD99-471E-93BE-7E3E7AEF3C6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "9DC500F0-4D91-415E-B754-A89F730002F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "DA2D429F-42C4-4872-977A-CDABD60F92E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "BBBAD42C-06D5-437F-AB92-1DCC23C1A78B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "626E1218-868C-4328-99DA-62785C6771DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "7FE9EF68-055B-40B2-A676-C4C7FAAF77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "E13AADB8-8D19-4FA8-85EC-2F213D18AA7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "B58942BF-915D-49F6-9E8A-2092D1AE572D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "59BE59F9-E6F3-4D48-89AC-6C4B5635A4E9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "3DB5F9D2-C452-4469-9626-15FA11960A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "044F30A3-6B2E-4C38-8705-D291CD3CB287"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "BD28DA4B-F671-41B8-B231-24D28682FE8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "94414CA8-8E92-4970-886D-1C245399AA45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "4FD31B8D-10AE-4E52-8235-6EB4A12D3965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "0A9AA005-D0E3-43FC-9D21-9DB8B5B9495D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "57388787-F9DF-4930-ACBC-F3D1DAA53190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "1D513ACA-0D21-4CE0-88C1-DCA812F62C05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "47980A60-F9B6-47EE-AD74-4D6D03A71AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "4094349E-44B5-4FE1-AD7E-96D316188CC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "58A15DC4-30F5-407C-BCE4-BC877C73480A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "94906B0A-46D2-41FC-BCFD-C66910274CD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "0AF0D639-0210-47D0-8680-6E09F0111D5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "86607F4A-555F-4842-AFA8-34EB7484FA2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "B0901863-B55A-4C97-B9AC-B537D242D2BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "AB40AC45-49FD-43C7-AFF3-BE7F17C3B485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "D14A8876-B566-4A0C-886D-DAEC77BB3689"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "45D3B1BC-568E-4BD8-8774-75203751C754"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "704DF342-2CB5-4791-BF30-294D07B53653"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "43CB3FEA-4127-460B-846E-81B6C985DEAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "85065C6E-71F2-42B8-A169-51174987B8AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.1",
            "versionEndExcluding" : "11.6.5.3",
            "matchCriteriaId" : "C4ADF41E-51A5-4DC0-A387-EA5D2F2BAD0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.0",
            "versionEndExcluding" : "12.1.5.3",
            "matchCriteriaId" : "34683A56-1665-47C7-A150-246B8A86C363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.1.0",
            "versionEndExcluding" : "13.1.3.6",
            "matchCriteriaId" : "6C5DE2DA-0DAF-4DDF-9ACB-DAF301B97FB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.1.0",
            "versionEndExcluding" : "14.1.4",
            "matchCriteriaId" : "C3FE49A0-46B4-49A1-92A4-1BEA5BF48CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.1.0",
            "versionEndExcluding" : "15.1.2.1",
            "matchCriteriaId" : "628A35C2-D3D8-40A2-BA55-0910A38036E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:ssl_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.0",
            "versionEndExcluding" : "16.0.1.1",
            "matchCriteriaId" : "14EDD6BB-094C-409F-B702-EC87867EBA17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K31025212",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K31025212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23005",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.567",
      "lastModified" : "2024-11-21T05:51:08.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all 7.x and 6.x versions (fixed in 8.0.0), when using a Quorum device for BIG-IQ high availability (HA) for automatic failover, BIG-IQ does not make use of Transport Layer Security (TLS) with the Corosync protocol. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones 7.x y 6.x (corregidas en la versión 8.0.0), cuando se utiliza un dispositivo Quorum para alta disponibilidad (HA) de BIG-IQ para la conmutación automática por error, BIG-IQ no utiliza Transport Layer Security (TLS) con el protocolo Corosync.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "04F480EF-41AA-4BD8-805E-B7F8B248D8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K01243064",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K01243064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23006",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.660",
      "lastModified" : "2024-11-21T05:51:08.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On all 7.x and 6.x versions (fixed in 8.0.0), undisclosed BIG-IQ pages have a reflected cross-site scripting vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En todas las versiones 7.x y 6.x (corregidas en la versión 8.0.0), las páginas de BIG-IQ no reveladas presentan una vulnerabilidad de tipo cross-site scripting reflejado.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-iq_centralized_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "8.0.0",
            "matchCriteriaId" : "04F480EF-41AA-4BD8-805E-B7F8B248D8B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K30585021",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K30585021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23007",
      "sourceIdentifier" : "f5sirt@f5.com",
      "published" : "2021-03-31T18:15:15.723",
      "lastModified" : "2024-11-21T05:51:08.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On BIG-IP versions 14.1.4 and 16.0.1.1, when the Traffic Management Microkernel (TMM) process handles certain undisclosed traffic, it may start dropping all fragmented IP traffic. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated."
      }, {
        "lang" : "es",
        "value" : "En BIG-IP versiones 14.1.4 y 16.0.1.1, cuando el proceso Traffic Management Microkernel (TMM) maneja cierto tráfico no revelado, puede comenzar a eliminar todo el tráfico IP fragmentado.&#xa0;Nota: No se evalúan las versiones de software que han alcanzado End of Software Development (EoSD)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9416AE8-7C48-4986-99E8-5F313715B6B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_access_policy_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88BFAE7F-89ED-494F-9BC2-41B149F1660F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189D37B0-49A3-4369-8F85-325355BE5B29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_firewall_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A344BAD-1BFE-4994-ABE3-E7FE3317918D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F55C04B-A248-47C1-8EF5-933E4CFBB3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_advanced_web_application_firewall:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "396044DB-C1E0-448A-BE86-87922C8E6EEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41D3317C-4A3C-48D2-A56F-7D50E2CE7759"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_analytics:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B433545-1A28-43CE-8464-C48BFD726E83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4E94B20-41C4-4441-A208-B44F1AFE79C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_acceleration_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB20500F-8147-4842-80DD-B19424CDF3A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B89FE04-D25D-4FF0-9421-B8BED0F77997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_application_security_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B916F058-A664-48FC-822A-7DC15FAE2ECD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87E5247A-2BFF-422A-8E97-9FF82C2EAA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ddos_hybrid_defender:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C658B99B-AC7E-4366-A9C2-EA7F88B18FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ED3051-5100-4214-B212-C039F1CCCC3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_domain_name_system:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B135808-2436-4C5E-BCAE-7E3E659945AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6B65D6D-00F2-4C69-AB5C-D65E31D2869E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_edge_gateway:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D939619-6B82-4BCB-8782-EFCF659E1643"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E83A8D13-E491-4CEA-8761-9C6B39CCD402"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_fraud_protection_service:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AEEF51F-9890-489A-A3E0-16566C34D0E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A4319-E52F-4DFD-A5E2-7F0623FE0B2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_global_traffic_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33598BFF-6600-4FEC-AD56-4093EBD53DA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9A1D5B-D2A6-4AEE-989F-18C607FA51A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_link_controller:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02EF3400-8A7F-4894-8D46-CCF6F96AE912"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D001D61-CC58-4FFF-9B1B-44046DB5FAD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_local_traffic_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D3DAE4B-7BA2-477A-9A5B-2E23A9E90D75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A1FBEB-A427-43A8-B2AB-2E331585D512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_policy_enforcement_manager:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D579F31C-0E4B-4B35-A3D2-A6CF0BC4B2E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A325BE-B037-4B75-94D8-97B3A640BB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_ssl_orchestrator:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E68B9287-04BB-49AC-A892-961F7D96BC78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:14.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62890E2C-D3CB-4781-8D63-E146B34CEC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:f5:big-ip_webaccelerator:16.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B317A597-519D-4CEC-ADD0-CF5AE8A814C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.f5.com/csp/article/K37451543",
        "source" : "f5sirt@f5.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.f5.com/csp/article/K37451543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29662",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T18:15:16.037",
      "lastModified" : "2024-11-21T06:01:36.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Data::Validate::IP module through 0.29 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses."
      }, {
        "lang" : "es",
        "value" : "El módulo Data::Validate::IP versiones hasta 0.29 para Perl, no considera apropiadamente los caracteres cero extraños al comienzo de una cadena de dirección IP, lo que (en algunas situaciones) permite a los atacantes omitir el control de acceso que se basa en direcciones IP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:data\\:\\:validate\\:\\:ip_project:data\\:\\:validate\\:\\:ip:*:*:*:*:*:perl:*:*",
            "versionEndIncluding" : "0.29",
            "matchCriteriaId" : "612FC238-2C82-44A8-83E5-8F263697F9F6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/houseabsolute/Data-Validate-IP",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/houseabsolute/Data-Validate-IP/commit/3bba13c819d616514a75e089badd75002fd4f14e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-018.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sick.codes/sick-2021-018/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/houseabsolute/Data-Validate-IP",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/houseabsolute/Data-Validate-IP/commit/3bba13c819d616514a75e089badd75002fd4f14e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-018.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sick.codes/sick-2021-018/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26943",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T20:15:14.130",
      "lastModified" : "2024-11-21T05:57:05.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UX360CA BIOS through 303 on ASUS laptops allow an attacker (with the ring 0 privilege) to overwrite nearly arbitrary physical memory locations, including SMRAM, and execute arbitrary code in the SMM (issue 3 of 3)."
      }, {
        "lang" : "es",
        "value" : "El BIOS UX360CA versiones hasta 303 en las computadoras portátiles ASUS permite a un atacante (con el privilegio ring 0) sobrescribir ubicaciones de la memoria física casi arbitrarias, incluida la SMRAM, y ejecutar código arbitrario en la SMM (problema 3 de 3)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ux360ca_bios:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "304",
            "matchCriteriaId" : "195C61B6-8E5A-4890-A23A-1C622071D759"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ux360ca:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F7EE6F3-6B7E-4048-B832-D47D509B37F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/support/FAQ/1045541/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=1H3AfaVyeuk",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/support/FAQ/1045541/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=1H3AfaVyeuk",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29663",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T20:15:14.207",
      "lastModified" : "2024-11-21T06:01:36.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CourseMS (aka Course Registration Management System) 2.1 is affected by cross-site scripting (XSS). When an attacker with access to an Admin account creates a Job Title in the Site area (aka the admin/add_jobs.php name parameter), they can insert an XSS payload. This payload will execute whenever anyone visits the registration page."
      }, {
        "lang" : "es",
        "value" : "CourseMS (también se conoce como Course Registration Management System) versión 2.1 está afectado por un cross-site scripting (XSS).&#xa0;Cuando un atacante con acceso a una cuenta de administrador crea un puesto de trabajo en el área del Site (también se conoce como el parámetro name del archivo admin/add_jobs.php), puede insertar una carga útil XSS.&#xa0;Esta carga útil se ejecutará cada vez que alguien visite la página de registro."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:course_registration_management_system_project:course_registration_management_system:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFFF9DB8-313C-4AE0-9E8B-7A69968E3670"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://sourceforge.net/projects/coursems",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-29663",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://sourceforge.net/projects/coursems",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-29663",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22538",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2021-03-31T21:15:16.057",
      "lastModified" : "2024-11-21T05:50:17.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker who (1) has UserWrite permissions and (2) is using a carefully crafted request or malicious proxy, to create another user with higher privileges than their own. This occurs due to insufficient checks on the allowed set of permissions. The new user creation event would be captured in the Event Log."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios que afecta al Google Exposure Notification Verification Server (versiones anteriores a 0.23.1), permite a un atacante que (1) tenga permisos de UserWrite y (2) esté usando una petición cuidadosamente diseñada o un proxy malicioso, crear otro usuario con un nivel de privilegios mayores que los suyos.&#xa0;Esto se presenta debido a controles insuficientes sobre el conjunto permitido de permisos.&#xa0;El evento de creación de nuevo usuario se capturaría en el Registro de Eventos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:exposure_notifications_verification_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.23.1",
            "matchCriteriaId" : "4AB50BC0-EC62-473B-8550-917FB077D093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/google/exposure-notifications-verification-server/commit/eb8cf40b12dbe79304f1133c06fb73419383cd95",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/releases/tag/v0.23.1",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/releases/tag/v0.24.0",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/security/advisories/GHSA-5v95-v8c8-3rh6",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/commit/eb8cf40b12dbe79304f1133c06fb73419383cd95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/releases/tag/v0.23.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/releases/tag/v0.24.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/google/exposure-notifications-verification-server/security/advisories/GHSA-5v95-v8c8-3rh6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27220",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T22:15:14.397",
      "lastModified" : "2024-11-21T05:57:37.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PRTG Network Monitor before 21.1.66.1623. By invoking the screenshot functionality with prepared context paths, an attacker is able to verify the existence of certain files on the filesystem of the PRTG's Web server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en PRTG Network Monitor versiones anteriores a 21.1.66.1623.&#xa0;Al invocar la funcionalidad screenshot con rutas de contexto preparadas, un atacante puede verificar la existencia de ciertos archivos en el sistema de archivos del servidor web de PRTG."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paessler:prtg_network_monitor:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.66.1623",
            "matchCriteriaId" : "700D4D89-5C12-4F43-9FCF-82A6A15C1246"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.paessler.com/prtg/history/stable#21.1.66.1623",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.paessler.com/prtg/history/stable#21.1.66.1623",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T22:15:14.460",
      "lastModified" : "2024-11-21T05:57:49.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advanced Order Export before 3.1.8 for WooCommerce allows XSS, a different vulnerability than CVE-2020-11727."
      }, {
        "lang" : "es",
        "value" : "Advanced Order Export versiones anteriores a  3.1.8, para WooCommerce permite un XSS, una vulnerabilidad diferente de CVE-2020-11727."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:algolplus:advanced_order_export_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "E96B8E41-9EE8-4A8D-9948-E27318FF1769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wordpress.org/plugins/woo-order-export-lite/#developers",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/woo-order-export-lite/#developers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28994",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T23:15:11.767",
      "lastModified" : "2024-11-21T06:00:29.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kopano-ical (formerly zarafa-ical) in Kopano Groupware Core through 8.7.16, 9.x through 9.1.0, 10.x through 10.0.7, and 11.x through 11.0.1 and Zarafa 6.30.x through 7.2.x allows memory exhaustion via long HTTP headers."
      }, {
        "lang" : "es",
        "value" : "kopano-ical (anteriormente zarafa-ical) en Kopano Groupware Core versión hasta 8.7.16, 9.x hasta 9.1.0, 10.x hasta 10.0.7, y 11.xa hasta11.0.1 y Zarafa 6.30.x hasta 7.2.x, permite el agotamiento de la memoria a través de encabezados HTTP largos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kopano:groupware_core:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "8.7.16",
            "matchCriteriaId" : "84F068D9-1BEE-4559-B391-A01041894ABE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kopano:groupware_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndIncluding" : "9.1.0",
            "matchCriteriaId" : "FFC6CE68-CEF0-42F9-8084-F4EEBF53A297"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kopano:groupware_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndIncluding" : "10.0.7",
            "matchCriteriaId" : "A6A95FAD-4AFD-4599-8127-BB21396BB3AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kopano:groupware_core:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "F603D119-0CBE-48A1-906B-EDD8264F296B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zarafa:zarafa:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.30.0",
            "versionEndIncluding" : "7.2.6",
            "matchCriteriaId" : "D10F93ED-7F81-46E0-9255-BD9D48D1DA3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/01/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/25/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/01/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/25/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/19/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29349",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-03-31T23:15:11.827",
      "lastModified" : "2024-11-21T06:00:58.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mahara 20.10 is affected by Cross Site Request Forgery (CSRF) that allows a remote attacker to remove inbox-mail on the server. The application fails to validate the CSRF token for a POST request. An attacker can craft a module/multirecipientnotification/inbox.php pieform_delete_all_notifications request, which leads to removing all messages from a mailbox."
      }, {
        "lang" : "es",
        "value" : "Mahara versión 20.10 está afectado por un vulnerabilidad de tipo Cross Site Request Forgery (CSRF) que permite a un atacante remoto eliminar el correo de la bandeja de entrada del servidor.&#xa0;La aplicación no puede validar el token CSRF para una petición POST.&#xa0;Un atacante puede crear una petición de pieform_delete_all_notifications del archivo module/multirecipientnotification/inbox.php, que conlleva a eliminar todos los mensajes de un buzón."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mahara:mahara:20.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39EBBE51-0365-49FD-9504-C42AC8EA8477"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/0xBaz/CVE-2021-29349/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/0xBaz/CVE-2021-29349/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26071",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-04-01T03:15:14.150",
      "lastModified" : "2024-11-21T05:55:48.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SetFeatureEnabled.jspa resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to enable and disable Jira Software configuration via a cross-site request forgery (CSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "El recurso SetFeatureEnabled.jspa en Jira Server y Data Center anterior a versión 8.5.13, desde versión 8.6.0 anterior a versión 8.13.5 y desde versión 8.14.0 anterior a versión 8.15.1, permite que atacantes anónimos remotos habiliten y deshabiliten la configuración de Jira Software a través de una vulnerabilidad de tipo cross-site request forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.13",
            "matchCriteriaId" : "A455FC63-AF29-4D31-8E11-AA5671D12E06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.13",
            "matchCriteriaId" : "FA8144D6-FDAF-4B92-BE54-832893AC0A1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.5",
            "matchCriteriaId" : "26055208-F18D-4FF9-A442-7DD62D80F7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.1",
            "matchCriteriaId" : "9F4C4682-A56A-4BEA-AFD7-6F116FCE8EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.5",
            "matchCriteriaId" : "9DF55918-44C7-4DC9-BD66-9FD9BA64A955"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.1",
            "matchCriteriaId" : "3C31DC16-F8E3-4261-B539-C251E4BBC584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72233",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72233",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29251",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:13.233",
      "lastModified" : "2024-11-21T06:00:53.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server before 1.0.7.1 mishandles the policy setting in which users can register (in Server Settings > Policies). This affects Docker use cases in which a mail server is configured."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones anteriores a 1.0.7.1, maneja inapropiadamente la configuración de política en la que unos usuarios pueden registrarse (en Server Settings ) Policies).&#xa0;Esto afecta a los casos de uso de Docker en los que se configura un servidor de correo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.7.1",
            "matchCriteriaId" : "26CEEA4C-3BF8-4319-9ECA-A8E58F05E776"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.7.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases/tag/v1.0.7.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29929",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.140",
      "lastModified" : "2024-11-21T06:01:59.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the endian_trait crate through 2021-01-04 for Rust. A double drop can occur when a user-provided Endian impl panics."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate endian_trait hasta el 4 de enero de 2021 para Rust.&#xa0;Una doble caída puede ocurrir cuando un implementación de Endian proporcionado por el usuario entra en pánico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:endian_trait_project:endian_trait:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-01-04",
            "matchCriteriaId" : "3E12AB6F-DA7B-483C-A3A9-292ADD042863"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0039.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0039.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29930",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.267",
      "lastModified" : "2024-11-21T06:01:59.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A drop of uninitialized memory can sometimes occur upon a panic in T::default()."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate arenavec hasta el 12 de enero de 2021 para Rust.&#xa0;A veces, una perdida de la memoria no inicializada puede ocurrir tras un pánico en la función T::default()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arenavec_project:arenavec:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-01-12",
            "matchCriteriaId" : "75566138-20CD-4081-89CB-38621AA336C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0040.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29931",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.327",
      "lastModified" : "2024-11-21T06:02:00.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the arenavec crate through 2021-01-12 for Rust. A double drop can sometimes occur upon a panic in T::drop()."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate arenavec hasta el 12 de enero de 2021 para Rust.&#xa0;Algunas veces puede ocurrir una doble perdida tras un pánico en la función T::drop()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arenavec_project:arenavec:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-01-12",
            "matchCriteriaId" : "75566138-20CD-4081-89CB-38621AA336C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0040.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0040.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29932",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.420",
      "lastModified" : "2024-11-21T06:02:00.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the parse_duration crate through 2021-03-18 for Rust. It allows attackers to cause a denial of service (CPU and memory consumption) via a duration string with a large exponent."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate parse_duration hasta el 18-03-2021 para Rust.&#xa0;Permite a atacantes causar una denegación de servicio (consumo de CPU y memoria) por medio de una cadena de duración con un gran exponente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parse_duration_project:parse_duration:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-03-18",
            "matchCriteriaId" : "348D1C59-0DE6-440D-8F91-6A4640D1F4C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0041.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0041.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.483",
      "lastModified" : "2024-11-21T06:02:00.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the insert_many crate through 2021-01-26 for Rust. Elements may be dropped twice if a .next() method panics."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate insert_many hasta el 26/01/2021 para Rust.&#xa0;Unos elementos pueden caer dos veces si un método .next() entra en pánico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:insert_many_project:insert_many:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-01-26",
            "matchCriteriaId" : "485AC422-46A1-4767-BA2C-292386516FA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0042.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0042.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.530",
      "lastModified" : "2024-11-21T06:02:00.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in PartialReader in the uu_od crate before 0.0.4 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la función PartialReader en la crate uu_od versiones anteriores a 0.0.4 para Rust.&#xa0;Los atacantes pueden leer el contenido de ubicaciones de la memoria no inicializada por medio de una operación de Lectura proporcionada por el usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uu_od_project:uu_od:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.0.4",
            "matchCriteriaId" : "96618D90-AEF2-4BAC-9950-2C60F8108024"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0043.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0043.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.593",
      "lastModified" : "2024-11-21T06:02:00.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the rocket crate before 0.4.7 for Rust. uri::Formatter can have a use-after-free if a user-provided function panics."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate rocket versiones anteriores a 0.4.7 para Rust.&#xa0;La función uri::Formatter puede presentar un uso de la memoria previamente liberada si una función proporcionada por el usuario entra en pánico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocket:rocket:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.4.7",
            "matchCriteriaId" : "252F7C71-CA8D-4F1A-BC6E-C46EAF21DEF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0044.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0044.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29936",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.640",
      "lastModified" : "2024-11-21T06:02:00.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the adtensor crate through 2021-01-11 for Rust. There is a drop of uninitialized memory via the FromIterator implementation for Vector and Matrix."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate adtensor hasta el 11-01-2021 para Rust.&#xa0;Se presenta una perdida de la memoria no inicializada por medio de la implementación de FromIterator para Vector y Matrix."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adtensor_project:adtensor:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-01-11",
            "matchCriteriaId" : "E3C4EDCF-105A-49DB-97BC-ACE6AD3CD54D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0045.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0045.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29937",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.717",
      "lastModified" : "2024-11-21T06:02:00.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the telemetry crate through 2021-02-17 for Rust. There is a drop of uninitialized memory if a value.clone() call panics within misc::vec_with_size()."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate telemetry hasta el 17-02-2021 para Rust.&#xa0;Se presenta una perdida de la memoria no inicializada si una llamada de value.clone() entra en pánico dentro de la función misc::vec_with_size()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telemetry_project:telemetry:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-17",
            "matchCriteriaId" : "9C212B42-70E5-43B4-B32C-BE3AA95CE3C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0046.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0046.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.780",
      "lastModified" : "2024-11-21T06:02:01.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the slice-deque crate through 2021-02-19 for Rust. A double drop can occur in SliceDeque::drain_filter upon a panic in a predicate function."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate slice-deque hasta el 19-02-2021 para Rust.&#xa0;Puede ocurrir una doble perdida en la función SliceDeque::Drain_filter tras un pánico en una función predecida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slice-deque_project:slice-deque:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-19",
            "matchCriteriaId" : "D75279E8-F9BA-4E71-AB58-ABB931DDEFB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0047.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0047.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29939",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.843",
      "lastModified" : "2024-11-21T06:02:01.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the stackvector crate through 2021-02-19 for Rust. There is an out-of-bounds write in StackVec::extend if size_hint provides certain anomalous data."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate stackvector hasta el 19-02-2021 para Rust.&#xa0;Se presenta una escritura fuera de límites en la función StackVec::extend si size_hint proporciona determinados datos anómalos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackvector_project:stackvector:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "1.0.9",
            "matchCriteriaId" : "286FC175-419A-4C72-9852-7D1497109C94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0048.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0048.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.907",
      "lastModified" : "2024-11-21T06:02:01.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the through crate through 2021-02-18 for Rust. There is a double free (in through and through_and) upon a panic of the map function."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate through hasta el 18-02-2021 para Rust.&#xa0;Se presenta una doble liberación (en through y through_and) tras un pánico de la función map."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:through_project:through:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-18",
            "matchCriteriaId" : "36EA4050-7F10-4DA7-9684-FAB1022A520B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0049.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0049.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:14.967",
      "lastModified" : "2024-11-21T06:02:01.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index has an out-of-bounds write if an iterator returns a len() that is too small."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate reorder hasta el 24 de febrero de 2021 para Rust.&#xa0;swap_index presenta una escritura fuera de límites si un iterador devuelve una función len() que es demasiado pequeña."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reorder_project:reorder:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-24",
            "matchCriteriaId" : "57642F10-9D60-45F0-BE4E-AAB104ABBEEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0050.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29942",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T05:15:15.047",
      "lastModified" : "2024-11-21T06:02:01.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the reorder crate through 2021-02-24 for Rust. swap_index can return uninitialized values if an iterator returns a len() that is too large."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate reorder hasta el 24 de febrero de 2021 para Rust.&#xa0;swap_index puede devolver valores no inicializados si un iterador devuelve una función len() que es demasiado grande."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:reorder_project:reorder:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-24",
            "matchCriteriaId" : "57642F10-9D60-45F0-BE4E-AAB104ABBEEA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0050.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0050.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29083",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-04-01T06:15:17.697",
      "lastModified" : "2025-01-14T19:29:55.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of special elements used in an OS command in SYNO.Core.Network.PPPoE in Synology DiskStation Manager (DSM) before 6.2.3-25426-3 allows remote authenticated users to execute arbitrary code via realname parameter."
      }, {
        "lang" : "es",
        "value" : "Una neutralización inapropiada de elementos especiales usados en un comando del Sistema Operativo en SYNO.Core.Network.PPPoE en Synology DiskStation Manager (DSM) versiones anteriores a 6.2.3-25426-3, permite a usuarios autenticados remotos ejecutar código arbitrario por medio del parámetro realname."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:synology:diskstation_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.2.3-25426-3",
            "matchCriteriaId" : "1628C07C-CCA7-463C-AA98-BF86C97B0D58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_20_26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28918",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T13:15:14.460",
      "lastModified" : "2024-11-21T06:00:23.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass packages relying on netmask to filter IPs and reach critical VPN or LAN hosts."
      }, {
        "lang" : "es",
        "value" : "Una comprobación inapropiada de entrada de cadenas octales en el paquete netmask npm versiones v1.0.6 y anteriores, permite a atacantes remotos no autenticados llevar a cabo ataques de tipo SSRF, RFI y LFI indeterminados en muchos de los paquetes dependientes.&#xa0;Un atacante remoto no autenticado puede omitir unos paquetes que dependen de la máscara de red para filtrar las direcciones IP y llegar a hosts críticos de VPN o LAN."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netmask_project:netmask:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "1.0.6",
            "matchCriteriaId" : "1EDCEBC9-A043-4B75-BF02-1CA22DFA4E10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-pch5-whg9-qr2r",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rs/node-netmask",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rootdaemon.com/2021/03/29/vulnerability-in-netmask-npm-package-affects-280000-projects/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0010/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/netmask",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-pch5-whg9-qr2r",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rs/node-netmask",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-011.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://rootdaemon.com/2021/03/29/vulnerability-in-netmask-npm-package-affects-280000-projects/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.bleepingcomputer.com/news/security/critical-netmask-networking-bug-impacts-thousands-of-applications/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/netmask",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20234",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-01T14:15:13.123",
      "lastModified" : "2024-11-21T05:46:11.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uncontrolled resource consumption (memory leak) flaw was found in the ZeroMQ client in versions before 4.3.3 in src/pipe.cpp. This issue causes a client that connects to multiple malicious or compromised servers to crash. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de consumo de recursos no controlado (pérdida de la memoria) en el cliente ZeroMQ en versiones anteriores a 4.3.3, en el archivo src/pipe.cpp.&#xa0;Este problema causa que un cliente que se conecta a múltiples servidores maliciosos o comprometidos se bloquee.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeromq:libzmq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "BE196820-680A-400C-A492-22819F5CABB5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921972",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeromq/libzmq/security/advisories/GHSA-wfr2-29gj-5w87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20235",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-01T14:15:13.217",
      "lastModified" : "2024-11-21T05:46:11.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There's a flaw in the zeromq server in versions before 4.3.3 in src/decoder_allocators.hpp. The decoder static allocator could have its sized changed, but the buffer would remain the same as it is a static buffer. A remote, unauthenticated attacker who sends a crafted request to the zeromq server could trigger a buffer overflow WRITE of arbitrary data if CURVE/ZAP authentication is not enabled. The greatest impact of this flaw is to application availability, data integrity, and confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se presenta un fallo en el servidor zeromq en versiones anteriores a 4.3.3, en el archivo src/decoder_allocators.hpp.&#xa0;Se podría cambiar el tamaño del asignador estático del decodificador, pero el búfer permanecería igual, ya que es un búfer estático.&#xa0;Un atacante no autenticado remoto que envía una petición diseñada al servidor zeromq podría desencadenar un desbordamiento del búfer WRITE de datos arbitrarios si la autenticación CURVE/ZAP no está habilitada.&#xa0;El mayor impacto de este fallo es la disponibilidad de la aplicación, la integridad de los datos y la confidencialidad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zeromq:libzmq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "C1384189-AC6C-4847-A3BF-FB7A3A826F75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921983",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeromq/libzmq/security/advisories/GHSA-fc3w-qxf5-7hp6",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921983",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/zeromq/libzmq/security/advisories/GHSA-fc3w-qxf5-7hp6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20296",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-01T14:15:13.310",
      "lastModified" : "2024-11-21T05:46:18.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in OpenEXR in versions before 3.0.0-beta. A crafted input file supplied by an attacker, that is processed by the Dwa decompression functionality of OpenEXR's IlmImf library, could cause a NULL pointer dereference. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en OpenEXR en versiones anteriores a 3.0.0-beta.&#xa0;Un archivo de entrada diseñado proporcionado por un atacante, que es procesado por la funcionalidad de decompresión Dwa de la biblioteca IlmImf de OpenEXR, podría causar una desreferencia del puntero NULL.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "12541242-6F4A-457C-B0D3-B97C75F79627"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openexr:openexr:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.5.0",
            "versionEndExcluding" : "2.5.4",
            "matchCriteriaId" : "3540D6CF-36A9-4FE9-9D0D-C3263DE61E62"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939141",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=24854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/12/msg00022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28545",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-01T14:15:13.390",
      "lastModified" : "2024-11-21T05:59:49.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker would have the ability to completely manipulate data in a certified PDF without invalidating the original certification. Exploitation of this issue requires user interaction in that a victim must open the tampered file."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Acrobat Reader DC 2020.013.20074 (y anteriores), 2020.001.30018 (y anteriores) y 2017.011.30188 (y anteriores) carecen de soporte para una comprobación de integridad. Un atacante no autentificado podría manipular completamente los datos de un PDF certificado sin invalidar la certificación original. La explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir el archivo manipulado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-353"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "163AD098-8E6F-4710-BBB2-7D20A5ECE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "6AA3B8F3-7E2D-4463-AEC6-53AF49EB511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "8DE0EAFA-C01C-4AF3-A80D-3060C2976176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "E769E3AF-BCD8-4894-A5F3-7318DA56ABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "85DA6685-CB53-45D3-B4C3-3486E2439A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "85092AF3-B5E3-4192-ABA3-C6BEC56E3EEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28546",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-01T14:15:13.577",
      "lastModified" : "2024-11-21T05:59:49.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and earlier) are missing support for an integrity check. An unauthenticated attacker could leverage this vulnerability to modify content in a certified PDF without invalidating the certification. Exploitation of this issue requires user interaction in that a victim must open the tampered file."
      }, {
        "lang" : "es",
        "value" : "Acrobat Reader DC versiones 2020.013.20074 (y anteriores), versiones 2020.001.30018 (y anteriores) y versiones 2017.011.30188 (y anteriores), carecen de compatibilidad con una comprobación de integridad. Un atacante no autentificado podría aprovechar esta vulnerabilidad para modificar el contenido de un PDF certificado sin invalidar la certificación. Una explotación de este problema requiere la interacción del usuario, ya que la víctima debe abrir el archivo manipulado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-353"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "163AD098-8E6F-4710-BBB2-7D20A5ECE010"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "6AA3B8F3-7E2D-4463-AEC6-53AF49EB511F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "8DE0EAFA-C01C-4AF3-A80D-3060C2976176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "17.011.30059",
            "versionEndIncluding" : "17.011.30188",
            "matchCriteriaId" : "E769E3AF-BCD8-4894-A5F3-7318DA56ABF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:classic:*:*:*",
            "versionStartIncluding" : "20.001.30005",
            "versionEndIncluding" : "20.001.30018",
            "matchCriteriaId" : "85DA6685-CB53-45D3-B4C3-3486E2439A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:acrobat_reader_dc:*:*:*:*:continuous:*:*:*",
            "versionStartIncluding" : "15.008.20082",
            "versionEndIncluding" : "20.013.20074",
            "matchCriteriaId" : "85092AF3-B5E3-4192-ABA3-C6BEC56E3EEF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/acrobat/apsb21-09.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3393",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-01T14:15:13.657",
      "lastModified" : "2024-11-21T06:21:24.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read."
      }, {
        "lang" : "es",
        "value" : "Se detectó un filtrado de información en postgresql en versiones anteriores a 13.2, versiones anteriores a 12.6 y versiones anteriores a 11.11.&#xa0;Un usuario que tenga el permiso UPDATE pero no el permiso SELECT para una columna en particular podría diseñar consultas que, en algunas circunstancias, podrían divulgar valores de esa columna en mensajes de error.&#xa0;Un atacante podría usar este fallo para obtener información almacenada en una columna que puede escribir pero no leer."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.11",
            "matchCriteriaId" : "4B284ADB-853D-486A-9D46-822CCEDDA35C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.6",
            "matchCriteriaId" : "7571CD9B-09D2-4023-B18D-E47155B70B92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postgresql:postgresql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "13.2",
            "matchCriteriaId" : "38EBA6FE-62E7-4865-ADCB-4F9E5F074F06"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:software_collections:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "749804DA-4B27-492A-9ABA-6BB562A6B3AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-32",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0006/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1924005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210507-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22177",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-01T15:15:13.957",
      "lastModified" : "2024-11-21T05:49:39.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Potential DoS was identified in gitlab-shell in GitLab CE/EE version 12.6.0 or above, which allows an attacker to spike the server resource utilization via gitlab-shell command."
      }, {
        "lang" : "es",
        "value" : "Se identificó una DoS potencial en gitlab-shell en GitLab CE/EE versiones 12.6.0 o superiores, lo que permite a un atacante aumentar la utilización de recursos del servidor por medio del comando gitlab-shell."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "C88743C3-C946-427D-A7A0-CE43356112A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "13.6.7",
            "matchCriteriaId" : "F233F48C-70A3-4EE6-9BAF-705FAB25EBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "4BBAF21A-84DD-4987-B4BE-2A8CAA44210A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.7",
            "matchCriteriaId" : "9AE735A5-FC67-4B16-B27B-86C51C8771C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "D3009669-C930-4517-914D-5DB9A0E40B59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.4",
            "matchCriteriaId" : "9F7976E8-BDA5-4104-AC3E-38C02CC613A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22177.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/238988",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/953444",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22177.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/238988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/953444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28163",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-04-01T15:15:14.080",
      "lastModified" : "2024-11-21T05:59:12.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty versiones 9.4.32 hasta 9.4.38, versiones 10.0.0.beta2 hasta 10.0.1 y versiones 11.0.0.beta2 hasta 11.0.1, si un usuario usa un directorio de aplicaciones web que es un enlace simbólico, el contenido del directorio de aplicaciones web se implementa como una aplicación web estática, sin darse cuenta, sirviendo las aplicaciones web en sí y cualquier otra cosa que pueda estar en ese directorio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.4.32",
            "versionEndExcluding" : "9.4.39",
            "matchCriteriaId" : "AF634A17-7602-4D5A-B28C-A3D123D55BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:10.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "334FAEF6-CEC6-445F-B52D-7FF38CDB9F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:10.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129017B0-7465-4F75-8C30-B9A5DBC1DE9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:11.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "52F4E0D3-9709-4073-9DE0-F36CDD3DB62F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:11.0.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF6B532-FC1B-429A-B06F-0361ED12CB2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:11.0.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "F6AF5EF3-8153-4768-8771-13448DE625B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:11.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76EC004C-0BE9-46E1-86AE-391B27C6AE79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ignite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.1",
            "matchCriteriaId" : "77A86E91-044C-44A0-9AD4-B4B2AD6723BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:8.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42672AEA-5920-4951-ADCF-5D5AA4AB4A77"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197D0D80-6702-4B61-B681-AFDBA7D69067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "FF971916-C526-43A9-BD80-985BCC476569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214712B6-59AF-4B5E-84BF-AF3C74A390EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter_plug-in:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "DC01D8F3-291A-44E5-99C1-6771F6656E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.6",
            "matchCriteriaId" : "D5D73B53-9750-4844-A767-21F8A0CEE0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6",
            "matchCriteriaId" : "0C0FF89C-3DC1-4FF4-9447-128028EEA80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.6",
            "matchCriteriaId" : "FF852A4C-7818-408D-A46B-2F4EE1AB8895"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97994257-C9A4-4491-B362-E8B25B7187AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBFC93F-8B39-45A2-981C-59B187169BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0843465C-F940-4FFC-998D-9A2668B75EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F68878-BC19-4DB8-8A72-BD9FE3D0ACEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6895A6-511A-4DC6-9F9B-58E05B86BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EEAA04-A7BD-4FFF-8B0B-CEE5EC09F75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062E4E7C-55BB-46F3-8B61-5A663B565891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "9B7C949D-0AB3-4566-9096-014C82FC1CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "3E419C70-9516-4C63-997B-60B20E30A30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.9",
            "matchCriteriaId" : "BEAB4771-C33C-4151-AEAE-A6D2C892C3C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r787e47297a614b05b99d01b04c8a1d6c0cafb480c9cb7c624a6b8fc3%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8a1a332899a1f92c8118b0895b144b27a78e3f25b9d58a34dd5eb084%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbefa055282d52d6b58d29a79fbb0be65ab0a38d25f00bd29eaf5e6fd%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CXQIJVYU4R3JL6LSPXQ5GIV7WLLA7PI/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGNKXBNRRCZTGGXPIX3VBWCF2SAM3DWS/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HAAKW7S66TECXGJZWB3ZFGOQAK34IYHF/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0006/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-j6qj-j888-vvgq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r67c4f90658fde875521c949448c54c98517beecdc7f618f902c620ec%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r787e47297a614b05b99d01b04c8a1d6c0cafb480c9cb7c624a6b8fc3%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8a1a332899a1f92c8118b0895b144b27a78e3f25b9d58a34dd5eb084%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbefa055282d52d6b58d29a79fbb0be65ab0a38d25f00bd29eaf5e6fd%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rddbb4f8d5db23265bb63d14ef4b3723b438abc1589f877db11d35450%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf36f1114e84a3379b20587063686148e2d5a39abc0b8a66ff2a9087a%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5CXQIJVYU4R3JL6LSPXQ5GIV7WLLA7PI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GGNKXBNRRCZTGGXPIX3VBWCF2SAM3DWS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HAAKW7S66TECXGJZWB3ZFGOQAK34IYHF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28164",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-04-01T15:15:14.157",
      "lastModified" : "2024-11-21T05:59:13.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty versiones 9.4.37.v20210219 hasta 9.4.38.v20210224, el modo de cumplimiento predeterminado permite a unas peticiones con URI que contienen segmentos %2e o %2e%2e acceder a recursos protegidos dentro del directorio WEB-INF.&#xa0;Por ejemplo, una petición a /context/%2e/WEB-INF/web.xml puede recuperar el archivo web.xml.&#xa0;Esto puede divulgar información confidencial sobre la implementación de una aplicación web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-551"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:9.4.37:20210219:*:*:*:*:*:*",
            "matchCriteriaId" : "E55D7BBC-875B-4AF6-8298-AE3DE6A4EBEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:9.4.38:20210224:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A8973-E774-4C85-8EA7-A98C5B77E2DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "197D0D80-6702-4B61-B681-AFDBA7D69067"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.70.1",
            "matchCriteriaId" : "73F81EC3-4AB0-4CD7-B845-267C5974DE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:-:*:*:*:*:web_services_proxy:*:*",
            "matchCriteriaId" : "1AEFF829-A8F2-4041-8DDF-E705DB3ADED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:element_plug-in_for_vcenter_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214712B6-59AF-4B5E-84BF-AF3C74A390EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter_plug-in:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "DC01D8F3-291A-44E5-99C1-6771F6656E0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.6",
            "matchCriteriaId" : "D5D73B53-9750-4844-A767-21F8A0CEE0B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.6",
            "matchCriteriaId" : "0C0FF89C-3DC1-4FF4-9447-128028EEA80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:virtual_storage_console:*:*:*:*:*:vmware_vsphere:*:*",
            "versionStartIncluding" : "9.6",
            "matchCriteriaId" : "FF852A4C-7818-408D-A46B-2F4EE1AB8895"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97994257-C9A4-4491-B362-E8B25B7187AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBFC93F-8B39-45A2-981C-59B187169BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0843465C-F940-4FFC-998D-9A2668B75EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F68878-BC19-4DB8-8A72-BD9FE3D0ACEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6895A6-511A-4DC6-9F9B-58E05B86BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "1FDBAD8E-C926-4D6F-9FD2-B0428980D6DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.9",
            "matchCriteriaId" : "BEAB4771-C33C-4151-AEAE-A6D2C892C3C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164590/Jetty-9.4.37.v20210219-Information-Disclosure.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2a3ea27cca2ac7352d392b023b72e824387bc9ff16ba245ec663bdc6%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd079fa0ac6f47ba1ad0af98d7d0276547b8a4e005f034fb1016951%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8e6c116628c1277c3cf132012a66c46a0863fa2a3037c0707d4640d4%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcea249eb7a0d243f21696e4985de33f3780399bf7b31ea1f6d489b8b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0006/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164590/Jetty-9.4.37.v20210219-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-v7ff-8wcx-gmc5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2a3ea27cca2ac7352d392b023b72e824387bc9ff16ba245ec663bdc6%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3c55b0baa4dc38958ae147b2f216e212605f1071297f845e14477d36%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r763840320a80e515331cbc1e613fa93f25faf62e991974171a325c82%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7dd079fa0ac6f47ba1ad0af98d7d0276547b8a4e005f034fb1016951%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8e6c116628c1277c3cf132012a66c46a0863fa2a3037c0707d4640d4%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r90e7b4c42a96d74c219e448bee6a329ab0cd3205c44b63471d96c3ab%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcea249eb7a0d243f21696e4985de33f3780399bf7b31ea1f6d489b8b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28165",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-04-01T15:15:14.237",
      "lastModified" : "2025-08-27T21:15:37.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Jetty versiones 7.2.2 hasta 9.4.38, versiones 10.0.0.alpha0 hasta 10.0.1 y versiones 11.0.0.alpha0 hasta 11.0.1, el uso de CPU puede alcanzar el 100% al recibir una gran trama TLS no válida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-551"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2.2",
            "versionEndExcluding" : "9.4.39",
            "matchCriteriaId" : "A69D5FF1-A151-4AF6-B5E6-35EB45DC1852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.2",
            "matchCriteriaId" : "3008A0E3-FBFC-49AA-8867-16BD10B125DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jetty:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.2",
            "matchCriteriaId" : "1B8688FE-13CC-4598-913D-50EB38DDCBEC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:autovue_for_agile_product_lifecycle_management:21.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97994257-C9A4-4491-B362-E8B25B7187AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EEAA04-A7BD-4FFF-8B0B-CEE5EC09F75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "062E4E7C-55BB-46F3-8B61-5A663B565891"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "F80CB000-C477-486C-838C-B2FE82647670"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "349C4D65-23E9-446A-8A36-94FF55686812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.3",
            "matchCriteriaId" : "B5E43770-8F83-4077-9EB0-3BF4A19A2E75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:siebel_core_-_automation:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.9",
            "matchCriteriaId" : "BEAB4771-C33C-4151-AEAE-A6D2C892C3C8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2.277.3",
            "matchCriteriaId" : "8E071B1A-A339-4622-9150-59F62B151353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.286",
            "matchCriteriaId" : "EB777690-DCA0-4E68-B30E-E997A1281D4E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.9.8",
            "matchCriteriaId" : "C30E9A12-5B7B-42F6-B9D3-18DA133E5F4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0",
            "matchCriteriaId" : "CC05F69D-6C6B-472D-87B7-84231F14CA8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_os_controller:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.70.1",
            "matchCriteriaId" : "D179365A-1E70-4B07-B882-FD082FE2AA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_storage:*:*:*:*:*:vcenter:*:*",
            "versionEndExcluding" : "1.10",
            "matchCriteriaId" : "3930F108-9019-4B4A-8918-6CE9F58551D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_santricity_web_services:*:*:*:*:*:web_services_proxy:*:*",
            "versionEndExcluding" : "5.1",
            "matchCriteriaId" : "FCB4EAC3-3114-43DF-89DA-879C7C578FB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_tools:*:*:*:*:*:vmware_vsphere:*:*",
            "versionEndExcluding" : "9.10",
            "matchCriteriaId" : "E28AE83F-D666-4EDC-A276-F78F3A73D716"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_cloud_connector:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB15BCF1-1B1D-49D8-9B76-46DCB10044DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:santricity_web_services_proxy:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1",
            "matchCriteriaId" : "A21FA571-8C10-4633-802D-6C20A8290145"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.6",
            "matchCriteriaId" : "04A544A2-C80D-488B-AC04-104F9FB3FA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:storage_replication_adapter_for_clustered_data_ontap:*:*:*:*:*:vmware_vsphere:*:*",
            "versionEndExcluding" : "9.10",
            "matchCriteriaId" : "20E0A1CE-7467-4EAC-877D-D6D473AE0AA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:vasa_provider_for_clustered_data_ontap:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.10",
            "matchCriteriaId" : "8BC51CBC-4973-4145-945C-56035034D772"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/20/3",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0006/",
        "source" : "emo@eclipse.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4949",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/20/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse/jetty.project/security/advisories/GHSA-26vr-8j45-3r4w",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r002258611ed0c35b82b839d284b43db9dcdec120db8afc1c993137dc%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r03ca0b69db1e3e5f72fe484b71370d537cd711cbf334e2913332730a%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r05db8e0ef01e1280cc7543575ae0fa1c2b4d06a8b928916ef65dd2ad%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06d54a297cb8217c66e5190912a955fb870ba47da164002bf2baffe5%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r077b76cafb61520c14c87c4fc76419ed664002da0ddac5ad851ae7e7%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0841b06b48324cfc81325de3c05a92e53f997185f9d71ff47734d961%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a241b0649beef90d422b42a26a2470d336e59e66970eafd54f9c3e2%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a4797ba6ceea8074f47574a4f3cc11493d514c1fab8203ebd212add%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0bf3aa065abd23960fc8bdc8090d6bc00d5e391cf94ec4e1f4537ae3%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0cd1a5e3f4ad4770b44f8aa96572fc09d5b35bec149c0cc247579c42%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0f02034a33076fd7243cf3a8807d2766e373f5cb2e7fd0c9a78f97c4%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r111f1ce28b133a8090ca4f809a1bdf18a777426fc058dc3a16c39c66%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r17e26cf9a1e3cbc09522d15ece5d7c7a00cdced7641b92a22a783287%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r23785214d47673b811ef119ca3a40f729801865ea1e891572d15faa6%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2afc72af069a7fe89ca2de847f3ab3971cb1d668a9497c999946cd78%40%3Ccommits.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ea2f0541121f17e470a0184843720046c59d4bde6d42bf5ca6fad81%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2f2d9c3b7cc750a6763d6388bcf5db0c7b467bd8be6ac4d6aea4f0cf%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r31f591a0deac927ede8ccc3eac4bb92697ee2361bf01549f9e3440ca%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r33eb3889ca0aa12720355e64fc2f8f1e8c0c28a4d55b3b4b8891becb%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r40136c2010fccf4fb2818a965e5d7ecca470e5f525c232ec5b8eb83a%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r401b1c592f295b811608010a70792b11c91885b72af9f9410cffbe35%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r411d75dc6bcefadaaea246549dd18e8d391a880ddf28a796f09ce152%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r47a7542ab61da865fff3db0fe74bfe76c89a37b6e6d2c2a423f8baee%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4891d45625cc522fe0eb764ac50d48bcca9c0db4805ea4a998d4c225%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4a66bfbf62281e31bc1345ebecbfd96f35199eecd77bfe4e903e906f%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4abbd760d24bab2b8f1294c5c9216ae915100099c4391ad64e9ae38b%40%3Cdev.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4b1fef117bccc7f5fd4c45fd2cabc26838df823fe5ca94bc42a4fd46%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r520c56519b8820955a86966f499e7a0afcbcf669d6f7da59ef1eb155%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r56e5568ac73daedcb3b5affbb4b908999f03d3c1b1ada3920b01e959%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5b3693da7ecb8a75c0e930b4ca26a5f97aa0207d9dae4aa8cc65fe6b%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5d1f16dca2e010193840068f1a1ec17b7015e91acc646607cbc0a4da%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5f172f2dd8fb02f032ef4437218fd4f610605a3dd4f2a024c1e43b94%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r64ff94118f6c80e6c085c6e2d51bbb490eaefad0642db8c936e4f0b7%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6535b2beddf0ed2d263ab64ff365a5f790df135a1a2f45786417adb7%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r65daad30d13f7c56eb5c3d7733ad8dddbf62c469175410777a78d812%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r694e57d74fcaa48818a03c282aecfa13ae68340c798dfcb55cb7acc7%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ac9e263129328c0db9940d72b4a6062e703c58918dd34bd22cdf8dd%40%3Cissues.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6b070441871a4e6ce8bb63e190c879bb60da7c5e15023de29ebd4f9f%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ce2907b2691c025250ba010bc797677ef78d5994d08507a2e5477c9%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6f256a1d15505f79f4050a69bb8f27b34cb353604dd2f765c9da5df7%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r71031d0acb1de55c9ab32f4750c50ce2f28543252e887ca03bd5621e%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7189bf41cb0c483629917a01cf296f9fbdbda3987084595192e3845d%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r72bf813ed4737196ea3ed26494e949577be587fd5939fe8be09907c7%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r746434be6abff9ad321ff54ecae09e1f09c1c7c139021f40a5774090%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r769155244ca2da2948a44091bb3bb9a56e7e1c71ecc720b8ecf281f0%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r780c3c210a05c5bf7b4671303f46afc3fe56758e92864e1a5f0590d0%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7bf7004c18c914fae3d5a6a0191d477e5b6408d95669b3afbf6efa36%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7c40fb3a66a39b6e6c83b0454bc6917ffe6c69e3131322be9c07a1da%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r81748d56923882543f5be456043c67daef84d631cf54899082058ef1%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r83453ec252af729996476e5839d0b28f07294959d60fea1bd76f7d81%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r90327f55db8f1d079f9a724aabf1f5eb3c00c1de49dc7fd04cad1ebc%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r940f15db77a96f6aea92d830bc94d8d95f26cc593394d144755824da%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r942f4a903d0abb25ac75c592e57df98dea51350e8589269a72fd7913%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9974f64723875052e02787b2a5eda689ac5247c71b827d455e5dc9a6%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9b793db9f395b546e66fb9c44fe1cd75c7755029e944dfee31b8b779%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9db72e9c33b93eba45a214af588f1d553839b5c3080fc913854a49ab%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9fae5a4087d9ed1c9d4f0c7493b6981a4741cfb4bebb2416da638424%40%3Cissues.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra210e38ae0bf615084390b26ba01bb5d66c0a76f232277446ae0948a%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra21b3e6bd9669377139fe33fb46edf6fece3f31375bc42a0dcc964b2%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra50519652b0b7f869a14fbfb4be9758a29171d7fe561bb7e036e8449%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra9dd15ba8a4fb7e42c7fe948a6d6b3868fd6bbf8e3fb37fcf33b2cd0%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rae8bbc5a516f3e21b8a55e61ff6ad0ced03bdbd116d2170a3eed9f5c%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raea6e820644e8c5a577f77d4e2044f8ab52183c2536b00c56738beef%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb00345f6b1620b553d2cc1acaf3017aa75cea3776b911e024fa3b187%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb11a13e623218c70b9f2a2d0d122fdaaf905e04a2edcd23761894464%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb1624b9777a3070135e94331a428c6653a6a1edccd56fa9fb7a547f2%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb2d34abb67cdf525945fe4b821c5cdbca29a78d586ae1f9f505a311c%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb66ed0b4bb74836add60dd5ddf9172016380b2aeefb7f96fe348537b%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb8f5a6ded384eb00608e6137e87110e7dd7d5054cc34561cb89b81af%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbab9e67ec97591d063905bc7d4743e6a673f1bc457975fc0445ac97f%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbba0b02a3287e34af328070dd58f7828612f96e2e64992137f4dc63d%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc075a4ac85e7a8e47420b7383f16ffa0af3b792b8423584735f369f%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbcd7b477df55857bb6cae21fcc4404683ac98aac1a47551f0dc55486%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbd9a837a18ca57ac0d9b4165a6eec95ee132f55d025666fe41099f33%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4779abc1cface47e956cf9f8910f15d79c24477e7b1ac9be076a825%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc4dbc9907b0bdd634200ac90a15283d9c143c11af66e7ec72128d020%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc6c43c3180c0efe00497c73dd374cd34b62036cb67987ad42c1f2dce%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc907ed7b089828364437de5ed57fa062330970dc1bc5cd214b711f77%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcdea97f4d3233298296aabc103c9fcefbf629425418c2b69bb16745f%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd0471252aeb3384c3cfa6d131374646d4641b80dd313e7b476c47a9c%40%3Cissues.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd24d8a059233167b4a5aebda4b3534ca1d86caa8a85b10a73403ee97%40%3Ccommits.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd6c1eb9a8a94b3ac8a525d74d792924e8469f201b77e1afcf774e7a6%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd755dfe5f658c42704540ad7950cebd136739089c3231658e398cf38%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd7c8fb305a8637480dc943ba08424c8992dccad018cd1405eb2afe0e%40%3Cdev.ignite.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd9ea411a58925cc82c32e15f541ead23cb25b4b2d57a2bdb0341536e%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdbf2a2cd1800540ae50dd78b57411229223a6172117d62b8e57596aa%40%3Cissues.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdde34d53aa80193cda016272d61e6749f8a9044ccb37a30768938f7e%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdf4fe435891e8c35e70ea5da033b4c3da78760f15a8c4212fad89d9f%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdfe5f1c071ba9dadba18d7fb0ff13ea6ecb33da624250c559999eaeb%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re0545ecced2d468c94ce4dcfa37d40a9573cc68ef5f6839ffca9c1c1%40%3Ccommits.hbase.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re3a1617d16a7367f767b8209b2151f4c19958196354b39568c532f26%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re577736ca7da51952c910b345a500b7676ea9931c9b19709b87f292b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re6614b4fe7dbb945409daadb9e1cc73c02383df68bf9334736107a6e%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ree1895a256a9db951e0d97a76222909c2e1f28c1a3d89933173deed6%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf1b02dfccd27b8bbc3afd119b212452fa32e9ed7d506be9357a3a7ec%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf6de4c249bd74007f5f66f683c110535f46e719d2f83a41e8faf295f%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf99f9a25ca24fe519c9346388f61b5b3a09be31b800bf37f01473ad7%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfc9f51b4e21022b3cd6cb6f90791a6a6999560212e519b5f09db0aed%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd3ff6e66b6bbcfb2fefa9f5a20328937c0369b2e142e3e1c6774743%40%3Creviews.spark.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4949",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20291",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-01T18:15:12.603",
      "lastModified" : "2024-11-21T05:46:17.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A deadlock vulnerability was found in 'github.com/containers/storage' in versions before 1.28.1. When a container image is processed, each layer is unpacked using `tar`. If one of those layers is not a valid `tar` archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar unpacked stream, which never finishes. An attacker could use this vulnerability to craft a malicious image, which when downloaded and stored by an application using containers/storage, would then cause a deadlock leading to a Denial of Service (DoS)."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad de interbloqueo en \"github.com/containers/storage\" en versiones anteriores a 1.28.1.&#xa0;Cuando se procesa una imagen de contenedor, cada capa se desempaqueta usando un \"tar\".&#xa0;Si una de esas capas no es un archivo \"tar\" válido, se produce un error que conlleva a una situación inesperada en la que el código espera indefinidamente el flujo desempaquetado de tar, que nunca termina.&#xa0;Un atacante podría utilizar esta vulnerabilidad para crear una imagen maliciosa, que cuando una aplicación la descarga y almacena mediante contenedores y almacenamiento, provocaría un punto muerto que conduciría a una Denegación de Servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:storage_project:storage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "89BBBDA6-01A5-4FB5-B662-8AE0B171CD46"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "932D137F-528B-4526-9A89-CD59FA1AB0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939485",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://unit42.paloaltonetworks.com/cve-2021-20291/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/R5D7XL7FL24TWFMGQ3K2S72EOUSLZMKL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SPYOHNG2Q7DCAQZMGYLMENLKALGDLG3X/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WX24EITRXVHDM5M223BVTJA2ODF2FSHI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZNMB7O2UIXE34PGSCSOULGHPX5LIJBMM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://unit42.paloaltonetworks.com/cve-2021-20291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22195",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-01T18:15:12.713",
      "lastModified" : "2024-11-21T05:49:41.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Client side code execution in gitlab-vscode-extension v3.15.0 and earlier allows attacker to execute code on user system"
      }, {
        "lang" : "es",
        "value" : "Una ejecución de código del lado del cliente en gitlab-vscode-extension versión v3.15.0 y anterior, permite al atacante ejecutar código sobre el sistema de usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab-vscode-extension:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.15.0",
            "matchCriteriaId" : "F6B59CA0-0418-4DEC-A486-E25D59DCE784"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22195.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/325",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22195.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab-vscode-extension/-/issues/325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22876",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-04-01T18:15:12.823",
      "lastModified" : "2025-06-09T15:15:23.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "curl 7.1.1 to and including 7.75.0 is vulnerable to an \"Exposure of Private Personal Information to an Unauthorized Actor\" by leaking credentials in the HTTP Referer: header. libcurl does not strip off user credentials from the URL when automatically populating the Referer: HTTP request header field in outgoing HTTP requests, and therefore risks leaking sensitive data to the server that is the target of the second HTTP request."
      }, {
        "lang" : "es",
        "value" : "curl versiones 7.1.1 hasta 7.75.0 incluyéndola, es vulnerable a una \"Exposure of Private Personal Information to an Unauthorized Actor\" al filtrar credenciales en el encabezado HTTP Referer:.&#xa0;libcurl no elimina las credenciales de usuario de la URL cuando completa automáticamente el campo de encabezado de petición HTTP Referer: en peticiones HTTP salientes y, por lo tanto, corre el riesgo de filtrar datos confidenciales al servidor que es el objetivo de la segunda petición HTTP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-359"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.1",
            "versionEndIncluding" : "7.75.0",
            "matchCriteriaId" : "E7911980-1217-467C-8423-6D8928FACF70"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7447BC-F315-4298-A822-549942FC118B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DEB4FB-A21D-4CB1-B522-EEE5093E8521"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046FB51E-B768-44D3-AEB5-D857145CA840"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39D442D-1997-49AF-8B02-5640BE2A26CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.se/docs/CVE-2021-22876.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1101882",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-36",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0007/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.se/docs/CVE-2021-22876.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1101882",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22890",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-04-01T18:15:12.917",
      "lastModified" : "2025-06-09T15:15:24.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets. When using a HTTPS proxy and TLS 1.3, libcurl can confuse session tickets arriving from the HTTPS proxy but work as if they arrived from the remote server and then wrongly \"short-cut\" the host handshake. When confusing the tickets, a HTTPS proxy can trick libcurl to use the wrong session ticket resume for the host and thereby circumvent the server TLS certificate check and make a MITM attack to be possible to perform unnoticed. Note that such a malicious HTTPS proxy needs to provide a certificate that curl will accept for the MITMed server for an attack to work - unless curl has been told to ignore the server certificate check."
      }, {
        "lang" : "es",
        "value" : "curl  versiones 7.63.0 hasta 7.75.0 incluyéndola, incluye una vulnerabilidad que permite que un proxy HTTPS malicioso acceda a una conexión MITM debido al manejo inapropiado de los tickets de sesión de TLS versión 1.3.&#xa0;Cuando se usa un proxy HTTPS y TLS 1.3, libcurl puede confundir los tickets de sesión que llegan del proxy HTTPS pero funciona como si llegaran del servidor remoto y luego \"short-cut\" incorrectamente el protocolo de enlace del host.&#xa0;Al confundir los tickets, un proxy HTTPS puede engañar a libcurl para que utilice la reanudación del ticket de sesión incorrecta para el host y, por lo tanto, omitir la verificación del certificado TLS del servidor y hacer que un ataque MITM sea posible de realizar sin ser detectado.&#xa0;Tome en cuenta que dicho proxy HTTPS malicioso debe proporcionar un certificado que curl aceptará para el servidor MITMed para que funcione un ataque, a menos que se le haya dicho a curl que ignore la verificación del certificado del servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-300"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:haxx:libcurl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.63.0",
            "versionEndIncluding" : "7.75.0",
            "matchCriteriaId" : "261AE6A4-223F-4131-BB3D-B97EDDBDA37A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DEB4FB-A21D-4CB1-B522-EEE5093E8521"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:fabric_operating_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "046FB51E-B768-44D3-AEB5-D857145CA840"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39D442D-1997-49AF-8B02-5640BE2A26CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase:21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394A16F2-CCD4-44E5-BF6B-E0C782A9FA38"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndExcluding" : "8.2.12",
            "matchCriteriaId" : "5722E753-75DE-4944-A11B-556CB299B57D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.6",
            "matchCriteriaId" : "DC0F9351-81A4-4FEA-B6B5-6E960A933D32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:splunk:universal_forwarder:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED24E67-2957-4C1B-8FEA-E2D2FE7B97FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.se/docs/CVE-2021-22890.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1129529",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/",
        "source" : "support@hackerone.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-36",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0007/",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://curl.se/docs/CVE-2021-22890.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1129529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2ZC5BMIOKLBQJSFCHEDN2G2C2SH274BP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ITVWPVGLFISU5BJC2BXBRYSDXTXE2YGC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KQUIOYX2KUU6FIUZVB5WWZ6JHSSYSQWJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25924",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-04-01T18:15:12.997",
      "lastModified" : "2024-11-21T05:55:36.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In GoCD, versions 19.6.0 to 21.1.0 are vulnerable to Cross-Site Request Forgery due to missing CSRF protection at the `/go/api/config/backup` endpoint. An attacker can trick a victim to click on a malicious link which could change backup configurations or execute system commands in the post_backup_script field."
      }, {
        "lang" : "es",
        "value" : "En GoCD, versiones 19.6.0 hasta 21.1.0, son vulnerables a un ataque de tipo Cross-Site Request Forgery debido a la falta de protección CSRF en el endpoint \"/go/api/config/backup\".&#xa0;Un atacante puede engañar a una víctima para que haga clic en un enlace malicioso que podría cambiar la configuración de la copia de seguridad o ejecutar comandos del sistema en el campo post_backup_script."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thoughtworks:gocd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.6.0",
            "versionEndExcluding" : "21.2.0",
            "matchCriteriaId" : "89B93525-69E5-40CF-BBC6-0D5608C7783C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gocd/gocd/commit/7d0baab0d361c377af84994f95ba76c280048548",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924%2C",
        "source" : "vulnerabilitylab@mend.io"
      }, {
        "url" : "https://github.com/gocd/gocd/commit/7d0baab0d361c377af84994f95ba76c280048548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25924%2C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3447",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-01T18:15:13.073",
      "lastModified" : "2024-11-21T06:21:32.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in several ansible modules, where parameters containing credentials, such as secrets, were being logged in plain-text on managed nodes, as well as being made visible on the controller node when run in verbose mode. These parameters were not protected by the no_log feature. An attacker can take advantage of this information to steal those credentials, provided when they have access to the log files containing them. The highest threat from this vulnerability is to data confidentiality. This flaw affects Red Hat Ansible Automation Platform in versions before 1.2.2 and Ansible Tower in versions before 3.8.2."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en varios módulos de ansible, donde los parámetros que contenían credenciales, como secretos, se registraban en texto plano en los nodos administrados, y también se hacían visibles en el nodo del controlador cuando se ejecutaban en modo detallado.&#xa0;Estos parámetros no estaban protegidos por la función no_log.&#xa0;Un atacante puede aprovechar esta información para robar esas credenciales, siempre que tenga acceso a los archivos de registro que las contienen.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos.&#xa0;Este fallo afecta a Red Hat Ansible Automation Platform en versiones anteriores a 1.2.2 y Ansible Tower en versiones anteriores a 3.8.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.2",
            "matchCriteriaId" : "99E5FDF0-2BEC-46CC-A00A-875E8D8C13D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.2",
            "matchCriteriaId" : "9E7763D0-93C5-4760-8B95-ABA93ED525A2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939349",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MS4VPUYVLGSAKOX26IT52BSMEZRZ3KS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBZ75MAMVQVZROPYHMRDQKPPVASP63DG/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUTGO4RS4ZXZSPBU2CHVPT75IAFVTTL3/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/12/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2MS4VPUYVLGSAKOX26IT52BSMEZRZ3KS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JBZ75MAMVQVZROPYHMRDQKPPVASP63DG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RUTGO4RS4ZXZSPBU2CHVPT75IAFVTTL3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20078",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-01T19:15:13.450",
      "lastModified" : "2024-11-21T05:45:53.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component. This allows a remote attacker to remotely delete any directory or directories on the OS."
      }, {
        "lang" : "es",
        "value" : "Las compilaciones de Manage Engine OpManager por debajo de 125346, son vulnerables a una vulnerabilidad de denegación de servicio remota debido a un problema de salto de ruta en el componente spark gateway.&#xa0;Esto permite que un atacante remoto elimine remotamente cualquier directorio o directorios del sistema operativo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:C/A:C",
            "baseScore" : 9.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5",
            "matchCriteriaId" : "0026FC79-6554-4B68-89EB-D7A8422C7406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125000:*:*:*:*:*:*",
            "matchCriteriaId" : "94F878CC-E691-41E9-A90D-72EA25038963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125002:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EA156-BD95-4AAA-B688-0CD62CCDB60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125100:*:*:*:*:*:*",
            "matchCriteriaId" : "8033E51C-D261-4A12-96CD-AE1F13BFD2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125101:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE1E1E6-ED1C-443A-A576-AD47D65082B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125102:*:*:*:*:*:*",
            "matchCriteriaId" : "3E283214-CE6A-4CD6-9E9B-7BF09C37447D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125108:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF84A5E-C43B-4637-B725-1087D2057EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125110:*:*:*:*:*:*",
            "matchCriteriaId" : "25AEF257-E1C1-4DFD-9EC0-9B2AC3920CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125111:*:*:*:*:*:*",
            "matchCriteriaId" : "46E32091-F91D-4706-A4F9-DC658CF36A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125112:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7D1106-6708-4A84-A077-286376C72AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125113:*:*:*:*:*:*",
            "matchCriteriaId" : "071B3368-D7C2-4EE1-808F-1F4A3C3A4756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125114:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9D5882-91D6-4E9D-AD8B-F3861D987826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125116:*:*:*:*:*:*",
            "matchCriteriaId" : "17931D40-369C-430F-B5ED-FAF69FAA0E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125117:*:*:*:*:*:*",
            "matchCriteriaId" : "02B4D022-BC43-4041-BA2B-60A6D42AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125118:*:*:*:*:*:*",
            "matchCriteriaId" : "15FFD3F7-CB9F-4FB1-9F2C-CFDAE7E46FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125120:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED17849-BC14-4996-9DF9-7645B1E17374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125121:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F6CC5-EDBE-420F-8871-03B8D10254B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125123:*:*:*:*:*:*",
            "matchCriteriaId" : "E82C682C-9F61-45B7-B934-8D6DDBA792AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125124:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7728B-9FFC-4A8F-BE24-926B8C2823AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125125:*:*:*:*:*:*",
            "matchCriteriaId" : "78BE6CCE-706E-436B-A6E6-26E7D044B209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125136:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD54A67-C531-4642-90D4-C6E402D55AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125137:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF164BD-EF39-42E2-807D-F298D68A8D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125139:*:*:*:*:*:*",
            "matchCriteriaId" : "5D85766D-1BAC-4477-96D6-EA989D392128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125140:*:*:*:*:*:*",
            "matchCriteriaId" : "CE99520F-C8F3-46EA-9BBA-AAE2AB4AB8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125143:*:*:*:*:*:*",
            "matchCriteriaId" : "16D8A8F6-8BC3-438D-BF8B-9E2B46ECBF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125144:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D18E27-EE06-4555-A675-1BAC7D3DD8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125145:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEFDFF7-5538-4C53-922A-A5E71A0D643E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125156:*:*:*:*:*:*",
            "matchCriteriaId" : "02463016-7156-470F-8535-EF4C7E150546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125157:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEB616C-2DDC-4138-B6FC-8B2680D35485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125158:*:*:*:*:*:*",
            "matchCriteriaId" : "D51E7B22-9293-4086-B143-2D279597A5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125159:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4D8585-6109-45C0-94B4-667D11F0509F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125161:*:*:*:*:*:*",
            "matchCriteriaId" : "97CB62BA-09FA-446D-A8CF-958980B67F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125163:*:*:*:*:*:*",
            "matchCriteriaId" : "F871111C-4B61-4C50-ABDA-78D8D988DCD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125174:*:*:*:*:*:*",
            "matchCriteriaId" : "9950CFB9-FCDE-4696-97AF-251467270375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125175:*:*:*:*:*:*",
            "matchCriteriaId" : "B674CFD8-6AE7-420A-BD7A-DD7A068CA5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125176:*:*:*:*:*:*",
            "matchCriteriaId" : "56BCA911-733C-4F8C-B3CD-22F3E6CA1F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125177:*:*:*:*:*:*",
            "matchCriteriaId" : "A1281E75-AC6D-4077-9207-7CA7E5BCB1CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125178:*:*:*:*:*:*",
            "matchCriteriaId" : "CC052CBA-2B37-4E84-978D-36185EE1A3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125180:*:*:*:*:*:*",
            "matchCriteriaId" : "72CC7428-8DD0-45DB-8D80-C02CD9B6CB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125181:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1691B0-FA38-4A29-8D49-D99A675C122A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125192:*:*:*:*:*:*",
            "matchCriteriaId" : "194ACE61-101D-40C3-9377-12039533AB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125193:*:*:*:*:*:*",
            "matchCriteriaId" : "86428D44-03BC-4528-ADB5-3AC05231759D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125194:*:*:*:*:*:*",
            "matchCriteriaId" : "B694D0FC-320A-44F9-9FFB-0706CDD3004C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125195:*:*:*:*:*:*",
            "matchCriteriaId" : "BE298317-10EE-4A34-B4D0-8D03B727A75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125196:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A1B243-163D-461B-BEAB-81E6E2DB36EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125197:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86C3A0-700E-4CB2-AFDC-F203C61D413C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125198:*:*:*:*:*:*",
            "matchCriteriaId" : "A550184D-13BD-4F2A-9DE5-AC66B496FFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125201:*:*:*:*:*:*",
            "matchCriteriaId" : "538BCF38-69B6-4686-B1F1-82B10175CCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125204:*:*:*:*:*:*",
            "matchCriteriaId" : "F29A6AE3-B864-4552-9BE9-074CB6935B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125212:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD2AB8D-F638-48E0-A5D6-1E969F9998B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125213:*:*:*:*:*:*",
            "matchCriteriaId" : "76528168-A54D-4398-B558-6DC27ACCBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125214:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1DCA3B-41B8-402B-B5E8-2C3494C36B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125215:*:*:*:*:*:*",
            "matchCriteriaId" : "531A9E5C-9C45-4982-8ADE-5B41CE5F5B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125216:*:*:*:*:*:*",
            "matchCriteriaId" : "FA70F031-A7EF-49F5-A1F6-C3DD33198D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125228:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF093BF-830B-4C9A-A4B2-41C7811E4EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125229:*:*:*:*:*:*",
            "matchCriteriaId" : "AB64E7D3-D835-4F46-BD81-6B59CF7EB9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125230:*:*:*:*:*:*",
            "matchCriteriaId" : "A2176672-0E34-4B46-9202-483F1D315836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125231:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD2726E-4AAA-4E7D-A8E7-89DB875E7E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125232:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF723B-F1B7-44A8-B654-7C10881A6AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125233:*:*:*:*:*:*",
            "matchCriteriaId" : "0C65E8BE-968F-4AB8-BD3F-A123C66E576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125312:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4C70B1-A902-4835-BFFC-692CA91C1317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125323:*:*:*:*:*:*",
            "matchCriteriaId" : "06FE113C-94B6-419B-8AA0-767EA74D11ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125324:*:*:*:*:*:*",
            "matchCriteriaId" : "C30413D5-7F5B-47EE-825E-CEEF69DAC5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125326:*:*:*:*:*:*",
            "matchCriteriaId" : "57DA6C66-3235-4923-89D0-EF093FF4126F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125328:*:*:*:*:*:*",
            "matchCriteriaId" : "82307372-C2CF-4E19-9D1D-7D33FCCE8F5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125329:*:*:*:*:*:*",
            "matchCriteriaId" : "A5289D80-1C75-4819-B615-8259B25B1E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125340:*:*:*:*:*:*",
            "matchCriteriaId" : "25CC8F8B-9072-41E3-8045-25D12EE22427"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125341:*:*:*:*:*:*",
            "matchCriteriaId" : "6000E214-BF19-469C-A7CA-CC91465B2CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125342:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA9EA4B-DD82-46E7-9C44-77AC076F61CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125343:*:*:*:*:*:*",
            "matchCriteriaId" : "50E697EA-0A78-477D-B726-AC54EE868244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125344:*:*:*:*:*:*",
            "matchCriteriaId" : "E64AAB62-43C4-4284-B2AA-1DC55B972803"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-10",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21982",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-04-01T19:15:13.560",
      "lastModified" : "2024-11-21T05:49:22.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware Carbon Black Cloud Workload appliance 1.0.0 and 1.01 has an authentication bypass vulnerability that may allow a malicious actor with network access to the administrative interface of the VMware Carbon Black Cloud Workload appliance to obtain a valid authentication token. Successful exploitation of this issue would result in the attacker being able to view and alter administrative configuration settings."
      }, {
        "lang" : "es",
        "value" : "El dispositivo VMware Carbon Black Cloud Workload versiones 1.0.0 y 1.01, tiene una vulnerabilidad de omisión de autenticación que puede permitir que un actor malicioso con acceso a la red para la interfaz administrativa del dispositivo VMware Carbon Black Cloud Workload obtenga un token de autenticación válido.&#xa0;Una explotación con éxito de este problema daría como resultado que el atacante pudiera visualizar y modificar la configuración administrativa."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vmware:carbon_black_cloud_workload:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "CAAD90C5-9B4C-47B0-A43D-72AF6E8A9901"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0005.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26072",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-04-01T19:15:13.623",
      "lastModified" : "2024-11-21T05:55:48.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WidgetConnector plugin in Confluence Server and Confluence Data Center before version 5.8.6 allowed remote attackers to manipulate the content of internal network resources via a blind Server-Side Request Forgery (SSRF) vulnerability."
      }, {
        "lang" : "es",
        "value" : "El plugin WidgetConnector en Confluence Server y Confluence Data Center anterior a versión 5.8.6, permitía a atacantes remotos manipular el contenido de los recursos de la red interna a través de una vulnerabilidad de tipo Server-Side Request Forgery (SSRF) ciega del servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.6",
            "matchCriteriaId" : "E9AAFFA9-E8EC-4F83-B38B-2B0A8C04DD59"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.8.6",
            "matchCriteriaId" : "3DE645E0-3780-4919-AE6F-ECFA55F3E3F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-61399",
        "source" : "security@atlassian.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/CONFSERVER-61399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26580",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-01T19:15:13.687",
      "lastModified" : "2024-11-21T05:56:31.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE iLO Amplifier Pack. The vulnerability could be remotely exploited to allow Cross-Site Scripting (XSS). HPE has provided the following software update to resolve the vulnerability in HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 or later."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una posible vulnerabilidad de seguridad en HPE iLO Amplifier Pack. La vulnerabilidad podría ser explotada remotamente para permitir el Cross-Site Scripting (XSS). HPE ha proporcionado la siguiente actualización de software para resolver la vulnerabilidad en HPE iLO Amplifier Pack: HPE iLO Amplifier Pack 1.95 o posterior"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hpe:integrated_lights-out_amplifier:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.95",
            "matchCriteriaId" : "CF1000DB-38E8-4A00-B28C-B717974FC04E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04107en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04107en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26581",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-01T19:15:13.887",
      "lastModified" : "2024-11-21T05:56:31.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A potential security vulnerability has been identified in HPE Superdome Flex server. A denial of service attack can be remotely exploited leaving hung connections to the BMC web interface. The monarch BMC must be rebooted to recover from this situation. Other BMC management is not impacted. HPE has made the following software update to resolve the vulnerability in HPE Superdome Flex Server: Superdome Flex Server Firmware 3.30.142 or later."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad potencial en el servidor HPE Superdome Flex.&#xa0;Un ataque de denegación de servicio se puede explotar remotamentea dejando conexiones colgadas en la interfaz web de BMC.&#xa0;El monarch BMC debe reiniciarse para recuperarse de esta situación.&#xa0;Otra gestión de BMC no está afectada.&#xa0;HPE ha realizado la siguiente actualización de software para resolver la vulnerabilidad en HPE Superdome Flex Server: Superdome Flex Server Firmware versión 3.30.142 o posterior."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hpe:superdome_flex_server_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.30.142",
            "matchCriteriaId" : "9C8D1DC0-6F06-465A-B3C4-BD7D0ED3C713"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hpe:superdome_flex_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74B3DA6F-91D3-4C17-A34B-6AA6B9642B3F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04102en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbhf04102en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26718",
      "sourceIdentifier" : "vulnerability@kaspersky.com",
      "published" : "2021-04-01T19:15:13.950",
      "lastModified" : "2024-11-21T05:56:44.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "KIS for macOS in some use cases was vulnerable to AV bypass that potentially allowed an attacker to disable anti-virus protection."
      }, {
        "lang" : "es",
        "value" : "KIS para macOS en algunos casos de uso era vulnerable a la omisión de AV que potencialmente permitía a un atacante deshabilitar la protección antivirus."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kaspersky:internet_security:*:*:*:*:*:macos:*:*",
            "versionEndExcluding" : "21.1",
            "matchCriteriaId" : "750382DA-D225-4028-B115-46B8F1CAE9A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310321",
        "source" : "vulnerability@kaspersky.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://support.kaspersky.com/general/vulnerability.aspx?el=12430#310321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27653",
      "sourceIdentifier" : "security@pega.com",
      "published" : "2021-04-01T19:15:14.077",
      "lastModified" : "2024-11-21T05:58:22.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Misconfiguration of the Pega Chat Access Group portal in Pega platform 7.4.0 - 8.5.x could lead to unintended data exposure."
      }, {
        "lang" : "es",
        "value" : "La configuración incorrecta del portal Pega Chat Access Group en la plataforma Pega versiones 7.4.0 - 8.5.x podría conllevar a una exposición de datos no intencionada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@pega.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@pega.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "8.5.3",
            "matchCriteriaId" : "131DFBF1-FD9D-4002-A1A8-E76CE5D1529D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-b21",
        "source" : "security@pega.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records/",
        "source" : "security@pega.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://collaborate.pega.com/discussion/pega-security-advisory-%E2%80%93-b21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://robertwillishacking.com/census-vulnerability-exposes-10k-oauth-tokens-thousands-of-user-records/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28969",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T20:15:12.330",
      "lastModified" : "2024-11-21T06:00:28.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eMPS 9.0.1.923211 on FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the sort_by parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3. NOTE: this is different from CVE-2020-25034 and affects newer versions of the software."
      }, {
        "lang" : "es",
        "value" : "eMPS versión 9.0.1.923211, en dispositivos FireEye EX 3500 permite a los usuarios autenticados remotamente llevar a cabo ataques de inyección SQL a través del parámetro sort_by en la funcionalidad email search.&#xa0;Según el proveedor, el problema se solucionó en la versión 9.0.3.&#xa0;NOTA: esto es diferente de CVE-2020-25034 y afecta a las versiones más recientes del software."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fireeye:email_malware_protection_system:9.0.1.923211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5117D-A68A-48F9-8346-A5A2B6FECE67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fireeye:ex_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AC2BDE-60CE-40FD-AC51-F89BDB22FF3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-005.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-005.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28970",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T20:15:12.393",
      "lastModified" : "2024-11-21T06:00:28.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "eMPS 9.0.1.923211 on the Central Management of FireEye EX 3500 devices allows remote authenticated users to conduct SQL injection attacks via the job_id parameter to the email search feature. According to the vendor, the issue is fixed in 9.0.3."
      }, {
        "lang" : "es",
        "value" : "eMPS versión 9.0.1.923211 en la Central Management de FireEye EX 3500, permite a los usuarios autenticados remotamente llevar a cabo ataques de inyección SQL a través del parámetro job_id en la funcionalidad email search.&#xa0;Según el proveedor, el problema se solucionó en la versión 9.0.3."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fireeye:email_malware_protection_system:9.0.1.923211:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44B5117D-A68A-48F9-8346-A5A2B6FECE67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fireeye:ex_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62AC2BDE-60CE-40FD-AC51-F89BDB22FF3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-006.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-006.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T20:15:12.453",
      "lastModified" : "2024-11-21T06:01:03.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "models/metadata.py in the pikepdf package 1.3.0 through 2.9.2 for Python allows XXE when parsing XMP metadata entries."
      }, {
        "lang" : "es",
        "value" : "El archivo models/metadata.py en el paquete pikepdf versión 1.3.0 hasta 2.9.2 para Python, permite un XXE cuando se analizan las entradas de metadatos XMP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pikepdf_project:pikepdf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndIncluding" : "2.9.2",
            "matchCriteriaId" : "99E6894E-7B74-4B97-A3D5-7A5C0CA01A3E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pikepdf/pikepdf/blob/v2.10.0/docs/release_notes.rst#v2100",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pikepdf/pikepdf/commit/3f38f73218e5e782fe411ccbb3b44a793c0b343a",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36P4HTLBJPO524WMQWW57N3QRF4RFSJG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QFLBBYGEDNXJ7FS6PIWTVI4T4BUPGEQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/pikepdf/pikepdf/blob/v2.10.0/docs/release_notes.rst#v2100",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pikepdf/pikepdf/commit/3f38f73218e5e782fe411ccbb3b44a793c0b343a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36P4HTLBJPO524WMQWW57N3QRF4RFSJG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3QFLBBYGEDNXJ7FS6PIWTVI4T4BUPGEQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28047",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T21:15:12.167",
      "lastModified" : "2024-11-21T05:59:02.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Scripting (XSS) in Administrative Reports in Devolutions Remote Desktop Manager before 2021.1 allows remote authenticated users to inject arbitrary web script or HTML via multiple input fields."
      }, {
        "lang" : "es",
        "value" : "Cross-Site Scripting (XSS) en Administrative Reports en Devolutions Remote Desktop Manager versiones anteriores a 2021.1, permite a los usuarios autenticados remotamente inyectar scripts web o HTML arbitrarios a través de múltiples campos de entrada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.1.0",
            "matchCriteriaId" : "ADC43C69-A8D9-4380-AF73-0C1D9665AE5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21416",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-01T22:15:11.653",
      "lastModified" : "2024-11-21T05:48:19.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "django-registration is a user registration package for Django. The django-registration package provides tools for implementing user-account registration flows in the Django web framework. In django-registration prior to 3.1.2, the base user-account registration view did not properly apply filters to sensitive data, with the result that sensitive data could be included in error reports rather than removed automatically by Django. Triggering this requires: A site is using django-registration < 3.1.2, The site has detailed error reports (such as Django's emailed error reports to site staff/developers) enabled and a server-side error (HTTP 5xx) occurs during an attempt by a user to register an account. Under these conditions, recipients of the detailed error report will see all submitted data from the account-registration attempt, which may include the user's proposed credentials (such as a password)."
      }, {
        "lang" : "es",
        "value" : "django-registration es un paquete de registro de usuarios para Django.&#xa0;El paquete django-registration proporciona herramientas para implementar flujos de registro de cuentas de usuario en el framework web de Django.&#xa0;En django-registration anterior a versión 3.1.2, la vista de registro de la cuenta de usuario base no aplicaba filtros correctamente a los datos confidenciales, con el resultado de que los datos confidenciales podrían incluirse en los reportes de errores en lugar de ser eliminados automáticamente por Django.&#xa0;Activar esto requiere: Un sitio está usando django-registration versiones anteriores a 3.1.2, El sitio tiene reportes de error detallados (como los reportes de error enviados por correo electrónico de Django al personal y desarrolladores del sitio) habilitados y se produce un error del lado del servidor (HTTP 5xx) durante un intento de por parte de un usuario de un registro de cuenta.&#xa0;Bajo estas condiciones, los destinatarios del reporte de error detallado verán todos los datos enviados desde el intento de registro de la cuenta, que pueden incluir las credenciales propuestas del usuario (tales como una contraseña)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 2.6,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:django-registration_project:django-registration:*:*:*:*:*:django:*:*",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "8F73EB1B-920E-43CB-9A00-179AA53784FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ubernostrum/django-registration/security/advisories/GHSA-58c7-px5v-82hh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ubernostrum/django-registration/security/advisories/GHSA-58c7-px5v-82hh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21420",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-01T22:15:11.887",
      "lastModified" : "2024-11-21T05:48:19.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vscode-stripe is an extension for Visual Studio Code. A vulnerability in Stripe for Visual Studio Code extension exists when it loads an untrusted source-code repository containing malicious settings. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. The update addresses the vulnerability by modifying the way the extension validates its settings."
      }, {
        "lang" : "es",
        "value" : "vscode-stripe es una extensión para Visual Studio Code.&#xa0;Se presenta una vulnerabilidad en la extensión Stripe para Visual Studio Code cuando carga un repositorio de código fuente que no sea de confianza y que contiene configuraciones maliciosas.&#xa0;Un atacante que aproveche con éxito la vulnerabilidad podría ejecutar código arbitrario en el contexto del usuario actual.&#xa0;La actualización corrige la vulnerabilidad al modificar la forma en que la extensión valida su configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stripe:stripe:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "1.7.3",
            "matchCriteriaId" : "647F127E-A4EB-4B71-8FBC-EA607871BB61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/stripe/vscode-stripe/security/advisories/GHSA-j6x4-4622-8vv3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stripe/vscode-stripe/security/advisories/GHSA-j6x4-4622-8vv3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21421",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-01T22:15:11.997",
      "lastModified" : "2024-11-21T05:48:19.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "node-etsy-client is a NodeJs Etsy ReST API Client. Applications that are using node-etsy-client and reporting client error to the end user will offer api key value too This is fixed in node-etsy-client v0.3.0 and later."
      }, {
        "lang" : "es",
        "value" : "node-etsy-client es un cliente API de NodeJs Etsy ReST.&#xa0;Las aplicaciones que usan node-etsy-client y reportan errores del cliente al usuario final también ofrecerán un valor de clave de la api. Esto se corrigió en node-etsy-client v0.3.0 y posteriores."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-209"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:node-etsy-client_project:node-etsy-client:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "0.3.0",
            "matchCriteriaId" : "F2CBC6A7-387B-49BF-ADD1-3FF50A02D632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/creharmony/node-etsy-client/commit/b4beb8ef080366c1a87dbf9e163051a446acaa7d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/creharmony/node-etsy-client/security/advisories/GHSA-xw22-wv29-3299",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/creharmony/node-etsy-client/commit/b4beb8ef080366c1a87dbf9e163051a446acaa7d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/creharmony/node-etsy-client/security/advisories/GHSA-xw22-wv29-3299",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T22:15:12.247",
      "lastModified" : "2024-11-21T05:52:02.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Devolutions Server before 2020.3. There is broken access control on Password List entry elements."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Devolutions Server versiones anteriores a 2020.3.&#xa0;Se presenta un control de acceso roto en los elementos de entrada de la Lista de Contraseñas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "00230514-E551-4FCE-9C86-93F2C29F1D0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23922",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T22:15:12.310",
      "lastModified" : "2024-11-21T05:52:02.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Devolutions Remote Desktop Manager before 2020.2.12. There is a cross-site scripting (XSS) vulnerability in webviews."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Devolutions Remote Desktop Manager versiones anteriores a 2020.2.12.&#xa0;Se presenta una vulnerabilidad de tipo cross-site scripting en las vistas web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:remote_desktop_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.2.12.0",
            "matchCriteriaId" : "B597BFF9-D5BD-4EAE-B686-77B3AD01A5F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0001",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23923",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T22:15:12.373",
      "lastModified" : "2024-11-21T05:52:03.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Devolutions Server before 2020.3. There is Broken Authentication with Windows domain users."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Devolutions Server versiones anteriores a 2020.3.&#xa0;Se presenta una autenticación rota con los usuarios del dominio de Windows."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "00230514-E551-4FCE-9C86-93F2C29F1D0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T22:15:12.420",
      "lastModified" : "2024-11-21T05:52:03.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Devolutions Server before 2020.3. There is an exposure of sensitive information in diagnostic files."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Devolutions Server versiones anteriores a 2020.3.&#xa0;Se presenta una exposición de información confidencial en archivos de diagnóstico."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "00230514-E551-4FCE-9C86-93F2C29F1D0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-01T22:15:12.483",
      "lastModified" : "2024-11-21T05:52:03.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Devolutions Server before 2020.3. There is a cross-site scripting (XSS) vulnerability in entries of type Document."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Devolutions Server versiones anteriores a 2020.3.&#xa0;Se presenta una vulnerabilidad de tipo cross-site scripting en las entradas de tipo Documento."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.3",
            "matchCriteriaId" : "00230514-E551-4FCE-9C86-93F2C29F1D0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/devo-2021-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30002",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T05:15:12.767",
      "lastModified" : "2024-11-21T06:03:12.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel before 5.11.3 when a webcam device exists. video_usercopy in drivers/media/v4l2-core/v4l2-ioctl.c has a memory leak for large arguments, aka CID-fb18802a338b."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones anteriores a 5.11.3, cuando se presenta un dispositivo webcam.&#xa0;video_usercopy en el archivo drivers/media/v4l2-core/v4l2-ioctl.c, presenta una pérdida de memoria para argumentos grandes, también se conoce como CID-fb18802a338b."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.3",
            "matchCriteriaId" : "290C9023-F1BC-4A98-B27E-C9FE1C938DBC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1184120",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb18802a338b36f675a388fc03d2aa504a0d0899",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1184120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.11.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=fb18802a338b36f675a388fc03d2aa504a0d0899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T05:15:13.217",
      "lastModified" : "2024-11-21T06:03:13.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 devices. There is Stored XSS in the administrative interface via urlfilter.cgi?add url_address."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos Nokia G-120W-F versión 3FE46606AGAB91.&#xa0;Se presenta una vulnerabilidad de tipo XSS almacenado en la interfaz administrativa por medio de url_address urlfilter.cgi?add."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nokia:g-120w-f_firmware:3fe46606agab91:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6DDAB72-87BF-48D4-9643-4A4D6D60D904"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nokia:g-120w-f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AB1E14-E818-4C7E-8D37-645BECE1F91E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://research.0xdutra.com/posts/router-g120w-f/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://research.0xdutra.com/posts/router-g120w-f/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30004",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T05:15:13.313",
      "lastModified" : "2024-11-21T06:03:13.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In wpa_supplicant and hostapd 2.9, forging attacks may occur because AlgorithmIdentifier parameters are mishandled in tls/pkcs1.c and tls/x509v3.c."
      }, {
        "lang" : "es",
        "value" : "En wpa_supplicant y hostapd versión 2.9, los ataques de falsificación pueden ocurrir porque los parámetros AlgorithmIdentifier son manejados inapropiadamente en los archivos tls/pkcs1.c y tls/x509v3.c."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:hostapd:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF4AE8EA-985A-471B-A423-591D604D6C0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:w1.fi:wpa_supplicant:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA940F9-A024-41FD-9B35-956788414E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202309-16",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202309-16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://w1.fi/cgit/hostap/commit/?id=a0541334a6394f8237a4393b7372693cd7e96f15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30000",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T09:15:13.127",
      "lastModified" : "2024-11-21T06:03:12.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in LATRIX 0.6.0. SQL injection in the txtaccesscode parameter of inandout.php leads to information disclosure and code execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en LATRIX versión 0.6.0.&#xa0;Una inyección SQL en el parámetro txtaccesscode del archivo inandout.php conlleva a una divulgación de información y una ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:latrix_project:latrix:0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C183DCD-EC48-4DE8-97FB-88AD4D691E21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-30000",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/latrix/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cptsticky/A-0day-Per-Day-Keeps-The-Cope-Away/blob/main/CVE-2021-30000",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/latrix/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22696",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-02T10:15:12.200",
      "lastModified" : "2024-11-21T05:50:28.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a \"request\" parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the \"request_uri\" parameter. CXF was not validating the \"request_uri\" parameter (apart from ensuring it uses \"https) and was making a REST request to the parameter in the request to retrieve a token. This means that CXF was vulnerable to DDos attacks on the authorization server, as specified in section 10.4.1 of the spec. This issue affects Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10."
      }, {
        "lang" : "es",
        "value" : "CXF admite (por medio de JwtRequestCodeFilter) pasar parámetros de OAuth 2 por medio de un token JWT en lugar de parámetros de consulta (consulte: El Framework de Autorización de OAuth 2.0: JWT Secured Authorization Request (JAR)).&#xa0;En lugar de enviar un token JWT como un parámetro \"request\", la especificación también admite la especificación de un URI desde el cual recuperar un token JWT por medio del parámetro \"request_uri\".&#xa0;CXF no estaba comprobando el parámetro \"request_uri\" (además de asegurarse de que usa \"https) y estaba realizando una petición REST hacia el parámetro en la petición para recuperar un token. Esto significa que CXF era vulnerable a ataques de DDos en el servidor de autorización, como lo especifica en sección 10.4.1 de la especificación Este problema afecta a Apache CXF versiones anteriores a 3.4.3; Apache CXF versiones anteriores a 3.3.10."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.3.10",
            "matchCriteriaId" : "19CA6A81-4F3E-4342-9C77-AF8416C2D443"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:cxf:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndExcluding" : "3.4.3",
            "matchCriteriaId" : "66C2F29C-4DA4-43E2-9661-A6AAC9696E43"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.9.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "B602F9E8-1580-436C-A26D-6E6F8121A583"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.1.0",
            "matchCriteriaId" : "B5B4A191-44AE-4C35-9164-19237D2CF013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndIncluding" : "8.2.3",
            "matchCriteriaId" : "A543B4F8-149A-48AB-B388-AB7FA2ECAC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19EEAA04-A7BD-4FFF-8B0B-CEE5EC09F75C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4.0",
            "matchCriteriaId" : "9B7C949D-0AB3-4566-9096-014C82FC1CF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.2.4",
            "matchCriteriaId" : "1FDBAD8E-C926-4D6F-9FD2-B0428980D6DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/02/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cxf.apache.org/security-advisories.data/CVE-2021-22696.txt.asc",
        "source" : "security@apache.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6445001cc5f9a2bb1e6316993753306e054bdd1d702656b7cbe59045%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cdev.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cusers.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/02/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cxf.apache.org/security-advisories.data/CVE-2021-22696.txt.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6445001cc5f9a2bb1e6316993753306e054bdd1d702656b7cbe59045%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cdev.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8651c06212c56294a1c0ea61a5ad7790c06502209c03f05c0c7c9914%40%3Cusers.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rec7160382badd3ef4ad017a22f64a266c7188b9ba71394f0d321e2d4%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfb87e0bf3995e7d560afeed750fac9329ff5f1ad49da365129b7f89e%40%3Ccommits.cxf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25893",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T12:15:33.183",
      "lastModified" : "2024-11-21T05:55:33.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the setText parameter of /magnoliaAuthor/.magnolia/."
      }, {
        "lang" : "es",
        "value" : "Magnolia CMS desde la versión 6.1.3 a la versión 6.2.3, contiene una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en el parámetro setText del archivo /magnoliaAuthor/.magnolia/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnolia-cms:magnolia_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.3",
            "versionEndExcluding" : "6.1.7",
            "matchCriteriaId" : "C854C154-B94B-4FB5-BF76-09515EE9F733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnolia-cms:magnolia_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.3",
            "versionEndExcluding" : "6.2.4",
            "matchCriteriaId" : "D9A76470-0E15-4234-B88D-92726156045F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.magnolia-cms.com/product-docs/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#ReleasenotesforMagnoliaCMS6.2.4-Notablebugfixes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.magnolia-cms.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.magnolia-cms.com/product-docs/Releases/Release-notes-for-Magnolia-CMS-6.2.4.html#ReleasenotesforMagnoliaCMS6.2.4-Notablebugfixes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.magnolia-cms.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25894",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T12:15:33.323",
      "lastModified" : "2024-11-21T05:55:33.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magnolia CMS from 6.1.3 to 6.2.3 contains a stored cross-site scripting (XSS) vulnerability in the /magnoliaPublic/travel/members/login.html mgnlUserId parameter."
      }, {
        "lang" : "es",
        "value" : "Magnolia CMS desde la versión 6.1.3 a la versión 6.2.3 contiene una vulnerabilidad de tipo cross site scripting (XSS) almacenado en el parámetro mgnlUserId del archivo /magnoliaPublic/travel/members/login.html"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnolia-cms:magnolia_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.1.3",
            "versionEndExcluding" : "6.1.7",
            "matchCriteriaId" : "C854C154-B94B-4FB5-BF76-09515EE9F733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magnolia-cms:magnolia_cms:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.3",
            "versionEndExcluding" : "6.2.4",
            "matchCriteriaId" : "D9A76470-0E15-4234-B88D-92726156045F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.magnolia-cms.com/projects/MODULES/repos/public-user-registration/commits/80c096c24d39ba2050b778e68ef838d79d4811dc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.magnolia-cms.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://git.magnolia-cms.com/projects/MODULES/repos/public-user-registration/commits/80c096c24d39ba2050b778e68ef838d79d4811dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.itas.vn/itas-security-team-found-multi-vulnerabilities-on-magnolia-cms-platform/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.magnolia-cms.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29011",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T13:15:11.827",
      "lastModified" : "2024-11-21T06:00:31.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php)."
      }, {
        "lang" : "es",
        "value" : "DMA Softlab Radius Manager versión 4.4.0, está afectado por una vulnerabilidad de tipo Cross Site Scripting (XSS) por medio del campo description, name, o address (en el archivo admin.php)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmasoftlab:dma_radius_manager:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913315D2-A5E9-4556-860D-468CCB4583FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1d8/publications/tree/main/cve-2021-29011",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/radiusmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1d8/publications/tree/main/cve-2021-29011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/radiusmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T13:15:11.873",
      "lastModified" : "2024-11-21T06:00:31.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, but is invalid (temporarily) during times when the admin is logged out. In other words, the cookie is functionally equivalent to a static password, and thus provides permanent access if stolen."
      }, {
        "lang" : "es",
        "value" : "DMA Softlab Radius Manager versión 4.4.0, asigna la misma cookie de sesión a cada sesión de administrador.&#xa0;La cookie es válida cuando el administrador está conectado, pero no es válida (temporalmente) durante los momentos en que el administrador está desconectado.&#xa0;En otras palabras, la cookie es funcionalmente equivalente a una contraseña estática y, por lo tanto, proporciona acceso permanente en caso de robo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmasoftlab:dma_radius_manager:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913315D2-A5E9-4556-860D-468CCB4583FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1d8/publications/tree/main/cve-2021-29012",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/radiusmanager/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164154/DMA-Softlab-Radius-Manager-4.4.0-Session-Management-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1d8/publications/tree/main/cve-2021-29012",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/radiusmanager/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29651",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T14:15:13.660",
      "lastModified" : "2024-11-21T06:01:34.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pomerium before 0.13.4 has an Open Redirect (issue 1 of 2)."
      }, {
        "lang" : "es",
        "value" : "Pomerium versiones anteriores a 0.13.4, presenta un redireccionamiento abierto (problema 1 de 2)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pomerium:pomerium:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.13.4",
            "matchCriteriaId" : "723B60CF-8DE8-4FB0-A15D-EB5B00BB396A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pomerium/pomerium/security/advisories/GHSA-35vc-w93w-75c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pomerium/pomerium/security/advisories/GHSA-35vc-w93w-75c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29652",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T14:15:13.723",
      "lastModified" : "2024-11-21T06:01:34.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pomerium from version 0.10.0-0.13.3 has an Open Redirect in the user sign-in/out process"
      }, {
        "lang" : "es",
        "value" : "Pomerium desde la versión 0.10.0-0.13.3, presenta un Redireccionamiento Abierto en el proceso de inicio y cierre de sesión del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pomerium:pomerium:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndIncluding" : "0.13.3",
            "matchCriteriaId" : "92F00DDC-BE68-48E5-AC8E-3402A14707BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pomerium/pomerium/security/advisories/GHSA-fv82-r8qv-ch4v",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pomerium/pomerium/security/advisories/GHSA-fv82-r8qv-ch4v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21400",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-02T15:15:13.007",
      "lastModified" : "2024-11-21T05:48:16.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "wire-webapp is an open-source front end for Wire, a secure collaboration platform. In wire-webapp before version 2021-03-15-production.0, when being prompted to enter the app-lock passphrase, the typed passphrase will be sent into the most recently used chat when the user does not actively give focus to the input field. Input element focus is enforced programatically in version 2021-03-15-production.0."
      }, {
        "lang" : "es",
        "value" : "wire-webapp es una interfaz de código abierto para Wire, una plataforma de colaboración segura.&#xa0;En wire-webapp anterior a la versión 15-03-2021-production.0, cuando ha sido solicitado que ingrese la frase de contraseña app-lock, la frase de contraseña escrita será enviada al chat usado más recientemente cuando el usuario no preste atención activamente al campo de entrada.&#xa0;El enfoque del elemento de entrada es aplicado mediante programación en la versión 15-03-2021-production.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2019-07-11-13-18",
            "matchCriteriaId" : "80784F26-F08F-4030-9EF1-BB5836EA085A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-11:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4BDC0E-5F3B-4DF9-9148-07860F5EB15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-11:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "673E127B-258B-4F7C-9EB2-E0D835053BF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-11:staging2:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5A38F3-5A2F-4BAC-BDD6-C17ED8EA2ABC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-13:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "5D4468DB-3434-48D1-885D-40B1A9337B54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0BD5DC-CAFA-4657-86EE-D233BB605A21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-27:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "CCCF1B28-2BCA-4FB3-936F-CD319E8920A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-28:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "8424FAA9-9EAD-4CFE-9AF2-48F89340C9C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-02-28:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "884CAEF9-F053-475B-A1C5-35E23D3042FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-05:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "5F4D277E-3055-494E-BC5A-CCAD4C1C1845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-07:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A9BC0A08-7606-4E48-BBD2-973C960DD8F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-11:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "12A7C7B7-86E7-4F70-92D9-B6C3C6999BD6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-13:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "7E80152D-6FAD-4741-8CAC-301DF844277C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-13:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "0784BB5A-2CC0-4A63-99AE-39A074933E02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-20:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A44316B8-751F-4CFE-AD46-6B846497C1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-25:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C53CCFBC-2116-4F0C-993B-7CF2906C898A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-25:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "63C519FD-D5A9-4EC4-A9C4-4404C125A74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-28:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D990E0AB-0650-47EC-8AE2-7ACE29019F6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-03-28:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7E941-EF3E-4A7B-8B36-F9FA154B1EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-04-08:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "620C777E-239A-46C9-B428-CD761863B26B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-04-11:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C407CDFD-55BA-45A7-AD3F-BD44B3FD579A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-04-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "3DDC1553-C0AE-4B22-A160-8EE4983E2D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-04-23:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "C25BCBFA-461D-4E1E-A0E3-EEBCE637FB5B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-04-25:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D388C188-D909-40DF-A9A6-075EA946C234"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-04-29:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "9458987D-383E-4BFD-A34A-F7E464CB3AFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-05-14:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "DC6A2B96-9FF0-4B69-BD62-29A343ACF7A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-05-15:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "3FC2FE5A-F13B-4B71-8163-41FEEACAFA63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-05-31:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "025CE142-8B76-4013-A02B-888A6F04034F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-06-04:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "4D4C30AE-5F2D-4309-AD01-00DCA87064C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-06-20:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "6C87BE96-7791-4B4E-877F-C6EE1AB75D60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-06-24:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "FF7C4DE4-30D4-4163-84BC-137B1447753F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-06-25:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAEB35F-B839-4D6D-ADFE-B038C9CDCD83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-06-26:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "551086BF-6882-4F40-A458-331BF1A54732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-07-01:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "74719751-4ED1-42D5-AB9D-8E40A7DC6B66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-07-30:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "EABE2D35-9BA5-461C-8EE3-524C5B971C47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-01:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C686FA3A-FAD2-4711-8FDC-BFECB328F5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-14:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E7C31B-CEEE-4BE0-8BA4-56E3C6F8998C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-19:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A60D9CC5-0F00-4EA6-B598-F8A8969448AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-21:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "16781A10-B098-4B01-BFF2-9464113C8F8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-22:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "829ED145-8FA8-4825-8859-961B3FCE7283"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-22:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "05AE3008-E54C-4D50-A199-F6DC4457555E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-08-27:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "4284544D-0FB9-4A8B-80A0-C1F6DB323C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-02:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "59BF8A05-BDEC-44D2-9F2D-85CCDCD2623F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-05:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E489BC-0EB5-4934-A698-BC1EED867C1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-09:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "0BCBFCF4-B530-4C60-9673-E4A32C3ED888"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-12:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C35CC2-2773-4D97-9945-E5DD16C73AE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-13:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "F2AEF4F3-7C2A-4DCB-8A3E-1E412F8C1DCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-17:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "323CCE05-97E8-4F74-B716-F4FFB25F83E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "9B9F15D8-DD60-47D7-87C6-DE6EBE5EEBDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-23:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "8F1D56EA-7B15-4C58-AD0D-0B1AD186EFB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-09-24:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "20050346-6328-4285-9530-A31080A74A81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-07:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF5B1E7-040A-4184-B441-F50AB90BA00D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-07:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "A7307B91-CF62-40B1-9A90-A493DBBF963C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-08:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "53DEF027-2F50-46CF-978F-B469FDB5ECBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-10:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "17842173-AC4E-4FB2-AB26-0DCD5ABE6FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-10:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "DE255636-9342-470D-8F00-4A2507B056F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-14:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "832F52E6-7CA5-465A-88FE-BAE7E61A7319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-16:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD2EBEA-6352-4CDD-8CE4-C20490088594"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-16:production1:*:*:*:*:*:*",
            "matchCriteriaId" : "E1852CAC-FB66-421E-B8D3-CC67D7004273"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-16:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "9CC369FA-3766-4AA1-AB99-0282608054C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-16:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "5E38F646-BA40-489D-9ADE-4BCB1A0E568C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-21:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "FD0BB660-224C-443A-BFB2-C34612FEB006"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-25:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BDDA5925-E01E-4472-8761-2A9FA18D0E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-29:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "F24A98D6-E1F0-4837-97AF-C02FC65EF194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-10-31:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "5ECB8D94-2140-4891-8D0B-C2C4F770A348"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-01:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "17D80EC6-9496-47C6-8786-8E5FA2FE2AB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-08:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "97F150B2-8BE4-43D8-8A46-9CA3CA2318DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-12:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "596F1AC5-D9AD-4FFA-A2E7-4C3FBA65F647"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-19:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "1E1DB857-278C-466D-B128-BD38D76A42F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-21:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "27973D86-2AF4-4424-9B52-22D27CA1AC88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-21:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "872D4A83-CDBF-4140-BBE8-D7A06D45B23B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-25:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "14E95783-15FE-4997-B091-148D29037F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-11-26:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "E090810E-B2B8-4FD0-B5C8-F8845C6B4CFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-12-12:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "8F42F8CC-218B-4030-A51D-5C488F42E3E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2019-12-20:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FB0C98-559B-4664-9EAA-AFEA642252D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-06:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F68751-1DE7-4AC3-8B45-4D8EB07BFD55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-09:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "89685146-84E2-401F-A0BE-7B7658EAD8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-13:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "45CCC915-90B7-4253-9895-F26F15C0CB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-15:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E4AC25C5-1E49-40A7-9191-523CCAE5B4EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-16:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D9FCCBBE-0451-4344-A695-1EAE380198EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-17:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "779E019F-AB8C-4793-AC68-5C82D5E77A73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-21:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BD045A35-47B0-4753-8CEF-BCF891F8A341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-01-22:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "6AB4E9C2-7BA9-4CD7-8DE1-A492BA5E0289"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-06:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "56102D55-5CE3-4FAA-A29D-2B5630CC316F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-11:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "F808BE69-EF0C-4F2D-A4BC-451F5B58FB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-11:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "098A3E28-FA67-4C9E-8D9C-44ABFB709894"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-14:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "2EECC296-021C-445A-A7B9-450646260F97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "636577A9-6B2B-4404-8626-45B9B5CD8F6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-20:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D8C5A8D4-6DC0-41D9-8FC6-AA8EA001DD91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-24:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "31CF0B9E-6513-4522-BDAB-4C75DE9CB2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-26:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "098C98D9-766B-43F9-AB69-B04F10F6B356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-02-28:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC3CED9-79B3-4E47-A8B1-69A395998F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-03:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "FB483527-C22F-48A2-8746-E18A5A191285"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-03:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "8C0A9B78-7128-4DC7-ABD8-F0761B774B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-06:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1D64AA-C5F7-408D-BFD9-609076E624A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-12:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "87E5EE83-722B-425B-885D-F248FB1E52DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "F07B5066-7224-4069-8C05-3A878F50E789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-20:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C0621ED4-5AEA-40FD-830B-F4478D36F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-23:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "4F8A815A-F44A-478F-948A-FECE9A9BDBFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-03-30:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "40027F50-C9DD-4A59-BF91-9B2C571FC01A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-01:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "42D393CD-9503-4727-8603-7690D5E4A7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-07:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "044587FB-BAE3-4DE0-82B5-7E82E2FFC93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-09:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "0E833562-10A0-4AEB-ADDB-E9596AD8E8D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-16:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "4250771C-7525-40C4-90EF-4EE7AD9CA5C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-21:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "33B2A95F-0228-44E8-984E-53721AC5C8A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-22:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E567BA3D-1154-4ACD-A0BD-4B4848486F52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-23:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "EAA64849-4984-465D-9AFF-3B5B4C638F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-28:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2B4515-AA46-49E3-8D1B-BC32547B281D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-04-29:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "BC553328-4F12-4D7F-8B2C-2B46DA4FCB7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-04:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D0CFDDE4-FDA3-46FA-9752-84000310246D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-06:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A223DAD4-1041-4CA9-A824-DECB7EBFF5C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-07:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "B220B6F7-10E7-483B-9E66-FD8220D78AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-07:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "5BFD81EC-3224-4677-BA40-B06B7A83DF67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-13:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "AF37194D-4C5D-43CA-BA81-98C2E51DE0CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-14:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D97BCDFD-3BA6-4B1E-A51F-8217F2B1D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-15:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "54FF9525-01EC-46A3-AF64-989EBD642C36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "FC6C8FDE-B5D0-4E29-8254-F22CC289F5CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-19:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C88E3237-25F7-4415-A050-23763FBCF284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-20:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "4B1975EE-309E-4F65-A59E-2EA7392C828A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-22:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "3E26353B-CB8E-4B5F-883B-10901B9B38DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-26:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9894C5-27B4-497B-A794-527CFFD12249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-27:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "C05CF72B-A03E-43BC-AEFB-C42665B5590F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-28:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8BCE8F-952A-402E-B2EF-8A6D9F30EB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-05-29:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "DE722C59-67B7-4335-A876-435DC92CFBCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-02:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "82D79908-3921-4E0E-81BA-2B0403B96F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-05:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6E4462-E96D-4CB8-BD6A-57C049F1C2D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-08:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8625E3-4E73-4863-92C4-B5074F571203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-10:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D31C8B93-34C2-4008-B387-FA45B31BF679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-12:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "74D6674D-FC05-45B3-9712-A39915EFE330"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-15:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "19425C14-9FB2-4C0D-90AB-AFA639489935"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-15:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD01F15-EA3E-4A37-9B87-602C4D18DDE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-19:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "5A09C46B-FA37-4BE2-BFF6-FD119822B494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-24:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "2E1BB266-A57E-4F22-970A-FE8D0B6C390C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-06-29:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E35AFBD0-3FEB-4C98-A7E6-B4A22BE8E0E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-07:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "19824B3A-AB55-438C-B61D-2A37858B342B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-07:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4DD45FD-FDC8-4589-9EA4-7D8171E2B1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-13:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E4EAB1BD-13E2-4FC6-88E8-F410E8B02ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-16:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "F30DC106-E2A5-48DD-A4F1-3FBA82214819"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-24:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "B16BA960-A9D9-4BEE-9E79-D972C96778E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-24:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "4D26A9F7-AF17-4FBC-9687-E457A8B3228B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-07-24:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0CB4D5-C31F-4525-B7B7-594EBCAF52ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-06:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A90E1F42-FD59-4398-BCDE-E14BD21EB2B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-12:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDC1C78-87D2-43D7-B165-38F4EA9A0396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-12:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CE9B41-3778-4B99-AB43-A9F94E359907"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-14:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D176B2-C1E0-45FC-916A-FB9CB6B62F49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BBCC6C00-70BF-47C6-BE7F-616204DFEA02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-19:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "1F2216B7-6365-4273-8E74-FE7D16429CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-21:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "B3FE0E90-E6AC-41FF-88C6-F2DD32793867"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-25:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "76E69F0A-2039-490C-BE1B-CC719EE345C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-08-26:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "35CEC15D-B5AC-4066-9687-A77034D35433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-02:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "29F28433-2660-4CCF-ADA6-B1E9D59F9725"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-03:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3179D6-FE68-42D9-AAFE-2662CFE0583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-04:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "838C3C92-BF10-4F16-9985-3EC85B267828"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-08:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "528DE610-C626-41F7-BF77-8AC67211C9EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-11:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "06DB5C24-93FF-4814-8D93-84D78A449DB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-17:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "8331902A-6C19-4571-B459-60F5FE25EE9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "762B672A-4898-48C5-ABEF-8AC96F2CDEC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-21:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "0A6855D8-3CC1-4469-97B0-3E1B642120A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-28:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFEDFAD-16C8-4ED3-AABD-F103E7EF73FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-09-29:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDE68A9-C8CF-4210-A993-803015027602"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-01:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "0476F488-7E63-4405-B915-E1F15DA87EEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-06:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "0F8DF3F8-5ACC-41AE-B27E-DC5203CEA73F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-07:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B4C59C-3901-4315-A247-709E1580EEE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-07:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "96B62909-26AC-457A-88AA-D746E6C639F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-08:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "9820960B-4B4C-4AAE-A18D-13E38DD1D1A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-14:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA01CD3-1850-45BD-B4AD-6BC88C19E574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-15:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "1352B173-7478-492A-9F7F-03FD5A76483C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-21:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "321EF557-D41E-4E55-BB34-11CD15DE2E1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-21:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "C5733738-FA67-40C4-BDC0-6602875CB8D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-26:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "5A4E8B8C-DA09-42D5-85A6-437D069A9A2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-27:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BF13024E-2094-4C93-BA63-B836A8C5F7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-10-28:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E65D3F-B1C8-4288-8C6C-DCCDC6FA1339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-11-09:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A592F1-F4F5-4CDF-9140-0721A223D74F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-11-30:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "B31D2864-4E51-4DFC-A169-1F9DD6314710"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-11-30:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "77141266-2E6D-4DAE-89AE-9E5992B7CCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-12-10:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "A7ECF0D4-4B70-4D10-8C6B-0F6FABEF364C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2020-12-14:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "D49B2C8C-2DF2-4555-AAC7-0FA687990944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-01-18:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "79D07150-5D3D-4460-8D7C-88073642D8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-01-18:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "3B64A8E4-6EE2-4233-8B66-80930CF4DF9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-01-27:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "538929F3-4528-43DC-8EE1-E7BF815F0252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-02:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "4E69FEC4-7A2C-4E27-9AD9-186C3D373CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-03:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "49FBEB64-7D8D-4740-89A3-29DB34926DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-04:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E8C87EE6-0EE0-490F-9A58-976F76CF1386"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-15:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "01A83481-A454-4636-B178-9C72ADC349CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-17:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "DDCCEB28-57EA-4875-9800-AE993FAD6783"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-18:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "BCCAA5BC-7898-4998-9AE9-20C9A42CADDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-22:staging1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F084B4F-2543-47AF-82DE-B5514B99018B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-02-26:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "CC6E80E7-DAB4-48F0-82B8-093D16D162BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-03-04:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50DCF8-17C2-43E8-ACBD-546E2DA51494"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-03-05:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "E1DE4AAD-9894-41D7-AC5D-7051656928A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-03-10:staging0:*:*:*:*:*:*",
            "matchCriteriaId" : "D3A9FB95-9D27-45B6-A536-63DBEF59BFBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wire:wire-webapp:2021-03-15:production0:*:*:*:*:*:*",
            "matchCriteriaId" : "66DFD20D-8672-4076-9564-48D36421B5A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wireapp/wire-webapp/commit/281f2a9d795f68abe423c116d5da4e1e73a60062",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/pull/10704",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/releases/tag/2021-03-15-production.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/security/advisories/GHSA-cxwr-f2j3-q8hp",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/commit/281f2a9d795f68abe423c116d5da4e1e73a60062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/pull/10704",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/releases/tag/2021-03-15-production.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wireapp/wire-webapp/security/advisories/GHSA-cxwr-f2j3-q8hp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T15:15:13.160",
      "lastModified" : "2024-11-21T05:59:06.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command injection vulnerability in the cookieDomain and relayDomain parameters of Okta Access Gateway before 2020.9.3 allows attackers (with admin access to the Okta Access Gateway UI) to execute OS commands as a privileged system account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en los parámetros cookieDomain y relayDomain de Okta Access Gateway versiones anteriores a 2020.9.3, permite a atacantes (con acceso de administrador a la interfaz de usuario de Okta Access Gateway) ejecutar comandos del sistema operativo como una cuenta system privilegiada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:P",
            "baseScore" : 8.7,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 9.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:okta:access_gateway:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.8.4",
            "matchCriteriaId" : "343753F5-E862-458C-A3F8-887579F836A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163428/Okta-Access-Gateway-2020.5.5-Authenticated-Remote-Root.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.okta.com/security-advisories/cve-2021-28113",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163428/Okta-Access-Gateway-2020.5.5-Authenticated-Remote-Root.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.okta.com/security-advisories/cve-2021-28113",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T15:15:13.270",
      "lastModified" : "2024-11-21T05:59:07.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Undocumented Default Cryptographic Key Vulnerability in Cohesity DataPlatform version 6.3 prior 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. The ssh key can provide an attacker access to the linux system in the affected version."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Clave Criptográfica Predeterminada No Documentada en Cohesity DataPlatform versiones 6.3 anteriores a 6.3.1g, versiones 6.4 hasta 6.4.1cy, versiones 6.5.1 hasta 6.5.1b.&#xa0;La clave ssh puede proporcionar a un atacante acceso al sistema Linux en la versión afectada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndExcluding" : "6.3.1g",
            "matchCriteriaId" : "68740ADE-75F1-4DD3-BC0F-2619200D71F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndExcluding" : "6.4.1c",
            "matchCriteriaId" : "E23D34BE-A8B9-4B51-85C3-F79A784555E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.1",
            "versionEndExcluding" : "6.5.1b",
            "matchCriteriaId" : "ACAACEC2-0E9E-490A-A928-33E6336F8435"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28123.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28123.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28124",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T15:15:13.317",
      "lastModified" : "2024-11-21T05:59:07.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A man-in-the-middle vulnerability in Cohesity DataPlatform support channel in version 6.3 up to 6.3.1g, 6.4 up to 6.4.1c and 6.5.1 through 6.5.1b. Missing server authentication in impacted versions can allow an attacker to Man-in-the-middle (MITM) support channel UI session to Cohesity DataPlatform cluster."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo man-in-the-middle en el canal de soporte de Cohesity DataPlatform versiones 6.3 hasta 6.3.1g, versiones 6.4 hasta 6.4.1cy, versiones 6.5.1 hasta 6.5.1b.&#xa0;Una falta de autenticación del servidor en versiones afectadas puede permitir a un atacante tenga acceso de tipo Man-in-the-middle (MITM) en una sesión del canal de soporte de la Interfaz de Usuario en el clúster Cohesity DataPlatform."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3",
            "versionEndIncluding" : "6.3.1g",
            "matchCriteriaId" : "E916355C-0164-402B-96E1-18BCAE584A24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4",
            "versionEndIncluding" : "6.4.1c",
            "matchCriteriaId" : "1DC79961-9B21-4D13-97C4-B845CF898149"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cohesity:cohesity_dataplatform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.1",
            "versionEndIncluding" : "6.5.1b",
            "matchCriteriaId" : "AA28ADD0-C186-42E1-A533-FDBE19E95673"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28124.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cohesity/SecAdvisory/blob/master/CVE-2021-28124.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22196",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:12.583",
      "lastModified" : "2024-11-21T05:49:41.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.4. It was possible to exploit a stored cross-site-scripting in merge request via a specifically crafted branch name."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 13.4.&#xa0;Era posible explotar una vulnerabilidad de tipo cross-site-scripting almacenada en una petición de combinación por medio de un nombre de rama diseñado específicamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.4.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "30F3AAC4-E18C-4F23-8C49-5F263B0084BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.4.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "8AB6D80B-365B-4B2D-B63A-0EC5394F3656"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3FEE2C2F-791C-4C56-A069-663D85CE5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3D4F2787-E776-4615-B8F9-486AFA754440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22196.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/254710",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/977697",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22196.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/254710",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/977697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22197",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:12.677",
      "lastModified" : "2024-11-21T05:49:41.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.6 where an infinite loop exist when an authenticated user with specific rights access a MR having source and target branch pointing to each other"
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 10.6, donde se presenta un bucle infinito cuando un usuario autenticado con derechos específicos accede a un MR que tiene la rama de origen y de destino apuntando entre sí."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "EC197906-EB26-47CA-B0D4-0DE46888F1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "10.6.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "E1FE1428-9F41-436B-838F-0BFBAD71686A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3FEE2C2F-791C-4C56-A069-663D85CE5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3D4F2787-E776-4615-B8F9-486AFA754440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22197.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/323198",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22197.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/323198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22198",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:12.773",
      "lastModified" : "2024-11-21T05:49:41.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions from 13.8 and above allowing an authenticated user to delete incident metric images of public projects."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones desde 13.8 y superiores, permitiendo a un usuario autenticado eliminar imágenes de métricas de incidentes de proyectos públicos."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "93302B94-B89A-47DA-A6BC-7076FDA90EB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "3342605C-013F-4424-9A62-A30C37EEFD43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3FEE2C2F-791C-4C56-A069-663D85CE5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3D4F2787-E776-4615-B8F9-486AFA754440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22198.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/323452",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1107281",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22198.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/323452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1107281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22200",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:12.833",
      "lastModified" : "2024-11-21T05:49:41.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting with 12.6. Under a special condition it was possible to access data of an internal repository through a public project fork as an anonymous user."
      }, {
        "lang" : "es",
        "value" : "Se detecto un problema en GitLab CE/EE que afecta a todas las versiones a partir de la versión 12.6. Bajo una condición especial era posible acceder a los datos de un repositorio interno a través de un fork público del proyecto como usuario anónimo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "7C929FA6-403E-4FC3-A949-2C97D023F3F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.6.0",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "240035E8-A239-428C-851F-D73F6FC68632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:13.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6E683B09-3BF1-4939-A4C5-9D69246C6F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:13.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C0874C00-16B2-402B-999B-DAA350BDBC45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22200.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/247523",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22200.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/247523",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22201",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:12.913",
      "lastModified" : "2024-11-21T05:49:41.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.9. A specially crafted import file could read files on the server."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 13.9.&#xa0;Un archivo de importación especialmente diseñado podría leer archivos en el servidor."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3FEE2C2F-791C-4C56-A069-663D85CE5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3D4F2787-E776-4615-B8F9-486AFA754440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22201.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/325562",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1132378",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22201.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/325562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1132378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22202",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:13.007",
      "lastModified" : "2024-11-21T05:49:42.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all previous versions. If the victim is an admin, it was possible to issue a CSRF in System hooks through the API."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones anteriores.&#xa0;Si la víctima es un administrador, es posible facilitar un ataque de tipo CSRF en los enlaces del Sistema por medio de la API."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "13.10.0",
            "matchCriteriaId" : "0645CA65-ED21-43B7-A839-93675D59C51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "13.10.0",
            "matchCriteriaId" : "5390249A-524A-4EF4-AB45-2C32C87BD6DB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22202.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/26017",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/471274",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22202.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/26017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/471274",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22203",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-02T17:15:13.083",
      "lastModified" : "2024-11-21T05:49:42.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7.9 before 13.8.7, all versions starting from 13.9 before 13.9.5, and all versions starting from 13.10 before 13.10.1. A specially crafted Wiki page allowed attackers to read arbitrary files on the server."
      }, {
        "lang" : "es",
        "value" : "Se ha descubierto un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 13.7.9 antes de la 13.8.7, a todas las versiones a partir de la 13.9 antes de la 13.9.5 y a todas las versiones a partir de la 13.10 antes de la 13.10.1. Una página Wiki especialmente diseñada permitía a los atacantes leer archivos arbitrarios en el servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.9",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "6997BFA9-58D6-40F1-8FE0-0A6040E299C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.9",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "B574A0D7-B02C-472A-BBC7-E04B357A6B3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:13.10.0:*:*:*:community:*:*:*",
            "matchCriteriaId" : "6E683B09-3BF1-4939-A4C5-9D69246C6F48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:13.10.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C0874C00-16B2-402B-999B-DAA350BDBC45"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22203.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/320919",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1098793",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22203.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/320919",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1098793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1736",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:18.967",
      "lastModified" : "2024-11-21T05:45:00.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1737",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.030",
      "lastModified" : "2024-11-21T05:45:00.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1738",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.090",
      "lastModified" : "2024-11-21T05:45:00.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1741",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.153",
      "lastModified" : "2024-11-21T05:45:00.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.1.0",
            "matchCriteriaId" : "99A75B7B-602D-402C-8CCD-4AE194F00214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1742",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.233",
      "lastModified" : "2024-11-21T05:45:00.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.1.0",
            "matchCriteriaId" : "99A75B7B-602D-402C-8CCD-4AE194F00214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1743",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.293",
      "lastModified" : "2024-11-21T05:45:01.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD7176C-F4D1-43A7-9E49-BA92CA0D9980"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "2703DE0B-8A9E-4A9D-9AE8-028E22BF47CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.1.0",
            "matchCriteriaId" : "99A75B7B-602D-402C-8CCD-4AE194F00214"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1744",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.357",
      "lastModified" : "2024-11-21T05:45:01.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1745",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.420",
      "lastModified" : "2024-11-21T05:45:01.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de un archivo USD diseñado malicioso puede conllevar a una finalización inesperada de la aplicación o una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1746",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.483",
      "lastModified" : "2024-11-21T05:45:01.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1747",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.543",
      "lastModified" : "2024-11-21T05:45:01.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing maliciously crafted web content may lead to code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de contenido web diseñado malicioso puede conllevar a una ejecución de código."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1748",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.607",
      "lastModified" : "2024-11-21T05:45:01.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A validation issue was addressed with improved input sanitization. This issue is fixed in tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted URL may lead to arbitrary javascript code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de comprobación con un saneamiento de la entrada mejorada.&#xa0;Este problema es corregido en tvOS versión 14.4, watchOS versión 7.3, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una URL diseñada maliciosamente puede conllevar a una ejecución de código JavaScript arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1750",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.670",
      "lastModified" : "2024-11-21T05:45:01.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. An application may be able to execute arbitrary code with kernel privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordaron múltiples problemas con una lógica mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios de kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2.0",
            "matchCriteriaId" : "B7053810-6CA2-4564-9ED7-B6D3C8150F1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1751",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.747",
      "lastModified" : "2024-11-21T05:45:02.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Mounting a maliciously crafted Samba network share may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;Montar un recurso compartido de red Samba diseñado malicioso puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1754",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.793",
      "lastModified" : "2024-11-21T05:45:02.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con comprobaciones mejoradas.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1755",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.857",
      "lastModified" : "2024-11-21T05:45:02.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1. A person with physical access to an iOS device may be able to access contacts from the lock screen."
      }, {
        "lang" : "es",
        "value" : "Un problema de la pantalla de bloqueo permitió el acceso a los contactos en un dispositivo bloqueado.&#xa0;Este problema es abordado con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión11.0.1.&#xa0;Una persona con acceso físico a un dispositivo iOS puede ser capaz de acceder a los contactos desde la pantalla de bloqueo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "F2EE75CC-3796-416A-9E58-64788BB89240"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT211931",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT211931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1756",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.920",
      "lastModified" : "2024-11-21T05:45:02.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A lock screen issue allowed access to contacts on a locked device. This issue was addressed with improved state management. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker with physical access to a device may be able to see private contact information."
      }, {
        "lang" : "es",
        "value" : "Un problema de la pantalla de bloqueo permitió el acceso a los contactos en un dispositivo bloqueado.&#xa0;Este problema es abordado con una administración de estado mejorada.&#xa0;Este problema es corregido en iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante con acceso físico a un dispositivo puede visualizar información de contacto privada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.4,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1757",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:19.983",
      "lastModified" : "2024-11-21T05:45:02.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante local puede ser capaz de elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1758",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.060",
      "lastModified" : "2024-11-21T05:45:02.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites diversos productos de Apple.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede ser capaz de causar una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1759",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.127",
      "lastModified" : "2024-11-21T05:45:03.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, iOS 14.4 y iPadOS 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1760",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.187",
      "lastModified" : "2024-11-21T05:45:03.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application could execute arbitrary code leading to compromise of user information."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de corrupción de la memoria con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Una aplicación maliciosa podría ejecutar código arbitrario conllevando a comprometer la información del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1763",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.263",
      "lastModified" : "2024-11-21T05:45:03.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer overflow was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un desbordamiento del búfer con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de un archivo USD diseñado malicioso puede conllevar a una finalización inesperada de la aplicación o una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1764",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.327",
      "lastModified" : "2024-11-21T05:45:03.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de uso de la memoria previamente liberada con una administración de la memoria mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede ser capaz de causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1765",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.387",
      "lastModified" : "2024-11-21T05:45:03.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Maliciously crafted web content may violate iframe sandboxing policy."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una aplicación del sandbox de iframe mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;El contenido web diseñado maliciosamente puede violar la política de sandboxing de iframe."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.6",
            "matchCriteriaId" : "77FB95B4-8279-4DB9-B98F-DCFB2A212668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1766",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.450",
      "lastModified" : "2024-11-21T05:45:03.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1767",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.497",
      "lastModified" : "2024-11-21T05:45:04.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to heap corruption."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una corrupción de la memoria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1768",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.560",
      "lastModified" : "2024-11-21T05:45:04.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted USD file may lead to unexpected application termination or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de un archivo USD diseñado malicioso puede conllevar a una finalización inesperada de la aplicación o una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1769",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.623",
      "lastModified" : "2024-11-21T05:45:04.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious attacker with arbitrary read and write capability may be able to bypass Pointer Authentication."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una comprobación mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante malicioso con capacidad arbitraria de lectura y escritura puede ser capaz de omitir una Autenticación de Puntero."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1771",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.700",
      "lastModified" : "2024-11-21T05:45:04.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;Un usuario que es eliminado de un grupo de iMessage podría volver a unirse al grupo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1772",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.747",
      "lastModified" : "2024-11-21T05:45:04.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack overflow was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted text file may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un desbordamiento de la pila con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de un archivo de texto diseñado malicioso puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-758/",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-758/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1773",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.810",
      "lastModified" : "2024-11-21T05:45:04.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1774",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.857",
      "lastModified" : "2024-11-21T05:45:05.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con comprobaciones mejoradas.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1775",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.920",
      "lastModified" : "2024-11-21T05:45:05.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado al eliminar el código vulnerable.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;El procesamiento de una fuente diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1776",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:20.983",
      "lastModified" : "2024-11-21T05:45:05.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted font file may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de escritura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de un archivo fuente diseñado maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1777",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.043",
      "lastModified" : "2024-11-21T05:45:05.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1778",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.123",
      "lastModified" : "2024-11-21T05:45:05.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read issue existed in the curl. This issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Se presentó un problema de lectura fuera de límites en el curl.&#xa0;Este problema es abordado con la mejora una comprobación de límites.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede ser capaz de causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1779",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.187",
      "lastModified" : "2024-11-21T05:45:05.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic error in kext loading was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. An application may be able to execute arbitrary code with system privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó un error lógico en la carga de kext con un manejo del estado mejorado.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1780",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.247",
      "lastModified" : "2024-11-21T05:45:05.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 14.4 and iPadOS 14.4. An attacker in a privileged position may be able to perform a denial of service attack."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de inicialización de la memoria con un manejo de la memoria mejorado.&#xa0;Este problema es corregido en iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante en una posición privilegiada puede ser capaz de llevar a cabo un ataque de denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1781",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.310",
      "lastModified" : "2024-11-21T05:45:05.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A malicious application may be able to leak sensitive user information."
      }, {
        "lang" : "es",
        "value" : "Se presentó un problema de privacidad en el manejo de las tarjetas de contacto.&#xa0;Esto se solucionó con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Una aplicación maliciosa puede ser capaz de filtrar información confidencial del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1782",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.373",
      "lastModified" : "2025-10-23T18:01:51.843",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited.."
      }, {
        "lang" : "es",
        "value" : "Se abordó una condición de carrera con un bloqueo mejorado.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Una aplicación maliciosa puede elevar privilegios.&#xa0;Apple tiene conocimiento de un reporte que indica que este problema puede haber sido explotado activamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple Multiple Products Race Condition Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1782",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1783",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.437",
      "lastModified" : "2024-11-21T05:45:06.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de acceso con una administración de la memoria mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1785",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.497",
      "lastModified" : "2024-11-21T05:45:06.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1786",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.560",
      "lastModified" : "2024-11-21T05:45:06.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to create or modify system files."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un usuario local puede ser capaz de crear o modificar archivos del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:C/A:N",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1787",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.623",
      "lastModified" : "2024-11-21T05:45:06.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple issues were addressed with improved logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local attacker may be able to elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordaron múltiples problemas con una lógica mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante local puede ser capaz de elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1788",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.687",
      "lastModified" : "2024-11-21T05:45:06.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de uso de la memoria previamente liberada con una administración de la memoria mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS versión 14.4, watchOS versión 7.3, iOS versión 14.4 y iPadOS versión 14.4, Safari versión 14.0.3.&#xa0;El procesamiento de contenido web diseñado malicioso puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0.3",
            "matchCriteriaId" : "46231D89-229A-4A0A-BD6C-90FB8EBA6ACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212152",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4923",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1789",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.747",
      "lastModified" : "2025-10-23T18:01:47.133",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. Processing maliciously crafted web content may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de confusión de tipos con un manejo del estado mejorado.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS versión 14.4, watchOS versión 7.3, iOS versión 14.4 y iPadOS versión 14.4, Safari versión 14.0.3.&#xa0;El procesamiento de contenido web diseñado malicioso puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2022-05-04",
      "cisaActionDue" : "2022-05-25",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple Multiple Products Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.6",
            "matchCriteriaId" : "77FB95B4-8279-4DB9-B98F-DCFB2A212668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "product-security@apple.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212152",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1789",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1791",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.810",
      "lastModified" : "2024-11-21T05:45:07.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read issue existed that led to the disclosure of kernel memory. This was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to disclose kernel memory."
      }, {
        "lang" : "es",
        "value" : "Se presentó un problema de lectura fuera de límites que conllevó a una divulgación de la memoria del kernel.&#xa0;Esto se solucionó con una comprobación mejorada de la entradas.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Una aplicación maliciosa puede ser capaz de divulgar la memoria del kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:N/A:N",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1792",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T18:15:21.873",
      "lastModified" : "2024-11-21T05:45:07.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*",
            "matchCriteriaId" : "A369D48B-6A0A-47AE-9513-D5E2E6F30931"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*",
            "matchCriteriaId" : "510F8317-94DA-498E-927A-83D5F41AF54A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5D1970-6D2A-42CA-A203-42023D71730D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*",
            "matchCriteriaId" : "C68AE52B-5139-40A4-AE9A-E752DBF07D1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22865",
      "sourceIdentifier" : "product-cna@github.com",
      "published" : "2021-04-02T18:15:21.997",
      "lastModified" : "2024-11-21T05:50:47.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability was identified in GitHub Enterprise Server that allowed access tokens generated from a GitHub App's web authentication flow to read private repository metadata via the REST API without having been granted the appropriate permissions. To exploit this vulnerability, an attacker would need to create a GitHub App on the instance and have a user authorize the application through the web authentication flow. The private repository metadata returned would be limited to repositories owned by the user the token identifies. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.0.4 and was fixed in versions 3.0.4, 2.22.10, 2.21.18. This vulnerability was reported via the GitHub Bug Bounty program."
      }, {
        "lang" : "es",
        "value" : "Se identificó una vulnerabilidad de control de acceso inapropiado en GitHub Enterprise Server que permitía que los tokens de acceso generados a partir del flujo de autenticación web de una aplicación GitHub leyeran metadatos del repositorio privado por medio de la API REST sin haber recibido los permisos apropiados.&#xa0;Para explotar esta vulnerabilidad, un atacante necesitaría crear una aplicación GitHub en la instancia y hacer que un usuario autorizara la aplicación mediante el flujo de autenticación web.&#xa0;Los metadatos del repositorio privado devueltos se limitarían a los repositorios propiedad del usuario que identifica el token.&#xa0;Esta vulnerabilidad afectó a todas las versiones de GitHub Enterprise Server anteriores a la 3.0.4 y fue corregido en versiones 3.0.4, 2.22.10, 2.21.18.&#xa0;Esta vulnerabilidad se reportó por medio del programa GitHub Bug Bounty."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "product-cna@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.21.18",
            "matchCriteriaId" : "83563454-A07F-4BB4-8372-C950C437CCA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.22.0",
            "versionEndExcluding" : "2.22.10",
            "matchCriteriaId" : "7CDD3874-DF16-4708-B490-B9837E8C1E84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:github:enterprise_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.4",
            "matchCriteriaId" : "A99BF524-7BF7-4DD9-845D-EF117D94D71F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.18",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.10",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.4",
        "source" : "product-cna@github.com"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.21/admin/release-notes#2.21.18",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%402.22/admin/release-notes#2.22.10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://docs.github.com/en/enterprise-server%403.0/admin/release-notes#3.0.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1753",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:18.770",
      "lastModified" : "2024-11-21T05:45:02.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de límites mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1761",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:18.880",
      "lastModified" : "2024-11-21T05:45:03.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede ser capaz de causar una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1790",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:18.990",
      "lastModified" : "2024-11-21T05:45:07.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. Processing a maliciously crafted font may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;El procesamiento de una fuente diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1793",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.083",
      "lastModified" : "2024-11-21T05:45:07.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Processing a maliciously crafted image may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4. El procesamiento de una imagen diseñada maliciosamente puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1794",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.210",
      "lastModified" : "2024-11-21T05:45:07.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una lectura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1795",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.303",
      "lastModified" : "2024-11-21T05:45:07.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1796",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.413",
      "lastModified" : "2024-11-21T05:45:07.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1797",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.520",
      "lastModified" : "2024-11-21T05:45:08.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A local user may be able to read arbitrary files."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una lógica de permisos mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un usuario local puede ser capaz de leer archivos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "B0E97851-4DFF-4852-A339-183331F4ACBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85D21088-00C3-401A-97EE-999424A39F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*",
            "matchCriteriaId" : "9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2021-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0F441A43-1669-478D-9EC8-E96882DE4F9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/51",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212326",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/51",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1799",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.617",
      "lastModified" : "2024-11-21T05:45:08.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A port redirection issue was addressed with additional port validation. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS 14.4, watchOS 7.3, iOS 14.4 and iPadOS 14.4, Safari 14.0.3. A malicious website may be able to access restricted ports on arbitrary servers."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de redirección de puertos con una comprobación de puertos adicional.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, tvOS versión 14.4, watchOS versión 7.3, iOS versión 14.4 y iPadOS versión 14.4, Safari versión 14.0.3.&#xa0;Un sitio web malicioso puede ser capaz de acceder a puertos restringidos en servidores arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0.3",
            "matchCriteriaId" : "B785B3FD-A576-4AF5-8500-D1D08D0F4910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.6",
            "matchCriteriaId" : "77FB95B4-8279-4DB9-B98F-DCFB2A212668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212152",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1800",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.693",
      "lastModified" : "2024-11-21T05:45:08.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de manejo de rutas con una comprobación mejorada.&#xa0;Este problema es corregido en Xcode versión 12.4.&#xa0;Una aplicación maliciosa puede ser capaz de acceder a archivos arbitrarios en el dispositivo host mientras ejecuta una aplicación que usa recursos bajo demanda con Xcode."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:xcode:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.4",
            "matchCriteriaId" : "D8455A97-5E2C-4DCA-A06D-425B56B63180"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212153",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1801",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.803",
      "lastModified" : "2024-11-21T05:45:08.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed with improved iframe sandbox enforcement. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. Maliciously crafted web content may violate iframe sandboxing policy."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una aplicación del sandbox de iframe mejorado.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un contenido web diseñado maliciosamente puede violar la política de sandboxing de iframe."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.6",
            "matchCriteriaId" : "77FB95B4-8279-4DB9-B98F-DCFB2A212668"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1802",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.897",
      "lastModified" : "2024-11-21T05:45:08.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A local attacker may be able to elevate their privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave.&#xa0;Un atacante local puede ser capaz de elevar sus privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1803",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:19.990",
      "lastModified" : "2024-11-21T05:45:08.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The issue was addressed with improved permissions logic. This issue is fixed in macOS Big Sur 11.0.1. A local application may be able to enumerate the user's iCloud documents."
      }, {
        "lang" : "es",
        "value" : "El problema se abordó con una lógica de permisos mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.0.1.&#xa0;Una aplicación local puede ser capaz de enumerar los documentos de iCloud del usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.1",
            "matchCriteriaId" : "F2EE75CC-3796-416A-9E58-64788BB89240"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT211931",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT211931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1805",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.083",
      "lastModified" : "2024-11-21T05:45:08.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó una escritura fuera de límites con una comprobación de la entrada mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2.1, Supplemental Update de macOS Catalina versión 10.15.7, Security Update de macOS Mojave versión 10.14.6 2021-002.&#xa0;Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios de kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*",
            "matchCriteriaId" : "9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A6BF78-B772-435C-AC1A-2199027CCF9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/54",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212177",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1806",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.227",
      "lastModified" : "2024-11-21T05:45:08.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition was addressed with additional validation. This issue is fixed in macOS Big Sur 11.2.1, macOS Catalina 10.15.7 Supplemental Update, macOS Mojave 10.14.6 Security Update 2021-002. An application may be able to execute arbitrary code with kernel privileges."
      }, {
        "lang" : "es",
        "value" : "Se abordó una condición de carrera con una comprobación adicional.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2.1, Supplemental Update de macOS Catalina versión 10.15.7, Security Update de macOS Mojave versión 10.14.6 2021-002.&#xa0;Una aplicación puede ser capaz de ejecutar código arbitrario con privilegios de kernel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 4.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-001:*:*:*:*:*:*",
            "matchCriteriaId" : "9D072B77-BE3F-4A2E-B66A-E2C8DC3781E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2021-002:*:*:*:*:*:*",
            "matchCriteriaId" : "A4A6BF78-B772-435C-AC1A-2199027CCF9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2.1",
            "matchCriteriaId" : "52B62D32-7B84-48DB-8E87-FB5C61958CC0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/54",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212177",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212327",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212177",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1818",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.380",
      "lastModified" : "2024-11-21T05:45:10.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause unexpected application termination or arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con una administración de estado mejorada.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS versión 7.3, tvOS versión 14.4, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede ser capaz de causar una terminación inesperada de la aplicación o una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "527CAF62-2FF0-4BC9-A537-EE52825C7504"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.14",
            "versionEndExcluding" : "10.14.6",
            "matchCriteriaId" : "6DE2B03F-94EE-4E32-B366-FE31A7031403"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "693E7DAE-BBF0-4D48-9F8A-20DDBD4AAC0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*",
            "matchCriteriaId" : "CFE26ECC-A2C2-4501-9950-510DE0E1BD86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*",
            "matchCriteriaId" : "26108BEF-0847-4AB0-BD98-35344DFA7835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "0FD3467D-7679-479F-9C0B-A93F7CD0929D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C6098E-EDBD-4A85-8282-B2E9D9333872"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-003:*:*:*:*:*:*",
            "matchCriteriaId" : "518BB47B-DD76-4E8C-9F10-7EBC1E146191"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-004:*:*:*:*:*:*",
            "matchCriteriaId" : "63940A55-D851-46EB-9668-D82BEFC1FE95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-005:*:*:*:*:*:*",
            "matchCriteriaId" : "68C7A97A-3801-44FA-96CA-10298FA39883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-006:*:*:*:*:*:*",
            "matchCriteriaId" : "6D69914D-46C7-4A0E-A075-C863C1692D33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:security_update_2020-007:*:*:*:*:*:*",
            "matchCriteriaId" : "9CDB4476-B521-43E4-A129-8718A8E0A8CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "2C88BD98-46F5-447F-963A-FB9B167E31BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.14.6:supplemental_update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "C7A0615B-D958-4BBF-B53F-AA839A0FE845"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "9B0973F4-D921-4060-9384-43D176F26967"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "7320CF7C-3750-4CAA-8B7C-CAFC7E65354A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3",
            "matchCriteriaId" : "9AA4C59B-EC23-4723-9DFF-412938209DE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1844",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.477",
      "lastModified" : "2024-11-21T05:45:13.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 14.4.1 and iPadOS 14.4.1, Safari 14.0.3 (v. 14610.4.3.1.7 and 15610.4.3.1.7), watchOS 7.3.2, macOS Big Sur 11.2.3. Processing maliciously crafted web content may lead to arbitrary code execution."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de corrupción de memoria con una comprobación mejorada.&#xa0;Este problema es corregido en iOS versión 14.4.1 y iPadOS versión 14.4.1, Safari versión 14.0.3 (versiones v.14610.4.3.1.7 y 15610.4.3.1.7), watchOS versión 7.3.2, macOS Big Sur versión 11.2.3.&#xa0;El procesamiento de contenido web diseñado malicioso puede conllevar a una ejecución de código arbitraria."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0.3",
            "matchCriteriaId" : "B785B3FD-A576-4AF5-8500-D1D08D0F4910"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4.1",
            "matchCriteriaId" : "86ABF921-40E8-4E64-A660-FD701FF3A28B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4.1",
            "matchCriteriaId" : "178AE56C-9561-4750-9956-7CCC4E9F0590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.2.3",
            "matchCriteriaId" : "C186CD0A-4A01-481B-A2C4-0B1662BB79BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.5",
            "matchCriteriaId" : "D5B77841-F161-47AB-8043-3E0346E3AA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.2",
            "matchCriteriaId" : "8E57CE62-4568-4B9C-ADC1-E9E03FAF8998"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/55",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com"
      }, {
        "url" : "https://support.apple.com/en-us/HT212220",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212221",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212222",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212223",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212323",
        "source" : "product-security@apple.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4923",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/55",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://support.apple.com/en-us/HT212220",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212221",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212222",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212223",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/kb/HT212323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1870",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.567",
      "lastModified" : "2025-10-23T18:01:44.367",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con unas restricciones mejoradas.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede conllevar a una ejecución de código arbitraria.&#xa0;Apple tiene conocimiento de un reporte que indica que este problema puede haber sido explotado activamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020-001:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4BF7F-90D4-4668-B4E6-B06F4070F448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.30.6",
            "matchCriteriaId" : "77FB95B4-8279-4DB9-B98F-DCFB2A212668"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "product-security@apple.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "product-security@apple.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JN6ZOD62CTO54CHTMJTHVEF6R2Y532TJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1870",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1871",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.663",
      "lastModified" : "2025-10-23T18:01:41.567",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.."
      }, {
        "lang" : "es",
        "value" : "Se abordó un problema de lógica con unas restricciones mejoradas.&#xa0;Este problema es corregido en macOS Big Sur versión 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS versión 14.4 y iPadOS versión 14.4.&#xa0;Un atacante remoto puede conllevar a una ejecución de código arbitraria.&#xa0;Apple tiene conocimiento de un reporte que indica que este problema puede haber sido explotado activamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple iOS, iPadOS, and macOS WebKit Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "17AAEA98-4C05-496E-81A7-AC031FCDDDA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4",
            "matchCriteriaId" : "062166D7-2444-4022-B7E4-13884C43EDCA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.15",
            "versionEndExcluding" : "10.15.7",
            "matchCriteriaId" : "DB8A73F8-3074-4B32-B9F6-343B6B1988C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A654B8A2-FC30-4171-B0BB-366CD7ED4B6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:security_update_2020:*:*:*:*:*:*",
            "matchCriteriaId" : "F12CC8B5-C1EB-419E-8496-B9A3864656AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:10.15.7:supplemental_update:*:*:*:*:*:*",
            "matchCriteriaId" : "C1C795B9-E58D-467C-83A8-2D45C792292F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:macos:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.1",
            "versionEndExcluding" : "11.2",
            "matchCriteriaId" : "084F8722-A895-4FC2-821E-DF0B129653BC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "product-security@apple.com",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4923",
        "source" : "product-security@apple.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/L3L6ZZOU5JS7E3RFYGLP7UFLXCG7TNLU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Mailing List" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4923",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1871",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1879",
      "sourceIdentifier" : "product-security@apple.com",
      "published" : "2021-04-02T19:15:20.770",
      "lastModified" : "2025-10-23T18:01:38.537",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been actively exploited.."
      }, {
        "lang" : "es",
        "value" : "Este problema es abordado con una administración del tiempo de vida de objetos mejorada.&#xa0;Este problema es corregido en iOS versión 12.5.2, iOS versión 14.4.2 y iPadOS versión 14.4.2, watchOS versión 7.3.3.&#xa0;El procesamiento de contenido web diseñado malicioso puede conllevar a ataques de tipo cross site scripting universales.&#xa0;Apple tiene conocimiento de un reporte que indica que este problema puede haber sido explotado activamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:ipados:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.4.2",
            "matchCriteriaId" : "20B9F5C7-15B9-44F6-8167-2532394C8346"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5.2",
            "matchCriteriaId" : "7FE2035D-B101-455F-B591-C2EEC59ACE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0",
            "versionEndExcluding" : "14.4.2",
            "matchCriteriaId" : "5A5DBDBF-B828-416D-B69C-F70F1078C13A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.3.3",
            "matchCriteriaId" : "D8059BAC-7C40-446D-AA16-A5EA5EEBCEA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.apple.com/en-us/HT212256",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212257",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212258",
        "source" : "product-security@apple.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212256",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212257",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://support.apple.com/en-us/HT212258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1879",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T19:15:20.880",
      "lastModified" : "2024-11-21T05:58:56.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL se presenta en Piwigo versiones anteriores a 11.4.0, por medio del parámetro language en admin.php?page=languages."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.4.0",
            "matchCriteriaId" : "CE6825BB-C574-480F-92B6-5A7D8E70BFD9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162404/Piwigo-11.3.0-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/1352",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162404/Piwigo-11.3.0-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Piwigo/Piwigo/issues/1352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29660",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T19:15:20.960",
      "lastModified" : "2024-11-21T06:01:36.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-Site Request Forgery (CSRF) vulnerability in en/cfg_setpwd.html in Softing AG OPC Toolbox through 4.10.1.13035 allows attackers to reset the administrative password by inducing the Administrator user to browse a URL controlled by an attacker."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en el archivo in/cfg_setpwd.html en Softing AG OPC Toolbox versiones hasta 4.10.1.13035, permite a atacantes restablecer la contraseña administrativa al inducir al usuario administrador a navegar mediante una URL controlada por un atacante."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softing:opc_toolbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.1.13035",
            "matchCriteriaId" : "5BC45CA7-6471-41D9-804D-212BD0F03EC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29661",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T19:15:21.053",
      "lastModified" : "2024-11-21T06:01:36.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Softing AG OPC Toolbox through 4.10.1.13035 allows /en/diag_values.html Stored XSS via the ITEMLISTVALUES##ITEMID parameter, resulting in JavaScript payload injection into the trace file. This payload will then be triggered every time an authenticated user browses the page containing it."
      }, {
        "lang" : "es",
        "value" : "Softing AG OPC Toolbox versiones hasta 4.10.1.13035, permite un ataque de tipo XSS  Almacenado en el archivo /en/diag_values.html por medio del parámetro ITEMLISTVALUES##ITEMID, resultando en una inyección de carga útil de JavaScript en el archivo de seguimiento.&#xa0;Esta carga útil se desencadenará cada vez que un usuario autenticado navegue por la página que lo contiene."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:softing:opc_toolbox:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.10.1.13035",
            "matchCriteriaId" : "5BC45CA7-6471-41D9-804D-212BD0F03EC7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3374",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T19:15:21.163",
      "lastModified" : "2024-11-21T06:21:22.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash."
      }, {
        "lang" : "es",
        "value" : "Un salto de directorio en RStudio Shiny Server versiones anteriores a 1.5.16, permite a atacantes leer el código fuente de la aplicación, que incluye una barra codificada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rstudio:shiny_server:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "1.5.16",
            "matchCriteriaId" : "73BE450A-497B-4A09-BE8F-5B46E110A647"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.rstudio.com/2021/01/13/shiny-server-1-5-16-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/colemanjp/shinyserver-directory-traversal-source-code-leak",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28940",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T20:15:13.317",
      "lastModified" : "2024-11-21T06:00:25.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpie_debug.php and /scripts/magpie_simple.php page that if you send a specific https url in the RSS URL field, you are able to execute arbitrary commands."
      }, {
        "lang" : "es",
        "value" : "Debido a un comando exec de escape incorrecto en MagpieRSS en versión 0.72, en el archivo /extlib/Snoopy.class.inc, es posible agregar un comando adicional al binario curl.&#xa0;Esto crea un problema en las páginas /scripts/magpie_debug.php y /scripts/magpie_simple.php que si envía una URL https específica en el campo URL de RSS, puede ejecutar comandos arbitrarios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-116"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magpierss_project:magpierss:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4771885-767A-4464-A61E-A915411620D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360bb5/extlib/Snoopy.class.inc#L660",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/kpzHKKJu",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49643",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360bb5/extlib/Snoopy.class.inc#L660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/kpzHKKJu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T20:15:13.397",
      "lastModified" : "2024-11-21T06:00:25.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Because of no validation on a curl command in MagpieRSS 0.72 in the /extlib/Snoopy.class.inc file, when you send a request to the /scripts/magpie_debug.php or /scripts/magpie_simple.php page, it's possible to request any internal page if you use a https request."
      }, {
        "lang" : "es",
        "value" : "Debido a que no se presenta comprobación en un comando curl en MagpieRSS versión 0.72, en el archivo /extlib/Snoopy.class.inc, cuando envía una petición a la página /scripts/magpie_debug.php o /scripts/magpie_simple.php, es posible pedir cualquier página interna si usa una petición https."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magpierss_project:magpierss:0.72:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4771885-767A-4464-A61E-A915411620D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360bb5/extlib/Snoopy.class.inc#L660",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/kpzHKKJu",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kellan/magpierss/blob/04d2a88b97fdba5813d01dc0d56c772d97360bb5/extlib/Snoopy.class.inc#L660",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pastebin.com/kpzHKKJu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30072",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T20:15:13.473",
      "lastModified" : "2024-11-21T06:03:17.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in prog.cgi on D-Link DIR-878 1.30B08 devices. Because strcat is misused, there is a stack-based buffer overflow that does not require authentication."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo prog.cgi en dispositivos D-Link DIR-878 versión 1.30B08.&#xa0;Debido al uso inapropiado de strcat, se presenta un desbordamiento de búfer en la región stack de la memoria que no requiere autenticación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-878_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.30b08",
            "matchCriteriaId" : "B8704C42-5B7D-4935-BCC7-83BB4AB8E936"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-878:ax:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F61B6847-E2FC-4FCC-A5EE-AAF5EE4125A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10217",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T20:15:13.537",
      "lastModified" : "2024-11-21T06:03:21.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jamf Pro before 10.28.0 allows XSS related to inventory history, aka PI-009376."
      }, {
        "lang" : "es",
        "value" : "Jamf Pro versiones anteriores a 10.28.0, permite un ataque de tipo XSS relacionado con el historial de inventario, también se conoce como PI-009376."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamf:jamf:*:*:*:*:pro:*:*:*",
            "versionEndExcluding" : "10.28.0",
            "matchCriteriaId" : "5AE9B4E6-9955-4E8F-9909-C7F09CB2C016"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.jamf.com/10.28.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.jamf.com/10.28.0/jamf-pro/release-notes/Bug_Fixes_and_Enhancements.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30126",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T20:15:13.597",
      "lastModified" : "2024-11-21T06:03:21.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lightmeter ControlCenter 1.1.0 through 1.5.x before 1.5.1 allows anyone who knows the URL of a publicly available Lightmeter instance to access application settings, possibly including an SMTP password and a Slack access token, via a settings HTTP query."
      }, {
        "lang" : "es",
        "value" : "Lightmeter ControlCenter versiones 1.1.0 hasta 1.5.x versiones anteriores a 1.5.1, permite a cualquier persona que conozca la URL de una instancia de Lightmeter disponible públicamente acceder a la configuración de la aplicación, posiblemente incluyendo una contraseña SMTP y un token de acceso de Slack, por medio de una consulta HTTP de configuración."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightmeter:controlcenter:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "1.5.1",
            "matchCriteriaId" : "1F0DA084-A560-48CE-BE2C-CA3F389E5390"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lightmeter.io/lightmeter-1-5-1-important-security-fixes/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lightmeter.io/lightmeter-1-5-1-important-security-fixes/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-02T21:15:13.653",
      "lastModified" : "2024-11-21T06:03:18.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "docsify 4.12.1 is affected by Cross Site Scripting (XSS) because the search component does not appropriately encode Code Blocks and mishandles the \" character."
      }, {
        "lang" : "es",
        "value" : "docsify versión 4.12.1, está afectado por una vulnerabilidad de tipo Cross Site Scripting (XSS) porque el componente search no codifica apropiadamente unos Code Blocks y maneja inapropiadamente el carácter \"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:docsifyjs:docsify:4.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC3B6BD-86F8-45B8-A892-12124845ED05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/docsifyjs/docsify/issues/1549",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/docsifyjs/docsify/issues/1549",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21529",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-02T22:15:13.240",
      "lastModified" : "2024-11-21T05:48:31.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to cause the system to run out of memory by running multiple instances of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "Dell System Update (DSU) versiones 1.9 y anteriores, contienen una vulnerabilidad de denegación de servicio.&#xa0;Un usuario malicioso local autenticado poco privilegiado puede explotar esta vulnerabilidad para causar que el sistema se quede sin memoria al ejecutar múltiples instancias de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:system_update:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.9",
            "matchCriteriaId" : "06EF79DE-63F9-4616-B39C-9EC7A0ECB398"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184608/dsa-2021-059-dell-emc-system-update-dsu-security-update-for-denial-of-service-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184608/dsa-2021-059-dell-emc-system-update-dsu-security-update-for-denial-of-service-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21532",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-02T22:15:13.410",
      "lastModified" : "2024-11-21T05:48:32.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redirect a client to an attacker-controlled management server, thus allowing the attacker to change the device configuration or certificate file."
      }, {
        "lang" : "es",
        "value" : "Dell Wyse ThinOS versión 8.6, MR9 contiene una corrección para una vulnerabilidad de comprobación inapropiada del servidor de administración que podría ser potencialmente explotada para redireccionar un cliente a un servidor de administración controlado por un atacante, permitiendo así al atacante cambiar la configuración del dispositivo o el archivo de certificado."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-16"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:wyse_thinos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.6",
            "matchCriteriaId" : "C66A561E-BD1D-4C85-926F-72C3AE9C9DFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:wyse_thinos:8.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "12BC0303-75FE-475C-B1E7-C526F4B15987"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184665/dsa-2021-069-dell-wyse-thinos-8-6-security-update-for-an-improper-management-server-validation-vulnerabilitydsa-2021-069-dell-wyse-thinos-8-6-security-update-for-an-improper-management-server-validation-",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184665/dsa-2021-069-dell-wyse-thinos-8-6-security-update-for-an-improper-management-server-validation-vulnerabilitydsa-2021-069-dell-wyse-thinos-8-6-security-update-for-an-improper-management-server-validation-",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21533",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-02T22:15:13.507",
      "lastModified" : "2024-11-21T05:48:32.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wyse Management Suite versions up to 3.2 contains a vulnerability wherein a malicious authenticated user can cause a denial of service in the job status retrieval page, also affecting other users that would have normally access to the same subset of job details"
      }, {
        "lang" : "es",
        "value" : "Wyse Management Suite versiones hasta 3.2, contienen una vulnerabilidad en la que un usuario autenticado malicioso puede causar una denegación de servicio en la página de recuperación del estado del trabajo, lo que también afecta a otros usuarios que normalmente tendrían acceso al mismo subconjunto de detalles del trabajo."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:wyse_management_suite:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2",
            "matchCriteriaId" : "2B9DA477-253A-4994-9651-DD434B5B817C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184666/dsa-2021-070-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184666/dsa-2021-070-dell-wyse-management-suite-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30127",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-03T18:15:11.983",
      "lastModified" : "2024-11-21T06:03:21.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TerraMaster F2-210 devices through 2021-04-03 use UPnP to make the admin web server accessible over the Internet on TCP port 8181, which is arguably inconsistent with the \"It is only available on the local network\" documentation. NOTE: manually editing /etc/upnp.json provides a partial but undocumented workaround."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos TerraMaster F2-210 hasta el 03-04-2021 utilizan UPnP para que el servidor web de administración sea accesible a través de Internet en el puerto TCP 8181, lo que podría ser incoherente con la documentación \"Sólo está disponible en la red local\". NOTA: editar manualmente /etc/upnp.json proporciona una solución parcial pero no documentada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:terra-master:f2-210_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-04-03",
            "matchCriteriaId" : "8D091A66-FAF4-4DBC-8F6A-A063ECE59755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:terra-master:f2-210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A084599C-E4D9-4EC5-8103-68CDBB3604CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kn100.me/terramaster-nas-exposing-itself-over-upnp/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=26681984",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://kn100.me/terramaster-nas-exposing-itself-over-upnp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=26681984",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T07:15:13.227",
      "lastModified" : "2024-11-21T06:00:17.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VSCodeVim before 1.19.0 allows attackers to execute arbitrary code via a crafted workspace configuration."
      }, {
        "lang" : "es",
        "value" : "VSCodeVim versiones anteriores a 1.19.0, permite a atacantes ejecutar código arbitrario por medio de una configuración de workspace diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vim_project:vim:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "1.19.0",
            "matchCriteriaId" : "61F053BF-1614-4379-8CFF-191D63311C44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/VSCodeVim/Vim/commit/939df0e7fd55a9840dbd4fb3c907315e2a5ef446",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=vscodevim.vim",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/9",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/VSCodeVim/Vim/commit/939df0e7fd55a9840dbd4fb3c907315e2a5ef446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=vscodevim.vim",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T07:15:14.463",
      "lastModified" : "2024-11-21T06:00:54.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial Svelte extension before 104.8.0 for Visual Studio Code allows attackers to execute arbitrary code via a crafted workspace configuration."
      }, {
        "lang" : "es",
        "value" : "La extensión no oficial Svelte versiones anteriores a 104.8.0 para Visual Studio Code, permite a atacantes ejecutar código arbitrario por medio de una configuración de workspace diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:svelte:svelte:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "104.8.0",
            "matchCriteriaId" : "5A787B2A-AC2F-417D-884E-C67E0C541211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sveltejs/language-tools/commit/5d7bf1fd98bfe2cd2080863a3c95ce099b898075",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/language-tools/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/language-tools/releases/tag/extensions-104.8.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=svelte.svelte-vscode",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/language-tools/commit/5d7bf1fd98bfe2cd2080863a3c95ce099b898075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/language-tools/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sveltejs/language-tools/releases/tag/extensions-104.8.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=svelte.svelte-vscode",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T08:15:12.257",
      "lastModified" : "2024-11-21T06:02:08.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files containing a mutation Cross Site Scripting (XSS) payload."
      }, {
        "lang" : "es",
        "value" : "Mark Text versiones hasta 0.16.3, permite a atacantes ejecutar comandos de forma arbitraria.&#xa0;Esto podría conllevar a una Ejecución de Código Remota (RCE) al abrir archivos .md que contienen una carga útil de mutación de tipo Cross Site Scripting (XSS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:marktext:marktext:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.16.3",
            "matchCriteriaId" : "5F071D01-841F-476E-BAF5-A29F31D88D58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/marktext/marktext/issues/2548",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/marktext/marktext/issues/2548",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T11:15:11.557",
      "lastModified" : "2024-11-21T06:03:16.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability in Knowage Suite version 7.1 exists in the documentexecution/url analytics driver component via the 'par_year' parameter when running a report."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de inyección SQL en Knowage Suite versión 7.1, en el componente controlador de análisis documentexecution/url por medio del parámetro \"par_year\" cuando se ejecuta un reporte"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eng:knowage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4",
            "matchCriteriaId" : "A866D68C-7EEA-4C09-913C-6FF54A59E497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/SQLi-KnowageSuite.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30056",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T11:15:11.617",
      "lastModified" : "2024-11-21T06:03:16.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Knowage Suite before 7.4 is vulnerable to reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in /restful-services/publish via the 'EXEC_FROM' parameter that can lead to data leakage."
      }, {
        "lang" : "es",
        "value" : "Knowage Suite versiones anteriores a 7.4, es vulnerable a un ataque de tipo cross-site scripting (XSS) reflejado.&#xa0;Un atacante puede inyectar un script web arbitrario en /restful-services/publish por medio del parámetro \"EXEC_FROM\" que puede conllevar a una filtración de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eng:knowage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4",
            "matchCriteriaId" : "A866D68C-7EEA-4C09-913C-6FF54A59E497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSS-KnowageSuite.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSS-KnowageSuite.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30057",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T11:15:11.697",
      "lastModified" : "2024-11-21T06:03:16.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored HTML injection vulnerability exists in Knowage Suite version 7.1. An attacker can inject arbitrary HTML in \"/restful-services/2.0/analyticalDrivers\" via the 'LABEL' and 'NAME' parameters."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de inyección HTML almacenado en Knowage Suite versión 7.1.&#xa0;Un atacante puede inyectar HTML arbitrario en \"/restful-services/2.0/analyticalDrivers\" por medio de los parámetros \"LABEL\" y \"NAME\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eng:knowage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4",
            "matchCriteriaId" : "A866D68C-7EEA-4C09-913C-6FF54A59E497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/HTLM-Injection-KnowageSuite.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/HTLM-Injection-KnowageSuite.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30058",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T11:15:11.757",
      "lastModified" : "2024-11-21T06:03:16.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Knowage Suite before 7.4 is vulnerable to cross-site scripting (XSS). An attacker can inject arbitrary external script in '/knowagecockpitengine/api/1.0/pages/execute' via the 'SBI_HOST' parameter."
      }, {
        "lang" : "es",
        "value" : "Knowage Suite versiones anteriores a 7.4, es vulnerable a un ataque de tipo cross-site scripting (XSS).&#xa0;Un atacante puede inyectar un script externo arbitrario en \"/knowagecockpitengine/api/1.0/pages/execute\" por medio del parámetro \"SBI_HOST\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eng:knowage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.4",
            "matchCriteriaId" : "A866D68C-7EEA-4C09-913C-6FF54A59E497"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSSI-KnowageSuite.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/piuppi/Proof-of-Concepts/blob/main/Engineering/XSSI-KnowageSuite.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30109",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T13:15:11.657",
      "lastModified" : "2024-11-21T06:03:19.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Froala Editor 3.2.6 is affected by Cross Site Scripting (XSS). Under certain conditions, a base64 crafted string leads to persistent Cross-site scripting (XSS) vulnerability within the hyperlink creation module."
      }, {
        "lang" : "es",
        "value" : "Froala Editor versión 3.2.6, está afectado por una vulnerabilidad de tipo Cross Site Scripting (XSS).&#xa0;Bajo determinadas condiciones, una cadena diseñada en base64 conlleva a una vulnerabilidad de tipo Cross-site scripting (XSS) persistente dentro del módulo de creación de hipervínculos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:froala:froala_editor:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B081DF8-3353-4785-891E-6F737623268C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://froala.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Hackdwerg/CVE-2021-30109/blob/main/README.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://froala.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/Hackdwerg/CVE-2021-30109/blob/main/README.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24150",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.357",
      "lastModified" : "2024-11-21T05:52:28.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LikeBtn WordPress Like Button Rating ♥ LikeBtn WordPress plugin before 2.6.32 was vulnerable to Unauthenticated Full-Read Server-Side Request Forgery (SSRF)."
      }, {
        "lang" : "es",
        "value" : "El plugin LikeBtn WordPress Like Button Rating â ™ ¥ LikeBtn WordPress versiones anteriores a 2.6.32, era vulnerable a un ataque de tipo Full-Read Server-Side Request Forgery (SSRF) no Autenticada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:likebtn-like-button_project:likebtn-like-button:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.32",
            "matchCriteriaId" : "FAE344EC-E22E-41F8-B98E-7EA4AB9957CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6bc6023f-a5e7-4665-896c-95afa5b638fb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6bc6023f-a5e7-4665-896c-95afa5b638fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24152",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.483",
      "lastModified" : "2024-11-21T05:52:28.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"All Subscribers\" setting page of Popup Builder was vulnerable to reflected Cross-Site Scripting."
      }, {
        "lang" : "es",
        "value" : "La página de configuración \"All Subscribers\" de Popup Builder era vulnerable a un ataque de tipo cross-site scripting reflejadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sygnoos:popup_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.74",
            "matchCriteriaId" : "B192EDA8-425F-4D13-93CE-791065541BED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/597e9686-f4e2-43bf-85ef-c5967e5652bd",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/597e9686-f4e2-43bf-85ef-c5967e5652bd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24153",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.560",
      "lastModified" : "2024-11-21T05:52:28.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stored Cross-Site Scripting vulnerability was discovered in the Yoast SEO WordPress plugin before 3.4.1, which had built-in blacklist filters which were blacklisting Parenthesis as well as several functions such as alert but bypasses were found."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo Cross-Site Scripting Almacenado en el plugin Yoast SEO WordPress versiones anteriores a 3.4.1, que tenía filtros de lista negra incorporados que incluían paréntesis en la lista negra, así como varias funciones como alertas pero se encontraron omisiones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.1",
            "matchCriteriaId" : "1CDDDA6D-76CF-4003-9739-A9DE41F076AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/138192/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1466243/wordpress-seo",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/77810044-394d-4314-b9a1-20c7dca726dc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/138192/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/1466243/wordpress-seo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/77810044-394d-4314-b9a1-20c7dca726dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24154",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.640",
      "lastModified" : "2024-11-21T05:52:28.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Theme Editor WordPress plugin before 2.6 did not validate the GET file parameter before passing it to the download_file() function, allowing administrators to download arbitrary files on the web server, such as /etc/passwd"
      }, {
        "lang" : "es",
        "value" : "El plugin Theme Editor de WordPress versiones anteriores a 2.6, no comprobaba el parámetro de archivo GET antes de pasarlo a la función download_file(), permitiendo a administradores descargar archivos arbitrarios en el servidor web, como /etc/passwd"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeeditor:theme_editor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6",
            "matchCriteriaId" : "3CC27C30-7941-4EBE-93A1-5ADBBAA565A8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/566c6836-fc3d-4dd9-b351-c3d9da9ec22e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/566c6836-fc3d-4dd9-b351-c3d9da9ec22e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24155",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.700",
      "lastModified" : "2024-11-21T05:52:29.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress Backup and Migrate Plugin – Backup Guard WordPress plugin before 1.6.0 did not ensure that the imported files are of the SGBP format and extension, allowing high privilege users (admin+) to upload arbitrary files, including PHP ones, leading to RCE."
      }, {
        "lang" : "es",
        "value" : "El plugin WordPress Backup and Migrate - Backup Guard WordPress antes de la versión 1.6.0 no garantizaba que los archivos importados tuvieran el formato y la extensión SGBP, lo que permitía a los usuarios con altos privilegios (admin+) subir archivos arbitrarios, incluidos los de PHP, lo que provocaba un RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backup-guard:backup_guard:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.0",
            "matchCriteriaId" : "75678C98-2584-4870-9CE6-F8529BC491EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163382/WordPress-Backup-Guard-1.5.8-Shell-Upload.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163623/WordPress-Backup-Guard-Authenticated-Remote-Code-Execution.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d442acac-4394-45e4-b6bb-adf4a40960fb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163382/WordPress-Backup-Guard-1.5.8-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163623/WordPress-Backup-Guard-Authenticated-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d442acac-4394-45e4-b6bb-adf4a40960fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24156",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.780",
      "lastModified" : "2024-11-21T05:52:29.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to privilege escalation"
      }, {
        "lang" : "es",
        "value" : "Unas vulnerabilidades de tipo Cross-Site Scripting almacenado en Testimonial Rotator versión 3.0.3, permiten a usuarios poco privilegiados (Colaborador) inyectar código JavaScript arbitrario o HTML sin aprobación.&#xa0;Esto podría conllevar a una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:testimonial_rotator_project:testimonial_rotator:3.0.3:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "737DC36D-CA6C-4259-9D67-9E5B08A88961"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://mega.nz/file/ftVSmRCC#ctqUg89CKszEuLO3eeQVazUStTPvoQD6LlbWNSMa7uA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8b6f4a77-4008-4730-9a91-fa055a8b3e68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24157",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.873",
      "lastModified" : "2024-11-21T05:52:29.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post. There were no checks to verify that a user had the unfiltered_html capability prior to saving the script tags, thus allowing lower-level users to inject scripts that could potentially be malicious."
      }, {
        "lang" : "es",
        "value" : "Orbit Fox de ThemeIsle, presenta una funcionalidad para añadir scripts personalizados en el encabezado y el pie de página de una página o publicación. No había comprobaciones para verificar que un usuario tenía la capacidad unfiltered_html antes de guardar las etiquetas de los scripts, lo que permitía a usuarios de nivel inferior inyectar scripts que podían ser potencialmente maliciosos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeisle:orbit_fox:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.10.3",
            "matchCriteriaId" : "BC4D1B04-8961-4277-93C1-7E2C16A4A0A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/28e42f4e-e38a-4bf4-b51b-d8f21c40f037",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/01/multiple-vulnerabilities-patched-in-orbit-fox-by-themeisle-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/28e42f4e-e38a-4bf4-b51b-d8f21c40f037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/01/multiple-vulnerabilities-patched-in-orbit-fox-by-themeisle-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24158",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:14.967",
      "lastModified" : "2024-11-21T05:52:29.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Orbit Fox by ThemeIsle has a feature to add a registration form to both the Elementor and Beaver Builder page builders functionality. As part of the registration form, administrators can choose which role to set as the default for users upon registration. This field is hidden from view for lower-level users, however, they can still supply the user_role parameter to update the default role for registration."
      }, {
        "lang" : "es",
        "value" : "Orbit Fox de ThemeIsle, presenta una funcionalidad para agregar un formulario de registro a la funcionalidad de los compiladores de página Elementor and Beaver Builder.&#xa0;Como parte del formulario de registro, los administradores pueden elegir qué rol establecer como predeterminado para usuarios tras registrarse.&#xa0;Este campo está oculto a la vista para usuarios de nivel inferior, sin embargo, aún pueden proporcionar el parámetro user_role para actualizar la función predeterminada para el registro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeisle:orbit_fox:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.10.3",
            "matchCriteriaId" : "BC4D1B04-8961-4277-93C1-7E2C16A4A0A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d81d0e72-9bb5-47ef-a796-3b305a4b604f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/01/multiple-vulnerabilities-patched-in-orbit-fox-by-themeisle-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d81d0e72-9bb5-47ef-a796-3b305a4b604f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/01/multiple-vulnerabilities-patched-in-orbit-fox-by-themeisle-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24159",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.047",
      "lastModified" : "2024-11-21T05:52:29.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to the lack of sanitization and lack of nonce protection on the custom CSS feature, an attacker could craft a request to inject malicious JavaScript on a site using the Contact Form 7 Style WordPress plugin through 3.1.9. If an attacker successfully tricked a site’s administrator into clicking a link or attachment, then the request could be sent and the CSS settings would be successfully updated to include malicious JavaScript."
      }, {
        "lang" : "es",
        "value" : "Debido a la falta de saneamiento y una falta de protección nonce en la funcionalidad CSS personalizada, un atacante podría diseñar una petición para inyectar JavaScript malicioso en un sitio usando el plugin de WordPress Contact Form 7 Style versiones hasta 3.1.9.&#xa0;Si un atacante engañaba con éxito al administrador de un sitio para que hiciera clic en un enlace o archivo adjunto, la petición podría ser enviada y la configuración de CSS se actualizaría con éxito para incluir JavaScript malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rocklobster:contact_form_7:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.1.9",
            "matchCriteriaId" : "91CBDF13-18DC-4BAE-A5B2-C60DECC2C62A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/363182f1-9fda-4363-8f6a-be37c4c07aa9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/unpatched-vulnerability-50000-wp-sites-must-find-alternative-for-contact-form-7-style/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/363182f1-9fda-4363-8f6a-be37c4c07aa9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/unpatched-vulnerability-50000-wp-sites-must-find-alternative-for-contact-form-7-style/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24160",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.107",
      "lastModified" : "2024-11-21T05:52:29.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, subscribers could upload zip archives containing malicious PHP files that would get extracted to the /rmp-menu/ directory. These files could then be accessed via the front end of the site to trigger remote code execution and ultimately allow an attacker to execute commands to further infect a WordPress site."
      }, {
        "lang" : "es",
        "value" : "En los plugins de WordPress Reponsive Menu (free y Pro) versiones anteriores a 4.0.4, los suscriptores podían subir archivos zip que contenían archivos PHP maliciosos que se extraían al directorio /rmp-menu/. Se podía acceder a estos archivos por medio del front-end del sitio para desencadenar una ejecución de código remota y, en última instancia, permitir a un atacante ejecutar comandos para infectar aún más un sitio de WordPress"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "36CF966E-25C0-408C-A993-0FAF0AF9FC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "B045BC14-6B45-4707-B41C-D1447BBECE04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/066ba5d4-4aaa-4462-b106-500c1f291c37",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/066ba5d4-4aaa-4462-b106-500c1f291c37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24161",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.170",
      "lastModified" : "2024-11-21T05:52:29.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into uploading a zip archive containing malicious PHP files. The attacker could then access those files to achieve remote code execution and further infect the targeted site."
      }, {
        "lang" : "es",
        "value" : "En los plugins de WordPress Reponsive Menu (free y Pro) versiones anteriores a 4.0.4, unos atacantes podrían diseñar una petición y engañar a un administrador para que cargue un archivo zip que contenga archivos PHP maliciosos. El atacante podría entonces acceder a esos archivos para lograr una ejecución de código remota e infectar aún más el sitio objetivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "36CF966E-25C0-408C-A993-0FAF0AF9FC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "B045BC14-6B45-4707-B41C-D1447BBECE04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/efca27e0-bdb6-4497-8330-081f909d6933",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/efca27e0-bdb6-4497-8330-081f909d6933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24162",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.233",
      "lastModified" : "2024-11-21T05:52:29.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Reponsive Menu (free and Pro) WordPress plugins before 4.0.4, attackers could craft a request and trick an administrator into importing all new settings. These settings could be modified to include malicious JavaScript, therefore allowing an attacker to inject payloads that could aid in further infection of the site."
      }, {
        "lang" : "es",
        "value" : "En los plugins de WordPress Reponsive Menu (free y Pro) versiones anteriores a 4.0.4, los atacantes podían diseñar una petición y engañar a un administrador para que importara todas las configuraciones nuevas.&#xa0;Esta configuración podría modificarse para incluir JavaScript malicioso, lo que permitiría a un atacante inyectar cargas útiles que podrían ayudar en una mayor infección del sitio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "36CF966E-25C0-408C-A993-0FAF0AF9FC31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:responsive_menu:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "4.0.4",
            "matchCriteriaId" : "B045BC14-6B45-4707-B41C-D1447BBECE04"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/923fc3a3-4bcc-4b48-870a-6150e14509b5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/923fc3a3-4bcc-4b48-870a-6150e14509b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/multiple-vulnerabilities-patched-in-responsive-menu-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24163",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.310",
      "lastModified" : "2024-11-21T05:52:30.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AJAX action, wp_ajax_ninja_forms_sendwp_remote_install_handler, did not have a capability check on it, nor did it have any nonce protection, therefore making it possible for low-level users, such as subscribers, to install and activate the SendWP Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 and retrieve the client_secret key needed to establish the SendWP connection while also installing the SendWP plugin."
      }, {
        "lang" : "es",
        "value" : "La acción AJAX, wp_ajax_ninja_forms_sendwp_remote_install_handler, no tenía una comprobación de capacidad, ni tenía ninguna protección nonce, por lo que era posible para usuarios de bajo nivel, como los suscriptores, instalar y activar el SendWP Ninja Forms Contact Form â€ - El Drag and Drop Form Builder para WordPress“, para el plugin de WordPress versiones anteriores a 3.4.34 y recuperar la clave client_secret necesaria para establecer la conexión SendWP al mismo tiempo que se instala el plugin SendWP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.34",
            "matchCriteriaId" : "3F043B37-549B-4242-925D-04A22CEA8042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/55fde9fa-f6cd-4546-bee8-4acc628251c2",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/55fde9fa-f6cd-4546-bee8-4acc628251c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24164",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.377",
      "lastModified" : "2024-11-21T05:52:30.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Ninja Forms Contact Form WordPress plugin before 3.4.34.1, low-level users, such as subscribers, were able to trigger the action, wp_ajax_nf_oauth, and retrieve the connection url needed to establish a connection. They could also retrieve the client_id for an already established OAuth connection."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Ninja Forms Contact Form versiones anteriores a 3.4.34.1, los usuarios de bajo nivel, como los suscriptores, podían desencadenar la acción, wp_ajax_nf_oauth, y recuperar la URL de conexión necesaria para establecer una conexión.&#xa0;También podrían recuperar el client_id para una conexión OAuth ya establecida"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.34.1",
            "matchCriteriaId" : "403E074F-25B4-413A-B38C-20754E72EEC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/dfa32afa-c6de-4237-a9f2-709843dcda89",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/dfa32afa-c6de-4237-a9f2-709843dcda89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24165",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.437",
      "lastModified" : "2024-11-21T05:52:30.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a user supplied redirect parameter and no protection in place."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Ninja Forms Contact Form versiones anteriores a 3.4.34, la acción AJAX wp_ajax_nf_oauth_connect era vulnerable a un redireccionamiento abierto debido al uso de un parámetro de redireccionamiento proporcionado por el usuario y sin protección en su lugar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.34",
            "matchCriteriaId" : "3F043B37-549B-4242-925D-04A22CEA8042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/6147acf5-e43f-47e6-ab56-c9c8be584818",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/6147acf5-e43f-47e6-ab56-c9c8be584818",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24166",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.513",
      "lastModified" : "2024-11-21T05:52:30.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin before 3.4.34 had no nonce protection making it possible for attackers to craft a request to disconnect a site's OAuth connection."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress wp_ajax_nf_oauth_disconnect from the Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress versiones anteriores a 3.4.34, no tenía protección nonce, haciendo posible que atacantes diseñen una petición para desconectar la conexión OAuth de un sitio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.4.34",
            "matchCriteriaId" : "3F043B37-549B-4242-925D-04A22CEA8042"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b531fb65-a8ff-4150-a9a1-2a62a3c00bd6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b531fb65-a8ff-4150-a9a1-2a62a3c00bd6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/02/one-million-sites-affected-four-severe-vulnerabilities-patched-in-ninja-forms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24167",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.577",
      "lastModified" : "2024-11-21T05:52:30.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When visiting a site running Web-Stat < 1.4.0, the \"wts_web_stat_load_init\" function used the visitor’s browser to send an XMLHttpRequest request to https://wts2.one/ajax.htm?action=lookup_WP_account."
      }, {
        "lang" : "es",
        "value" : "Cuando se visita un sitio que ejecuta Web-Stat versiones anteriores a 1.4.0, la función \"wts_web_stat_load_init\" usó el navegador del visitante para enviar una petición XMLHttpRequest a https://wts2.one/ajax.htm?action=lookup_WP_account"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-stat:web-stat:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "1776B8BE-BBA4-45A4-BFBC-0FCB0B44741F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e7326903-1552-4934-a611-fc0b43236d60",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e7326903-1552-4934-a611-fc0b43236d60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24168",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.670",
      "lastModified" : "2024-11-21T05:52:30.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Easy Contact Form Pro WordPress plugin before 1.1.1.9 did not properly sanitise the text fields (such as Email Subject, Email Recipient, etc) when creating or editing a form, leading to an authenticated (author+) stored cross-site scripting issue. This could allow medium privilege accounts (such as author and editor) to perform XSS attacks against high privilege ones like administrator."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Easy Contact Form Pro versiones anteriores a 1.1.1.9 no saneaba apropiadamente los campos de texto (como Email Subject, Email Recipient, etc.) cuando se crea o edita un formulario, conllevando a un problema de tipo cross-site scripting almacenado (author+) autenticado.&#xa0;Esto podría permitir a unas cuentas de privilegios medios (como el autor y el editor) llevar a cabo ataques de tipo XSS contra las de privilegios altos como el administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy_contact_form_pro_project:easy_contact_form_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.1.9",
            "matchCriteriaId" : "646C8542-AFA8-4B15-8501-05A86E7789F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/bfaa7d79-904e-45f1-bc42-ddd90a65ce74",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bfaa7d79-904e-45f1-bc42-ddd90a65ce74",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24169",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.733",
      "lastModified" : "2024-11-21T05:52:30.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This Advanced Order Export For WooCommerce WordPress plugin before 3.1.8 helps you to easily export WooCommerce order data. The tab parameter in the Admin Panel is vulnerable to reflected XSS."
      }, {
        "lang" : "es",
        "value" : "Este plugin de WordPress Advanced Order Export For WooCommerce versiones anteriores a 3.1.8, le ayuda a exportar fácilmente los datos de pedidos de WooCommerce.&#xa0;El parámetro tab en el Admin Panel es vulnerable a un ataque de tipo XSS reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:algolplus:advanced_order_export_for_woocommerce:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "E96B8E41-9EE8-4A8D-9948-E27318FF1769"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164263/WordPress-Advanced-Order-Export-For-WooCommerce-3.1.7-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/09681a6c-57b8-4448-982a-fe8d28c87fc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24170",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.797",
      "lastModified" : "2024-11-21T05:52:30.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The REST API endpoint get_users in the User Profile Picture WordPress plugin before 2.5.0 returned more information than was required for its functionality to users with the upload_files capability. This included password hashes, hashed user activation keys, usernames, emails, and other less sensitive information."
      }, {
        "lang" : "es",
        "value" : "El endpoint de la API REST get_users en el plugin de WordPress User Profile Picture versiones anteriores a 2.5.0, devolvió más información de la necesaria para su funcionalidad a usuarios con la capacidad upload_files.&#xa0;Esto incluía hash de contraseña, claves de activación de usuario con hash, nombres de usuario, correos electrónicos y otra información menos confidencial"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cozmoslabs:user_profile_picture:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "73606509-3C7C-402D-9043-A9997FA8BC16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/29fc5b0e-0a5f-4484-a1e6-a0a1206726cc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/medium-severity-vulnerability-patched-in-user-profile-picture-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/29fc5b0e-0a5f-4484-a1e6-a0a1206726cc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/medium-severity-vulnerability-patched-in-user-profile-picture-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24171",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.857",
      "lastModified" : "2024-11-25T18:14:49.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WooCommerce Upload Files WordPress plugin before 59.4 ran a single sanitization pass to remove blocked extensions such as .php. It was possible to bypass this and upload a file with a PHP extension by embedding a \"blocked\" extension within another \"blocked\" extension in the \"wcuf_file_name\" parameter. It was also possible to perform a double extension attack and upload files to a different location via path traversal using the \"wcuf_current_upload_session_id\" parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress WooCommerce Upload Files versiones anteriores a 59.4 ejecutó una sola pasada de saneamiento para eliminar extensiones bloqueadas como .php.&#xa0;Era posible omitir esto y cargar un archivo con una extensión PHP insertando una extensión \"blocked\" dentro de otra extensión \"blocked\" en el parámetro \"wcuf_file_name\".&#xa0;También fue posible llevar a cabo un ataque de extensión doble y subir archivos a una ubicación diferente por medio del salto de ruta usando el parámetro \"wcuf_current_upload_session_id\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vanquish:woocommerce_upload_files:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "59.4",
            "matchCriteriaId" : "4D755FA2-93D9-4FE2-BB9E-323398084C28"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ed4288a1-f7e4-455f-b765-5ac343f87194",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/critical-vulnerability-patched-in-woocommerce-upload-files/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ed4288a1-f7e4-455f-b765-5ac343f87194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/critical-vulnerability-patched-in-woocommerce-upload-files/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24172",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.920",
      "lastModified" : "2024-11-21T05:52:31.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the DB, plugins, and current ."
      }, {
        "lang" : "es",
        "value" : "El plugin VM Backups WordPress versiones hasta 1.0, no presenta comprobaciones CSRF, permitiendo a atacantes realizar acciones no deseadas de un usuario que haya iniciado sesión, como generar copias de seguridad de la base de datos, plugins y actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vm_backups_project:vm_backups:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "E7C6F84C-17E5-4DA3-A729-CFFD47E8062D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/187e6967-6961-4843-a9d5-866f6ebdb7bc",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/187e6967-6961-4843-a9d5-866f6ebdb7bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24173",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:15.983",
      "lastModified" : "2024-11-21T05:52:31.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The VM Backups WordPress plugin through 1.0 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as update the plugin's options, leading to a Stored Cross-Site Scripting issue."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress VM Backups versiones hasta 1.0, no presenta comprobaciones de tipo CSRF, permitiendo a atacantes realizar acciones no deseadas de un usuario que haya iniciado sesión, como actualizar las opciones del plugin, conllevando a un problema de tipo cross-site scripting almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vm_backups_project:vm_backups:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "E7C6F84C-17E5-4DA3-A729-CFFD47E8062D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b69ea1bc-3c9b-47d7-a164-c860ee46a9af",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b69ea1bc-3c9b-47d7-a164-c860ee46a9af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24174",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.060",
      "lastModified" : "2024-11-21T05:52:31.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Database Backups versiones hasta 1.2.2.6, no presenta comprobaciones de tipo CSRF, permitiendo a atacantes realizar acciones no deseadas de un usuario que haya iniciado sesión, como generar copias de seguridad de la base de datos, cambiar la configuración del plugin y eliminar copias de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:database-backups_project:database-backups:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.2.6",
            "matchCriteriaId" : "5A2371EB-176A-4EA0-B8D3-048A6E513DF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163091/WordPress-Database-Backups-1.2.2.6-Cross-Site-Request-Forgery.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/350c3e9a-bcc2-486a-90e6-d1dc13ce1bd5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163091/WordPress-Database-Backups-1.2.2.6-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/350c3e9a-bcc2-486a-90e6-d1dc13ce1bd5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24175",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.123",
      "lastModified" : "2024-11-21T05:52:31.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Plus Addons for Elementor Page Builder WordPress plugin before 4.1.7 was being actively exploited to by malicious actors to bypass authentication, allowing unauthenticated users to log in as any user (including admin) by just providing the related username, as well as create accounts with arbitrary roles, such as admin. These issues can be exploited even if registration is disabled, and the Login widget is not active."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Plus Addons for Elementor Page Builder versiones anteriores a 4.1.7, estaban siendo explotados activamente por actores maliciosos para omitir la autenticación, permitiendo a usuarios no autenticados iniciar sesión como cualquier usuario (incluyendo el administrador) al solo proporcionar el nombre de usuario relacionado, así como diseñar cuentas. con roles arbitrarios, como admin.&#xa0;Estos problemas pueden ser explotados incluso si el registro está deshabilitado y el widget de Login no está activo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:posimyth:the_plus_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.1.7",
            "matchCriteriaId" : "11F2C7EF-3D4A-4C1C-9910-6C3654E7D019"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://posimyth.ticksy.com/ticket/2713734/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://posimyth.ticksy.com/ticket/2713734/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c311feef-7041-4c21-9525-132b9bd32f89",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/critical-0-day-in-the-plus-addons-for-elementor-allows-site-takeover/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24176",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.187",
      "lastModified" : "2024-11-21T05:52:31.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The JH 404 Logger WordPress plugin through 1.1 doesn't sanitise the referer and path of 404 pages, when they are output in the dashboard, which leads to executing arbitrary JavaScript code in the WordPress dashboard."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress JH 404 Logger versiones hasta 1.1, no sanea la referencia y la ruta de las páginas 404, cuando son generadas en el panel, lo que conlleva a ejecutar código JavaScript arbitrario en el panel de WordPress"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jh_404_logger_project:jh_404_logger:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.1",
            "matchCriteriaId" : "D3C00249-585B-4A0C-9DF1-8E01DD1EBB12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ganofins.com/blog/my-first-cve-2021-24176/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ganofins.com/blog/my-first-cve-2021-24176/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/705bcd6e-6817-4f89-be37-901a767b0585",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24177",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.247",
      "lastModified" : "2025-03-24T14:32:35.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the default configuration of the File Manager WordPress plugin before 7.1, a Reflected XSS can occur on the endpoint /wp-admin/admin.php?page=wp_file_manager_properties when a payload is submitted on the User-Agent parameter. The payload is then reflected back on the web application response."
      }, {
        "lang" : "es",
        "value" : "En la configuración predeterminada del plugin de WordPress File Manager versiones anteriores a 7.1, un ataque de tipo XSS reflejado puede ocurrir en el endpoint /wp-admin/admin.php?page=wp_file_manager_properties cuando es enviada una carga útil en el parámetro User-Agent.&#xa0;La carga útil entonces es reflejada en la respuesta de la aplicación web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filemanagerpro:file_manager:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.1",
            "matchCriteriaId" : "EDAF3474-8036-48E8-84C8-4F40036B69F9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wp-file-manager-i/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2476829/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1cf3d256-cf4b-4d1f-9ed8-e2cc6392d8d8",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wp-file-manager-i/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2476829/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1cf3d256-cf4b-4d1f-9ed8-e2cc6392d8d8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24180",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.310",
      "lastModified" : "2024-11-21T05:52:32.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious URL."
      }, {
        "lang" : "es",
        "value" : "Una entrada no comprobada y una falta de codificación de la salida dentro del plugin Related Posts para WordPress versiones anteriores a 2.0.4, conllevan a una vulnerabilidad de tipo Cross-Site Scripting (XSS) reflejado dentro del parámetro GET \"lang\" al editar una publicación, desencadenándose cuando unos usuarios presentan la capacidad de editar publicaciones que acceden a una URL maliciosa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:never5:related_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.4",
            "matchCriteriaId" : "A1413B8D-EF5A-40F3-9417-1CBF0C4B8582"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/7593d5c8-cbc2-4469-b36b-5d4fb6d49718",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7593d5c8-cbc2-4469-b36b-5d4fb6d49718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24181",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.390",
      "lastModified" : "2024-11-21T05:52:32.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tutor_mark_answer_as_correct AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students."
      }, {
        "lang" : "es",
        "value" : "La acción AJAX tutor_mark_answer_as_correct del plugin de WordPress Tutor LMS â€\" eLearning and online course solution versión anteriores a 1.7.7, era vulnerable a inyecciones SQL ciegas y basadas en tiempo que podrían ser explotadas por estudiantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.7",
            "matchCriteriaId" : "7AD21F1B-94BF-4BD3-AF90-8D3310510363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d5a00322-7098-4f8d-8e5e-157b63449c17",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d5a00322-7098-4f8d-8e5e-157b63449c17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24182",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.453",
      "lastModified" : "2024-11-21T05:52:32.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tutor_quiz_builder_get_answers_by_question AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students."
      }, {
        "lang" : "es",
        "value" : "La acción AJAX tutor_quiz_builder_get_answers_by_question del plugin de WordPress Tutor LMS – eLearning and online course solution versiones anteriores a 1.8.3, era vulnerable a una inyección SQL basada en UNION que podía ser explotada por estudiantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "A143001B-60BE-4636-86C9-87B686F8ED3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f74dfc52-46ba-41e3-994b-23115a22984f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f74dfc52-46ba-41e3-994b-23115a22984f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24183",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.513",
      "lastModified" : "2024-11-21T05:52:32.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tutor_quiz_builder_get_question_form AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students."
      }, {
        "lang" : "es",
        "value" : "La acción tutor_quiz_builder_get_question_form AJAX del plugin de WordPress Tutor LMS – eLearning and online course solution versiones anteriores a 1.8.3, era vulnerable a una inyección SQL basada en UNION que podía ser explotada por estudiantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "A143001B-60BE-4636-86C9-87B686F8ED3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9b8da6b7-f1d6-4a7d-a621-4ca01e4b7496",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9b8da6b7-f1d6-4a7d-a621-4ca01e4b7496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24184",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.577",
      "lastModified" : "2024-11-21T05:52:32.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Several AJAX endpoints in the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 were unprotected, allowing students to modify course information and elevate their privileges among many other actions."
      }, {
        "lang" : "es",
        "value" : "Varios endpoints AJAX en el plugin de WordPress Tutor LMS - eLearning and online course solution versiones anteriores a 1.7.7, estaban desprotegidos, permitiendo a los estudiantes modificar la información del curso y elevar sus privilegios entre muchas otras acciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.7",
            "matchCriteriaId" : "7AD21F1B-94BF-4BD3-AF90-8D3310510363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5e85917c-7a58-49cb-b8b3-05aa18ffff3e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5e85917c-7a58-49cb-b8b3-05aa18ffff3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24185",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.640",
      "lastModified" : "2024-11-21T05:52:33.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tutor_place_rating AJAX action from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.7.7 was vulnerable to blind and time based SQL injections that could be exploited by students."
      }, {
        "lang" : "es",
        "value" : "La acción tutor_place_rating AJAX del plugin de WordPress Tutor LMS - eLearning and online course solution versiones anteriores a 1.7.7 era vulnerable a inyecciones SQL ciegas y basadas en tiempo que podían ser explotadas por los estudiantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.7",
            "matchCriteriaId" : "7AD21F1B-94BF-4BD3-AF90-8D3310510363"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0cba5349-e916-43f0-a1fe-62cf73e352a2",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0cba5349-e916-43f0-a1fe-62cf73e352a2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24186",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.703",
      "lastModified" : "2024-11-21T05:52:33.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The tutor_answering_quiz_question/get_answer_by_id function pair from the Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.3 was vulnerable to UNION based SQL injection that could be exploited by students."
      }, {
        "lang" : "es",
        "value" : "El par de funciones tutor_answering_quiz_question y get_answer_by_id del plugin Tutor LMS - eLearning and online course solution WordPress versiones anteriores a 1.8.3, era vulnerable a una inyección SQL basada en UNION que podría ser explotada por los estudiantes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.3",
            "matchCriteriaId" : "A143001B-60BE-4636-86C9-87B686F8ED3B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5f5c0c6c-6f76-4366-b590-0aab557f8c60",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5f5c0c6c-6f76-4366-b590-0aab557f8c60",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/several-vulnerabilities-patched-in-tutor-lms-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24187",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.763",
      "lastModified" : "2024-11-21T05:52:33.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The setting page of the SEO Redirection Plugin - 301 Redirect Manager WordPress plugin before 6.4 is vulnerable to reflected Cross-Site Scripting (XSS) as user input is not properly sanitised before being output in an attribute."
      }, {
        "lang" : "es",
        "value" : "La página de configuración del plugin SEO Redirection - 301 Redirect Manager de WordPress anterior a la versión 6.4 es vulnerable al Cross-Site Scripting (XSS) reflejado, ya que la entrada del usuario no se sanea correctamente antes de ser emitida en un atributo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clogica:seo_redirection:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.4",
            "matchCriteriaId" : "78C6A284-8749-4719-9016-BB1B3E13E24C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c234700e-61dd-46a0-90fb-609e704269a9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c234700e-61dd-46a0-90fb-609e704269a9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24196",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.827",
      "lastModified" : "2024-11-21T05:52:34.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Social Slider Widget WordPress plugin before 1.8.5 allowed Authenticated Reflected XSS in the plugin settings page as the ‘token_error’ parameter can be controlled by users and it is directly echoed without being sanitized"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Social Slider Widget versiones anteriores a 1.8.5, permitía un ataque de tipo XSS reflejado autenticado en la página de configuración del plugin, ya que el parámetro \"token_error\" puede ser controlado por los usuarios y se repite directamente sin ser saneado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cm-wp:social_slider_widget:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.5",
            "matchCriteriaId" : "B493FD8A-A392-4592-A473-D366B30090E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://purinechu.github.io/posts/social_slider_widget_reflected_xss/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bb20d732-a5e4-4140-ab51-b2aa1a53db12",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://purinechu.github.io/posts/social_slider_widget_reflected_xss/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bb20d732-a5e4-4140-ab51-b2aa1a53db12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24201",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.890",
      "lastModified" : "2024-11-21T05:52:34.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Elementor Website Builder WordPress plugin before 3.1.4, the column element (includes/elements/column.php) accepts an ‘html_tag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request containing JavaScript in the ‘html_tag’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Elementor Website Builder versiones anteriores a 3.1.4, el elemento column (el archivo includes/elements/column.php) acepta un parámetro \"html_tag\".&#xa0;Aunque el control de elementos enumera un conjunto fijo de posibles etiquetas html, es posible que un usuario con permisos de colaborador o superiores envíe una petición â€˜save_builderâ€™ modificada que contenga JavaScript en el parámetro \"html_tag\", que no es filtrado y se emite sin escapar.&#xa0;Este JavaScript será ejecutado cuando la página guardada sea visualizada o previsualizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "493EC195-F031-4D35-9143-9399AEB9292A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9647f516-b130-4cc8-85fb-2e69b034ced0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9647f516-b130-4cc8-85fb-2e69b034ced0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24202",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:16.953",
      "lastModified" : "2024-11-21T05:52:35.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Elementor Website Builder WordPress plugin before 3.1.4, the heading widget (includes/widgets/heading.php) accepts a ‘header_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request with this parameter set to ‘script’ and combined with a ‘title’ parameter containing JavaScript, which will then be executed when the saved page is viewed or previewed."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Elementor Website Builder versiones anteriores a 3.1.4, el widget heading (el archivo includes/widgets/heading.php) acepta un parámetro \"header_size\".&#xa0;Aunque el control de elementos enumera un conjunto fijo de posibles etiquetas html, es posible que un usuario con permisos de Colaborador o superiores envíe una petición \"save_builder\" modificada con este parámetro establecido en \"script\" y combinado con un parámetro de \"títle\" que contenga JavaScript , que luego será ejecutado cuando la página guardada es visualizada o previsualizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "493EC195-F031-4D35-9143-9399AEB9292A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/b72bd13d-c8e2-4347-b009-542fc0fe21bb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/b72bd13d-c8e2-4347-b009-542fc0fe21bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24203",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.013",
      "lastModified" : "2024-11-21T05:52:35.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Elementor Website Builder WordPress plugin before 3.1.4, the divider widget (includes/widgets/divider.php) accepts an ‘html_tag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request with this parameter set to ‘script’ and combined with a ‘text’ parameter containing JavaScript, which will then be executed when the saved page is viewed or previewed."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Elementor Website Builder versiones anteriores a 3.1.4, el widget divisor (el archivo includes/widgets/divider.php) acepta un parámetro \"html_tag\".&#xa0;Aunque el control de elementos enumera un conjunto fijo de posibles etiquetas html, es posible que un usuario con permisos de Colaborador o superiores envíe una petición \"save_builder\" modificada con este parámetro establecido en '\"script\" y combinado con un parámetro de \"text\" que contenga JavaScript , que luego será ejecutado cuando la página guardada es visualizada o previsualizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "493EC195-F031-4D35-9143-9399AEB9292A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/aa152ad0-5b3d-4d1f-88f4-6899a546e72e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/aa152ad0-5b3d-4d1f-88f4-6899a546e72e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24204",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.077",
      "lastModified" : "2024-11-21T05:52:35.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Elementor Website Builder WordPress plugin before 3.1.4, the accordion widget (includes/widgets/accordion.php) accepts a ‘title_html_tag’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request containing JavaScript in the ‘title_html_tag’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Elementor Website Builder versiones anteriores a 3.1.4, el widget accordion (el archivo includes/widgets/accordion.php) acepta un parámetro \"title_html_tag\".&#xa0;Aunque el control de elementos enumera un conjunto fijo de posibles etiquetas html, es posible que un usuario con permisos de Colaborador o superiores envíe una petición \"save_builder\" modificada que contenga JavaScript en el parámetro 'title_html_tag', que no se filtra y se genera sin escapar.&#xa0;Este JavaScript será ejecutado cuando la página guardada sea visualizada o previsualizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "493EC195-F031-4D35-9143-9399AEB9292A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/772e172f-c8b4-4a6a-9eb9-9663295cfedf",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/772e172f-c8b4-4a6a-9eb9-9663295cfedf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24205",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.140",
      "lastModified" : "2024-11-21T05:52:35.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Elementor Website Builder WordPress plugin before 3.1.4, the icon box widget (includes/widgets/icon-box.php) accepts a ‘title_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request containing JavaScript in the ‘title_size’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Elementor Website Builder versiones anteriores a 3.1.4, el widget  icon box (el archivo includes/widgets/icon-box.php) acepta un parámetro \"title_size\".&#xa0;Aunque el control de elementos enumera un conjunto fijo de posibles etiquetas html, es posible que un usuario con permisos de Colaborador o superiores envíe una petición \"save_builder\" modificada que contenga JavaScript en el parámetro \"title_size\", que no se filtra y se genera sin escapar .&#xa0;Este JavaScript será ejecutado cuando la página guardada sea visualizada o previsualizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "493EC195-F031-4D35-9143-9399AEB9292A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ef23df6d-e265-44f6-bb94-1005b16d34d9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ef23df6d-e265-44f6-bb94-1005b16d34d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24206",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.217",
      "lastModified" : "2024-11-21T05:52:35.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the Elementor Website Builder WordPress plugin before 3.1.4, the image box widget (includes/widgets/image-box.php) accepts a ‘title_size’ parameter. Although the element control lists a fixed set of possible html tags, it is possible for a user with Contributor or above permissions to send a modified ‘save_builder’ request containing JavaScript in the ‘title_size’ parameter, which is not filtered and is output without escaping. This JavaScript will then be executed when the saved page is viewed or previewed."
      }, {
        "lang" : "es",
        "value" : "En el plugin de WordPress Elementor Website Builder versiones anteriores a 3.1.4, el widget de cuadro de imagen (el archivo includes/widgets/image-box.php) acepta un parámetro \"title_size\".&#xa0;Aunque el control de elementos enumera un conjunto fijo de posibles etiquetas html, es posible que un usuario con permisos de Colaborador o superiores envíe una petición \"save_builder\" modificada que contenga JavaScript en el parámetro \"title_size\", que no se filtra y se genera sin escapar .&#xa0;Este JavaScript será ejecutado cuando la página guardada es visualizada u obtenga una vista previa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elementor:website_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.1.4",
            "matchCriteriaId" : "493EC195-F031-4D35-9143-9399AEB9292A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/2f66efd9-7d55-4f33-9109-3cb583a0c309",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2f66efd9-7d55-4f33-9109-3cb583a0c309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/cross-site-scripting-vulnerabilities-in-elementor-impact-over-7-million-sites/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24207",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.263",
      "lastModified" : "2024-11-21T05:52:35.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "By default, the WP Page Builder WordPress plugin before 1.2.4 allows subscriber-level users to edit and make changes to any and all posts pages - user roles must be specifically blocked from editing posts and pages."
      }, {
        "lang" : "es",
        "value" : "Por defecto, el plugin de WordPress WP Page Builder versiones anteriores a 1.2.4, permite a usuarios de nivel de suscriptor editar y realizar cambios en todas y cada una de las páginas de publicaciones; los roles de usuario deben ser bloqueados específicamente para que no puedan editar publicaciones y páginas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:wp_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "47020215-1D45-40AC-A57A-65F118C6510E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/21e7a46f-e9a3-4b20-b44a-a5b6ce7b7ce6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.themeum.com/wp-page-builder-updated-v1-2-4/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/21e7a46f-e9a3-4b20-b44a-a5b6ce7b7ce6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.themeum.com/wp-page-builder-updated-v1-2-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24208",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.343",
      "lastModified" : "2024-11-21T05:52:35.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The editor of the WP Page Builder WordPress plugin before 1.2.4 allows lower-privileged users to insert unfiltered HTML, including JavaScript, into pages via the “Raw HTML” widget and the “Custom HTML” widgets (though the custom HTML widget requires sending a crafted request - it appears that this widget uses some form of client side validation but not server side validation), all of which are added via the “page_builder_data” parameter when performing the “wppb_page_save” AJAX action. It is also possible to insert malicious JavaScript via the “wppb_page_css” parameter (this can be done by closing out the style tag and opening a script tag) when performing the “wppb_page_save” AJAX action."
      }, {
        "lang" : "es",
        "value" : "El editor del plugin de WordPress WP Page Builder versiones anteriores a 1.2.4, permite a usuarios menos privilegiados insertar HTML sin filtrar, incluido JavaScript, en las páginas por medio del widget \"Raw HTML\" y los widgets \"Custom HTML\" (aunque el widget HTML personalizado requiere el envío una petición diseñada (parece que este widget utiliza alguna forma de comprobación del lado del cliente pero no del lado del servidor), todos los cuales son agregados por medio del parámetro \"page_builder_data\" al realizar la acción AJAX \"wppb_page_save\".&#xa0;También es posible insertar JavaScript malicioso por medio del parámetro \"wppb_page_css\" (esto puede ser realizado al cerrar la etiqueta de estilo y abriendo una etiqueta de script) cuando se lleva a cabo la acción AJAX  \"wppb_page_save\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:wp_page_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "47020215-1D45-40AC-A57A-65F118C6510E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c20e243d-b0de-4ae5-9a0d-b9d02c9b8141",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.themeum.com/wp-page-builder-updated-v1-2-4/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c20e243d-b0de-4ae5-9a0d-b9d02c9b8141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.themeum.com/wp-page-builder-updated-v1-2-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24209",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.407",
      "lastModified" : "2024-11-21T05:52:35.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP Super Cache WordPress plugin before 1.7.2 was affected by an authenticated (admin+) RCE in the settings page due to input validation failure and weak $cache_path check in the WP Super Cache Settings -> Cache Location option. Direct access to the wp-cache-config.php file is not prohibited, so this vulnerability can be exploited for a web shell injection."
      }, {
        "lang" : "es",
        "value" : "El plugin WordPress WP Super Cache versiones anteriores a 1.7.2, estuvo afectado por una RCE autenticado (admin+) en la página de configuración debido a una falta  de comprobación de entrada y una comprobación débil de $cache_path en la opción WP Super Cache Settings-) Cache Location.&#xa0;El acceso directo al archivo wp-cache-config.php no está prohibido, por lo que esta vulnerabilidad puede ser explotada para una inyección de shell web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automattic:wp_super_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "6B6C8F87-3D30-43D8-A22A-D1E3DFCDAEEC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2496238/wp-super-cache",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/733d8a02-0d44-4b78-bbb2-37e447acd2f3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2496238/wp-super-cache",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/733d8a02-0d44-4b78-bbb2-37e447acd2f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24210",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.467",
      "lastModified" : "2024-11-21T05:52:36.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an open redirect in the PhastPress WordPress plugin before 1.111 that allows an attacker to malform a request to a page with the plugin and then redirect the victim to a malicious page. There is also a support comment from another user one year ago (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) that says that the php involved in the request only go to whitelisted pages but it's possible to redirect the victim to any domain."
      }, {
        "lang" : "es",
        "value" : "Se presenta un redireccionamiento abierto en el plugin PhastPress WordPress versiones anteriores a 1.111, que permite a un atacante malformar una petición hacia una página con el plugin y luego redireccionar a la víctima hacia una página maliciosa.&#xa0;También se presenta un comentario de soporte de otro usuario hace un año (https://wordpress.org/support/topic/phast-php-used-for-remote-fetch/) que dice que el php involucrado en la petición solo va a páginas incluidas en la lista blanca, pero es posible redireccionar a la víctima a cualquier dominio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kiboit:phastpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.111",
            "matchCriteriaId" : "CB59F31A-0880-4A73-A6E9-BA8D131AAB58"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2497610/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2497610/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9b3c5412-8699-49e8-b60c-20d2085857fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24211",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.530",
      "lastModified" : "2025-08-12T12:51:21.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Related Posts versiones hasta 3.6.4, contiene una vulnerabilidad de tipo XSS almacenado autenticada (admin+) en el campo title en la página de configuración.&#xa0;Al explotar que un atacante pueda ser capaz de ejecutar código JavaScript en el navegador del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sovrn:wordpress_related_posts:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.6.4",
            "matchCriteriaId" : "0C682FC3-DB6A-492D-B59D-0BBE7DD1302A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/37e0a033-3dee-476d-ae86-68354e8f0b1c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/37e0a033-3dee-476d-ae86-68354e8f0b1c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24212",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-05T19:15:17.593",
      "lastModified" : "2024-11-21T05:52:36.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WooCommerce Help Scout WordPress plugin before 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) allows unauthenticated users to upload any files to the site which by default will end up in wp-content/uploads/hstmp."
      }, {
        "lang" : "es",
        "value" : "El plugin del WordPress WooCommerce Help Scout, versiones anteriores a 2.9.1 (https://woocommerce.com/products/woocommerce-help-scout/) permite a usuarios no autenticados cargar cualquier archivo en el sitio que, por defecto, terminará en wp-content/uploads/hstmp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:woocommerce:help_scout:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.9.1",
            "matchCriteriaId" : "4A6A0E4F-0A3D-4AA1-B0B6-E7C7E58BB1D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dzv365zjfbd8v.cloudfront.net/changelogs/woocommerce-help-scout/changelog.txt",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/cf9305e8-f5bc-45c3-82db-0ef00fd46129",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dzv365zjfbd8v.cloudfront.net/changelogs/woocommerce-help-scout/changelog.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/cf9305e8-f5bc-45c3-82db-0ef00fd46129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20305",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-05T22:15:12.727",
      "lastModified" : "2024-11-21T05:46:19.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Nettle in versions before 3.7.2, where several Nettle signature verification functions (GOST DSA, EDDSA & ECDSA) result in the Elliptic Curve Cryptography point (ECC) multiply function being called with out-of-range scalers, possibly resulting in incorrect results. This flaw allows an attacker to force an invalid signature, causing an assertion failure or possible validation. The highest threat to this vulnerability is to confidentiality, integrity, as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Nettle en versiones anteriores a 3.7.2, donde varias funciones de comprobación de firma de Nettle (GOST DSA, EDDSA y ECDSA) resultan en la función de multiplicación del punto Elliptic Curve Cryptography (ECC) ser llamados con escaladores fuera de rango, posiblemente resultando en resultados incorrectos.&#xa0;Este fallo permite a un atacante forzar una firma no válida, causando un fallo de aserción o una posible validación.&#xa0;La mayor amenaza para esta vulnerabilidad es la confidencialidad, la integridad y la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nettle_project:nettle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.2",
            "matchCriteriaId" : "8CC0083D-65E9-4D7D-AAD1-7735276B0072"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1942533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-31",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20211022-0002/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4933",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1942533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/09/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MQKWVVMAIDAJ7YAA3VVO32BHLDOH2E63/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20211022-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4933",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20307",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-05T22:15:12.883",
      "lastModified" : "2024-11-21T05:46:19.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Format string vulnerability in panoFileOutputNamesCreate() in libpano13 2.9.20~rc2+dfsg-3 and earlier can lead to read and write arbitrary memory values."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de cadena de formato en la función panoFileOutputNamesCreate() en libpano versiones 13 2.9.20~rc2+dfsg-3 y anteriores, puede conllevar a leer y escribir valores de memoria arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-134"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpano13_project:libpano13:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.9.19",
            "matchCriteriaId" : "9F6A55F8-6852-4B9E-90B6-73DBC46E66A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpano13_project:libpano13:2.9.20:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "78A24C95-1C12-4603-BBBD-2E72AFF03E81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libpano13_project:libpano13:2.9.20:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "624B8394-5368-4785-B79F-C408B1A7BD09"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946284",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00010.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE6YZSXNVD6WZ3AG3ENL2DIHQFF24LYX/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYDYBKHT2MNMQCUMAVJNZW4VH6MD5BOF/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-47",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/panotools/files/libpano13/libpano13-2.9.20/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946284",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FVJRXUOBN56ZWP6QQ3NTA6DIFZMDZAEQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JE6YZSXNVD6WZ3AG3ENL2DIHQFF24LYX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VYDYBKHT2MNMQCUMAVJNZW4VH6MD5BOF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/projects/panotools/files/libpano13/libpano13-2.9.20/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20308",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-05T22:15:12.947",
      "lastModified" : "2024-11-21T05:46:20.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in the htmldoc 1.9.11 and before may allow attackers to execute arbitrary code and cause a denial of service that is similar to CVE-2017-9181."
      }, {
        "lang" : "es",
        "value" : "El desbordamiento de enteros en htmldoc versiones 1.9.11 y anteriores, puede permitir a atacantes ejecutar código arbitrario y causar una denegación de servicio similar a CVE-2017-9181"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmldoc_project:htmldoc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.9.11",
            "matchCriteriaId" : "3C2771A0-9E19-4348-A7EE-53F10C08EABC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946289",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelrsweet/htmldoc/issues/423",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00000.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelrsweet/htmldoc/issues/423",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30141",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-05T23:15:12.190",
      "lastModified" : "2024-11-21T06:03:23.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Module/Settings/UserExport.php in Friendica through 2021.01 allows settings/userexport to be used by anonymous users, as demonstrated by an attempted access to an array offset on a value of type null, and excessive memory consumption. NOTE: the vendor states \"the feature still requires a valid authentication cookie even if the route is accessible to non-logged users."
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** El archivo Module/Settings/UserExport.php en Friendica versiones hasta 2021.01, permite que settings/userexport sea usado por usuarios anónimos, como es demostrado por un intento de acceso a un desplazamiento de matriz en un valor de tipo null, y un consumo excesivo de la memoria. NOTA: el proveedor afirma que \"la funcionalidad aún requiere una cookie de autenticación válida incluso si la ruta es accesible para usuarios no registrados\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:friendica:friendica:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021.01",
            "matchCriteriaId" : "AB126001-C368-4484-B88B-6CE423F8A508"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/friendica/friendica/issues/10110",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/friendica/friendica/pull/10113/commits/acbcc56754121ba080eac5b6fdf69e64ed7fe453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/friendica/friendica/issues/10110",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/friendica/friendica/pull/10113/commits/acbcc56754121ba080eac5b6fdf69e64ed7fe453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28175",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:13.067",
      "lastModified" : "2024-11-21T05:59:15.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuration de Radius en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4543-98220-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4543-98220-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28176",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:14.663",
      "lastModified" : "2024-11-21T05:59:15.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The DNS configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuration de DNS en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4544-0a409-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4544-0a409-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28177",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:14.753",
      "lastModified" : "2024-11-21T05:59:15.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The LDAP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuration de LDAP en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4547-88e43-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4547-88e43-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28178",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:14.833",
      "lastModified" : "2024-11-21T05:59:16.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The UEFI configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función UEFI configuration en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4548-7a2c6-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4548-7a2c6-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28179",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:14.910",
      "lastModified" : "2024-11-21T05:59:16.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Media support configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Media support configuration setting) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4549-c97ba-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4549-c97ba-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28180",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:14.987",
      "lastModified" : "2024-11-21T05:59:16.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Audit log configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Audit log configuration setting) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4550-5ee8c-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4550-5ee8c-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28181",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.067",
      "lastModified" : "2024-11-21T05:59:16.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Remote video configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Remote video configuration setting) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4551-5dd2f-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4551-5dd2f-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28182",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.143",
      "lastModified" : "2024-11-21T05:59:16.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Service configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función configuration Web Service en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4552-5b2c4-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4552-5b2c4-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28183",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.223",
      "lastModified" : "2024-11-21T05:59:16.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Web License configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Web License configuration setting) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4553-06ae2-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4553-06ae2-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28184",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.317",
      "lastModified" : "2024-11-21T05:59:16.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuration de Active Directory en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4554-10a74-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4554-10a74-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28185",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.393",
      "lastModified" : "2024-11-21T05:59:16.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-1 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Adquisición de configuración 1 de ActiveX) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4555-3c7c3-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4555-3c7c3-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28186",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.473",
      "lastModified" : "2024-11-21T05:59:17.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (ActiveX configuration-2 acquisition) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Adquisición de configuración 2 de ActiveX) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4556-ece3d-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4556-ece3d-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28187",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.567",
      "lastModified" : "2024-11-21T05:59:17.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Generate new SSL certificate) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Genera un nuevo certificado SSL) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4557-1019f-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4557-1019f-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28188",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.643",
      "lastModified" : "2024-11-21T05:59:17.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Modifica la función de información del usuario) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4558-ad16e-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4558-ad16e-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28189",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.723",
      "lastModified" : "2024-11-21T05:59:17.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuration de SMTP en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4559-ad2b5-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4559-ad2b5-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28190",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.800",
      "lastModified" : "2024-11-21T05:59:17.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Generate new certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Genera una nueva función de certificado) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4560-2f01f-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4560-2f01f-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28191",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.880",
      "lastModified" : "2024-11-21T05:59:17.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Firmware update function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de actualización de Firmware en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4561-062d0-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4561-062d0-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28192",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:15.957",
      "lastModified" : "2024-11-21T05:59:18.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Remote video storage function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Función de almacenamiento de video remoto) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4562-4b207-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28193",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.067",
      "lastModified" : "2024-11-21T05:59:18.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The SMTP configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración de SMTP en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4563-e4092-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28194",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.143",
      "lastModified" : "2024-11-21T05:59:18.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Remote image configuration setting) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (ajuste de configuración de imagen remota) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4564-7ef3d-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28195",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.223",
      "lastModified" : "2024-11-21T05:59:18.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Radius configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración de Radius en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4565-59c97-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28196",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.333",
      "lastModified" : "2024-11-21T05:59:18.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Generate SSL certificate function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Genera la función del certificado SSL) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4566-9154b-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28197",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.427",
      "lastModified" : "2024-11-21T05:59:19.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Active Directory configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración de Active Directory en la página de administración Web del firmware de ASUS BMC no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4567-34350-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28198",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.503",
      "lastModified" : "2024-11-21T05:59:20.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Firmware protocol configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración de protocolo del Firmware en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4568-627f7-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28199",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.583",
      "lastModified" : "2024-11-21T05:59:20.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Modifica la función de información del usuario) no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4569-6b391-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28200",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.660",
      "lastModified" : "2024-11-21T05:59:20.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The CD media configuration function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración multimedia CD en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4570-4d216-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28201",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.737",
      "lastModified" : "2024-11-21T05:59:20.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Service configuration-1 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración 1 del Servicio en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer. Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28202",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.847",
      "lastModified" : "2024-11-21T05:59:20.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Service configuration-2 function in ASUS BMC’s firmware Web management page does not verify the string length entered by users, resulting in a Buffer overflow vulnerability. As obtaining the privileged permission, remote attackers use the leakage to abnormally terminate the Web service."
      }, {
        "lang" : "es",
        "value" : "La función de configuración 2 del Servicio en la página de administración Web del firmware de ASUS BMC, no verifica la longitud de la cadena introducida por usuarios, resultando en una vulnerabilidad de desbordamiento del búfer.&#xa0;Al obtener el permiso privilegiado, los atacantes remotos usan la filtración para finalizar anormalmente el servicio Web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4571-d454c-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28203",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:16.927",
      "lastModified" : "2024-11-21T05:59:21.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Web Set Media Image function in ASUS BMC’s firmware Web management page does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary."
      }, {
        "lang" : "es",
        "value" : "La función Web Set Media Image en la página de administración Web del firmware de ASUS BMC, no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden iniciar una inyección de comandos para ejecutar un comando arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4573-aa336-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4573-aa336-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28204",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:17.050",
      "lastModified" : "2024-11-21T05:59:21.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Modify user’s information function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can launch command injection to execute command arbitrary."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Modifica la función de información del usuario) no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden iniciar una inyección de comandos para ejecutar un comando arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4574-b61a6-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4574-b61a6-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28205",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:17.143",
      "lastModified" : "2024-11-21T05:59:21.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Borra la función de archivo de video SOL) no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden usar los medios de salto de ruta para acceder a unos archivos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pr-d16_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F38D0E80-BD62-46A7-B1CD-6C7045FF7F79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A340A0CE-8BD2-420A-814B-5585C08A4CCB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb8-ikvm_firmware:1.14.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D98B9CE-6675-48A4-98A3-6E5DA19A2480"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb8-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2F069D-18EE-49A3-A8EB-3C745425BFFE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z10pe-d16_ws_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B5DB0A7-B863-4AFF-BEB6-6958F921C016"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z10pe-d16_ws:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51F61A82-6BBE-4758-9789-7CE6FCB9E20D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4575-2e32d-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4575-2e32d-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28206",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:17.237",
      "lastModified" : "2024-11-21T05:59:21.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Graba la función de archivo de video) no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden usar los medios de salto de ruta para acceder a unos archivos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4576-422ac-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28207",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:17.333",
      "lastModified" : "2024-11-21T05:59:21.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Obtiene la función de archivo Help) no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden usar los medios de salto de ruta para acceder a los archivos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4577-60153-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28208",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:17.393",
      "lastModified" : "2024-11-21T05:59:21.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Obtiene la función de archivo de video) no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden usar los medios de salto de ruta para acceder a unos archivos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4578-e5d74-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28209",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T05:15:17.473",
      "lastModified" : "2024-11-21T05:59:22.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administrator permission, remote attackers can use the means of path traversal to access system files."
      }, {
        "lang" : "es",
        "value" : "La función specific en la página de administración Web del firmware de ASUS BMC (Borra la función de archivo de video) no filtra el parámetro specific.&#xa0;Como obtener el permiso de administrador, unos atacantes remotos pueden usar los medios de salto de ruta para acceder a unos archivos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:asmb9-ikvm_firmware:1.11.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40A54A0A-77FA-4A52-8B6C-27037BC8B49A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:asmb9-ikvm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8403F521-6213-455E-B7EE-BA6979DCECE0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24-e_firmware:1.10.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA68530-98FD-422C-AFED-F4A8D51A18FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4210DAC9-9728-4235-A2A6-4BE1673A3087"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4_firmware:1.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAD9A2C1-93D2-47BF-A5F1-51E1E4E7AA0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DEDE99-AABB-4B29-A7E8-FA88CCB64E08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs4_firmware:1.09:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1897CBA-FD13-4289-AC42-DE2644BB6607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FC543CA-A2FA-4909-AC8B-2DF4BDC9D89A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4x_firmware:1.11.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8B5694-E9EF-4C09-8E28-DB7F0DB4880D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CF24B07-D05B-48CF-8778-DBA503D824A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700-e9-rs12_firmware:1.11.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C616EB3-7257-4A4B-93D2-77020DAC7D34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700-e9-rs12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "377A6E37-7B30-4460-B51F-99FCD572266C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs100-e10-pi2_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39FA5F21-3500-454A-AF5E-809A0C9E1CD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs100-e10-pi2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12A33A3C-19C5-456C-B25F-18C706611853"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-ps4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C79FC84-D468-4056-BCB6-789C6DFED310"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F17455F9-1D00-4510-A79A-6BDDBB6F1B52"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs300-e10-rs4_firmware:1.13.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B8C7C6-88CB-4A50-A0CE-69B8157774CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs300-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FA81076-C066-4F9A-B6DD-89C0A1E87007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-ps4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC487249-AEF5-412C-B1E7-F68119C154C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EE0FF60-E688-46C4-8CEE-569C2273BA77"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9-rs4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D6CF74-1AEE-4616-8098-AF286859CD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB4E233-E97F-4E9E-89AF-FC27E10419CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e9_rs4_u_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "315EF6C1-97EF-4939-9DE1-03FC3668DDD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e9_rs4_u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53B32DC-D011-44BB-AA62-CCCC1643BD0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:e700_g4_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC22D5D-87E1-418C-99C8-A25BECC964E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:e700_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC848711-32AF-462E-A06F-60BB7E1D33BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c422_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "205C81D2-B6C5-4D1F-9C97-00D4DA28EB2C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c422_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77921CC6-3F8D-4408-AED2-009CBD39B7E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_x299_pro\\/se_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C269611C-67CB-403F-BE35-E723AF0ED0F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_x299_pro\\/se:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AA451F-9FF0-4DA3-9A20-BF675F21F9C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A3B078B-0C22-4254-A37A-1AD4F7CEA3B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC25822B-31FE-4CE4-B1CC-4FDD4BADC89F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-u12\\/10g-2s_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "690FF817-248D-4978-BDBD-8039586F7AB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-u12\\/10g-2s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA33288B-ECEF-4068-B501-E9ADD2B19F7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:knpa-u16_firmware:1.13.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3C9DE71-3B1C-4FF8-9C58-44FC5F0DDD68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:knpa-u16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C1BC39-6E9D-4D9C-AA40-B51138DEDDF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_dhd_g4_firmware:1.13.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E15C09F1-E09B-437E-980E-A13D05A68C70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_dhd_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A76CD-3932-4233-BFD7-661363938859"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc4000_g4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C55BBB4-DEB0-41F2-A09E-FB64B9F0309E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc4000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5062001F-935D-4FE5-831D-C5113DA1D2DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs24-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C233178A-7C83-4753-9ED8-325D79111FDD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs24-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9BA009-703C-4F9F-91FD-601CE4355C30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C896942-DE33-4134-B2F6-25DF85EC8D4D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64831F59-CE1E-4546-8A39-9FA45F8E0563"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720q-e9-rs8-s_firmware:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C935BA3-7F5B-4D6E-BF5B-14E028236CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720q-e9-rs8-s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E73697-10BD-49B1-AC1B-B44FEFFEF631"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DD5DF3-DD2B-4D0C-8904-404A4E88FA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96F0C227-097C-4BE5-BBCA-349914CF7BC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pa-d8c_firmware:1.14.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9D8BF26-2263-4077-A831-11719C7C20C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pa-d8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "648DAD72-3535-43C1-A44E-EEC9102690B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs24-u_firmware:1.14.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F85E29D2-55B6-4EBB-80F7-1429752C74FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs24-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3FF951D-A07D-465D-BEF8-44359445D66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs8-g_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8F86A9-542D-424D-B539-E841A1CF6657"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs8-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A1DF9A-944A-4CDB-A784-0F894C5A0C54"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-ps4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AC2F649-A059-4AED-8463-5E1B3EA312E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC616DB9-EA78-466C-8B33-D1ECE36D7861"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:pro_e800_g4_firmware:1.14.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4C4879-DCD7-47C7-98BD-2E1C9C0E0544"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:pro_e800_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEB6AD8E-7D3D-46A3-8919-339095DE5848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45A849AB-C3E4-4E77-9A65-4D9F08ACA155"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6CF829-87F0-4351-8F26-D09277A53FA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500-e9-rs4-u_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34E98952-7995-4FE6-BFE5-9C11AC99CD6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500-e9-rs4-u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0ECC375-C875-467B-BF98-57E2AEEE10DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs12-e_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9386AD14-6121-4E68-86D2-C78128BE6C55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27300D49-3E43-469F-9B1A-A9CC9A03853C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs520-e9-rs8_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1CE4D4-7AC4-42A1-AE82-57A348EF04FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs520-e9-rs8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F81AC089-04F7-4199-82CE-28DE60C6FC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "853F7236-2636-4CC5-8F09-A8FEA127EB3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCFD494-6259-470A-B646-8CDD0CBB4540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:esc8000_g4\\/10g_firmware:1.15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E23F2DA0-453A-4F62-9C21-A5A7606D99E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:esc8000_g4\\/10g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AD933F6-B839-4B26-AA9A-0382FDC8F65C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720-e9-rs12-e_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDBC4899-D7AC-4DCC-A324-A41DC1605FD0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720-e9-rs12-e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C332F85-C27F-4DBA-A681-EBDC07193905"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:ws_c621e_sage_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "571D5376-2F83-4285-970A-337E30F7D513"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:ws_c621e_sage:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C584935A-9088-4EA5-850A-61B5741A6317"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-ps4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2029BD82-2142-4BAA-9220-D22B1A526A5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-ps4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A7C8A7D-157E-49A2-B9AE-8D7FB4F38A19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs500a-e10-rs4_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05CE886A-53E2-4E7B-831B-847D78E91FDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs500a-e10-rs4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543BB762-76C9-41FB-A503-B67006E0313B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs12v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0726ED-4CFC-4D58-93C1-E1250A76AE13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA41003D-2891-4B7F-B29C-C4863376FD30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs700a-e9-rs4v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549BC8D5-BFEC-431B-80CE-EDA1EF73A515"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs700a-e9-rs4v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB631682-03BC-4880-9E22-D65F29E81EE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs12v2_firmware:1.15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5814D41F-0C3F-4DDA-91F0-0225C93B1C52"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs12v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A9D9D22-7280-4D07-9870-9EA042C46E36"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rs720a-e9-rs24v2_firmware:1.15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8884EA18-4106-4841-ACA5-C317D004AA22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rs720a-e9-rs24v2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3134870B-1EDD-4299-ADBA-2B3CB3E4A8C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:z11pr-d16_firmware:1.15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E543339C-03F9-46F3-9B33-AB1BDB827989"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:z11pr-d16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5866377B-3F1A-4AFF-9BAE-AF495A3BE35E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/content/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/tw/support/callus/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4579-c8827-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30144",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T05:15:17.597",
      "lastModified" : "2024-11-21T06:03:23.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dashboard plugin through 1.0.2 for GLPI allows remote low-privileged users to bypass access control on viewing information about the last ten events, the connected users, and the users in the tech category. For example, plugins/dashboard/front/main2.php can be used."
      }, {
        "lang" : "es",
        "value" : "El plugin Dashboard versiones hasta 1.0.2 para GLPI, permite a usuarios remotos poco privilegiados omitir un control de acceso en visualizar información sobre los últimos diez eventos, los usuarios conectados y los usuarios en la categoría de tecnología.&#xa0;Por ejemplo, puede ser usado un archivo plugins/dashboard/front/main2.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glpi-project:dashboard:*:*:*:*:*:glpi:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "53779B29-857F-40C1-A396-AE2FF0974CF8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Kitsun3Sec/exploits/tree/master/cms/GLPI/dashboard-plugin",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.glpi-project.org/#/plugin/dashboard",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Kitsun3Sec/exploits/tree/master/cms/GLPI/dashboard-plugin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.glpi-project.org/#/plugin/dashboard",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T06:15:15.420",
      "lastModified" : "2024-11-21T06:03:23.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Composr 10.0.36 allows upload and execution of PHP files."
      }, {
        "lang" : "es",
        "value" : "Composr versión 10.0.36, permite cargar y ejecutar archivos PHP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocproducts:composr:10.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C03939-FDE3-4AAC-A489-71BABCAFB260"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162128/Composr-10.0.36-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/composr-foundation/composr/commit/a71c44e03",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162128/Composr-10.0.36-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/composr-foundation/composr/commit/a71c44e03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T06:15:15.483",
      "lastModified" : "2024-11-21T06:03:24.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Composr 10.0.36 allows XSS in an XML script."
      }, {
        "lang" : "es",
        "value" : "Composr versión 10.0.36, permite un ataque de tipo XSS en un script XML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ocproducts:composr:10.0.36:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60C03939-FDE3-4AAC-A489-71BABCAFB260"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162111/Composr-CMS-10.0.36-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/composr-foundation/composr/commit/833a06466",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162111/Composr-CMS-10.0.36-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/composr-foundation/composr/commit/833a06466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T06:15:15.547",
      "lastModified" : "2024-11-21T06:03:24.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sidekiq through 5.1.3 and 6.x through 6.2.0 allows XSS via the queue name of the live-poll feature when Internet Explorer is used."
      }, {
        "lang" : "es",
        "value" : "Sidekiq versiones hasta 5.1.3 y versiones 6.x hasta 6.2.0, permite un ataque de tipo XSS por medio del nombre queue de la funcionalidad live-poll cuando es usado Internet Explorer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.1.3",
            "matchCriteriaId" : "FE56AA35-CDD5-41CD-BC84-82DEF18AE786"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:contribsys:sidekiq:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.2.0",
            "matchCriteriaId" : "FF48E0F3-8D6A-4F28-869C-2E42A2BF9AE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mperham/sidekiq/issues/4852",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/03/msg00015.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00011.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/mperham/sidekiq/issues/4852",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/03/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/03/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T07:15:12.357",
      "lastModified" : "2024-11-21T06:03:24.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On Special:NewFiles, all the mediastatistics-header-* messages are output in HTML unescaped, leading to XSS."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.12 y versiones 1.32.x hasta 1.35.x anteriores a 1.35.2.&#xa0;En Special: NewFiles, todos los mensajes mediastatistics-header-* son generados en HTML sin escape, conllevando a una vulnerabilidad de tipo XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.12",
            "matchCriteriaId" : "3291BAE5-6903-463D-9750-7D0B6FAD911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T278014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T278014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T07:15:12.437",
      "lastModified" : "2024-11-21T06:03:25.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. On ChangesList special pages such as Special:RecentChanges and Special:Watchlist, some of the rcfilters-filter-* label messages are output in HTML unescaped, leading to XSS."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.12 y versiones 1.32.x hasta 1.35.x versiones anteriores a 1.35.2.&#xa0;En las páginas especiales de ChangesList, como Special:RecentChanges y Special:Watchlist, algunos de los mensajes de etiqueta rcfilters-filter-* son generados en HTML sin escape, conllevando a una vulnerabilidad de tipo XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.12",
            "matchCriteriaId" : "3291BAE5-6903-463D-9750-7D0B6FAD911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T278058",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T278058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T07:15:12.497",
      "lastModified" : "2024-11-21T06:03:25.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Blocked users are unable to use Special:ResetTokens. This has security relevance because a blocked user might have accidentally shared a token, or might know that a token has been compromised, and yet is not able to block any potential future use of the token by an unauthorized party."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.12 y versiones 1.32.x hasta 1.35.x anteriores a 1.35.2.&#xa0;Los usuarios bloqueados no pueden usar Special:ResetTokens.&#xa0;Esto presenta relevancia para la seguridad porque un usuario bloqueado podría haber compartido accidentalmente un token, o podría saber que un token ha sido comprometido y, sin embargo, no puede bloquear ningún uso futuro potencial del token por una parte no autorizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.12",
            "matchCriteriaId" : "3291BAE5-6903-463D-9750-7D0B6FAD911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T277009",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T277009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30161",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T08:15:12.403",
      "lastModified" : "2024-11-21T06:03:25.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG mobile devices with Android OS 11 software. Attackers can bypass the lockscreen protection mechanism after an incoming call has been terminated. The LG ID is LVE-SMP-210002 (April 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles de LG con software Android OS versión 11.&#xa0;Los atacantes pueden omitir el mecanismo de protección de la pantalla de bloqueo después de que se haya terminado una llamada entrante.&#xa0;El ID de LG es LVE-SMP-210002 (Abril de 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T08:15:12.450",
      "lastModified" : "2024-11-21T06:03:25.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on LG mobile devices with Android OS 4.4 through 11 software. Attackers can leverage ISMS services to bypass access control on specific content providers. The LG ID is LVE-SMP-210003 (April 2021)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos móviles de LG con software Android OS versiones 4.4 hasta 11.&#xa0;Los atacantes pueden aprovechar servicios ISMS para omitir el control de acceso en proveedores de contenido específicos.&#xa0;El ID de LG es LVE-SMP-210003 (Abril de 2021)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lgsecurity.lge.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T08:15:12.513",
      "lastModified" : "2024-11-21T06:03:25.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to discover the names of private projects if issue-journal details exist that have changes to project_id values."
      }, {
        "lang" : "es",
        "value" : "Redmine versiones anteriores a 4.0.8 y versiones 4.1.x anteriores a 4.1.2, permite a atacantes detectar los nombres de proyectos privados si se presentan detalles del diario de problemas que poseen cambios en unos valores de project_id"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.8",
            "matchCriteriaId" : "B01D9D78-8543-4E85-A3FD-C8140231AB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "1A1390D7-9645-4FF3-9D85-3ACFF241260F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30164",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T08:15:12.573",
      "lastModified" : "2024-11-21T06:03:26.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 4.0.8 and 4.1.x before 4.1.2 allows attackers to bypass the add_issue_notes permission requirement by leveraging the Issues API."
      }, {
        "lang" : "es",
        "value" : "Redmine versiones anteriores a 4.0.8 y versiones 4.1.x anteriores a 4.1.2, permite a atacantes omitir el requisito de permiso add_issue_notes al aprovechar la API Issues"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.8",
            "matchCriteriaId" : "B01D9D78-8543-4E85-A3FD-C8140231AB5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.2",
            "matchCriteriaId" : "1A1390D7-9645-4FF3-9D85-3ACFF241260F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28171",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T12:15:17.077",
      "lastModified" : "2024-11-21T05:59:15.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Vangene deltaFlow E-platform does not take properly protective measures. Attackers can obtain privileged permissions remotely by tampering with users’ data in the Cookie."
      }, {
        "lang" : "es",
        "value" : "El Vangene deltaFlow E-platform, no toma las medidas de protección apropiadas.&#xa0;Los atacantes pueden obtener permisos privilegiados remotamente al manipular los datos de los usuarios en la cookie"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-565"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaflow_project:deltaflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "7.7",
            "matchCriteriaId" : "CA598098-EB2D-464E-8968-AF6252BA905D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/7f0874b5-516b-4637-842d-b6fb6c335c66",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4618-4dcc2-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/7f0874b5-516b-4637-842d-b6fb6c335c66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4618-4dcc2-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28172",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T12:15:17.153",
      "lastModified" : "2024-11-21T05:59:15.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de Salto de Ruta en la función file upload de Vangene deltaFlow E-platform.&#xa0;Unos atacantes remotos pueden acceder a los datos de las credenciales con esta filtración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaflow_project:deltaflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "7.7",
            "matchCriteriaId" : "CA598098-EB2D-464E-8968-AF6252BA905D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/7f0874b5-516b-4637-842d-b6fb6c335c66",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4619-fd2b9-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/7f0874b5-516b-4637-842d-b6fb6c335c66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4619-fd2b9-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28173",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-06T12:15:17.233",
      "lastModified" : "2024-11-21T05:59:15.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The file upload function of Vangene deltaFlow E-platform does not perform access controlled properly. Remote attackers can upload and execute arbitrary files without login."
      }, {
        "lang" : "es",
        "value" : "La función file upload de Vangene deltaFlow E-platform, no lleva a cabo el control de acceso apropiadamente.&#xa0;Unos atacantes remotos pueden cargar y ejecutar archivos arbitrarios sin iniciar sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaflow_project:deltaflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "7.7",
            "matchCriteriaId" : "CA598098-EB2D-464E-8968-AF6252BA905D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.chtsecurity.com/news/7f0874b5-516b-4637-842d-b6fb6c335c66",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4620-58f9c-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/7f0874b5-516b-4637-842d-b6fb6c335c66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4620-58f9c-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27343",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.200",
      "lastModified" : "2024-11-21T05:57:49.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SerenityOS Unspecified is affected by: Buffer Overflow. The impact is: obtain sensitive information (context-dependent). The component is: /Userland/Libraries/LibCrypto/ASN1/DER.h Crypto::der_decode_sequence() function. The attack vector is: Parsing RSA Key ASN.1."
      }, {
        "lang" : "es",
        "value" : "SerenityOS Unspecified está afectado por: un Desbordamiento del Búfer.&#xa0;El impacto es: obtener información confidencial (dependiente del contexto).&#xa0;El componente es: la función Crypto::der_decode_sequence() del archivo /Userland/Libraries/LibCrypto/ASN1/DER.h.&#xa0;El vector de ataque es: Parsing RSA Key ASN.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:serenityos:serenityos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A631C0-3E3F-4FC9-8E7D-8843F0133B9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SerenityOS/serenity/commit/48fbf6a88d4822a1e5470cf08f29464511bd72c1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/issues/5317",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/pull/5344",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/commit/48fbf6a88d4822a1e5470cf08f29464511bd72c1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/issues/5317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/pull/5344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.277",
      "lastModified" : "2024-11-21T05:57:50.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c."
      }, {
        "lang" : "es",
        "value" : "RIOT-OS versión 2020.01, contiene una vulnerabilidad de desbordamiento del búfer en el archivo /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2021.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F041205-8394-4EA3-BC9A-CFA9690634F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/16018",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/16018",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27697",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.327",
      "lastModified" : "2024-11-21T05:58:26.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() function."
      }, {
        "lang" : "es",
        "value" : "RIOT-OS versión 2021.01, contiene una vulnerabilidad de desbordamiento del búfer en el archivo sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c por medio de la función gnrc_rpl_validation_options()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2021.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F041205-8394-4EA3-BC9A-CFA9690634F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/16062",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/16062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27698",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.387",
      "lastModified" : "2024-11-21T05:58:26.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function."
      }, {
        "lang" : "es",
        "value" : "RIOT-OS versión 2021.01, contiene una vulnerabilidad de desbordamiento del búfer en el archivo /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c por medio de la función _parse_options()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:riot-os:riot:2021.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F041205-8394-4EA3-BC9A-CFA9690634F2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/16085",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RIOT-OS/RIOT/issues/16085",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28075",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.433",
      "lastModified" : "2024-11-21T05:59:03.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "iKuaiOS 3.4.8 Build 202012291059 has an arbitrary file download vulnerability, which can be exploited by attackers to obtain sensitive information."
      }, {
        "lang" : "es",
        "value" : "iKuaiOS versión 3.4.8 Build 202012291059, presenta una vulnerabilidad de descarga de archivos arbitraria, que pueden ser explotadas por atacantes para obtener información confidencial"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ikuai8:ikuaios:3.4.8:build_202012291059:*:*:*:*:*:*",
            "matchCriteriaId" : "AF0C14F8-096B-42A0-A5ED-548A884191CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03496",
        "source" : "cve@mitre.org",
        "tags" : [ "Technical Description" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03496",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Technical Description" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28874",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.497",
      "lastModified" : "2024-11-21T06:00:20.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SerenityOS fixed as of c9f25bca048443e317f1994ba9b106f2386688c3 contains a buffer overflow vulnerability in LibTextCode through opening a crafted file."
      }, {
        "lang" : "es",
        "value" : "SerenityOS corregido a partir de c9f25bca048443e317f1994ba9b106f2386688c3, contiene una vulnerabilidad de desbordamiento del búfer en LibTextCode al abrir un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:serenityos:serenityos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-03-15",
            "matchCriteriaId" : "D50BE009-07D7-434A-910A-7C41C38974CD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SerenityOS/serenity/commit/c9f25bca048443e317f1994ba9b106f2386688c3",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/issues/5769",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/pull/5802",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/commit/c9f25bca048443e317f1994ba9b106f2386688c3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/issues/5769",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/pull/5802",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30045",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.543",
      "lastModified" : "2024-11-21T06:03:15.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SerenityOS 2021-03-27 contains a buffer overflow vulnerability in the EndOfCentralDirectory::read() function."
      }, {
        "lang" : "es",
        "value" : "SerenityOS hasta el 27-03-2021, contiene una vulnerabilidad de desbordamiento del búfer en la función EndOfCentralDirectory::read()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:serenityos:serenityos:2021-03-27:*:*:*:*:*:*:*",
            "matchCriteriaId" : "418C100E-2C4B-4568-A8F6-E0122F20DB19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SerenityOS/serenity/commit/4317db7498eaa5a37068052bb0310fbc6a5f78e4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/issues/5975",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/pull/5977",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/commit/4317db7498eaa5a37068052bb0310fbc6a5f78e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/issues/5975",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SerenityOS/serenity/pull/5977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30046",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T13:15:14.607",
      "lastModified" : "2024-11-21T06:03:15.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VIGRA Computer Vision Library Version-1-11-1 contains a segmentation fault vulnerability in the impex.hxx read_image_band() function, in which a crafted file can cause a denial of service."
      }, {
        "lang" : "es",
        "value" : "VIGRA Computer Vision Library Versión-1-11-1, contiene una vulnerabilidad de fallo de segmentación en la función impex.hxx read_image_band(), en la cual un archivo diseñado puede causar una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vigra_computer_vision_library_project:vigra_computer_vision_library:1.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3468C61E-3926-42E7-8C59-6382A8586583"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ukoethe/vigra/issues/494",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ukoethe/vigra/issues/494",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28142",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T15:15:13.373",
      "lastModified" : "2024-11-21T05:59:10.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CITSmart before 9.1.2.28 mishandles the \"filtro de autocomplete.\""
      }, {
        "lang" : "es",
        "value" : "CITSmart versiones anteriores a 9.1.2.28, maneja inapropiadamente el \"filtro de autocomplete.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:citsmart:citsmart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.2.28",
            "matchCriteriaId" : "26322BFF-E173-4827-9077-515C41CA4B77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162182/CITSmart-ITSM-9.1.2.27-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162182/CITSmart-ITSM-9.1.2.27-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://docs.citsmart.com/pt-br/citsmart-platform-9/get-started/about-citsmart/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28658",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T15:15:13.437",
      "lastModified" : "2024-11-21T06:00:02.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability."
      }, {
        "lang" : "es",
        "value" : "En Django versiones 2.2 anteriores a 2.2.20, versiones 3.0 anteriores a 3.0.14 y versiones 3.1 anteriores a 3.1.8, MultiPartParser permitía un salto de directorio por medio de archivos cargados con nombres de archivo adecuadamente diseñados.&#xa0;Los controladores de carga integrados no están afectados por esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "2.2.20",
            "matchCriteriaId" : "4EF13F74-904C-46BE-89F3-0D530D89961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.14",
            "matchCriteriaId" : "C5308A30-2968-42DB-88E3-9C1A546E8F4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.8",
            "matchCriteriaId" : "BA1FCB48-4616-4383-9C3D-7C86A05F260B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.djangoproject.com/en/3.1/releases/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce/c/ePr5j-ngdPU",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00008.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/apr/06/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/3.1/releases/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/g/django-announce/c/ePr5j-ngdPU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/apr/06/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T15:15:13.497",
      "lastModified" : "2024-11-21T06:03:22.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "phpseclib before 2.0.31 and 3.x before 3.0.7 mishandles RSA PKCS#1 v1.5 signature verification."
      }, {
        "lang" : "es",
        "value" : "phpseclib versiones anteriores a 2.0.31 y versiones 3.x anteriores a 3.0.7, maneja inapropiadamente la verificación de firma RSA PKCS#1 v1.5"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpseclib:phpseclib:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.31",
            "matchCriteriaId" : "5C322E75-C94C-4871-B63D-93A2D227B4E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpseclib:phpseclib:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.0.7",
            "matchCriteriaId" : "6E299C42-7042-4715-B40B-2D5C99341EDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/phpseclib/phpseclib/pull/1635",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/releases/tag/2.0.31",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/releases/tag/3.0.7",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00024.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/pull/1635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/releases/tag/2.0.31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/phpseclib/phpseclib/releases/tag/3.0.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00024.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/11/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26833",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T16:15:16.457",
      "lastModified" : "2024-11-21T05:56:52.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Storage in a File or on Disk in TimelyBills <= 1.7.0 for iOS and versions <= 1.21.115 for Android allows attacker who can locally read user's files obtain JWT tokens for user's account due to insufficient cache clearing mechanisms. A threat actor can obtain sensitive user data by decoding the tokens as JWT is signed and encoded, not encrypted."
      }, {
        "lang" : "es",
        "value" : "Un almacenamiento de texto sin cifrar en un archivo o en disco en TimelyBills versiones anteriores a 1.7.0 incluyéndola para iOS y versiones anteriores a 1.21.115 incluyéndola para Android, permite a un atacante que puede leer localmente los archivos del usuario obtener tokens JWT para la cuenta del usuario debido a mecanismos de limpieza de caché insuficientes.&#xa0;Un actor de amenazas puede obtener datos confidenciales del usuario al decodificar los tokens, ya que JWT está firmado y codificado, no cifrado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-459"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timelybills:timelybills:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "1.7.0",
            "matchCriteriaId" : "A6EBEB96-942E-4243-B4BC-951D4E2B2FF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:timelybills:timelybills:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "1.21.115",
            "matchCriteriaId" : "242D7848-F6A0-4AF2-BA95-F2F7EAA3609C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://beefaaubee.medium.com/cve-2021-26833-cleartext-storage-in-a-file-or-on-disk-in-timelybills-1-7-0-5760dc461bd0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://beefaaubee.medium.com/cve-2021-26833-cleartext-storage-in-a-file-or-on-disk-in-timelybills-1-7-0-5760dc461bd0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29136",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T16:15:16.520",
      "lastModified" : "2024-11-21T06:00:45.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Open Container Initiative umoci before 0.4.7 allows attackers to overwrite arbitrary host paths via a crafted image that causes symlink traversal when \"umoci unpack\" or \"umoci raw unpack\" is used."
      }, {
        "lang" : "es",
        "value" : "Open Container Initiative umoci versiones anteriores a 0.4.7, permite a atacantes sobrescribir rutas de host arbitrarias por medio de una imagen diseñada que causa un salto de enlace simbólico cuando es usado \"umoci unpack\" o \"umoci raw unpack\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:umoci:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.4.7",
            "matchCriteriaId" : "DD17F3AC-63F8-41CA-8A85-C880F8704C8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sylabs:singularity:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.7.3",
            "matchCriteriaId" : "3F33F771-2B43-432C-9EC5-1639E19D5F72"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/06/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/umoci/commit/d9efc31daf2206f7d3fdb839863cf7a576a2eb57",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/umoci/security/advisories/GHSA-9m95-8hx6-7p9v",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/06/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/umoci/commit/d9efc31daf2206f7d3fdb839863cf7a576a2eb57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opencontainers/umoci/security/advisories/GHSA-9m95-8hx6-7p9v",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29424",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T16:15:16.567",
      "lastModified" : "2024-11-21T06:01:03.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which (in some situations) allows attackers to bypass access control that is based on IP addresses."
      }, {
        "lang" : "es",
        "value" : "El módulo Net::Netmask versiones anteriores a 2.0000 para Perl no considera apropiadamente los caracteres cero extraños al comienzo de una cadena de dirección IP, lo que (en algunas situaciones) permite a atacantes omitir el control de acceso basado en direcciones IP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-704"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:net\\:\\:netmask_project:net\\:\\:netmask:*:*:*:*:*:perl:*:*",
            "versionEndExcluding" : "2.0000",
            "matchCriteriaId" : "9A08CC83-CC6B-433A-917D-84D386EE77F5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBJVLXJSWN6DKSF5ADUEERI6M23R3GGP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JF4CYIZELC3NISB3RMV4OCI4GYBC557B/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7JIPQAY5OZ5D3DA7INQILU7SGHTHMWB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://metacpan.org/changes/distribution/Net-Netmask#L11-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0007/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.urth.org/2021/03/29/security-issues-in-perl-ip-address-distros/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CBJVLXJSWN6DKSF5ADUEERI6M23R3GGP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JF4CYIZELC3NISB3RMV4OCI4GYBC557B/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y7JIPQAY5OZ5D3DA7INQILU7SGHTHMWB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://metacpan.org/changes/distribution/Net-Netmask#L11-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30140",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T16:15:16.627",
      "lastModified" : "2024-11-21T06:03:22.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LiquidFiles 3.4.15 has stored XSS through the \"send email\" functionality when sending a file via email to an administrator. When a file has no extension and contains malicious HTML / JavaScript content (such as SVG with HTML content), the payload is executed upon a click. This is fixed in 3.5."
      }, {
        "lang" : "es",
        "value" : "LiquidFiles versión 3.4.15, ha almacenado un ataque de tipo XSS por medio de la funcionalidad \"send email\" al enviar un archivo por correo electrónico a un administrador.&#xa0;Cuando un archivo no tiene extensión y contiene contenido HTML / JavaScript malicioso (como SVG con contenido HTML), la carga útil es ejecutada con un clic.&#xa0;Esto se corrigió en la versión 3.5"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:liquidfiles:liquidfiles:3.4.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63CE1C8A-5C18-4B72-8E18-07BE6F7A3E61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/167228/LiquidFiles-3.4.15-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/41",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://liquidfiles.com/support.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tempest.com.br",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167228/LiquidFiles-3.4.15-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2022/May/41",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/rodnt/9f7d368fac38cafa7334598ec94fb167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://liquidfiles.com/support.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tempest.com.br",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T16:15:16.690",
      "lastModified" : "2024-11-21T06:03:23.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Seafile 7.0.5 (2019) allows Persistent XSS via the \"share of library functionality.\""
      }, {
        "lang" : "es",
        "value" : "Seafile versión 7.0.5 (2019) permite un ataque de tipo XSS Persistente por medio de la \"share of library functionality\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:seafile:seafile:7.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEDCD6AF-F331-4A6F-9C6C-E43EE2D9381D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Security-AVS/CVE-2021-30146",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Security-AVS/CVE-2021-30146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20334",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2021-04-06T17:15:12.603",
      "lastModified" : "2024-11-21T05:46:24.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A malicious 3rd party with local access to the Windows machine where MongoDB Compass is installed can execute arbitrary software with the privileges of the user who is running MongoDB Compass. This issue affects: MongoDB Inc. MongoDB Compass 1.x version 1.3.0 on Windows and later versions; 1.x versions prior to 1.25.0 on Windows."
      }, {
        "lang" : "es",
        "value" : "Un tercero malicioso con acceso local a la máquina de Windows donde MongoDB Compass está instalado puede ejecutar software arbitrario con los privilegios del usuario que está ejecutando MongoDB Compass.&#xa0;Este problema afecta a: MongoDB Inc. MongoDB Compass versiones 1.x versión 1.3.0 en Windows y versiones posteriores;&#xa0;versiones 1.x anteriores a 1.25.0 en Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:compass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.3.0",
            "versionEndExcluding" : "1.25.0",
            "matchCriteriaId" : "8A9E6B03-9F94-4021-9C28-B209B4B3D33C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/COMPASS-4510",
        "source" : "cna@mongodb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jira.mongodb.org/browse/COMPASS-4510",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24026",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-04-06T17:15:12.870",
      "lastModified" : "2024-11-21T05:52:14.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A missing bounds check within the audio decoding pipeline for WhatsApp calls in WhatsApp for Android prior to v2.21.3, WhatsApp Business for Android prior to v2.21.3, WhatsApp for iOS prior to v2.21.32, and WhatsApp Business for iOS prior to v2.21.32 could have allowed an out-of-bounds write."
      }, {
        "lang" : "es",
        "value" : "Una falta de comprobación de límites dentro de la tubería de decodificación de audio para llamadas de WhatsApp en WhatsApp para Android versiones anteriores a v2.21.3, WhatsApp Business para Android versiones anteriores a v2.21.3, WhatsApp para iOS versiones anteriores a v2.21.32 y WhatsApp Business para iOS versiones anteriores a v2. 21.32, podría haber permitido una escritura fuera de límites"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.21.3",
            "matchCriteriaId" : "A2F90DE0-CAA1-417A-9D8A-279C966CF126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "2.21.3",
            "matchCriteriaId" : "63C685C5-9E36-456E-8627-F7789BF9A817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.21.3",
            "matchCriteriaId" : "8C00EB21-B107-4D99-9D1E-09B0FA443F3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "2.21.32",
            "matchCriteriaId" : "735449C3-06DF-4F11-B821-5DDB5F2BC2F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.whatsapp.com/security/advisories/2021/",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.whatsapp.com/security/advisories/2021/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24027",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-04-06T17:15:12.977",
      "lastModified" : "2024-11-21T05:52:14.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cache configuration issue prior to WhatsApp for Android v2.21.4.18 and WhatsApp Business for Android v2.21.4.18 may have allowed a third party with access to the device’s external storage to read cached TLS material."
      }, {
        "lang" : "es",
        "value" : "Un problema de configuración de caché anterior a WhatsApp para Android versión v2.21.4.18 y WhatsApp Business para Android versión v2.21.4.18, puede haber permitido a un tercero con acceso al almacenamiento externo del dispositivo leer material TLS almacenado en caché"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-524"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.21.4.18",
            "matchCriteriaId" : "5F9D91CC-43EE-4F76-ACE5-8DA2DAAA9012"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:whatsapp:whatsapp_business:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "2.21.4.18",
            "matchCriteriaId" : "9F814EFA-6C24-47CA-9180-7047B92717D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.whatsapp.com/security/advisories/2021/",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.whatsapp.com/security/advisories/2021/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21423",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-06T19:15:14.787",
      "lastModified" : "2024-11-21T05:48:19.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "`projen` is a project generation tool that synthesizes project configuration files such as `package.json`, `tsconfig.json`, `.gitignore`, GitHub Workflows, `eslint`, `jest`, and more, from a well-typed definition written in JavaScript. Users of projen's `NodeProject` project type (including any project type derived from it) include a `.github/workflows/rebuild-bot.yml` workflow that may allow any GitHub user to trigger execution of un-trusted code in the context of the \"main\" repository (as opposed to that of a fork). In some situations, such untrusted code may potentially be able to commit to the \"main\" repository. The rebuild-bot workflow is triggered by comments including `@projen rebuild` on pull-request to trigger a re-build of the projen project, and updating the pull request with the updated files. This workflow is triggered by an `issue_comment` event, and thus always executes with a `GITHUB_TOKEN` belonging to the repository into which the pull-request is made (this is in contrast with workflows triggered by `pull_request` events, which always execute with a `GITHUB_TOKEN` belonging to the repository from which the pull-request is made). Repositories that do not have branch protection configured on their default branch (typically `main` or `master`) could possibly allow an untrusted user to gain access to secrets configured on the repository (such as NPM tokens, etc). Branch protection prohibits this escalation, as the managed `GITHUB_TOKEN` would not be able to modify the contents of a protected branch and affected workflows must be defined on the default branch."
      }, {
        "lang" : "es",
        "value" : "“projen” es una herramienta de generación de proyectos que sintetiza archivos de configuración de proyectos como “package.json”, “tsconfig.json”, “.gitignore”, GitHub Workflows, “eslint”,” jest`, y más, desde una definición well-typed escrita en JavaScript. Los usuarios de tipo de proyecto “NodeProject” de projen (incluido cualquier tipo de proyecto derivado de él) incluyen un flujo de trabajo “.github/workflows /rebuild-bot.yml” que puede permitir que cualquier usuario de GitHub active la ejecución de código no confiable en el contexto del repositorio \"main\" (en contraposición al de una bifurcación). En algunas situaciones, dicho código que no es de confianza puede potencialmente ser capaz de comprometerse con el repositorio \"main\". El flujo de trabajo rebuild-bot es activado con comentarios que incluyen  “@projen rebuild” en la petición de extracción para activar un re-build del proyecto projen y la actualización de la petición de extracción con los archivos actualizados. Este flujo de trabajo es desencadenado por un evento “issue_comment” y, por lo tanto, siempre se ejecuta con un “GITHUB_TOKEN” que pertenece al repositorio en el que la petición de extracción es realizada (esto contrasta con los flujos de trabajo desencadenados por eventos “pull_request”, que siempre se ejecutan con un “GITHUB_TOKEN” perteneciente al repositorio desde el que la pull-request es realizada). Los repositorios que no contienen la protección de rama configurada en su rama predeterminada (normalmente, \"main\" o \"master\") posiblemente podrían permitir a un usuario no confiable conseguir acceso a secretos configurados en el repositorio (como tokens NPM, etc.). La protección de rama prohíbe esta escalada, ya que el \"GITHUB_TOKEN\" administrado no podría ser capaz de modificar el contenido de una rama protegida y los flujos de trabajo afectados deben definirse en la rama predeterminada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-527"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:projen_project:projen:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.6.0",
            "versionEndExcluding" : "0.16.41",
            "matchCriteriaId" : "A2E0EE70-F6DF-4821-ACC1-71E47B43303D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/projen/projen/commit/36030c6a4b1acd0054673322612e7c70e9446643",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/projen/projen/security/advisories/GHSA-gg2g-m5wc-vccq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/projen",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/projen/projen/commit/36030c6a4b1acd0054673322612e7c70e9446643",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/projen/projen/security/advisories/GHSA-gg2g-m5wc-vccq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/projen",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28688",
      "sourceIdentifier" : "security@xen.org",
      "published" : "2021-04-06T19:15:14.863",
      "lastModified" : "2024-11-21T06:00:08.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable. XSA-365 was classified to affect versions back to at least 3.11."
      }, {
        "lang" : "es",
        "value" : "La solución para XSA-365 incluye la inicialización de punteros de modo que el código de limpieza posterior no utilice valores no inicializados o obsoletos.&#xa0;Esta inicialización fue demasiado lejos y, en determinadas condiciones, también puede sobrescribir los punteros que están requiriendo una limpieza.&#xa0;La falta de limpieza resultaría en fugas de subsidios persistentes.&#xa0;A su vez, la filtración impediría a una limpieza completa después de que un invitado respectivo haya terminado, dejando dominios zombies.&#xa0;Todas las versiones de Linux que presentan la corrección para XSA-365 aplicada son vulnerables.&#xa0;XSA-365 se clasificó para afectar a las versiones de al menos 3.11"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.11",
            "versionEndIncluding" : "5.10.18",
            "matchCriteriaId" : "C9F05E8C-CEFC-4C34-9B1F-E9D1E8DC098B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "security@xen.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "security@xen.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xenproject.org/xsa/advisory-371.txt",
        "source" : "security@xen.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://xenbits.xenproject.org/xsa/advisory-371.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21404",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-06T20:15:13.490",
      "lastModified" : "2024-11-21T05:48:17.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Syncthing is a continuous file synchronization program. In Syncthing before version 1.15.0, the relay server `strelaysrv` can be caused to crash and exit by sending a relay message with a negative length field. Similarly, Syncthing itself can crash for the same reason if given a malformed message from a malicious relay server when attempting to join the relay. Relay joins are essentially random (from a subset of low latency relays) and Syncthing will by default restart when crashing, at which point it's likely to pick another non-malicious relay. This flaw is fixed in version 1.15.0."
      }, {
        "lang" : "es",
        "value" : "Syncthing es un programa de sincronización de archivos continua.&#xa0;En Syncthing versiones anteriores a 1.15.0, el servidor de retransmisión \"strelaysrv\" puede causar un bloqueo y salida mediante el envío de un mensaje de retransmisión con un campo de longitud negativa.&#xa0;De manera similar, Syncthing en sí puede presentar un fallo por la misma razón si recibe un mensaje malformado de un servidor de retransmisión malicioso al intentar unirse a la retransmisión.&#xa0;Las uniones de retransmisiones son esencialmente aleatorias (de un subconjunto de retransmisiones de baja latencia) y Syncthing se reiniciará por defecto cuando se bloquee, momento en el que es probable que elija otra retransmisión no maliciosa.&#xa0;Este fallo es corregido en la versión 1.15.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:syncthing:syncthing:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.15.0",
            "matchCriteriaId" : "13E0DFD1-14D6-4A2D-B98C-1C581D11E2F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/syncthing/syncthing/commit/fb4fdaf4c0a79c22cad000c42ac1394e3ccb6a97",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syncthing/syncthing/releases/tag/v1.15.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syncthing/syncthing/security/advisories/GHSA-x462-89pf-6r5h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/syncthing/syncthing",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syncthing/syncthing/commit/fb4fdaf4c0a79c22cad000c42ac1394e3ccb6a97",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syncthing/syncthing/releases/tag/v1.15.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syncthing/syncthing/security/advisories/GHSA-x462-89pf-6r5h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/syncthing/syncthing",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25692",
      "sourceIdentifier" : "security@teradici.com",
      "published" : "2021-04-06T20:15:13.583",
      "lastModified" : "2024-11-21T05:55:18.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sensitive smart card data is logged in default INFO logs by Teradici's PCoIP Connection Manager and Security Gateway prior to version 21.01.3."
      }, {
        "lang" : "es",
        "value" : "Los datos confidenciales de la tarjeta inteligente son se registran en los registros INFO predeterminados por PCoIP Connection Manager y Security Gateway de Teradici versiones anteriores a 21.01.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_connection_manager_and_security_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.07",
            "versionEndExcluding" : "20.07.1",
            "matchCriteriaId" : "ED6240DB-4DA3-4291-9A26-59CF8115039B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:teradici:pcoip_connection_manager_and_security_gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "21.01",
            "versionEndExcluding" : "21.01.3",
            "matchCriteriaId" : "1EE1BA81-2DC5-4643-B7EB-6FB1921332F8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.teradici.com/security-advisories/77/",
        "source" : "security@teradici.com",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://advisory.teradici.com/security-advisories/77/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T21:15:14.347",
      "lastModified" : "2024-11-21T05:49:37.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Proofpoint Insider Threat Management Server (formerly ObserveIT Server) before 7.11.1 allows stored XSS."
      }, {
        "lang" : "es",
        "value" : "Proofpoint Insider Threat Management Server (anteriormente ObserveIT Server) versiones anteriores a 7.11.1, permite un ataque de tipo XSS almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.3",
            "matchCriteriaId" : "49735308-48A4-4ED9-A146-B0EEA9261271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.3",
            "matchCriteriaId" : "8BB71780-DB7A-499B-B926-7991841A7A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.1",
            "matchCriteriaId" : "576B99C8-93B5-43E5-BEFD-5225FB5FA2EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0002",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T21:15:14.397",
      "lastModified" : "2024-11-21T05:49:37.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is vulnerable to XML external entity (XXE) injection in the Web Console. The vulnerability requires admin user privileges and knowledge of the XML file's encryption key to successfully exploit. All versions before 7.11 are affected."
      }, {
        "lang" : "es",
        "value" : "El Servidor Proofpoint Insider Threat Management (anteriormente ObserveIT Server) es vulnerable a una XML external entity (XXE) en la consola web.&#xa0;La vulnerabilidad requiere privilegios de usuario administrador y conocimiento de la clave de cifrado del archivo XML para una explotación con éxito.&#xa0;Todas las versiones anteriores a 7.11 están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.3",
            "matchCriteriaId" : "49735308-48A4-4ED9-A146-B0EEA9261271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.3",
            "matchCriteriaId" : "8BB71780-DB7A-499B-B926-7991841A7A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.1",
            "matchCriteriaId" : "576B99C8-93B5-43E5-BEFD-5225FB5FA2EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0003",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0003",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T21:15:14.457",
      "lastModified" : "2024-11-21T05:58:43.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Proofpoint Insider Threat Management Agents (formerly ObserveIT Agent) for MacOS and Linux perform improper validation of the ITM Server's certificate, which enables a remote attacker to intercept and alter these communications using a man-in-the-middle attack. All versions before 7.11.1 are affected. Agents for Windows and Cloud are not affected."
      }, {
        "lang" : "es",
        "value" : "Los Agentes Proofpoint Insider Threat Management (anteriormente ObserveIT Agent) para MacOS y Linux llevan a cabo una comprobación inapropiada del certificado del servidor ITM, lo que permite a un atacante remoto interceptar y alterar estas comunicaciones usando un ataque de tipo man-in-the-middle.&#xa0;Todas las versiones anteriores a 7.11.1 están afectadas.&#xa0;Los agentes para Windows y Cloud no están afectados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.3",
            "matchCriteriaId" : "70F9F339-8379-49A8-9064-8C450A711296"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.3",
            "matchCriteriaId" : "BACB225E-FD08-4293-9D17-BC8127470D08"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.1",
            "matchCriteriaId" : "81FDC89F-6AC6-4443-BB93-39F895616CD4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.3",
            "matchCriteriaId" : "BC1EC9C0-B91B-423D-82CA-3F70C5C39736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.3",
            "matchCriteriaId" : "B1B2503C-1C61-4230-9454-2E1B9AE83E93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.1",
            "matchCriteriaId" : "E235C6A9-A97F-4775-9A7B-E8EC11F20B16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0004",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27900",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-06T22:15:12.890",
      "lastModified" : "2024-11-21T05:58:43.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Proofpoint Insider Threat Management Server (formerly ObserveIT Server) is missing an authorization check on several pages in the Web Console. This enables a view-only user to change any configuration setting and delete any registered agents. All versions before 7.11.1 are affected."
      }, {
        "lang" : "es",
        "value" : "El Servidor Proofpoint Insider Threat Management (anteriormente ObserveIT Server) presenta una falta de verificación de autorización en varias páginas de la consola web.&#xa0;Esto permite que un usuario de solo lectura cambie cualquier ajuste de configuración y elimine cualquier agente registrado.&#xa0;Todas las versiones anteriores a 7.11.1 están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.9.0",
            "versionEndExcluding" : "7.9.3",
            "matchCriteriaId" : "49735308-48A4-4ED9-A146-B0EEA9261271"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.10.0",
            "versionEndExcluding" : "7.10.3",
            "matchCriteriaId" : "8BB71780-DB7A-499B-B926-7991841A7A17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:proofpoint:insider_threat_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.11.0",
            "versionEndExcluding" : "7.11.1",
            "matchCriteriaId" : "576B99C8-93B5-43E5-BEFD-5225FB5FA2EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0005",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.proofpoint.com/us/security/security-advisories/pfpt-sa-2021-0005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30178",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T00:15:13.367",
      "lastModified" : "2024-11-21T06:03:28.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL pointer dereference for certain accesses to the SynIC Hyper-V context, aka CID-919f4ebc5987."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.11.&#xa0;La función synic_get en el archivo arch/x86/kvm/hyperv.c presenta una desreferencia de puntero NULL para determinados accesos en el contexto SynIC Hyper-V, también se conoce como CID-919f4ebc5987"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.11.11",
            "matchCriteriaId" : "6C0B5610-E1DE-43FF-818E-4D626E2D2DE0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=919f4ebc598701670e80e31573a58f1f2d2bf918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJ5GEETMX3ERQ4DF3GSS2XPNSOOK44OB/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGQDVYCDM3F5VXUZIADIV2ERL3AJXNJS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=919f4ebc598701670e80e31573a58f1f2d2bf918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJ5GEETMX3ERQ4DF3GSS2XPNSOOK44OB/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TGQDVYCDM3F5VXUZIADIV2ERL3AJXNJS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30147",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T03:15:12.247",
      "lastModified" : "2024-11-21T06:03:23.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DMA Softlab Radius Manager 4.4.0 allows CSRF with impacts such as adding new manager accounts via admin.php."
      }, {
        "lang" : "es",
        "value" : "DMA Softlab Radius Manager versión 4.4.0, permite un ataque de tipo CSRF con impactos tales como agregar nuevas cuentas de administrador por medio del archivo admin.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dmasoftlab:radius_manager:4.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA5B8392-FE74-4207-ACCB-8A9D1A6F8211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://dmasoftlab.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162136/DMA-Radius-Manager-4.4.0-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1d8/publications/tree/main/cve-2021-30147",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://dmasoftlab.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162136/DMA-Radius-Manager-4.4.0-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/1d8/publications/tree/main/cve-2021-30147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1892",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-04-07T08:15:14.720",
      "lastModified" : "2024-11-21T05:45:20.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory corruption due to improper input validation while processing IO control which is nonstandard in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking"
      }, {
        "lang" : "es",
        "value" : "Una corrupción de la memoria debido a una comprobación inapropiada de entrada mientras se procesa el control de IO que no es estándar en los productos Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Wired Infrastructure and Networking"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FCE91-BF38-49ED-8FFB-429BAFEE7832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715A9F94-5F9E-45E5-B07B-699410C01478"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8005_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1B2E04-63A3-4249-A2D2-F8533B12AEA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD6E76-BDF4-4AAD-A63B-C4AD2971C065"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B591057-5D1B-44B0-A9C8-847447E31F45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179E3B9E-0EE6-436B-AC5B-49FB3F375BD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C6EA8-FCF3-45C4-BB1A-9D025C5AA8E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AEC500-88F5-432D-9DA3-FBB4438150A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DF0B28-8E69-4197-B47E-D3A585245BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B87120F-592A-4D3C-801D-8C8980731FA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123FCE72-8379-48EF-BD48-8D77E54C4243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAAE437-C4CA-4789-92BD-9AAF67621407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE75DB7-F359-4483-9283-0816B5360EE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF6F7AF-9839-46A1-8552-ED6F9F246E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca1062_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B3F80BD-90EA-4207-BCB2-5E5CE80B599A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca1062:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEB9196D-4EE0-4978-8A80-C21B5DC0CF21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca1064_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBC2C38C-5D5F-49CB-8DF5-35974D13B40B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca1064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "365FE873-2311-44B8-B699-4B2F3459B0B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca2066_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6366F2ED-C6B7-4579-B304-C5B6DF951EB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca2066:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09B688AF-E1A4-496C-924C-D6B725CBBE26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6164_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF093219-0593-4318-A726-382022D6C7BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6164:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0A77BD-F36A-468B-A7D6-EC8989D58575"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0814A50-D8E6-42BD-A0A3-0768A3E28F53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2AD8F5C-1FEB-45C2-BC8F-123C2BEB0EA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DC4FBB-D9CB-43EB-829E-0A892306D0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0F8ED6-EAE7-44EA-A8C6-F5AD408261F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966CDA56-809F-4FF4-909D-0DD92F44CF67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90747B4-2CC0-4816-A994-58E00F5ADA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E16994A-6DBA-426C-ADD2-B1E8B49FEDBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E674DE-55AB-44E5-8E00-C804FC9D4DC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AFC483-1468-43FC-96FA-A56165C290E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A963FDF-6FF4-4F48-834E-2A14D241716D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn7605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C9D1966-30F0-414D-BE75-0A14B12A1457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn7605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD28C87D-1D28-4C84-BFE4-56EE3BF2C6B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn7606_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F466A5BD-1912-4811-9A93-81555F101D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn7606:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F92914E-16F6-4A25-9FEF-FB7CB3377132"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet4100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD6C60A-DE9D-4B95-B5B3-9DAF0F3EF34E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546B6CD2-AED0-41D4-B641-03CCAE9FEF50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe2081fc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261F34CC-D9F9-4B11-B3AA-C65DB826FDD5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe2081fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8B8D9A-A28A-4221-B792-12255965AE3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe2082fc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1462A09F-6990-47E3-BFB1-A61EE7545E91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe2082fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DFFF119-BB96-400A-8E04-91449071C869"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe3100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21299BB2-0EDC-476A-8C5F-70276439A6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0A6D656-2A27-4F9F-A3BD-80ADD4141716"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe3440fc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A52DBBC-D76E-4852-868A-FAC1A57734D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe3440fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14F36C81-0807-4FA5-864F-1F97DB04102E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4455fc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "639CEDB4-B269-4303-BD00-0E2FFF2848A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4455fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD76289-D1AE-496D-AFC5-EE142ECAA7A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1035bd_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "232A0A0B-0E51-41DD-886B-FF665270F324"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1035bd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233CC29E-4E2A-4FC2-B95B-AF4E82BE3509"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd8c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB74E1A-BD64-4E87-9C1E-7EFC11B0460C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D575BE-B591-4E46-A090-0BCA0A6038CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd8cx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3965FC-CBD9-42F7-8D94-50B9941F84FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd8cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70997DCA-7BEB-4691-B2EE-C9DB38409C07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA605FD-B801-43BB-B52D-879013F7F57E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "908BFD96-0423-4AFC-B8F3-105B2D5B4C73"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB222869-9CDB-43B1-8947-954C8C8520B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306DAB18-F737-47DE-A47D-C39F1B25D515"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1CA3237-5F9A-4490-A66B-853BE9310028"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F3601C-A801-4EBD-BDCC-2B84898DFBEA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr8150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37C9732-0894-4609-A09B-5FEA52DAA4E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr8150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC61A16B-BA73-4F42-B9B9-35BFADECA814"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBDC0358-7A85-48C4-8D62-2C317218B827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "613EF01F-1445-4C06-B81F-CE244E07EE63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1351_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DC8B97-0175-40F6-AF9C-915C7A20D09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54720F88-446D-47BD-9F0B-DD45C968C50D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164EA5CF-04EA-4109-B162-CF8D48D6F03A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDD62E-7BCD-4214-ACD8-9FB082E5B9C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1381_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D572CCD-0CCD-404F-AC29-3C76CDF86997"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1381:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8BD2B3-EC60-41F8-ABF3-0DFCC4DA9F72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139869F5-B55F-4F0B-B29A-BF3196A8FED6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961BB1ED-BD12-4EDF-94D3-122F8AA6D064"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb2351_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12CC2ED-34B8-42A6-B570-30D0E129E95E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb2351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCA9AC7-D62A-4C5C-9C67-7FD9CEB5E7BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28717583-463A-468A-8073-ECF0F90585F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1A7188-7D5D-4D46-AEAB-08BA84FFF539"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA28CC6-C8BB-4F50-BFE3-A59F664A4F54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D2BDF1-764C-48BA-8944-3275E8768078"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE852339-1CAE-4983-9757-8F00EDEF1141"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9E96B3-F1BB-46F8-B715-7DF90180F1E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2744A053-5BD9-45A9-A2FC-791BCA0CCD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F28E29-520F-469E-B048-62DE2EF07ADD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB9074-97A3-43F0-B829-CDB4E3066AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362252ED-1DB3-4CF6-86DD-14919826D75E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3293739B-53D5-48C1-BC3A-FAA74D6C7954"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E650C510-037F-47DB-A486-EBF871C73278"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD031A8D-A48A-4363-8C00-C1FF5458D0FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F5D7CA-6F31-4842-AC66-EB975C19C83D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "180EB150-C114-429D-941F-9B99CDA4F810"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BA62AF-3555-463A-8B51-76F07BF0B87E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C616C5-6480-4FE0-9A1C-08026CCB08D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8E02BA-3A7E-4B13-A8D7-20FD0FAE3187"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wgr7640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636E783E-9A29-45A6-AA40-7696C5932F0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wgr7640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DA4BC4-C634-4F62-A49E-5AD8F4FD4672"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15307882-7039-43E9-9BA3-035045988B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA85B322-E593-4499-829A-CC6D70BAE884"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E870D82-DE3B-4199-A730-C8FB545BAA98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr5975_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD8099D-05BB-4B02-9B41-9DB1B2145AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr5975:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6A369D-F473-4FBE-BDFA-ECA2D8578F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/april-2021-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20684",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:14.800",
      "lastModified" : "2024-11-21T05:47:00.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in MagazinegerZ v.1.01 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en MagazinegerZ versión v.1.01, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:magazinegerz_project:magazinegerz:1.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E48308B-24F7-4579-85D6-D1953718A9A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN97370614/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN97370614/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20685",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:14.923",
      "lastModified" : "2024-11-21T05:47:00.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Kagemai versión 0.8.8, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daifukuya:kagemai:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EAE458-C777-4D94-9A8F-C5505593650D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN12559271/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN12559271/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20686",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:14.987",
      "lastModified" : "2024-11-21T05:47:00.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Kagemai 0.8.8 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Kagemai versión 0.8.8, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daifukuya:kagemai:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EAE458-C777-4D94-9A8F-C5505593650D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN42220311/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN42220311/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20687",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:15.050",
      "lastModified" : "2024-11-21T05:47:00.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site request forgery (CSRF) vulnerability in Kagemai 0.8.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site request forgery (CSRF) en Kagemai versión 0.8.8, permite a atacantes remotos secuestrar la autenticación de los administradores por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daifukuya:kagemai:0.8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85EAE458-C777-4D94-9A8F-C5505593650D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN11438679/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN11438679/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20688",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:15.110",
      "lastModified" : "2024-11-21T05:47:00.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Click Ranker Ver.3.5 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Click Ranker versión Ver.3.5, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:click-ranker:click_ranker:3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A460F76-1745-4EFF-9450-C3C1C44E0845"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN93207949/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN93207949/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20689",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:15.157",
      "lastModified" : "2024-11-21T05:47:00.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Yomi-Search versión Ver4.22, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yomi-search_project:yomi-search:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CA21FC-5E69-486E-A05F-3B0E3F1FCAB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN37179202/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN37179202/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20690",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:15.220",
      "lastModified" : "2024-11-21T05:47:00.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Yomi-Search versión Ver4.22, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yomi-search_project:yomi-search:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CA21FC-5E69-486E-A05F-3B0E3F1FCAB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN83042295/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN83042295/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20691",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:15.267",
      "lastModified" : "2024-11-21T05:47:01.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Yomi-Search Ver4.22 allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en Yomi-Search versión Ver4.22, permite a atacantes remotos inyectar un script arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yomi-search_project:yomi-search:4.22:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CA21FC-5E69-486E-A05F-3B0E3F1FCAB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN94705238/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN94705238/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20692",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-07T08:15:15.330",
      "lastModified" : "2024-11-21T05:47:01.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de directorio en Archive collectively operation utility versiones Ver.2.10.1.0 y anteriores, permite a un atacante crear o sobrescribir archivos al conllevar a un usuario a expandir un archivo ZIP malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eikisoft:archive_collectively_operation_utility:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10.1.0",
            "matchCriteriaId" : "37377336-698D-455B-B4BE-997154693621"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.eikisoft.com/release01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73236007/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.eikisoft.com/release01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN73236007/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26709",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T11:15:12.167",
      "lastModified" : "2024-11-21T05:56:43.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "D-Link DSL-320B-D1 devices through EU_1.25 are prone to multiple Stack-Based Buffer Overflows that allow unauthenticated remote attackers to take over a device via the login.xgi user and pass parameters. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO SE ASIGNÓ ** Los dispositivos D-Link DSL-320B-D1 versiones hasta EU_1.25, son propensos a múltiples desbordamientos de búfer en la región stack de la memoria que permiten a atacantes remotos no autenticados tomar el control de un dispositivo por medio del usuario login.xgi y parámetros pass.&#xa0;NOTA: Esta vulnerabilidad solo afecta a productos que ya no son soportados por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:d-link:dsl-320b-d1:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "eu_1.25",
            "matchCriteriaId" : "9E7EC007-4E89-4B43-BC3C-286F2FA27487"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:d-link:dsl-320b-d1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46272572-7E58-4358-8D47-B01DA82EC5E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/15",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162133/D-Link-DSL-320B-D1-Pre-Authentication-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10216",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30177",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T11:15:12.293",
      "lastModified" : "2024-11-21T06:03:27.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to be two letters, and the OrderBy field is not validated to be one of LASTNAME, CITY, or STATE."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de inyección SQL en PHP-Nuke versión 8.3.3, en la sección User Registration, que conlleva a una ejecución de código remota.&#xa0;Esto ocurre porque el estado de U.S. no está comprobado para tener dos letras y el campo OrderBy no está comprobado para ser uno de LASTNAME, CITY, o STATE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpnuke:php-nuke:8.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8792184-8092-4443-B532-DA3D7139A942"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/stacksmasher007/41e946fc9a5a2f0b6950626cc9d43d47",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/stacksmasher007/41e946fc9a5a2f0b6950626cc9d43d47",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30184",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T12:15:16.437",
      "lastModified" : "2025-01-12T21:15:18.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overflow in the use of a .tmp.epd temporary file in the cmd_pgnload and cmd_pgnreplay functions in frontend/cmd.cc."
      }, {
        "lang" : "es",
        "value" : "GNU Chess versión 6.2.7, permite a atacantes ejecutar código arbitrario por medio de datos PGN (Portable Game Notation) diseñados.&#xa0;Esto está relacionado con un desbordamiento de búfer en el uso de un archivo temporal .tmp.epd en las funciones cmd_pgnload y cmd_pgnreplay en el archivo frontend/cmd.cc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:chess:6.2.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFB5904C-D4C4-4752-994A-C800F8ED49FF"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QC74RWMDLSQGV6Z3ZABNTPABB33S4YNF/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOGPLC77ZL2FACSOE5MWDS3YH3RBNQAQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXOTMUSBVUZNA3JMPG6BU37DQW2YOJWS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-gnu-chess/2021-04/msg00000.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-gnu-chess/2021-04/msg00001.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-28",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/01/msg00007.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QC74RWMDLSQGV6Z3ZABNTPABB33S4YNF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SOGPLC77ZL2FACSOE5MWDS3YH3RBNQAQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XXOTMUSBVUZNA3JMPG6BU37DQW2YOJWS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-gnu-chess/2021-04/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.gnu.org/archive/html/bug-gnu-chess/2021-04/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21639",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-07T14:15:16.890",
      "lastModified" : "2024-11-21T05:48:44.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not validate the type of object created after loading the data submitted to the `config.xml` REST API endpoint of a node, allowing attackers with Computer/Configure permission to replace a node with one of a different type."
      }, {
        "lang" : "es",
        "value" : "Jenkins versiones 2.286 y anteriores, LTS versiones 2.277.1 y anteriores,  no comprueba el tipo de objeto diseñado después de cargar los datos enviados al endpoint de la API REST \"config.xml\" de un nodo, permitiendo a atacantes con permiso Computer/Configure reemplazar un nodo con uno de un tipo diferente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.277.1",
            "matchCriteriaId" : "A6C9D710-02B7-4F94-BACA-70D67286F99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.286",
            "matchCriteriaId" : "11CD124B-104D-48B7-A184-97EFC77893AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/07/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-1721",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-1721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21640",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-07T14:15:17.017",
      "lastModified" : "2024-11-21T05:48:45.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins 2.286 and earlier, LTS 2.277.1 and earlier does not properly check that a newly created view has an allowed name, allowing attackers with View/Create permission to create views with invalid or already-used names."
      }, {
        "lang" : "es",
        "value" : "Jenkins 2.286 y versiones anteriores, LTS versiones 2.277.1 y anteriores, no comprueban apropiadamente a una visualización recién diseñada tener un nombre permitido, permitiendo a atacantes con permiso de View/Create crear visualizaciones con nombres no válidos o ya usados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:lts:*:*:*",
            "versionEndIncluding" : "2.277.1",
            "matchCriteriaId" : "A6C9D710-02B7-4F94-BACA-70D67286F99B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:jenkins:*:*:*:*:-:*:*:*",
            "versionEndIncluding" : "2.286",
            "matchCriteriaId" : "11CD124B-104D-48B7-A184-97EFC77893AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/07/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-1871",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-1871",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21641",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-07T14:15:17.093",
      "lastModified" : "2024-11-21T05:48:45.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins promoted builds Plugin 3.9 and earlier allows attackers to to promote builds."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en unas compilaciones promocionadas por Jenkins Plugin versiones 3.9 y anteriores, permite a atacantes promover compilaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:promoted_builds:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.9",
            "matchCriteriaId" : "E1F2EBC4-83C7-42D1-B367-2826EF9ADD0A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/07/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2293",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/07/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30185",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T14:15:17.267",
      "lastModified" : "2024-11-21T06:03:28.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link."
      }, {
        "lang" : "es",
        "value" : "CERN Indico versiones anteriores a 2.3.4, puede usar un encabezado de host proporcionado por un atacante en un enlace de restablecimiento de contraseña"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cern:indico:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.4",
            "matchCriteriaId" : "F5565C0A-028B-4AB2-B2C4-50B6599BD685"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/indico/indico/releases/tag/v2.3.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/indico/indico/releases/tag/v2.3.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://www.shorebreaksecurity.com/blog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28927",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T15:15:13.623",
      "lastModified" : "2024-11-21T06:00:24.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The text-to-speech engine in libretro RetroArch for Windows 1.9.0 passes unsanitized input to PowerShell through platform_win32.c via the accessibility_speak_windows function, which allows attackers who have write access on filesystems that are used by RetroArch to execute code via command injection using specially a crafted file and directory names."
      }, {
        "lang" : "es",
        "value" : "El motor de text-to-speech en libretro RetroArch para Windows versión 1.9.0 pasa la entrada no saneada a PowerShell mediante el archivo platform_win32.c por medio de la función accessibility_speak_windows, que permite a atacantes que presentan acceso de escritura en los sistemas de archivos que usa RetroArch para ejecutar código por medio de la inyección de comandos usando especialmente un nombres de archivos y directorios diseñados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libretro:retroarch:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndIncluding" : "1.9.4",
            "matchCriteriaId" : "76E4437F-8065-4577-A04A-2FDFE7EA623A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://libretro.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://retroarch.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libretro/RetroArch/blob/d3dc3ee989ec6a4903c689907ffc47027f71f776/frontend/drivers/platform_win32.c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://labs.bishopfox.com/advisories/retroarch-for-windows-version-1.9.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://libretro.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://retroarch.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/libretro/RetroArch/blob/d3dc3ee989ec6a4903c689907ffc47027f71f776/frontend/drivers/platform_win32.c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://labs.bishopfox.com/advisories/retroarch-for-windows-version-1.9.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29626",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2021-04-07T15:15:13.700",
      "lastModified" : "2024-11-21T06:01:31.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD 13.0-STABLE before n245117, 12.2-STABLE before r369551, 11.4-STABLE before r369559, 13.0-RC5 before p1, 12.2-RELEASE before p6, and 11.4-RELEASE before p9, copy-on-write logic failed to invalidate shared memory page mappings between multiple processes allowing an unprivileged process to maintain a mapping after it is freed, allowing the process to read private data belonging to other processes or the kernel."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD versiones 13.0-STABLE anteriores a n245117, versiones 12.2-STABLE anteriores a r369551, versiones 11.4-STABLE anteriores a r369559, versiones 13.0-RC5 anteriores a p1, versiones 12.2-RELEASE anteriores a p6 y versiones 11.4-RELEASE anteriores a p9, la lógica de copy-on-write fallaba al invalidar las asignaciones de páginas de memoria compartida entre múltiples procesos, permitiendo que un proceso sin privilegios mantuviera una asignación después de ser liberada, permitiendo que el proceso leyera datos privados pertenecientes a otros procesos o al kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "55C77F87-F478-418A-861F-554D2196090B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "17AC6343-11EC-4586-91EB-D7C4D4C1699E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4A865EA1-01D7-4E5A-9D13-80780F8A9D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "B80FBD1B-D03E-4408-9150-2F86FAF7F1D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "9FCA6A72-2A72-45FD-A43D-B5BF7C329121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "90F9B3CB-3B60-4AA8-9EAF-4F0BE7D27691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:p3:*:*:*:*:*:*",
            "matchCriteriaId" : "C04EE177-C7D1-4049-B680-F961A27C677F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:p4:*:*:*:*:*:*",
            "matchCriteriaId" : "218AF216-7B03-4C02-B55F-2316AF14074B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:p5:*:*:*:*:*:*",
            "matchCriteriaId" : "33266717-0359-4243-868B-B84436E2A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "2B0FB7BE-DB4E-47CE-8B51-C43DC5AADD17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:11.4:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "0D427061-B399-47BA-865D-9FAB315210CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "62A178A3-6A52-4981-9A27-FB07AD8AF778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7412DBD8-BB1F-48A8-AAE1-BA5C8D7BDDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "833DFF5B-BC50-424A-ABCF-EC632F421B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F27016E-4117-4094-BB7A-9C56E38024D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B149BF69-951D-47B4-996C-9E4773DA75B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC271C93-EB83-4301-B7BA-F3249B71B1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "04329338-AC28-4A74-BE6B-CE8EC6CC37B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA841F-5C83-4759-84B7-B59DA1B12EA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc4:*:*:*:*:*:*",
            "matchCriteriaId" : "6A8F38B3-A6DA-4178-A2BD-0D4F0267C384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc5:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB028A0-70F6-42DA-9E5A-F7AAF74ED45B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:08.vm.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210423-0008/",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:08.vm.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210423-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29627",
      "sourceIdentifier" : "secteam@freebsd.org",
      "published" : "2021-04-07T15:15:13.763",
      "lastModified" : "2024-11-21T06:01:31.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In FreeBSD 13.0-STABLE before n245050, 12.2-STABLE before r369525, 13.0-RC4 before p0, and 12.2-RELEASE before p6, listening socket accept filters implementing the accf_create callback incorrectly freed a process supplied argument string. Additional operations on the socket can lead to a double free or use after free."
      }, {
        "lang" : "es",
        "value" : "En FreeBSD versiones 13.0-STABLE anteriores a n245050, versiones 12.2-STABLE anteriores a r369525, versiones 13.0-RC4 anteriores a p0 y versiones 12.2-RELEASE anteriores a p6, los filtros de aceptación de socket de escucha que implementan la devolución de llamada accf_create liberaron incorrectamente una cadena de argumentos proporcionada por el proceso. Las operaciones adicionales en el socket pueden conllevar a una doble liberación o un uso de la memoria previamente liberada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "17AC6343-11EC-4586-91EB-D7C4D4C1699E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "73D9C08B-8F5B-40C4-A5BD-B00D2E4C012D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p1:*:*:*:*:*:*",
            "matchCriteriaId" : "62A178A3-6A52-4981-9A27-FB07AD8AF778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:12.2:p2:*:*:*:*:*:*",
            "matchCriteriaId" : "54A487B1-E5CE-4C76-87E8-518D24C5D86D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta1:*:*:*:*:*:*",
            "matchCriteriaId" : "7412DBD8-BB1F-48A8-AAE1-BA5C8D7BDDF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta2:*:*:*:*:*:*",
            "matchCriteriaId" : "833DFF5B-BC50-424A-ABCF-EC632F421B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta3:*:*:*:*:*:*",
            "matchCriteriaId" : "9F27016E-4117-4094-BB7A-9C56E38024D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:beta4:*:*:*:*:*:*",
            "matchCriteriaId" : "B149BF69-951D-47B4-996C-9E4773DA75B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC271C93-EB83-4301-B7BA-F3249B71B1EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "04329338-AC28-4A74-BE6B-CE8EC6CC37B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:freebsd:freebsd:13.0:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "ADBA841F-5C83-4759-84B7-B59DA1B12EA8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:09.accept_filter.asc",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210423-0007/",
        "source" : "secteam@freebsd.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.FreeBSD.org/advisories/FreeBSD-SA-21:09.accept_filter.asc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210423-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21425",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-07T19:15:12.190",
      "lastModified" : "2024-11-21T05:48:20.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grav Admin Plugin is an HTML user interface that provides a way to configure Grav and create and modify pages. In versions 1.10.7 and earlier, an unauthenticated user can execute some methods of administrator controller without needing any credentials. Particular method execution will result in arbitrary YAML file creation or content change of existing YAML files on the system. Successfully exploitation of that vulnerability results in configuration changes, such as general site information change, custom scheduler job definition, etc. Due to the nature of the vulnerability, an adversary can change some part of the webpage, or hijack an administrator account, or execute operating system command under the context of the web-server user. This vulnerability is fixed in version 1.10.8. Blocking access to the `/admin` path from untrusted sources can be applied as a workaround."
      }, {
        "lang" : "es",
        "value" : "Grav Admin Plugin es una interfaz de usuario HTML que proporciona una manera de configurar Grav y crear y modificar páginas.&#xa0;En versiones 1.10.7 y anteriores, un usuario no autenticado puede ejecutar algunos métodos de controlador de administrador sin necesidad de credenciales.&#xa0;Una ejecución de un método particular dará como resultado la creación arbitraria de archivos YAML o el cambio de contenido de archivos YAML existentes en el sistema.&#xa0;Una explotación con éxito de esa vulnerabilidad resulta en cambios de configuración, como cambios en la información general del sitio, definición del trabajo del programador personalizado, etc. Debido a la naturaleza de la vulnerabilidad, un adversario puede cambiar alguna parte de la página web, o secuestrar una cuenta de administrador, o ejecutar un comando del sistema operativo en el contexto del usuario del servidor web.&#xa0;Esta vulnerabilidad es corregida en versión 1.10.8. Como solución se puede bloquear el acceso a la ruta \"/admin\" desde fuentes no confiables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getgrav:grav-plugin-admin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.8",
            "matchCriteriaId" : "637B823D-D43D-4031-AF0F-E0627830E981"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162283/GravCMS-1.10.7-Remote-Command-Execution.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162457/GravCMS-1.10.7-Remote-Command-Execution.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-6f53-6qgv-39pj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162283/GravCMS-1.10.7-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162457/GravCMS-1.10.7-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-6f53-6qgv-39pj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pentest.blog/unexpected-journey-7-gravcms-unauthenticated-arbitrary-yaml-write-update-leads-to-code-execution/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28166",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-04-07T19:15:12.347",
      "lastModified" : "2024-11-21T05:59:14.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Mosquitto versiones 2.0.0 hasta 2.0.9, si un cliente autenticado que se había conectado con MQTT v5 envió un mensaje CONNACK diseñado al broker, se produciría una desreferencia del puntero NULL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "2.0.9",
            "matchCriteriaId" : "FB060C3C-B361-4C5A-B55E-6266FA3CED87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=572608",
        "source" : "emo@eclipse.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.eclipse.org/bugs/show_bug.cgi?id=572608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30123",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T20:15:13.403",
      "lastModified" : "2024-11-21T06:03:21.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FFmpeg <=4.3 contains a buffer overflow vulnerability in libavcodec through a crafted file that may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "FFmpeg versiones anteriores a 4.3 incluyéndola, contiene una vulnerabilidad de desbordamiento de búfer en libavcodec por medio de un archivo diseñado que puede conducir a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpeg:ffmpeg:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ADCFDB3-718B-4D16-BDD0-3CF8F1272E5E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-24",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.ffmpeg.org/ticket/8845",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://trac.ffmpeg.org/ticket/8863",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "http://git.videolan.org/?p=ffmpeg.git%3Ba=commitdiff%3Bh=d6f293353c94c7ce200f6e0975ae3de49787f91f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-24",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://trac.ffmpeg.org/ticket/8845",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://trac.ffmpeg.org/ticket/8863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26758",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T21:15:16.090",
      "lastModified" : "2024-11-21T05:56:48.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system."
      }, {
        "lang" : "es",
        "value" : "Una Escalada de privilegios en el servidor web LiteSpeed ??Technologies OpenLiteSpeed ??versión 1.7.8, permite a atacantes obtener acceso terminal root y ejecutar comandos en el sistema host"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:litespeedtech:openlitespeed:1.7.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "646745C0-EFF6-4F39-82E2-43C5368A1F27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.unsafe-inline.com/0day/openlitespeed-web-server-1.7.8-command-injection-to-privilege-escalation-cve-2021-26758",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/litespeedtech/openlitespeed/issues/217",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49556",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://docs.unsafe-inline.com/0day/openlitespeed-web-server-1.7.8-command-injection-to-privilege-escalation-cve-2021-26758",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/litespeedtech/openlitespeed/issues/217",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T21:15:16.153",
      "lastModified" : "2024-11-21T06:03:33.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the jsrsasign package through 10.1.13 for Node.js, some invalid RSA PKCS#1 v1.5 signatures are mistakenly recognized to be valid. NOTE: there is no known practical attack."
      }, {
        "lang" : "es",
        "value" : "En el paquete jsrsasign versiones hasta 10.1.13 para Node.js, algunas firmas RSA PKCS#1 v1.5, firmas son erróneamente reconocidas como válidas.&#xa0;NOTA: No es conocido un ataque práctico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jsrsasign_project:jsrsasign:*:*:*:*:*:node.js:*:*",
            "versionEndIncluding" : "10.1.13",
            "matchCriteriaId" : "D6798FDB-B3EE-4EE3-902A-83DCCB1038FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kjur/jsrsasign/issues/478",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kjur/jsrsasign/releases/tag/10.1.13",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kjur.github.io/jsrsasign/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kjur/jsrsasign/issues/478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kjur/jsrsasign/releases/tag/10.1.13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://kjur.github.io/jsrsasign/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29641",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T22:15:14.973",
      "lastModified" : "2024-11-21T06:01:32.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com)."
      }, {
        "lang" : "es",
        "value" : "Directus 8 versiones anteriores a 8.8.2, permite a los usuarios autenticados remotamente ejecutar código arbitrario porque los permisos de carga de archivos incluyen la capacidad de cargar un archivo .php en el directorio de carga principal y/o cargar un archivo .php y un archivo .htaccess en un subdirectorio.&#xa0;La explotación tiene éxito solo para ciertas instalaciones con el servidor HTTP Apache y el controlador de almacenamiento local (por ejemplo, cuando el producto se obtuvo de hub.docker.com)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.8.2",
            "matchCriteriaId" : "25C32EC9-72A3-4EF5-B67C-461B26AE84EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162118/Monospace-Directus-Headless-CMS-File-Upload-Rule-Bypass.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://hub.docker.com/layers/directus/directus/v8.8.2-apache/images/sha256-d9898b6442b0150c3c377b50e706757f35d2d563bd82ddaf97f3ae4ba450a6e6?context=explore",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/de/vulnerability-lab/advisory/arbitrary-file-upload-and-bypassing-htaccess-rules-in-monospace-directus-headless-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/arbitrary-file-upload-and-bypassing-htaccess-rules-in-monospace-directus-headless-cms/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162118/Monospace-Directus-Headless-CMS-File-Upload-Rule-Bypass.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://hub.docker.com/layers/directus/directus/v8.8.2-apache/images/sha256-d9898b6442b0150c3c377b50e706757f35d2d563bd82ddaf97f3ae4ba450a6e6?context=explore",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/de/vulnerability-lab/advisory/arbitrary-file-upload-and-bypassing-htaccess-rules-in-monospace-directus-headless-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://sec-consult.com/vulnerability-lab/advisory/arbitrary-file-upload-and-bypassing-htaccess-rules-in-monospace-directus-headless-cms/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30454",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T22:15:15.117",
      "lastModified" : "2024-11-21T06:03:57.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the outer_cgi crate before 0.2.1 for Rust. A user-provided Read instance receives an uninitialized memory buffer from KeyValueReader."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate outer_cgi anterior a la versión 0.2.1 para Rust.&#xa0;Una instancia de lectura proporcionada por el usuario recibe un búfer de la memoria no inicializado desde KeyValueReader"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outer_cgi_project:outer_cgi:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.2.1",
            "matchCriteriaId" : "AC93B5FC-D2E2-4672-A37D-08E9C5971138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0051.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0051.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30455",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T22:15:15.177",
      "lastModified" : "2024-11-21T06:03:57.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in IdMap::clone_from upon a .clone panic."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate id-map hasta el 26/02/2021 para Rust.&#xa0;Una doble liberación puede ocurrir en IdMap::clone_from sobre un pánico de .clone"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id-map_project:id-map:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-26",
            "matchCriteriaId" : "A31B8F46-5BB1-434C-929D-2B009B5F01E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0052.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30456",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T22:15:15.240",
      "lastModified" : "2024-11-21T06:03:57.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in get_or_insert upon a panic of a user-provided f function."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate id-map hasta el 26/02/2021 para Rust.&#xa0;Una doble liberación puede ocurrir en get_or_insert en caso de pánico de una función f proporcionada por el usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id-map_project:id-map:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-26",
            "matchCriteriaId" : "A31B8F46-5BB1-434C-929D-2B009B5F01E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0052.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30457",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-07T22:15:15.303",
      "lastModified" : "2024-11-21T06:03:57.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the id-map crate through 2021-02-26 for Rust. A double free can occur in remove_set upon a panic in a Drop impl."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate id-map hasta el 26/02/2021 para Rust.&#xa0;Una doble liberación puede ocurrir en remove_set tras un pánico en una implementación Drop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:id-map_project:id-map:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-02-26",
            "matchCriteriaId" : "A31B8F46-5BB1-434C-929D-2B009B5F01E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0052.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0052.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1137",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:11.717",
      "lastModified" : "2024-11-21T05:43:40.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o permitir a un atacante local autenticado alcanzar privilegios escalados en un sistema afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.4",
            "matchCriteriaId" : "48895B9B-8FB9-484F-A942-832A570DE817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.3",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "25AB8470-2A8E-40C1-8193-0FF90ED2E278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1251",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:11.860",
      "lastModified" : "2024-11-21T05:43:55.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la implementación del Link Layer Discovery Protocol (LLDP) para Enrutadores Cisco Small Business RV Series.&#xa0;Un atacante adyacente no autenticado podría ejecutar código arbitrario o causar que un enrutador afectado filtre la memoria del sistema o se recargue.&#xa0;Una pérdida de memoria o una recarga del dispositivo podrían causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso.&#xa0;Nota: LLDP es un protocolo de Capa 2.&#xa0;Para explotar estas vulnerabilidades, un atacante debe estar en el mismo dominio de transmisión que el dispositivo afectado (adyacente a Capa 2)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5759C3B-CE24-47A4-8513-A2C24028973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F83DB37-F1B5-4023-B83D-F44823B162F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511C48D-9EA6-4521-988C-61E1035BEFA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E2F2A9-4118-4778-94AB-C996A6F56F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976288C6-A125-48B2-BE6B-1294F26D46C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39710CC4-1891-4E4B-AF65-AC2577CC8FFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF13C864-9853-453C-B495-6C642DE9CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF5FEFC-45A0-4774-88FF-5303626C4C7E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DC21D-8C6C-4CE7-B5CB-8646659B02BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A57FFD-BA26-4F6E-B45F-2DF212908843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9A71045-FF96-4344-9638-6BE2EC47B9E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7E3792-5D0F-4CCC-874D-512059CA8E12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01B7F-692D-405D-938D-35E83C62D8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42AA099C-B8A2-4864-9F1B-E92ED0E89995"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFC99C1-954E-408B-8A08-C79941350F05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD084D1A-A03D-4854-9727-76C1FBC1A265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E389365B-EB1B-45CD-9BA6-1019536D27E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62A6E2F-FA43-4F40-A684-651FEDAC2114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DC3490-6E60-4806-874D-E23572DEAF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA72296B-4505-4DFA-B576-AEF67E5537CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95737F9F-1779-4AAB-875E-2CD586A8B780"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A8558B-85AC-442A-9E3E-27EC127C5B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E4B0547-A92A-4AE2-A70C-227D1FA46ED0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8FB0F6-CAE9-481C-9FC7-69CA0660F506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "216F3BF9-A17B-46C7-9EF6-153D531550A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA2331F-521F-4987-83A1-6D0D458B41DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DDEB88C-8545-4E12-88D8-083EEB868792"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E16124B-9448-47A0-A6BF-A95B37446E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.3.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F2D261-E845-4334-838A-62A4FA593FF3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-multi-lldp-u7e4chCe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-multi-lldp-u7e4chCe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1308",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:11.983",
      "lastModified" : "2024-11-21T05:44:03.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la implementación del Link Layer Discovery Protocol (LLDP) para Enrutadores Cisco Small Business RV Series.&#xa0;Un atacante adyacente no autenticado podría ejecutar código arbitrario o hacer que un enrutador afectado filtre la memoria del sistema o se recargue.&#xa0;Una pérdida de memoria o la recarga del dispositivo podrían causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso.&#xa0;Nota: LLDP es un protocolo de Capa 2.&#xa0;Para explotar estas vulnerabilidades, un atacante debe estar en el mismo dominio de transmisión que el dispositivo afectado (adyacente a Capa 2)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C12141B-531E-44A5-AD79-16504B31D384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5759C3B-CE24-47A4-8513-A2C24028973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50517-FD1B-4207-B63B-4E33F7654E2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511C48D-9EA6-4521-988C-61E1035BEFA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C440-025B-414F-BED1-5DA20431E726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E2F2A9-4118-4778-94AB-C996A6F56F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CC81E5-DA22-47A1-9D02-00A86DED8D96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39710CC4-1891-4E4B-AF65-AC2577CC8FFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA1FCAC-F214-46F5-B2D7-751B24865236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF13C864-9853-453C-B495-6C642DE9CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA85E0EA-C194-4683-BA09-7C68080924E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DC21D-8C6C-4CE7-B5CB-8646659B02BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F5D34-CED9-4390-AC75-7F592175DD67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A57FFD-BA26-4F6E-B45F-2DF212908843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95130A28-C573-4BDF-ABDB-45EE96E94406"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7E3792-5D0F-4CCC-874D-512059CA8E12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA93AAF-F894-44AE-98D6-DBF868AC4EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01B7F-692D-405D-938D-35E83C62D8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA38FA6-CACA-4553-853C-E36D6395C3E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFC99C1-954E-408B-8A08-C79941350F05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A035A4A-B82A-4F0B-8D38-4DD280037C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD084D1A-A03D-4854-9727-76C1FBC1A265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA8B5D4-821E-48CB-81EA-943BD1039087"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62A6E2F-FA43-4F40-A684-651FEDAC2114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84DC383-4F05-4294-9008-B5223353526D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DC3490-6E60-4806-874D-E23572DEAF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FED3BFB-7AA7-4A49-B911-58D7CBE8D704"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95737F9F-1779-4AAB-875E-2CD586A8B780"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC9C7EC-388E-476D-A444-EE9BEE3FD578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A8558B-85AC-442A-9E3E-27EC127C5B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD473F62-964C-4D15-B0B6-D9D4AB8E2C1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165E6FA-C876-45B4-B48A-7B1D51A028BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8FB0F6-CAE9-481C-9FC7-69CA0660F506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35729306-0CFF-4ACD-B77D-172A92FD67DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784C42BE-E7CD-45F0-8209-436F54812C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA2331F-521F-4987-83A1-6D0D458B41DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F3DC42-58C9-4BC4-AFCC-077C0BDAAB2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FB2292D-20C8-4929-9802-7FC770952200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E16124B-9448-47A0-A6BF-A95B37446E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948587E0-67B8-4A80-AFAA-96A22F522F42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-multi-lldp-u7e4chCe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-multi-lldp-u7e4chCe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1309",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.063",
      "lastModified" : "2024-11-21T05:44:03.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities exist in the Link Layer Discovery Protocol (LLDP) implementation for Cisco Small Business RV Series Routers. An unauthenticated, adjacent attacker could execute arbitrary code or cause an affected router to leak system memory or reload. A memory leak or device reload would cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. Note: LLDP is a Layer 2 protocol. To exploit these vulnerabilities, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la implementación del Link Layer Discovery Protocol (LLDP) para Enrutadores Cisco Small Business RV Series.&#xa0;Un atacante adyacente no autenticado podría ejecutar código arbitrario o causar que un enrutador afectado filtre la memoria del sistema o se recargue.&#xa0;Una pérdida de memoria o una recarga del dispositivo podrían causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso.&#xa0;Nota: LLDP es un protocolo de capa 2.&#xa0;Para explotar estas vulnerabilidades, un atacante debe estar en el mismo dominio de transmisión que el dispositivo afectado (adyacente a Capa 2)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C12141B-531E-44A5-AD79-16504B31D384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5759C3B-CE24-47A4-8513-A2C24028973E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv132w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CB50517-FD1B-4207-B63B-4E33F7654E2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv132w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8511C48D-9EA6-4521-988C-61E1035BEFA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2835C440-025B-414F-BED1-5DA20431E726"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1E2F2A9-4118-4778-94AB-C996A6F56F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv134w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62CC81E5-DA22-47A1-9D02-00A86DED8D96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv134w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39710CC4-1891-4E4B-AF65-AC2577CC8FFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BAA1FCAC-F214-46F5-B2D7-751B24865236"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF13C864-9853-453C-B495-6C642DE9CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA85E0EA-C194-4683-BA09-7C68080924E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DC21D-8C6C-4CE7-B5CB-8646659B02BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F75F5D34-CED9-4390-AC75-7F592175DD67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A57FFD-BA26-4F6E-B45F-2DF212908843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95130A28-C573-4BDF-ABDB-45EE96E94406"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7E3792-5D0F-4CCC-874D-512059CA8E12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AA93AAF-F894-44AE-98D6-DBF868AC4EBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEE01B7F-692D-405D-938D-35E83C62D8F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEA38FA6-CACA-4553-853C-E36D6395C3E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFC99C1-954E-408B-8A08-C79941350F05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A035A4A-B82A-4F0B-8D38-4DD280037C11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD084D1A-A03D-4854-9727-76C1FBC1A265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA8B5D4-821E-48CB-81EA-943BD1039087"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62A6E2F-FA43-4F40-A684-651FEDAC2114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84DC383-4F05-4294-9008-B5223353526D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5DC3490-6E60-4806-874D-E23572DEAF35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FED3BFB-7AA7-4A49-B911-58D7CBE8D704"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95737F9F-1779-4AAB-875E-2CD586A8B780"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFC9C7EC-388E-476D-A444-EE9BEE3FD578"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41A8558B-85AC-442A-9E3E-27EC127C5B33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD473F62-964C-4D15-B0B6-D9D4AB8E2C1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4165E6FA-C876-45B4-B48A-7B1D51A028BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B8FB0F6-CAE9-481C-9FC7-69CA0660F506"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35729306-0CFF-4ACD-B77D-172A92FD67DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "784C42BE-E7CD-45F0-8209-436F54812C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEA2331F-521F-4987-83A1-6D0D458B41DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90F3DC42-58C9-4BC4-AFCC-077C0BDAAB2E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.0.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FB2292D-20C8-4929-9802-7FC770952200"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.1.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E16124B-9448-47A0-A6BF-A95B37446E91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:1.0.1.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "948587E0-67B8-4A80-AFAA-96A22F522F42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-multi-lldp-u7e4chCe",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-multi-lldp-u7e4chCe",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1362",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.140",
      "lastModified" : "2024-11-21T05:44:10.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SOAP API endpoint of Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM &amp; Presence Service, Cisco Unity Connection, and Cisco Prime License Manager could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper sanitization of user-supplied input. An attacker could exploit this vulnerability by sending a SOAP API request with crafted parameters to an affected device. A successful exploit could allow the attacker to execute arbitrary code with root privileges on the underlying Linux operating system of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el endpoint de la API SOAP de Cisco Unified Communications Manager, Cisco Unified Communications Manager Session Management Edition, Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service, Cisco Unity Connection y Cisco Prime License Manager, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a un saneamiento inapropiado de la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición de API SOAP con parámetros diseñados hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario con privilegios root en el sistema operativo Linux subyacente del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:prime_license_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "1ECFC9AD-73C7-4B03-B791-0DB46A987673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "DEED2509-2F02-4B6F-A588-448C39D87AC7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "FF429C92-1327-4A27-B2FF-B388A5F97A98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "12.0\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "5EB86657-3A5F-4960-B407-5920A86DB58F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "12.0\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "2B4716CB-F9D8-4E38-9FC1-CE4E4A44B20F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "4E62A5D3-0E6B-488A-B7EF-FB9C68947042"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "BB145AFA-1CB3-40ED-B522-7AE4BCFE785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "EC5846FF-F22A-4475-AB3D-AD23B03CBE9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "7D9BAFFB-1814-40E8-BAFA-51362D6F3173"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-pqVYwyb",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-rce-pqVYwyb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1380",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.233",
      "lastModified" : "2024-11-21T05:44:13.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an interface user. These vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by persuading an interface user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service (Unified CM IM &amp; amp; P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y Cisco Unity Connection, podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de interfaz.&#xa0;Estas vulnerabilidades se presentan porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz a hacer clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código de script de comandos arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "CF8506B4-287F-4430-86C5-3F122A83CA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "46DE37E0-D799-4F2D-A22A-980649992E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "1BBC30AD-79E5-4FA1-B868-0304A12040DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "6313AB2B-8CBB-48FF-BCBF-B24DE98855EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1386",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.343",
      "lastModified" : "2024-11-21T05:44:14.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the dynamic link library (DLL) loading mechanism in Cisco Advanced Malware Protection (AMP) for Endpoints Windows Connector, ClamAV for Windows, and Immunet could allow an authenticated, local attacker to perform a DLL hijacking attack on an affected Windows system. To exploit this vulnerability, the attacker would need valid credentials on the system. The vulnerability is due to insufficient validation of directory search paths at run time. An attacker could exploit this vulnerability by placing a malicious DLL file on an affected system. A successful exploit could allow the attacker to execute arbitrary code with SYSTEM privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el mecanismo de carga de la dynamic link library (DLL) en Cisco Advanced Malware Protection (AMP) para Endpoints Windows Connector, ClamAV para Windows e Immunet, podría permitir a un atacante local autenticado llevar a cabo un ataque de secuestro DLL en un sistema Windows afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante necesitaría credenciales válidas en el sistema.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de las rutas de búsqueda de directorios en tiempo de ejecución.&#xa0;Un atacante podría explotar esta vulnerabilidad al colocar un archivo DLL malicioso en un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario con privilegios SYSTEM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:advanced_malware_protection_for_endpoints:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.3.15",
            "matchCriteriaId" : "9DC181C7-11E3-4AA8-8E4B-43F1C0D3F73E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:clamav:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "0.103.2",
            "matchCriteriaId" : "5BBCAAEA-C3BC-41CB-9395-22309FDF80DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:immunet:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "7.4.0",
            "matchCriteriaId" : "F56DFDB8-3196-4BDC-9254-66849E3729E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp-imm-dll-tu79hvkO",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-amp-imm-dll-tu79hvkO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1399",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.500",
      "lastModified" : "2024-11-21T05:44:15.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Self Care Portal of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to modify data on an affected system without proper authorization. The vulnerability is due to insufficient validation of user-supplied data to the Self Care Portal. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected system. A successful exploit could allow the attacker to modify information without proper authorization."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el Self Care Portal de Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME), podría permitir a un atacante remoto autenticado modificar datos en un sistema afectado sin la debida autorización.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de los datos suministrados por el usuario en el Self Care Portal.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP diseñada a un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante modificar información sin una apropiada autorización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-302"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "54A18428-4FD9-4808-A64F-BC4D6EAB85C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionStartIncluding" : "10.5\\(2\\)",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "86F6ADB9-4252-4816-A214-5E67469FB6E1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-selfcare-VRWWWHgE",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-selfcare-VRWWWHgE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1406",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.593",
      "lastModified" : "2024-11-21T05:44:16.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability is due to improper inclusion of sensitive information in downloadable files. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to obtain hashed credentials of system users. To exploit this vulnerability an attacker would need to have valid user credentials with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME), podría permitir a un atacante remoto autenticado acceder a información confidencial en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una inclusión inapropiada de información confidencial en archivos descargables.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo afectado y emitir un ajuste específico de comandos.&#xa0;Una explotación con éxito podría permitir al atacante obtener credenciales hash de los usuarios del sistema.&#xa0;Para explotar esta vulnerabilidad, un atacante necesitaría tener credenciales de usuario válidas con privilegios elevados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-538"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\):*:*:*:-:*:*:*",
            "matchCriteriaId" : "6781FEB3-73CF-451E-A373-19657DE750FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\):*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "37F53ABC-C019-4BBB-8881-395F286EA43F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su1:*:*:*:-:*:*:*",
            "matchCriteriaId" : "8E10EACB-885B-4FB1-89D7-1038336B997B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su1:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "4277C3ED-77E5-4BBD-867E-0E5AD26CABDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "00B8DC04-D9B0-432A-B9B9-5E3A9428528B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su2:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "785CD3D7-9967-4F4E-A76A-66F514BB8D46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su2a:*:*:*:-:*:*:*",
            "matchCriteriaId" : "9F72E5FC-0459-4366-8D47-93306F25D31D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su2a:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "F9C6D49F-954B-4057-A51A-6ED1304EEC68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su3:*:*:*:-:*:*:*",
            "matchCriteriaId" : "8FD488BB-6EB2-4084-B9C3-23E41D1FE0DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su3:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "3225F4E8-4D2E-40EC-9BC0-799D34AB9C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su3a:*:*:*:-:*:*:*",
            "matchCriteriaId" : "32ADCDE2-5069-472A-96FB-20A62337DDE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su3a:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "57633170-0285-4C0E-A58F-AF970B97F24C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su4:*:*:*:-:*:*:*",
            "matchCriteriaId" : "100A3B73-B286-4358-A829-7AFBE685F9E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su4:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "9262E014-86BE-41B5-827B-297157796107"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su4a:*:*:*:-:*:*:*",
            "matchCriteriaId" : "12D7018F-A242-49E2-9A2D-663EA34F6B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su4a:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "A987F37B-3705-4A99-BD79-0575A5882A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E3D8BF-B5A3-4857-94B7-3BDA59BD9BD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su6:*:*:*:-:*:*:*",
            "matchCriteriaId" : "9C36CC93-51D2-4856-860F-4DE90721B5EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su6:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "0BC9CF9C-653E-45AF-8C15-E0D6052938B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su6a:*:*:*:-:*:*:*",
            "matchCriteriaId" : "2C76AE40-E203-4206-AA54-D1B47EFBBFCE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su6a:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "0C51FA8B-D576-4174-947E-37DA5954B372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su7:*:*:*:-:*:*:*",
            "matchCriteriaId" : "A5677040-8E71-43A7-A5AB-389A2446FBB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su7:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "95D7060A-A44C-41F7-8F16-D6D066FA9E40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su8:*:*:*:-:*:*:*",
            "matchCriteriaId" : "D2C99CC1-D20B-483D-83B2-C5A5654170D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su8:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "C4CE477A-3796-4EF9-9158-E96A6058C208"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su9:*:*:*:-:*:*:*",
            "matchCriteriaId" : "D0D0CC2A-4C22-440B-890C-C123562D3744"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su9:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "F4558E9D-6144-4DD3-8131-D46DF5E066E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su10:*:*:*:-:*:*:*",
            "matchCriteriaId" : "24016D28-5B31-4A92-806B-36AC44CC4476"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:10.5\\(2\\)su10:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "0338F894-23F2-4063-AF30-A094F06BF0C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\):*:*:*:-:*:*:*",
            "matchCriteriaId" : "7E958AFF-185D-4D55-B74B-485BEAEC42FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\):*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "F770709C-FFB2-4A4E-A2D8-2EAA23F2E87C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su1:*:*:*:-:*:*:*",
            "matchCriteriaId" : "9938A5E6-0A2E-46C3-B347-EA63304A8511"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su1:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "AC3A6965-5989-47B1-BF13-F6D306BCE412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0E572C74-117F-455B-8A5D-14E3A363F087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su2:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "641F8DC2-0595-41B5-B154-9CAB37B7E5F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su3:*:*:*:-:*:*:*",
            "matchCriteriaId" : "319DA981-B200-409F-94D1-0808E0555F53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su3:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "81F945BC-7A46-48F8-B709-67692CF62C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su4:*:*:*:-:*:*:*",
            "matchCriteriaId" : "841C7F5B-29F6-441C-8F02-DBCE8D1CD160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su4:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "C8D79377-AEA4-4F7D-931C-7938F2E72108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su5:*:*:*:-:*:*:*",
            "matchCriteriaId" : "0FC7FF7F-4870-4F68-B883-40AF4EAB8D15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su5:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "7BD8C20B-2C1E-422D-87C0-D478F4A3CFE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su7:*:*:*:-:*:*:*",
            "matchCriteriaId" : "BB663114-EC3F-4E9F-888D-5E4298C6F832"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su7:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "430E4021-05BF-4E41-B197-BE2EEF8A8B76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su8:*:*:*:-:*:*:*",
            "matchCriteriaId" : "1E6135D4-FA64-425B-BE91-174D38B5DBDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su8:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "3912C8CB-01BF-4627-8960-E83F015115C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su9:*:*:*:-:*:*:*",
            "matchCriteriaId" : "7E0BC7A5-8DED-49FA-AC67-55FD5082876B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:11.5\\(1\\)su9:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "075DF8B4-1651-46A4-8FE6-BEDC264E871A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0\\(1\\):*:*:*:-:*:*:*",
            "matchCriteriaId" : "F2742FD5-CE1D-4FDC-818F-125600015BDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.0\\(1\\):*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "EA9B0067-9B0E-4DF3-B443-C8C9C48B3957"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\):*:*:*:-:*:*:*",
            "matchCriteriaId" : "0F4F8482-029A-4A84-97F1-9EDEDCE42C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\):*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "EB810DDE-18A0-4168-8EC1-726DA62453E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su1:*:*:*:-:*:*:*",
            "matchCriteriaId" : "616BEDFF-EB9A-4ADE-A672-B2E709DC844B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su1:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "628A15DE-7852-4D4F-9D8B-A20A841708CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su2:*:*:*:-:*:*:*",
            "matchCriteriaId" : "E077A144-3D5E-4984-8F2B-6A69C5ED3EE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su2:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "25D5286C-249E-480A-88F9-0A573737297A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su3:*:*:*:-:*:*:*",
            "matchCriteriaId" : "6353BE27-91F0-4E8B-89A3-30EC189798F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su3:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "B4057BD8-B5C0-4A61-8AD7-8E59F351AF8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su4:*:*:*:-:*:*:*",
            "matchCriteriaId" : "F1FAF361-CEE8-4F75-B444-CFFB8A7D9AFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su4:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "15292BC9-7129-4BCF-BAED-E8EBDC27AFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su5:*:*:*:-:*:*:*",
            "matchCriteriaId" : "387C66C7-42D7-4794-898C-85A098189BAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:12.5\\(1\\)su5:*:*:*:session_management:*:*:*",
            "matchCriteriaId" : "BC19BCD4-4E59-4B5A-936F-AF3F31315BA3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-inf-disc-wCxZNjL2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-inf-disc-wCxZNjL2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1407",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.733",
      "lastModified" : "2024-11-21T05:44:17.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an interface user. These vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by persuading an interface user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service (Unified CM IM &amp; amp; P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y Cisco Unity Connection, podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de interfaz.&#xa0;Estas vulnerabilidades se presentan porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz a hacer clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "CF8506B4-287F-4430-86C5-3F122A83CA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "46DE37E0-D799-4F2D-A22A-980649992E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1408",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.797",
      "lastModified" : "2024-11-21T05:44:17.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an interface user. These vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by persuading an interface user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service (Unified CM IM &amp; amp; P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y Cisco Unity Connection, podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de interfaz.&#xa0;Estas vulnerabilidades se presentan porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz a hacer clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "CF8506B4-287F-4430-86C5-3F122A83CA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "46DE37E0-D799-4F2D-A22A-980649992E46"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1409",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:12.907",
      "lastModified" : "2024-11-21T05:44:17.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; Presence Service (Unified CM IM&amp;P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against an interface user. These vulnerabilities exist because the web-based management interface does not properly validate user-supplied input. An attacker could exploit these vulnerabilities by persuading an interface user to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service (Unified CM IM &amp; amp; P), Cisco Unified Communications Manager Session Management Edition (Unified CM SME) y Cisco Unity Connection, podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de interfaz.&#xa0;Estas vulnerabilidades se presentan porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz a hacer clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "CF8506B4-287F-4430-86C5-3F122A83CA1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "46DE37E0-D799-4F2D-A22A-980649992E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_\\&_presence_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14",
            "matchCriteriaId" : "1BBC30AD-79E5-4FA1-B868-0304A12040DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unity_connection:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "6313AB2B-8CBB-48FF-BCBF-B24DE98855EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cucm-xss-Q4PZcNzJ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1413",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.063",
      "lastModified" : "2024-11-21T05:44:17.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco RV340, RV340W, RV345 y RV345P Dual WAN Gigabit VPN, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario con privilegios elevados equivalentes al proceso de servicio web en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada a la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar remotamente código arbitrario en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.3.21",
            "matchCriteriaId" : "487CEB78-D030-4623-ABFA-79F962ADD34A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "F1D3E083-7BC2-485B-82CD-CE3DE176A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "504FBEF9-DCC1-4EE2-9F04-14E38141A03C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "9C7C3346-DD1A-41CC-BB4D-F42CCE75A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-558/",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-558/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1414",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.187",
      "lastModified" : "2024-11-21T05:44:18.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco RV340, RV340W, RV345 y RV345P Dual WAN Gigabit VPN, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario con privilegios elevados equivalentes al proceso de servicio web en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque las peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada a la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar remotamente código arbitrario en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "DB20DECC-5D66-4E87-8E19-AFCE0EC2538B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "F1D3E083-7BC2-485B-82CD-CE3DE176A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "504FBEF9-DCC1-4EE2-9F04-14E38141A03C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "9C7C3346-DD1A-41CC-BB4D-F42CCE75A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-559/",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-559/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1415",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.267",
      "lastModified" : "2024-11-21T05:44:18.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to execute arbitrary code with elevated privileges equivalent to the web service process on an affected device. These vulnerabilities exist because HTTP requests are not properly validated. An attacker could exploit these vulnerabilities by sending a crafted HTTP request to the web-based management interface of an affected device. A successful exploit could allow the attacker to remotely execute arbitrary code on the device."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Enrutadores Cisco RV340, RV340W, RV345 y RV345P Dual WAN Gigabit VPN, podrían permitir a un atacante remoto autenticado ejecutar código arbitrario con privilegios elevados equivalentes al proceso de servicio web en un dispositivo afectado.&#xa0;Estas vulnerabilidades se presentan porque unas peticiones HTTP no son comprobadas apropiadamente.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTP diseñada hacia la interfaz de administración basada en web de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar remotamente código arbitrario en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "DB20DECC-5D66-4E87-8E19-AFCE0EC2538B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "F1D3E083-7BC2-485B-82CD-CE3DE176A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "504FBEF9-DCC1-4EE2-9F04-14E38141A03C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "9C7C3346-DD1A-41CC-BB4D-F42CCE75A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-560/",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv34x-rce-8bfG2h6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-560/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1420",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.327",
      "lastModified" : "2024-11-21T05:44:19.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in certain web pages of Cisco Webex Meetings could allow an unauthenticated, remote attacker to modify a web page in the context of a user's browser. The vulnerability is due to improper checks on parameter values in affected pages. An attacker could exploit this vulnerability by persuading a user to follow a crafted link that is designed to pass HTML code into an affected parameter. A successful exploit could allow the attacker to alter the contents of a web page to redirect the user to potentially malicious websites, or the attacker could use this vulnerability to conduct further client-side attacks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en determinadas páginas web de Cisco Webex Meetings, podría permitir a un atacante remoto no autenticado modificar una página web en el contexto del navegador de un usuario.&#xa0;La vulnerabilidad es debido a comprobaciones inapropiadas de los valores de los parámetros en páginas afectadas.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario para seguir un vínculo elaborado que está diseñado para pasar código HTML a un parámetro afectado.&#xa0;Una explotación con éxito podría permitir al atacante alterar el contenido de una página web para redireccionar al usuario a sitios web potencialmente maliciosos, o el atacante podría usar esta vulnerabilidad para conducir más ataques del lado del cliente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81774C03-0884-44C6-80EF-DC882BF44C84"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-VObwRKWV",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-VObwRKWV",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1459",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.437",
      "lastModified" : "2024-11-21T05:44:24.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by sending crafted HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system of the affected device. Cisco has not released software updates that address this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de los enrutadores Cisco Small Business RV110W, RV130, RV130W y RV215W, podría permitir a un atacante remoto no autenticado ejecutar código arbitrario en un dispositivo afectado.&#xa0;La vulnerabilidad es debida a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas hacia un dispositivo de destino.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario como usuario root en el sistema operativo subyacente del dispositivo afectado.&#xa0;Cisco no ha publicado actualizaciones de software que aborden esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv110w_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "670BF7A6-F2C1-4CD4-B6E6-208C95A32E57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv110w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20E8ECAC-E842-41DB-9612-9374A9648DC2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E8376ED-8273-4296-A90F-AA16156B8104"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D233CF-2504-4E69-9AD0-D3B631C8FC11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv130w_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF66A7CE-469A-48CD-AE85-2F49E1C505FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv130w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3C9AFAA-1387-4067-AF7E-2E4AAD2A272A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv215w_firmware:1.0.3.55:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0909B440-99B7-43BE-BD8F-65EB3CF941ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv215w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8686AB22-F757-468A-930B-DDE45B508969"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-rce-q3rxHnvm",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-rce-q3rxHnvm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1463",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.530",
      "lastModified" : "2025-07-31T15:03:24.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Unified Intelligence Center Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del software Cisco Unified Intelligence Center, podría permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Esta vulnerabilidad se presenta porque la interfaz de administración basada en web no comprueba apropiadamente la entrada suministrada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario de una interfaz afectada para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código de script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "12.0\\(1\\)",
            "matchCriteriaId" : "2E8430E2-42B7-4BF3-A9C6-DF30FCD64854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_contact_center_express:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)su1",
            "matchCriteriaId" : "2A812DE0-FA3C-4361-8CC2-269E43AA976A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "11.6\\(1\\)",
            "matchCriteriaId" : "53015D69-E750-4BBA-9DE0-CCBB2C6AD80B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0\\(1\\)",
            "versionEndExcluding" : "12.0\\(1\\)es14",
            "matchCriteriaId" : "DB961D31-384B-419A-B5E1-22F290860ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:unified_intelligence_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.5\\(1\\)",
            "versionEndExcluding" : "12.5\\(1\\)es7",
            "matchCriteriaId" : "472FF7A5-997E-432B-A08B-C5AB0F29D306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-xss-U2WTsUg6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-cuic-xss-U2WTsUg6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1467",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.593",
      "lastModified" : "2024-11-21T05:44:25.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Webex Meetings for Android could allow an authenticated, remote attacker to modify the avatar of another user. This vulnerability is due to improper authorization checks. An attacker could exploit this vulnerability by sending a crafted request to the Cisco Webex Meetings client of a targeted user of a meeting in which they are both participants. A successful exploit could allow the attacker to modify the avatar of the targeted user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Webex Meetings para Android podría permitir a un atacante remoto autenticado modificar el avatar de otro usuario.&#xa0;Esta vulnerabilidad es debido a comprobaciones inapropiadas de autorización.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición diseñada hacia el cliente de Cisco Webex Meetings de un usuario objetivo de una reunión en la que ambos participan.&#xa0;Una explotación con éxito podría permitir al atacante modificar el avatar del usuario objetivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:webex_meetings:*:*:*:*:*:android:*:*",
            "versionEndExcluding" : "41.3",
            "matchCriteriaId" : "87162572-1AE5-4ED0-A2C4-20129E9246A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-andro-iac-f3UR8frB",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-webex-andro-iac-f3UR8frB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1472",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.687",
      "lastModified" : "2024-11-21T05:44:26.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Se presentan múltiples vulnerabilidades en la interfaz de administración basada en web de los enrutadores Cisco Small Business RV Series.&#xa0;Un atacante remoto podría ejecutar comandos arbitrarios u omitir la autenticación y cargar archivos en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.03",
            "matchCriteriaId" : "BA1708A1-3D6B-4257-B32B-25A595EAB3B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1DC21D-8C6C-4CE7-B5CB-8646659B02BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv160w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.03",
            "matchCriteriaId" : "22C0BE4B-1145-4497-8E4D-8901281C4A4B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv160w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B7E3792-5D0F-4CCC-874D-512059CA8E12"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.03",
            "matchCriteriaId" : "297BBB67-862F-4640-89A1-247B6BC51F37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FFC99C1-954E-408B-8A08-C79941350F05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.03",
            "matchCriteriaId" : "7158A7E3-1C93-46FA-B5BC-47A3049F0641"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62A6E2F-FA43-4F40-A684-651FEDAC2114"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv260w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.01.03",
            "matchCriteriaId" : "A2B47064-2877-44C8-BC28-F1678A5F9566"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv260w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95737F9F-1779-4AAB-875E-2CD586A8B780"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "DB20DECC-5D66-4E87-8E19-AFCE0EC2538B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "F1D3E083-7BC2-485B-82CD-CE3DE176A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "504FBEF9-DCC1-4EE2-9F04-14E38141A03C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "9C7C3346-DD1A-41CC-BB4D-F42CCE75A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/39",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1473",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.780",
      "lastModified" : "2024-11-21T05:44:26.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities exist in the web-based management interface of Cisco Small Business RV Series Routers. A remote attacker could execute arbitrary commands or bypass authentication and upload files on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Se presentan múltiples vulnerabilidades en la interfaz de administración basada en web de los enrutadores Cisco Small Business RV Series.&#xa0;Un atacante remoto podría ejecutar comandos arbitrarios u omitir la autenticación y cargar archivos en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "DB20DECC-5D66-4E87-8E19-AFCE0EC2538B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "F1D3E083-7BC2-485B-82CD-CE3DE176A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "504FBEF9-DCC1-4EE2-9F04-14E38141A03C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "9C7C3346-DD1A-41CC-BB4D-F42CCE75A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/39",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162238/Cisco-RV-Authentication-Bypass-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-rv-bypass-inject-Rbhgvfdx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1474",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.843",
      "lastModified" : "2024-11-21T05:44:26.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la funcionalidad Admin audit log export y la funcionalidad Scheduled Reports de Cisco Umbrella, podrían permitir a un atacante remoto autenticado llevar a cabo ataques de inyección de fórmulas y enlaces en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:umbrella:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCF83B-9E18-4B12-BCE1-85F5E8284374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1475",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:13.967",
      "lastModified" : "2024-11-21T05:44:26.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the Admin audit log export feature and Scheduled Reports feature of Cisco Umbrella could allow an authenticated, remote attacker to perform formula and link injection attacks on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la funcionalidad Admin audit log export y la funcionalidad de Scheduled Reports de Cisco Umbrella, podrían permitir a un atacante remoto autenticado llevar a cabo ataques de inyección de fórmulas y enlaces en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:umbrella:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50FCF83B-9E18-4B12-BCE1-85F5E8284374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-umbrella-inject-gbZGHP5T",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1479",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:14.047",
      "lastModified" : "2024-11-21T05:44:27.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o permitir a un atacante local autenticado alcanzar privilegios escalados en un sistema afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.4",
            "matchCriteriaId" : "48895B9B-8FB9-484F-A942-832A570DE817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.3",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "25AB8470-2A8E-40C1-8193-0FF90ED2E278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1480",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:14.123",
      "lastModified" : "2024-11-21T05:44:27.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or allow an authenticated, local attacker to gain escalated privileges on an affected system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o permitir a un atacante local autenticado alcanzar privilegios escalados en un sistema afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.4",
            "matchCriteriaId" : "48895B9B-8FB9-484F-A942-832A570DE817"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.3",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "25AB8470-2A8E-40C1-8193-0FF90ED2E278"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy",
        "source" : "psirt@cisco.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-YuTVWqy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1485",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T04:15:14.203",
      "lastModified" : "2024-11-21T05:44:27.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges on the underlying Linux operating system (OS) of an affected device. This vulnerability is due to insufficient input validation of commands that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input to an affected command. A successful exploit could allow the attacker to execute commands on the underlying Linux OS with root privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del software Cisco IOS XR, podría permitir a un atacante local autenticado inyectar comandos arbitrarios que son ejecutados con privilegios root en el sistema operativo (SO) subyacente de Linux de un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de entrada de los comandos suministrados por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo y enviar una entrada diseñada a un comando afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos en el sistema operativo Linux subyacente con privilegios root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xr:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "7.3.1",
            "matchCriteriaId" : "4EAA2362-537E-44D4-A6C2-EB070F95EE15"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cmdinj-vsKGherc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-xr-cmdinj-vsKGherc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28174",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-08T04:15:14.373",
      "lastModified" : "2024-11-21T05:59:15.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mitake smart stock selection system contains a broken authentication vulnerability. By manipulating the parameters in the URL, remote attackers can gain the privileged permissions to access transaction record, and fraudulent trading without login."
      }, {
        "lang" : "es",
        "value" : "Un sistema inteligente de selección de acciones de Mitake contiene una vulnerabilidad de autenticación rota.&#xa0;Al manipular los parámetros en la URL, unos atacantes remotos pueden conseguir permisos privilegiados para acceder al registro de transacciones y al comercio fraudulento sin iniciar sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mitake:smart_stock_selection:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020-06-23",
            "matchCriteriaId" : "28E447A7-41E9-46B1-A9DA-34CA5E638591"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4625-4ccc6-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4625-4ccc6-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1252",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T05:15:12.237",
      "lastModified" : "2024-11-21T05:43:55.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Excel XLM macro parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper error handling that may result in an infinite loop. An attacker could exploit this vulnerability by sending a crafted Excel file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process hang, resulting in a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo de análisis de macros Excel XLM en Clam AntiVirus (ClamAV) versiones 0.103.0 y 0.103.1 del software, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a un manejo inapropiado de errores que puede resultar en un bucle infinito.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un archivo de Excel diseñado a un dispositivo afectado.&#xa0;Una explotación podría permitir al atacante causar que el proceso de escaneo de ClamAV se bloquee, resultando en una condición de denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.103.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C776BACB-EE82-4BE9-86C9-C20732E42E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.103.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E389C4-E99E-464E-9466-02204167FEB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1404",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T05:15:13.267",
      "lastModified" : "2024-11-21T05:44:16.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the PDF parsing module in Clam AntiVirus (ClamAV) Software versions 0.103.0 and 0.103.1 could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper buffer size tracking that may result in a heap buffer over-read. An attacker could exploit this vulnerability by sending a crafted PDF file to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process to crash, resulting in a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo de análisis de PDF en el Software Clam AntiVirus (ClamAV) versiones 0.103.0 y 0.103.1, podría permitir a un atacante remoto no autenticado causar una condición de denegación de servicio en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a un seguimiento inapropiado del tamaño del búfer que puede resultar en una lectura excesiva del búfer de la pila.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un archivo PDF diseñado a un dispositivo afectado.&#xa0;Una explotación podría permitir al atacante causar que el proceso de escaneo de ClamAV se bloquee, resultando en una condición de denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.103.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C776BACB-EE82-4BE9-86C9-C20732E42E7F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:0.103.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1E389C4-E99E-464E-9466-02204167FEB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1405",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-08T05:15:13.347",
      "lastModified" : "2024-11-21T05:44:16.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the email parsing module in Clam AntiVirus (ClamAV) Software version 0.103.1 and all prior versions could allow an unauthenticated, remote attacker to cause a denial of service condition on an affected device. The vulnerability is due to improper variable initialization that may result in an NULL pointer read. An attacker could exploit this vulnerability by sending a crafted email to an affected device. An exploit could allow the attacker to cause the ClamAV scanning process crash, resulting in a denial of service condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el módulo de análisis de correo electrónico del software Clam AntiVirus (ClamAV) versión 0.103.1 y todas las versiones anteriores podría permitir a un atacante remoto no autenticado provocar una condición de denegación de servicio en un dispositivo afectado. La vulnerabilidad se debe a una inicialización incorrecta de las variables que puede dar lugar a la lectura de un puntero NULL. Un atacante podría explotar esta vulnerabilidad enviando un correo electrónico manipulado a un dispositivo afectado. Una explotación podría permitir al atacante causar la caída del proceso de escaneo de ClamaV, resultando en una condición de denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:clamav:clamav:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.103.1",
            "matchCriteriaId" : "22A4DD0B-BD39-4BC7-BB23-114AFC9C2FAD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00012.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-07",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.clamav.net/2021/04/clamav-01032-security-patch-release.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00012.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28685",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T11:15:12.820",
      "lastModified" : "2024-11-21T06:00:08.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to interact directly with physical memory (by calling one of several driver routines that map physical memory into the virtual address space of the calling process) and to interact with MSR registers. This could enable low-privileged users to achieve NT AUTHORITY\\SYSTEM privileges via a DeviceIoControl."
      }, {
        "lang" : "es",
        "value" : "Los archivos AsIO2_64.sys y AsIO2_32.sys en ASUS GPUTweak II versiones anteriores a 2.3.0.3, permiten a usuarios pocos privilegiados interactuar directamente con la memoria física (llamando a una de varias rutinas de controlador que mapean la memoria física en el espacio de direcciones virtuales del proceso de llamada) y para interactuar con los registros MSR.&#xa0;Esto podría permitir a usuarios poco privilegiado lograr privilegios NT AUTHORITY\\SYSTEM por medio de la función DeviceIoControl"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:gputweak_ii:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.3",
            "matchCriteriaId" : "F9E58660-9DDF-4E55-BF18-445AB2CDA2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28686",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T11:15:12.883",
      "lastModified" : "2024-11-21T06:00:08.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AsIO2_64.sys and AsIO2_32.sys in ASUS GPUTweak II before 2.3.0.3 allow low-privileged users to trigger a stack-based buffer overflow. This could enable low-privileged users to achieve Denial of Service via a DeviceIoControl."
      }, {
        "lang" : "es",
        "value" : "Los archivos AsIO2_64.sys y AsIO2_32.sys en ASUS GPUTweak II versiones anteriores a 2.3.0.3, permiten a usuarios pocos privilegiados desencadenar un desbordamiento del búfer en la región stack de la memoria.&#xa0;Esto podría permitir a usuarios pocos privilegiados lograr una Denegación de Servicio por medio de la función DeviceIoControl"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:asus:gputweak_ii:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0.3",
            "matchCriteriaId" : "F9E58660-9DDF-4E55-BF18-445AB2CDA2EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/DStraghkov/fba4994ac4bb3a6e2940b21743563df0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/Static_WebPage/ASUS-Product-Security-Advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3012",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T11:15:12.947",
      "lastModified" : "2024-11-21T06:20:44.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability in the Document Link of documents in ESRI Enterprise before 10.9 allows remote authenticated users to inject arbitrary JavaScript code via a malicious HTML attribute such as onerror (in the URL field of the Parameters tab)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el Document Link de los documentos en ESRI Enterprise anterior a la versión 10.9 permite a los usuarios remotos autentificados inyectar código JavaScript arbitrario a través de un atributo HTML malicioso como onerror (en el campo URL de la pestaña Parámetros)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_enterprise:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.9",
            "matchCriteriaId" : "E020DEA7-F534-4CA9-94EB-6819D1F342ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.bssi.fr/cve-2021-3012-vulnerability-allowing-remote-html-javascript-code-injection-on-esri-arcgis-products/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.bssi.fr/cve-2021-3012-vulnerability-allowing-remote-html-javascript-code-injection-on-esri-arcgis-products/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30111",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T12:15:12.540",
      "lastModified" : "2024-11-21T06:03:19.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in the event name and description fields. An attack can inject a JavaScript code that will be stored in the page. If any visitor sees the events, then the payload will be executed."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo XSS almacenado en Web-School ERP versión V 5.0 por medio de (Add Events) en los campos event name y description.&#xa0;Un ataque puede inyectar un código JavaScript que será almacenado en la página.&#xa0;Si algún visitante visualiza los eventos, entonces la carga útil será ejecutada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-school:enterprise_resource_planning:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0691C2C-3D8B-4203-986C-755B4F6C54C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web-school.in",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web-school.in",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T12:15:12.587",
      "lastModified" : "2024-11-21T06:03:19.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a student_leave_application request through module/core/studentleaveapplication/create. The application fails to validate the CSRF token for a POST request using Guardian privilege."
      }, {
        "lang" : "es",
        "value" : "Web-School ERP versión V 5.0, contiene una vulnerabilidad de tipo cross-site request forgery (CSRF) que permite a un atacante remoto crear una petición student_leave_application por medio de module/core/studentleaveapplication/create.&#xa0;La aplicación no puede comprobar el token CSRF para una petición POST usando el privilegio Guardian"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-school:enterprise_resource_planning:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0691C2C-3D8B-4203-986C-755B4F6C54C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web-school.in",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web-school.in",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T12:15:12.650",
      "lastModified" : "2024-11-21T06:03:19.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A blind XSS vulnerability exists in Web-School ERP V 5.0 via (Add Events) in event name and description fields. An attacker can inject a JavaScript code that will be stored in the page. If any visitor sees the event, then the payload will be executed and sends the victim's information to the attacker website."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo XSS ciega en Web-School ERP Versión V 5.0 por medio de (Add Events) en los campos event name y description.&#xa0;Un atacante puede inyectar un código JavaScript que será almacenado en la página.&#xa0;Si algún visitante visualiza el evento, la carga útil será ejecutado y enviará la información de la víctima al sitio web del atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-school:enterprise_resource_planning:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0691C2C-3D8B-4203-986C-755B4F6C54C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web-school.in",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web-school.in",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T12:15:12.727",
      "lastModified" : "2024-11-21T06:03:19.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Web-School ERP V 5.0 contains a cross-site request forgery (CSRF) vulnerability that allows a remote attacker to create a voucher payment request through module/accounting/voucher/create. The application fails to validate the CSRF token for a POST request using admin privilege."
      }, {
        "lang" : "es",
        "value" : "Web-School ERP versión V 5.0, contiene una vulnerabilidad de tipo cross-site request forgery (CSRF) que permite a un atacante remoto crear una petición de pago de vale por medio de module/accounting/voucher/create.&#xa0;La aplicación no puede comprobar el token CSRF para una petición POST usando privilegios de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:web-school:enterprise_resource_planning:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0691C2C-3D8B-4203-986C-755B4F6C54C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://web-school.in",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "http://web-school.in",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/0xrayan/CVEs/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://web-school.in/try-demo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20480",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-08T13:15:13.787",
      "lastModified" : "2024-11-21T05:46:38.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, and 8.5 is vulnerable to server-side request forgery (SSRF). By sending a specially crafted request, a remote authenticated attacker could exploit this vulnerability to obtain sensitive data. IBM X-Force ID: 197502."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versiones 7.0, 8.0 y 8.5, es vulnerable a un ataque de tipo server-side request forgery (SSRF).&#xa0;Al enviar una petición especialmente diseñada, un atacante autenticado remotamente podría explotar esta vulnerabilidad para obtener datos confidenciales.&#xa0;IBM X-Force ID: 197502"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndIncluding" : "7.0.0.45",
            "matchCriteriaId" : "9FBC4C46-A044-4A5C-80EF-2BCBF9351CEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.15",
            "matchCriteriaId" : "E596AE8A-34AD-43F3-A97E-DC79CE517C8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.19",
            "matchCriteriaId" : "F421D853-4015-4375-AD38-E2E95CA51676"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C684FC45-C9BA-4EF0-BD06-BB289450DD21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:z\\/os:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E97A964-6F9E-4C87-9B90-21AE2C1DF52F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "F5027746-8216-452D-83C5-2F8E9546F2A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/197502",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6441063",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/197502",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6441063",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28924",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T13:15:14.287",
      "lastModified" : "2024-11-21T06:00:23.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Self Authenticated XSS in Nagios Network Analyzer before 2.4.2 via the nagiosna/groups/queries page."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS auto-autenticado en Nagios Network Analyzer versiones anteriores a 2.4.2 por medio de la página nagiosna/groups/queries"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:network_analyzer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "DA4CD9F7-496F-4F72-86DE-E6F9004F5632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nagios.com/downloads/nagios-network-analyzer/change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nagios.com/downloads/nagios-network-analyzer/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28925",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T13:15:14.410",
      "lastModified" : "2024-11-21T06:00:24.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection vulnerability in Nagios Network Analyzer before 2.4.3 via the o[col] parameter to api/checks/read/."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en Nagios Network Analyzer versiones anteriores a 2.4.3, por medio del parámetro o[col] en api/checks/read/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nagios:network_analyzer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.3",
            "matchCriteriaId" : "DA4CD9F7-496F-4F72-86DE-E6F9004F5632"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nagios.com/downloads/nagios-network-analyzer/change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://medium.com/stolabs/issues-found-on-nagios-network-analyzer-2-4-2-50ec4ffb5e25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nagios.com/downloads/nagios-network-analyzer/change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30462",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T14:15:14.213",
      "lastModified" : "2024-11-21T06:03:58.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts."
      }, {
        "lang" : "es",
        "value" : "VestaCP versiones hasta 0.9.8-24, permite al usuario administrador escalar privilegios a root porque la configuración de Sudo no requiere una contraseña para ejecutar los scripts /usr/local/vesta/bin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vestacp:vesta_control_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8-24",
            "matchCriteriaId" : "6FC8AD6E-32D5-4132-91AA-DDCFF00F5A2B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30463",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T14:15:14.277",
      "lastModified" : "2024-11-21T06:03:58.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VestaCP through 0.9.8-24 allows attackers to gain privileges by creating symlinks to files for which they lack permissions. After reading the RKEY value from user.conf under the /usr/local/vesta/data/users/admin directory, the admin password can be changed via a /reset/?action=confirm&user=admin&code= URI. This occurs because chmod is used unsafely."
      }, {
        "lang" : "es",
        "value" : "VestaCP versiones hasta 0.9.8-24, permite a atacantes alcanzar privilegios al crear enlaces simbólicos en archivos para los que carecen de permisos.&#xa0;Después de leer el valor RKEY de user.conf en el directorio /usr/local/vesta/data/users/admin, la contraseña de administrador puede ser cambiada por medio del URI /reset/?action=confirm&amp;user=admin&amp;code=.&#xa0;Esto ocurre porque chmod es usado de manera no segura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vestacp:control_panel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.8-24",
            "matchCriteriaId" : "FCD5A957-DD66-422B-8F6B-3BF3D20046AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-vestacp-lpe-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27522",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T16:15:13.473",
      "lastModified" : "2024-11-21T05:58:09.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function. By modifying the initial letter of the key of a user cookie, the key of the administrator cookie can be obtained."
      }, {
        "lang" : "es",
        "value" : "Learnsite versión 1.2.5.0, contiene una vulnerabilidad de escalada de privilegios remota en el archivo /Manager/index.aspx por medio de la función JudgIsAdmin().&#xa0;Al modificar la letra inicial de la clave de una cookie de usuario, la clave de la cookie de administrador puede ser obtenida"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:learnsite_project:learnsite:1.2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4C0B60A-0321-4F55-8BED-B93126F34599"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WaterCountry/Learnsite/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WaterCountry/Learnsite/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27945",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T17:15:13.237",
      "lastModified" : "2024-11-21T05:58:53.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Squirro Insights Engine was affected by a Reflected Cross-Site Scripting (XSS) vulnerability affecting versions 2.0.0 up to and including 3.2.4. An attacker can use the vulnerability to inject malicious JavaScript code into the application, which will execute within the browser of any user who views the relevant application content. The attacker-supplied code can perform a wide variety of actions, such as stealing victims' session tokens or login credentials, performing arbitrary actions on their behalf, and logging their keystrokes."
      }, {
        "lang" : "es",
        "value" : "Squirro Insights Engine está afectado por una vulnerabilidad Cross-Site Scripting (XSS) Reflejado que afecta a versiones 2.0.0 hasta la 3.2.4 incluyéndola.&#xa0;Un atacante puede utilizar la vulnerabilidad para inyectar código JavaScript malicioso en la aplicación, que será ejecutado en el navegador de cualquier usuario que visualice el contenido relevante de la aplicación.&#xa0;El código suministrado por el atacante puede llevar a cabo una amplia variedad de acciones, tal y como robar los tokens de sesión de las víctimas o las credenciales de inicio de sesión, llevando a cabo acciones arbitrarias en su nombre y registrar sus pulsaciones de teclas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:squirro:squirro:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndIncluding" : "3.2.4",
            "matchCriteriaId" : "0F78C6B4-5F4F-428D-BF19-9DF7E3B8AE27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://squirro.atlassian.net/wiki/spaces/DOC/pages/2389672672/CVE-2021-27945+-+Cross-Site+Scripting",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://squirro.atlassian.net/wiki/spaces/DOC/pages/2389672672/CVE-2021-27945+-+Cross-Site+Scripting",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22115",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-04-08T18:15:13.837",
      "lastModified" : "2024-11-21T05:49:32.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller."
      }, {
        "lang" : "es",
        "value" : "Cloud Controller API versiones anteriores a 1.106.0, registran las credenciales del agente de servicio si el valor predeterminado del campo de configuración de registro de la base de datos es cambiado.&#xa0;La base de datos CAPI registra la contraseña del agente de servicio en texto plano cada vez que Cloud Controller ejecuta un trabajo para limpiar elementos huérfanos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:capi-release:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.106.0",
            "matchCriteriaId" : "345999BB-744C-4E4F-A8A8-BF97AF611E9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cloudfoundry:cf-deployment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.2.0",
            "matchCriteriaId" : "9C60678F-2179-45CF-B492-7E69D4F73423"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.cloudfoundry.org/blog/cve-2021-22115-capi-logs-service-broker-credentials/",
        "source" : "security@vmware.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cloudfoundry.org/blog/cve-2021-22115-capi-logs-service-broker-credentials/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22507",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-08T18:15:13.930",
      "lastModified" : "2024-11-21T05:50:14.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en Micro Focus Operations Bridge Manager afecta a las versiones 2019.05, 2019.11, 2020.05 y 2020.10.&#xa0;La vulnerabilidad podría permitir a atacantes remotos omitir la autenticación de usuarios y obtener acceso no autorizado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2019.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B2691B-246F-4305-943F-392062AD7C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2019.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD9DF2A-E5D3-48DD-8D0A-CD2C333E5354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2020.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F113173-2ECD-4FF6-A664-A9AABFD448CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_bridge_manager:2020.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FAFEEDA-F0AB-44F3-BDB9-3413FE9C53D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03793283",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03793283",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T18:15:14.073",
      "lastModified" : "2024-11-21T06:21:18.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Aprelium Abyss Web Server X1 2.12.1 and 2.14. A crafted HTTP request can lead to an out-of-bounds read that crashes the application."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Aprelium Abyss Web Server X1 versiones 2.12.1 y 2.14.&#xa0;Una petición HTTP diseñada puede conllevar a una lectura fuera de límites que bloquea la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aprelium:abyss_web_server_x1:2.12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3561396D-EEC5-4E2B-9D8D-ABB4BFFEB541"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aprelium:abyss_web_server_x1:2.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2432164E-C152-451B-9DC1-A59E636BA8EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jankopecky.net/index.php/2021/04/08/cve-2021-3328-abyss-web-server-remote-dos/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://jankopecky.net/index.php/2021/04/08/cve-2021-3328-abyss-web-server-remote-dos/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22312",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-04-08T19:15:12.727",
      "lastModified" : "2024-11-21T05:49:53.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad filtrado de memoria en algunos productos de Huawei.&#xa0;Un atacante remoto autenticado puede explotar esta vulnerabilidad mediante el envío de un mensaje específico al producto afectado.&#xa0;Debido a que no se libera la memoria asignada apropiadamente, una explotación con éxito puede causar que el servicio sea anormal.&#xa0;Los productos afectados incluyen algunas versiones de IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 y USG9500"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4E285D-09FB-4123-B46A-E27818ADFFDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A659FF-6019-48F8-BF60-D9FC79682435"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BAD43A3-730A-4ABC-89F0-DF93A06AA60F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA59256-7429-4D82-85FE-229EB033BDA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ngfw_module_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E728C122-5732-48FF-910C-3241EABA3DE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ngfw_module:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "547D4A9A-6B57-4BBA-9FFE-CF50B9AC5DF4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D8E3300-4E1E-433A-87D9-983F9C1CE2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D2F8A0A-AA2F-4144-923A-4B461B1A3E99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26CBEDA1-F057-489F-9255-C178272208CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EA34227-DB8B-48DF-8150-5C6815B49FA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322A0123-38E6-4D84-97F1-15F983DC3725"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C281B511-7A27-4FC6-9427-AE5AD7C302F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA2444C-EE5E-4DFC-A9F8-4744059EF7DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203B31A8-8C5C-42E8-8D4F-861F90FC16FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF816E5F-2082-4460-ABF9-93726C5879A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5DF54A7-6E29-4BB5-81FC-5EE75D892D12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DA1F00-D38C-40AF-A14D-D5EE0B0A3751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ED6E342-26E7-45DF-AC3F-EFEBAE3DDDF0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CA7BE1F-853E-4CBA-8A90-BAEA0BCC6A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80E521E-1BFB-405E-9F8E-4A0734731FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5226BD96-2B00-469B-AADD-CD0541610BBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DB3FD6B-0EE4-4467-8BAE-AE52FB2906EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:secospace_usg6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE67E91-7805-4CAA-89EE-9226CFBD731B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:secospace_usg6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE469876-F873-4705-9760-097AE840A818"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0BF5257-8CD1-4951-9C53-07B85D468F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E2CDEF7-F8C8-482E-B43D-DB3F0CE010F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A1EFB9D-5349-4EAF-9880-34F0D20011E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7369E3-5F3F-40D1-8690-95192131B683"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg9500_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADA71C5D-4B11-401D-AEC9-907204C21476"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B6064BB-5E62-4D70-B933-05B5426EEE9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42C2CAD1-543D-47E2-9B12-6B2E8538C8DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29134400-23E7-4888-B027-A29167E95693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CE35922-612B-437B-8044-56FA301E73C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848014B8-8D79-48C3-8ED2-EA98378428F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6300_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E86EACC-53A8-4216-80D4-BD1BB215E151"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E054182-CE33-45E3-8595-159A75BA5162"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FE889E-58A9-4D93-8054-7B845C44BDA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2F5B2E-5233-4B9F-BA85-0D369C1A8805"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73B19CF4-92DF-4BB5-B9C7-76901EC5673C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC26B79E-CBCD-4D93-A552-1A20B155F0FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6600_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46A3FD77-200C-40D7-A31E-6D964F9A375E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8CA649-7AE1-497C-869B-B4DD315F342C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c30spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "024AA4AA-8A09-4E0B-81A0-76E2960A15FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c30spc600:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FB28A28-8766-4A28-B438-117944ABD294"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r001c60spc500:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C38F1E7A-0347-4E45-A0B6-CB8CE0D8A07E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc100:*:*:*:*:*:*:*",
            "matchCriteriaId" : "954A1F94-2442-4064-9DC5-14EFC2FA62F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6800_firmware:v500r005c00spc200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB70C7-8E9A-4538-A4FF-6FA820D895CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875441DD-575F-4F4D-A6BD-23C38641D330"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:usg6000e_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261DD2F0-5503-4939-9761-DA1219DD5633"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:usg6000e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "821F3BBF-CFD5-41E5-9D30-9FEBA1EE4429"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:nip6000e_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F666919C-2378-4D61-AF77-428F689E8071"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:nip6000e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7F76C1B-1214-4A55-926C-AB0AF7333481"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:ips6000e_firmware:v600r006c00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D1B96D-834B-4B64-B026-AB2F156C8A67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:ips6000e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609D868B-E091-49BD-A632-54DB6BBC9092"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210210-01-memoryleak-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3146",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T20:15:13.897",
      "lastModified" : "2024-11-21T06:20:59.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Dolby Audio X2 (DAX2) API service before 0.8.8.90 on Windows allows local users to gain privileges."
      }, {
        "lang" : "es",
        "value" : "El servicio de API Dolby Audio X2 (DAX2) versiones anteriores a 0.8.8.90 en Windows permite a los usuarios locales obtener privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dolby:audio_x2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.8.90",
            "matchCriteriaId" : "3EC4CE97-1834-4AAD-B6CE-C6833060ADB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2010:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "3E5EA9AD-1E84-4AB5-A1EF-3B9F2AC84755"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EF8DB7-D5A0-47A8-9F69-7D0259490D69"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "882CDAE9-EC03-48E6-814C-50236B8F0B93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E0021F-ABB9-4FB4-BC1C-5098F2E66371"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_c\\+\\+:2010:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8510550C-3A26-4BB3-A5F3-11D591DD0CE6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2005:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9271AF1C-9B1C-4ADB-9F54-E63EBA2910F9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2008:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "9AB2C8C4-7E86-4736-9CE4-2E65E4EDBF02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2010:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4F4DFC93-9533-4893-B634-0551CDE7D252"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_.net:2003:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "85959AEB-2FE5-4A25-B298-F8223CE260D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://professional.dolby.com/siteassets/pdfs/dolby-dax2-security-advisory-2021-04-07.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-08T21:15:13.580",
      "lastModified" : "2024-11-21T06:00:47.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c."
      }, {
        "lang" : "es",
        "value" : "Los compiladores BPF JIT en el kernel de Linux hasta la versión 5.11.12 tienen un cálculo incorrecto de los desplazamientos de rama, lo que les permite ejecutar código arbitrario dentro del contexto del kernel. Esto afecta a arch/x86/net/bpf_jit_comp.c y arch/x86/net/bpf_jit_comp32.c"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.4.266",
            "matchCriteriaId" : "6F0B4CD2-843F-4223-BA35-8318A3D3253F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.9.266",
            "matchCriteriaId" : "16572D0B-0337-4BCF-81DB-F251AAE6C779"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.230",
            "matchCriteriaId" : "F1143099-E2D5-42BA-AF09-D1CB970AC630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.186",
            "matchCriteriaId" : "BEED542C-4ECF-48AA-88DE-ABEFDB3D7549"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.111",
            "matchCriteriaId" : "CFD25036-0DB2-4747-A8FA-D9F2246990AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.29",
            "matchCriteriaId" : "1A300DBE-CD39-408E-93E2-FF38D5D69519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.13",
            "matchCriteriaId" : "29CE7172-145D-469D-9272-813E0D6FEC7E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=26f55a59dc65ff77cd1c4b37991e26497fc68049",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4d4d456436bfb2fe412ee2cd489f7658449b098",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://news.ycombinator.com/item?id=26757760",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0006/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/08/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=26f55a59dc65ff77cd1c4b37991e26497fc68049",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=e4d4d456436bfb2fe412ee2cd489f7658449b098",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W5YFGIIF24475A2LNW3UWHW2SNCS3G7M/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://news.ycombinator.com/item?id=26757760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22510",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-08T22:15:13.400",
      "lastModified" : "2024-11-21T05:50:15.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Reflected XSS vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects all version 6.7 and earlier versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS reflejado en el plugin de Micro Focus Application Automation Tools Plugin - Jenkins.&#xa0;La vulnerabilidad afecta a todas las versiones 6.7 y anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "C56414EA-2516-44ED-ADAD-4D2368189712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22511",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-08T22:15:13.463",
      "lastModified" : "2024-11-21T05:50:15.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Certificate Validation vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow unconditionally disabling of SSL/TLS certificates."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación inapropiada de certificado en el plugin de Micro Focus Application Automation Tools Plugin - Jenkins.&#xa0;La vulnerabilidad afecta a versión 6.7 y versiones anteriores.&#xa0;La vulnerabilidad podría permitir la desactivación incondicional de certificados SSL/TLS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "C56414EA-2516-44ED-ADAD-4D2368189712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2176",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2176",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22512",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-08T22:15:13.540",
      "lastModified" : "2024-11-21T05:50:15.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-Site Request Forgery (CSRF) vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow form validation without permission checks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-Site Request Forgery (CSRF) en el plugin de Micro Focus Application Automation Tools Plugin - Jenkins.&#xa0;La vulnerabilidad afecta a versión 6.7 y versiones anteriores.&#xa0;La vulnerabilidad podría permitir una comprobación de formularios sin comprobaciones de permisos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "C56414EA-2516-44ED-ADAD-4D2368189712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22513",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-08T22:15:13.603",
      "lastModified" : "2024-11-21T05:50:15.480",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing Authorization vulnerability in Micro Focus Application Automation Tools Plugin - Jenkins plugin. The vulnerability affects version 6.7 and earlier versions. The vulnerability could allow access without permission checks."
      }, {
        "lang" : "es",
        "value" : "Una falta de una vulnerabilidad de autorización en el plugin de Micro Focus Application Automation Tools Plugin - Jenkins.&#xa0;La vulnerabilidad afecta a versión 6.7 y versiones anteriores.&#xa0;La vulnerabilidad podría permitir el acceso sin comprobación de permisos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@opentext.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_automation_tools:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "6.7",
            "matchCriteriaId" : "C56414EA-2516-44ED-ADAD-4D2368189712"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-07/#SECURITY-2132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3413",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-08T23:15:12.503",
      "lastModified" : "2024-11-21T06:21:26.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Red Hat Satellite in tfm-rubygem-foreman_azure_rm in versions before 2.2.0. A credential leak was identified which will expose Azure Resource Manager's secret key through JSON of the API output. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Red Hat Satellite en tfm-rubygem-foreman_azure_rm en versiones anteriores a 2.2.0.&#xa0;Se identificó una filtración de credenciales que expondrá la clave secreta de Azure Resource Manager mediante la salida JSON de la API.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman_azurerm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "5FD05578-B621-4897-8171-903F95728DB5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:satellite:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "848C92A9-0677-442B-8D52-A448F2019903"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1930352",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1930352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3448",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-08T23:15:12.597",
      "lastModified" : "2025-12-03T01:15:46.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in dnsmasq in versions before 2.85. When configured to use a specific server for a given network interface, dnsmasq uses a fixed port while forwarding queries. An attacker on the network, able to find the outgoing port used by dnsmasq, only needs to guess the random transmission ID to forge a reply and get it accepted by dnsmasq. This flaw makes a DNS Cache Poisoning attack much easier. The highest threat from this vulnerability is to data integrity."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en dnsmasq en versiones anteriores a 2.85.&#xa0;Cuando es configurado para usar un servidor específico para una interfaz de red determinada, dnsmasq usa un puerto fijado para enviar consultas.&#xa0;Un atacante en la red, capaz de encontrar el puerto de salida usado por dnsmasq, solo necesita adivinar la ID de transmisión aleatoria para falsificar una respuesta y lograr que dnsmasq la acepte.&#xa0;Este fallo hace que un ataque de envenenamiento de caché de DNS sea mucho más fácil.&#xa0;La mayor amenaza de esta vulnerabilidad es la integridad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-358"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thekelleys:dnsmasq:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.85",
            "matchCriteriaId" : "0E5A267E-B715-4488-ADF9-B29207854BDB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_network_function_cloud_native_environment:1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D423B62-8EFE-4EFD-A986-5F5ECE5B892F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939368",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-20",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1939368",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CVTJUOFFFHINLKWAOC2ZSC5MOPD4SJ24/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHG7GWSQWKF7JXIMLOGJBKZWBB4VIAJ7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GHURNEHHUBSW45KMIZ4FNBCSUPWPGV5V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3482",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-08T23:15:12.677",
      "lastModified" : "2024-11-21T06:21:38.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in Exiv2 in versions before and including 0.27.4-RC1. Improper input validation of the rawData.size property in Jp2Image::readMetadata() in jp2image.cpp can lead to a heap-based buffer overflow via a crafted JPG image containing malicious EXIF data."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Exiv2 en versiones anteriores e incluyendo 0.27.4-RC1.&#xa0;Una comprobación inapropiada de la entrada de la propiedad rawData.size en la función Jp2Image::readMetadata() en el archivo jp2image.cpp puede conllevar a un desbordamiento del búfer en la región stack de la memoria por medio de una imagen JPG diseñada que contiene datos EXIF ??maliciosos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.27.3",
            "matchCriteriaId" : "2159AB56-2DD0-4FF3-9D61-0C35D1DCB850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:0.27.4:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "302DED68-1E76-40FC-A147-5A3C2FDD5345"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946314",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4958",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T07:15:15.887",
      "lastModified" : "2024-11-21T06:03:24.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.13 and 1.32.x through 1.35.x before 1.35.2. When using the MediaWiki API to \"protect\" a page, a user is currently able to protect to a higher level than they currently have permissions for."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.13 y versiones 1.32.x hasta 1.35.x versiones anteriores a 1.35.2.&#xa0;Cuando es usada la API de MediaWiki para \"proteger\" una página, un usuario actualmente puede proteger a un nivel más alto del que actualmente posee permisos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.13",
            "matchCriteriaId" : "130F776B-EE19-44AF-A088-072E5B0EDB1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T270713",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T270713",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T07:15:16.167",
      "lastModified" : "2024-11-21T06:03:24.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.12 y versiones 1.32.x hasta 1.35.x versiones anteriores a 1.35.2.&#xa0;La función ContentModelChange no comprueba si un usuario presenta permisos correctos para crear y ajustar el modelo de contenido de una página inexistente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.12",
            "matchCriteriaId" : "3291BAE5-6903-463D-9750-7D0B6FAD911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T270988",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T270988",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T07:15:16.217",
      "lastModified" : "2024-11-21T06:03:24.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Special:Contributions can leak that a \"hidden\" user exists."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.12 y 1.32.xa 1.35.x versiones anteriores a 1.35.2.&#xa0;Special:Contributions pueden filtrar que un usuario \"hidden\" exista"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.12",
            "matchCriteriaId" : "3291BAE5-6903-463D-9750-7D0B6FAD911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T276306",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T276306",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T07:15:16.277",
      "lastModified" : "2024-11-21T06:03:25.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. Users can bypass intended restrictions on deleting pages in certain \"fast double move\" situations. MovePage::isValidMoveTarget() uses FOR UPDATE, but it's only called if Title::getArticleID() returns non-zero with no special flags. Next, MovePage::moveToInternal() will delete the page if getArticleID(READ_LATEST) is non-zero. Therefore, if the page is missing in the replica DB, isValidMove() will return true, and then moveToInternal() will unconditionally delete the page if it can be found in the master."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MediaWiki versiones anteriores a 1.31.12 y versiones 1.32.x hasta 1.35.x versiones anteriores a 1.35.2.&#xa0;Unos usuarios pueden omitir unas restricciones previstas sobre la eliminación de páginas en determinadas situaciones de \"fast double move\".&#xa0;La función MovePage::isValidMoveTarget() usa FOR UPDATE, pero solo es llamada si la función Title::getArticleID() devuelve un valor distinto de cero sin indicadores especiales.&#xa0;A continuación, MovePage::moveToInternal() eliminará la página si getArticleID(READ_LATEST) no es cero.&#xa0;Por lo tanto, si la página falta en la réplica de la base de datos, la función isValidMove() devolverá verdadero, y luego moveToInternal() eliminará incondicionalmente la página si se puede encontrar en el maestro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.31.12",
            "matchCriteriaId" : "3291BAE5-6903-463D-9750-7D0B6FAD911A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.32.0",
            "versionEndExcluding" : "1.35.2",
            "matchCriteriaId" : "16A05863-89D9-435E-B92D-5FC6396C5B3D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://phabricator.wikimedia.org/T272386",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/26UJGHF7LJDOCQN6A3Z4PM7PYRKENJHE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2OMSV7B2TCFBOCICN3B4SMQP5HVRJQIT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://phabricator.wikimedia.org/T272386",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30458",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T07:15:16.340",
      "lastModified" : "2024-11-21T06:03:57.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Wikimedia Parsoid before 0.11.1 and 0.12.x before 0.12.2. An attacker can send crafted wikitext that Utils/WTUtils.php will transform by using a <meta> tag, bypassing sanitization steps, and potentially allowing for XSS."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Wikimedia Parsoid versiones anteriores a 0.11.1 y versiones 0.12.x anteriores a 0.12.2.&#xa0;Un atacante puede enviar wikitexto diseñado que el archivo Utils/WTUtils.php transformará mediante el uso de una etiqueta (meta), omitiendo los pasos de saneamiento y potencialmente permitiendo un ataque de tipo XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:parsoid:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.11.1",
            "matchCriteriaId" : "408D1321-296E-4CB8-A98C-12CE8392C0A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wikimedia:parsoid:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.12.0",
            "versionEndExcluding" : "0.12.2",
            "matchCriteriaId" : "C593714B-0C34-47D4-A4B0-F8FDA2B31EDF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://phabricator.wikimedia.org/T279451",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mediawiki.org/wiki/Parsoid",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T279451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mediawiki.org/wiki/Parsoid",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25326",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T13:15:13.097",
      "lastModified" : "2024-11-21T05:54:45.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skyworth Digital Technology RN510 V.3.1.0.4 is affected by an incorrect access control vulnerability in/cgi-bin/test_version.asp. If Wi-Fi is connected but an unauthenticated user visits a URL, the SSID password and web UI password may be disclosed."
      }, {
        "lang" : "es",
        "value" : "Skyworth Digital Technology RN510 versión V.3.1.0.4, está afectada por una vulnerabilidad de control de acceso incorrecta en el archivo /cgi-bin/test_version.asp.&#xa0;Si el Wi-Fi está conectado pero un usuario no autenticado visita una URL, es posible que se revelen la contraseña SSID y la contraseña de la Interfaz de Usuario web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:skyworthdigital:rn510_firmware:3.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A9D84F-212F-4B0A-B81E-BFA5115B4803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:skyworthdigital:rn510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013D2940-D03A-4AEB-9011-3808E2E0D666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162455/Shenzhen-Skyworth-RN510-Information-Disclosure.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s3curityb3ast.github.io/KSA-Dev-013.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162455/Shenzhen-Skyworth-RN510-Information-Disclosure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s3curityb3ast.github.io/KSA-Dev-013.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T13:15:13.160",
      "lastModified" : "2024-11-21T05:54:45.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skyworth Digital Technology RN510 V.3.1.0.4 contains a cross-site request forgery (CSRF) vulnerability in /cgi-bin/net-routeadd.asp and /cgi-bin/sec-urlfilter.asp. Missing CSRF protection in devices can lead to XSRF, as the above pages are vulnerable to cross-site scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Skyworth Digital Technology RN510 versión V.3.1.0.4, contiene una vulnerabilidad de tipo cross-site request forgery (CSRF) en los archivos /cgi-bin/net-routeadd.asp y /cgi-bin/sec-urlfilter.asp.&#xa0;Una falta de protección de tipo CSRF en los dispositivos puede conllevar a un ataque de tipo XSRF, ya que las páginas anteriores son vulnerables a un ataque de tipo cross-site scripting (XSS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:skyworthdigital:rn510_firmware:3.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A9D84F-212F-4B0A-B81E-BFA5115B4803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:skyworthdigital:rn510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013D2940-D03A-4AEB-9011-3808E2E0D666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/6",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s3curityb3ast.github.io/KSA-Dev-012.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162454/Shenzhen-Skyworth-RN510-Cross-Site-Request-Forgery-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s3curityb3ast.github.io/KSA-Dev-012.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25328",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T13:15:13.223",
      "lastModified" : "2024-11-21T05:54:45.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service (DoS) or possible code execution on the device."
      }, {
        "lang" : "es",
        "value" : "Skyworth Digital Technology RN510 versión V.3.1.0.4 RN510 versión V.3.1.0.4, contiene una vulnerabilidad de desbordamiento del búfer en el archivo /cgi-bin/app-staticIP.asp.&#xa0;Un atacante autenticado puede enviar una petición especialmente diseñada al endpoint que puede conllevar a una denegación de servicio (DoS) o a una posible ejecución de código en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:skyworthdigital:rn510_firmware:3.1.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64A9D84F-212F-4B0A-B81E-BFA5115B4803"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:skyworthdigital:rn510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "013D2940-D03A-4AEB-9011-3808E2E0D666"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162450/Shenzhen-Skyworth-RN510-Buffer-Overflow.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s3curityb3ast.github.io/KSA-Dev-011.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162450/Shenzhen-Skyworth-RN510-Buffer-Overflow.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/May/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://s3curityb3ast.github.io/KSA-Dev-011.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29221",
      "sourceIdentifier" : "security@deepsurface.com",
      "published" : "2021-04-09T14:15:12.910",
      "lastModified" : "2024-11-21T06:00:51.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with \"erlsrv.exe\" to execute arbitrary code as Local System. This can occur only under specific conditions on Windows with unsafe filesystem permissions."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de escalada de privilegios local en Erlang/OTP anterior a versión 23.2.3.&#xa0;Al agregar archivos a un directorio de instalación existente, un atacante local podría secuestrar cuentas de otros usuarios que ejecutan programas Erlang o posiblemente coaccionar un servicio que se ejecuta con \"erlsrv.exe\" para ejecutar código arbitrario como Local System.&#xa0;Esto puede ocurrir solo bajo condiciones específicas en Windows con permisos de sistema de archivos no seguros"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 1.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "23.2.3",
            "matchCriteriaId" : "795C26C5-EC7F-4216-BD92-657D2ECF5E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://deepsurface.com/deepsurface-security-advisory-local-privilege-escalation-in-erlang-on-windows-cve-2021-29221/",
        "source" : "security@deepsurface.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erlang/otp/releases/tag/OTP-23.2.3",
        "source" : "security@deepsurface.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://deepsurface.com/deepsurface-security-advisory-local-privilege-escalation-in-erlang-on-windows-cve-2021-29221/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/erlang/otp/releases/tag/OTP-23.2.3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21431",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-09T16:15:11.837",
      "lastModified" : "2024-11-21T05:48:20.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "sopel-channelmgnt is a channelmgnt plugin for sopel. In versions prior to 2.0.1, on some IRC servers, restrictions around the removal of the bot using the kick/kickban command could be bypassed when kicking multiple users at once. We also believe it may have been possible to remove users from other channels but due to the wonder that is IRC and following RfCs, We have no POC for that. Freenode is not affected. This is fixed in version 2.0.1. As a workaround, do not use this plugin on networks where TARGMAX > 1."
      }, {
        "lang" : "es",
        "value" : "sopel-channelmgnt es un plugin de channelmgnt para sopel.&#xa0;En versiones anteriores a 2.0.1, en algunos servidores IRC, unas restricciones sobre la eliminación del bot usando el comando kick/kickban podrían omitirse al patear a varios usuarios a la vez.&#xa0;También creemos que puede haber sido posible eliminar usuarios de otros canales, pero debido a la maravilla que es el IRC y los siguientes RfC, no tenemos POC para eso.&#xa0;Freenode no está afectado.&#xa0;Esto es corregido en versión 2.0.1.&#xa0;Como solución alternativa, no usar este plugin en redes donde TARGMAX versión posterior a 1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mirahezebots:channelmgnt:*:*:*:*:*:sopel:*:*",
            "versionEndExcluding" : "2.0.1",
            "matchCriteriaId" : "F65E996A-D825-4819-BC87-8A0A160A9CAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MirahezeBots/sopel-channelmgnt/commit/7c96d400358221e59135f0a0be0744f3fad73856",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MirahezeBots/sopel-channelmgnt/security/advisories/GHSA-23c7-6444-399m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/sopel-plugins.channelmgnt/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MirahezeBots/sopel-channelmgnt/commit/7c96d400358221e59135f0a0be0744f3fad73856",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MirahezeBots/sopel-channelmgnt/security/advisories/GHSA-23c7-6444-399m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/sopel-plugins.channelmgnt/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29671",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-09T17:15:16.447",
      "lastModified" : "2024-11-21T06:01:37.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Scale 5.1.0.1 could allow a local attacker to bypass the filesystem audit logging mechanism when file audit logging is enabled. IBM X-Force ID: 199478."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Scale versión 5.1.0.1, podría permitir a un atacante local omitir el mecanismo de registro de auditoría del sistema de archivos cuando el registro de auditoría de archivos está habilitado.&#xa0;IBM X-Force ID: 199478"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0.1",
            "versionEndExcluding" : "5.1.0.2",
            "matchCriteriaId" : "E1047C5E-8830-460F-BE55-1623760E3470"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199478",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6441429",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6441429",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20021",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-04-09T18:15:13.380",
      "lastModified" : "2025-11-10T19:04:58.607",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SonicWall Email Security version 10.0.9.x allows an attacker to create an administrative account by sending a crafted HTTP request to the remote host."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en SonicWall Email Security versión 10.0.9.x, permite a un atacante crear una cuenta administrativa mediante el envío de una petición HTTP diseñada en el host remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "SonicWall Email Security Improper Privilege Management Vulnerability",
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6103",
            "matchCriteriaId" : "08AD853A-995F-435D-B2AC-A7A0745D6172"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "A06452B5-695F-4CD8-BB72-AFFB9C4BAA2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "AA584C94-2321-4BBC-9FCD-D7C13C57F1DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF2B5A6-B62F-444E-BDB3-0084896CD83B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "8C3C3AB8-E169-4DAD-AB81-2A7D54EB2CB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18DCCAF-A373-4550-805B-EF329643B068"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "866762BF-F65B-4C9C-A08E-1F25041576AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5803B4-57F1-4F0C-A459-F367F56AFE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "53641CB5-CC2E-4C12-9125-64DCE99F0838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9126B7-5C64-4692-954C-6EF71261862C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "113E3915-7EF3-42CA-8429-5310EA631DF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A114E829-5FC6-4321-8D28-C63EC09F9099"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "4803B3D7-E19F-4EE2-86BC-1DBA18A7E5E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271F06DD-8DAA-46EF-A803-659EA253CC63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "75D58601-90F8-4501-9FD0-FA1E1E9DB546"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B635B-6B08-479B-A635-26724B192BF0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "7A32D7D5-3EC7-4F6E-9C24-EDCFF7EC5E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6103",
            "matchCriteriaId" : "D1824412-5A4F-4D69-996E-D4B3E813D21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20021",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20022",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-04-09T18:15:13.460",
      "lastModified" : "2025-11-10T19:07:07.287",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to upload an arbitrary file to the remote host."
      }, {
        "lang" : "es",
        "value" : "SonicWall Email Security versión 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente cargar un archivo arbitrario en el host remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "SonicWall Email Security Unrestricted Upload of File Vulnerability",
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6103",
            "matchCriteriaId" : "08AD853A-995F-435D-B2AC-A7A0745D6172"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "A06452B5-695F-4CD8-BB72-AFFB9C4BAA2B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "AA584C94-2321-4BBC-9FCD-D7C13C57F1DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF2B5A6-B62F-444E-BDB3-0084896CD83B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "8C3C3AB8-E169-4DAD-AB81-2A7D54EB2CB4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18DCCAF-A373-4550-805B-EF329643B068"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "866762BF-F65B-4C9C-A08E-1F25041576AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5803B4-57F1-4F0C-A459-F367F56AFE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "53641CB5-CC2E-4C12-9125-64DCE99F0838"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9126B7-5C64-4692-954C-6EF71261862C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "113E3915-7EF3-42CA-8429-5310EA631DF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A114E829-5FC6-4321-8D28-C63EC09F9099"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "4803B3D7-E19F-4EE2-86BC-1DBA18A7E5E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271F06DD-8DAA-46EF-A803-659EA253CC63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "75D58601-90F8-4501-9FD0-FA1E1E9DB546"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B635B-6B08-479B-A635-26724B192BF0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6105",
            "matchCriteriaId" : "7A32D7D5-3EC7-4F6E-9C24-EDCFF7EC5E7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6103",
            "matchCriteriaId" : "D1824412-5A4F-4D69-996E-D4B3E813D21C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20022",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20080",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-09T18:15:13.523",
      "lastModified" : "2024-11-21T05:45:53.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient output sanitization in ManageEngine ServiceDesk Plus before version 11200 and ManageEngine AssetExplorer before version 6800 allows a remote, unauthenticated attacker to conduct persistent cross-site scripting (XSS) attacks by uploading a crafted XML asset file."
      }, {
        "lang" : "es",
        "value" : "Un saneamiento de salida insuficiente en ManageEngine ServiceDesk Plus versiones anteriores a 11200 y ManageEngine AssetExplorer versiones anteriores a 6800, permite a un atacante remoto no autenticado conducir ataques de tipo cross-site scripting (XSS) persistente al cargar un archivo de activos XML diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "94616708-8F58-4E87-BAE5-73133FE433D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4536B5-8263-4D00-A7A4-1B286BB7B311"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8201:*:*:*:*:*:*",
            "matchCriteriaId" : "24902805-615E-43C2-BB25-911B8D8ADE29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8202:*:*:*:*:*:*",
            "matchCriteriaId" : "554F4EA8-601E-42C4-A154-150EC217A1AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8203:*:*:*:*:*:*",
            "matchCriteriaId" : "92DFF866-8BF6-416D-BD33-EDA523D1E09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8204:*:*:*:*:*:*",
            "matchCriteriaId" : "E4A0EC51-3D07-4227-A157-4CA204FD02BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8205:*:*:*:*:*:*",
            "matchCriteriaId" : "9E9AAB0C-0DBD-47A7-8F0C-670FE85F5CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8206:*:*:*:*:*:*",
            "matchCriteriaId" : "D2C44765-DC25-40B9-82D5-AC143821755B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8207:*:*:*:*:*:*",
            "matchCriteriaId" : "937E95E7-E925-40FC-A112-6DA545EF6584"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8208:*:*:*:*:*:*",
            "matchCriteriaId" : "7981B9EF-AA5D-4022-B2AB-2EE57A2B1DDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8209:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B85248-1BD3-4648-B0B3-BD9E98A92A18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8210:*:*:*:*:*:*",
            "matchCriteriaId" : "AB274DBB-2B3D-4B7C-9B12-FC5CCABD0F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8211:*:*:*:*:*:*",
            "matchCriteriaId" : "F58D17A3-7395-42CB-A6A1-3362AC37CD58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8212:*:*:*:*:*:*",
            "matchCriteriaId" : "98959391-6262-48D6-8546-C42A5D2489C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8213:*:*:*:*:*:*",
            "matchCriteriaId" : "E07DD7A7-7D58-4615-ABA3-718088A897FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8214:*:*:*:*:*:*",
            "matchCriteriaId" : "C911FE7F-2B93-44E2-BF4A-AF9344D1E3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8215:*:*:*:*:*:*",
            "matchCriteriaId" : "0CEC9CE1-0BE7-4434-B853-A2850EBEB3B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8216:*:*:*:*:*:*",
            "matchCriteriaId" : "0E237ABD-4FB9-4DB9-94CE-69F01727799A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:8.2:8217:*:*:*:*:*:*",
            "matchCriteriaId" : "6DEF0341-D42E-4C47-8224-704DD41F7D99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "577B5A33-FC1D-4334-882E-7007CBF264D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9000:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AEEE6B-0187-4D37-A042-170CBE780127"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9001:*:*:*:*:*:*",
            "matchCriteriaId" : "0070815C-273A-45A7-BD4A-F0A4553D326E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9002:*:*:*:*:*:*",
            "matchCriteriaId" : "F81E4E47-E8DB-4983-8226-6C5E5A283EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9003:*:*:*:*:*:*",
            "matchCriteriaId" : "4297FC42-1E40-4AAE-B492-AF29DA0C2979"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9004:*:*:*:*:*:*",
            "matchCriteriaId" : "04AA8545-FFFF-4731-BBFC-7BF577872F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9005:*:*:*:*:*:*",
            "matchCriteriaId" : "D83ACA73-42A4-43CF-B099-9842C935A8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9006:*:*:*:*:*:*",
            "matchCriteriaId" : "74698925-CD1A-483D-9F72-DF95599E9150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9007:*:*:*:*:*:*",
            "matchCriteriaId" : "1ADA7A20-BA3C-4537-8FB5-D5538C762790"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9008:*:*:*:*:*:*",
            "matchCriteriaId" : "E29931D8-5840-4796-92D3-FD30FAC633FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9009:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CBFDCE-9DAE-4541-A49E-C864BF849E9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9010:*:*:*:*:*:*",
            "matchCriteriaId" : "02FEA14F-7656-43AF-8028-CBA7D0DA0AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9011:*:*:*:*:*:*",
            "matchCriteriaId" : "2FE60600-A21B-4153-8296-51EAA465CE8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9012:*:*:*:*:*:*",
            "matchCriteriaId" : "A14D0484-66C4-4EF5-9601-9E533FD0AAED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9013:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5D293D-A02C-422A-ADD8-FA6EDD72F4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9014:*:*:*:*:*:*",
            "matchCriteriaId" : "9B780FA5-AF88-4315-9C8A-9AAB8E8030A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9016:*:*:*:*:*:*",
            "matchCriteriaId" : "605575AD-C3C8-43A4-AB03-E9719F792324"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9017:*:*:*:*:*:*",
            "matchCriteriaId" : "6EFA48CD-C990-4CFE-8C4C-2449D3A3E665"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9018:*:*:*:*:*:*",
            "matchCriteriaId" : "14E92F04-550A-4ED9-AF4E-DD7E9F5E15E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9019:*:*:*:*:*:*",
            "matchCriteriaId" : "E9DACA83-23CF-4C8D-B5A1-1A1A7AEC20FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9020:*:*:*:*:*:*",
            "matchCriteriaId" : "B2733446-DFA8-4B15-A50F-BB6E07D5927E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9021:*:*:*:*:*:*",
            "matchCriteriaId" : "10DBE5B0-7E17-413A-AAA8-5F0DEFD6D479"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9022:*:*:*:*:*:*",
            "matchCriteriaId" : "744C7BC5-3053-493E-8F1E-52B875EA66F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9023:*:*:*:*:*:*",
            "matchCriteriaId" : "24444021-610D-4EF2-BB1A-EB70CD2A5F74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9024:*:*:*:*:*:*",
            "matchCriteriaId" : "0594BCB0-F5A5-4F2D-B024-13AC67AA4B0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9025:*:*:*:*:*:*",
            "matchCriteriaId" : "004E66AE-F871-45D1-A47A-F27462167C37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9026:*:*:*:*:*:*",
            "matchCriteriaId" : "18248546-B217-47A3-8EC1-C71E4358F5B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9027:*:*:*:*:*:*",
            "matchCriteriaId" : "160FD535-5B72-4182-9828-725BAF335DD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9028:*:*:*:*:*:*",
            "matchCriteriaId" : "49692C35-49DC-4EE5-B360-16078A94D968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9029:*:*:*:*:*:*",
            "matchCriteriaId" : "47A9D8FE-E92F-4136-B212-C42541653781"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9030:*:*:*:*:*:*",
            "matchCriteriaId" : "A266AC34-BDF8-4D65-82C9-85D69C509BB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9031:*:*:*:*:*:*",
            "matchCriteriaId" : "A2EFEE24-1C21-488E-B286-656D25B758BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9032:*:*:*:*:*:*",
            "matchCriteriaId" : "5903D3C4-BF84-4CEB-95E9-60C8D4E69D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9033:*:*:*:*:*:*",
            "matchCriteriaId" : "42C571A1-70D4-48DF-8037-31FE362AA7C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9034:*:*:*:*:*:*",
            "matchCriteriaId" : "768B75E8-7EAE-4AE6-98BB-A90193A678B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9035:*:*:*:*:*:*",
            "matchCriteriaId" : "3150232F-41A2-4098-81F9-CEF1A60B2F5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9036:*:*:*:*:*:*",
            "matchCriteriaId" : "7850BA73-70CD-4047-AE49-56C5373E20A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9037:*:*:*:*:*:*",
            "matchCriteriaId" : "134755A0-28D8-4495-B443-A092C5C0E4EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9038:*:*:*:*:*:*",
            "matchCriteriaId" : "D4594C2E-E003-4586-BAF8-DC687347EFB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9039:*:*:*:*:*:*",
            "matchCriteriaId" : "06A9CD32-A6E3-4BFE-8501-FB63000731D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9040:*:*:*:*:*:*",
            "matchCriteriaId" : "DBBB3BA2-0FEB-4883-B742-64C478A37B97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9041:*:*:*:*:*:*",
            "matchCriteriaId" : "793E9796-D53B-4293-9ECA-4B6EB8E217F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9042:*:*:*:*:*:*",
            "matchCriteriaId" : "62244706-A31F-48B8-B35D-C4B0AABAC678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9043:*:*:*:*:*:*",
            "matchCriteriaId" : "5DD600F0-DF69-474C-B2ED-8551BF9F25FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9044:*:*:*:*:*:*",
            "matchCriteriaId" : "9D087887-925B-4D03-A04B-110D59A6BC93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9045:*:*:*:*:*:*",
            "matchCriteriaId" : "8556C499-F15B-4538-BE38-AD1112917F86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9046:*:*:*:*:*:*",
            "matchCriteriaId" : "9300D81A-196A-4C76-ACC1-FE063E1A8CC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9047:*:*:*:*:*:*",
            "matchCriteriaId" : "A7529CE5-C62D-4676-A2F2-15E76F66BD57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9048:*:*:*:*:*:*",
            "matchCriteriaId" : "E0C73A49-8143-4C35-95AB-31BB56C80438"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.0:9049:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1E996E-FB6A-4F65-9A48-52029627AFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "71BB9EF4-882F-4339-A088-DFD3EE1296D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9100:*:*:*:*:*:*",
            "matchCriteriaId" : "C79B3F6A-7AE0-487E-8044-B6C15E9C21E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9101:*:*:*:*:*:*",
            "matchCriteriaId" : "977BF207-74F1-4D9D-BFF9-BF63469E260E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9102:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBB9679-E791-4926-9155-99C894F26EAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9103:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FA3476-AEEC-47E6-A2DF-19B24A4CA9F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9104:*:*:*:*:*:*",
            "matchCriteriaId" : "035C0A12-BB52-448B-8B34-C62083A60917"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9105:*:*:*:*:*:*",
            "matchCriteriaId" : "C74B8E40-88E9-495E-980E-20AA69BE4E26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9106:*:*:*:*:*:*",
            "matchCriteriaId" : "CF088327-2D8E-4409-852C-BFF68E6D7449"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9107:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8EEE98-CE3E-4D63-AEBE-C0061B7F1CC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9108:*:*:*:*:*:*",
            "matchCriteriaId" : "F7738BD7-CA9D-443B-A743-69B96243956B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9109:*:*:*:*:*:*",
            "matchCriteriaId" : "6801BD3B-5B95-410B-ABD8-3E1729856615"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9110:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6F567B-E445-45B1-ACB6-C61628F39962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9111:*:*:*:*:*:*",
            "matchCriteriaId" : "C066567A-E5A2-48CA-8EAF-2919FC499569"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9112:*:*:*:*:*:*",
            "matchCriteriaId" : "B060B925-FDE8-48B3-BF41-32E828ACC5C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9113:*:*:*:*:*:*",
            "matchCriteriaId" : "48C1DC18-3FA3-4709-8251-EB9AD370E529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9114:*:*:*:*:*:*",
            "matchCriteriaId" : "8A46CF84-1258-4217-97E1-B387BAA40A09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9115:*:*:*:*:*:*",
            "matchCriteriaId" : "F8DA4A28-1151-4BFB-A9A0-9BC128FDD57A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9116:*:*:*:*:*:*",
            "matchCriteriaId" : "9C7D2FB4-22D5-4A58-AB8E-2B543A57CCD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9117:*:*:*:*:*:*",
            "matchCriteriaId" : "799B4970-767F-4207-AACF-2F1AAE09DE47"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9118:*:*:*:*:*:*",
            "matchCriteriaId" : "068C757A-03A5-4AB2-825F-675028C8E5C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9119:*:*:*:*:*:*",
            "matchCriteriaId" : "CB0BFAA6-2D92-4FEA-AFDF-1FB005C64CC0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9120:*:*:*:*:*:*",
            "matchCriteriaId" : "412C04A6-F5FD-4EBB-8FCE-BE489D726352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.1:9121:*:*:*:*:*:*",
            "matchCriteriaId" : "842FF39B-7EC2-42AE-8B98-006D8E455A1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5272F67C-EBCE-46B5-BF68-DB183704BE45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9200:*:*:*:*:*:*",
            "matchCriteriaId" : "DB4472B8-232E-4700-B376-2006005F0F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9201:*:*:*:*:*:*",
            "matchCriteriaId" : "01A82F61-8882-419F-9715-3A636F5FBD5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9202:*:*:*:*:*:*",
            "matchCriteriaId" : "87F8B3E1-8936-470A-BB41-5E5EEC2B86F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9203:*:*:*:*:*:*",
            "matchCriteriaId" : "D18E2BB1-3F3B-42BA-8CC0-43627C6B676E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9204:*:*:*:*:*:*",
            "matchCriteriaId" : "9B2EE162-C6DE-4182-93A0-021A5410E83C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9205:*:*:*:*:*:*",
            "matchCriteriaId" : "C420A37E-E89A-472D-B605-0943F21C0592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9206:*:*:*:*:*:*",
            "matchCriteriaId" : "80BF4466-5244-4238-AD69-66697E5B30B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9207:*:*:*:*:*:*",
            "matchCriteriaId" : "54DFDAB9-540E-4388-9FA0-9CAE93FDD78F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9208:*:*:*:*:*:*",
            "matchCriteriaId" : "72D32098-2C3C-4EA0-BFE0-127DA43DF136"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9209:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD17130-56ED-4460-844D-B877F7E9EB6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9210:*:*:*:*:*:*",
            "matchCriteriaId" : "67C76DD0-258A-4D39-8694-0191B608FDCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9211:*:*:*:*:*:*",
            "matchCriteriaId" : "0522B2B2-5647-46AF-AAAE-F86DDACA790B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9212:*:*:*:*:*:*",
            "matchCriteriaId" : "524258FD-71A0-4E2D-BE58-2500944EDAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9213:*:*:*:*:*:*",
            "matchCriteriaId" : "3529FA8F-A5F5-44DF-9E77-80C9DA7F8ED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9214:*:*:*:*:*:*",
            "matchCriteriaId" : "1117F600-7DA8-4FB7-8CE0-D5EE8194A3F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9215:*:*:*:*:*:*",
            "matchCriteriaId" : "907FE1F5-9F3B-4B06-A89D-CA842BB956AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9216:*:*:*:*:*:*",
            "matchCriteriaId" : "5707EB1A-2D06-4FDE-AC23-4EF391018423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9217:*:*:*:*:*:*",
            "matchCriteriaId" : "03A1E00A-5EEC-4DD8-9A6B-732A140E4F24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9218:*:*:*:*:*:*",
            "matchCriteriaId" : "DF75E79B-5680-4E72-9597-12C9A32FB075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9219:*:*:*:*:*:*",
            "matchCriteriaId" : "03DF444A-CA6E-426B-BC7E-2F1E73E4E5EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9220:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE8B99C-0D4F-4BB1-AE62-8FBC1A0F3C9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9221:*:*:*:*:*:*",
            "matchCriteriaId" : "47B69879-E65E-4C31-AC89-C872AF7C7736"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9222:*:*:*:*:*:*",
            "matchCriteriaId" : "BE7E7D41-BE15-4439-AB25-65F1FA4A27EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9223:*:*:*:*:*:*",
            "matchCriteriaId" : "2008020E-9A7C-42A7-BCA7-DB8A27F5AD6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9224:*:*:*:*:*:*",
            "matchCriteriaId" : "2550C2F0-97B2-49FF-B7EF-D4AD7BA6CFCC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9225:*:*:*:*:*:*",
            "matchCriteriaId" : "D3177C32-5A5D-44B4-BD9B-A261EE536098"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9226:*:*:*:*:*:*",
            "matchCriteriaId" : "EF5DB83F-5E79-4DD8-AC70-36EE7BB88C30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9227:*:*:*:*:*:*",
            "matchCriteriaId" : "68922363-7E1B-42EE-8F29-F19F7AD54F66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9228:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1D71E8-AD75-4019-9D8D-BCF1C30F16CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9229:*:*:*:*:*:*",
            "matchCriteriaId" : "B28D8431-61FF-4943-9EBE-C0C824B9206F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9230:*:*:*:*:*:*",
            "matchCriteriaId" : "00F9A491-EDBB-4C72-A598-03AD807046AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9231:*:*:*:*:*:*",
            "matchCriteriaId" : "1DBA185A-70DE-4919-89F8-9DF1CA17FB3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9232:*:*:*:*:*:*",
            "matchCriteriaId" : "789190B8-4EAA-4D57-9B59-D30C2183E3D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9233:*:*:*:*:*:*",
            "matchCriteriaId" : "0655B57A-0A51-4541-AF81-EBA9E7A200A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9234:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4F0539-649F-41FD-8BB6-7158183A670C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9235:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD9A63F-309F-423F-98AB-86007CED2C7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9236:*:*:*:*:*:*",
            "matchCriteriaId" : "E7389397-03A6-48C6-98AC-7273E3CEF7D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9237:*:*:*:*:*:*",
            "matchCriteriaId" : "CC5E6061-FC5D-4201-BD39-3862556F4E66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9238:*:*:*:*:*:*",
            "matchCriteriaId" : "0D33A187-CE61-4A39-8BF7-8A65871C54BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9239:*:*:*:*:*:*",
            "matchCriteriaId" : "C42C7942-7F44-42A7-882E-D69CB93620E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9240:*:*:*:*:*:*",
            "matchCriteriaId" : "11FD12A0-12FC-4D45-8F5A-86D039D5194A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9241:*:*:*:*:*:*",
            "matchCriteriaId" : "A006266D-5686-4867-A9B9-BCAE40B69FAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.2:9242:*:*:*:*:*:*",
            "matchCriteriaId" : "967FC7F6-3580-4DCE-A7F0-7C27D0D9FAD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "28144D4F-B106-466E-97FE-95792AF01EEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9300:*:*:*:*:*:*",
            "matchCriteriaId" : "45E23A86-2DFB-419B-AD19-1A63E0D12203"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9301:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E8AD08-4E3C-4503-A582-B6CEDAE362B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9302:*:*:*:*:*:*",
            "matchCriteriaId" : "2E3824C3-8B4C-4C52-AC13-3911BEE11A45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9303:*:*:*:*:*:*",
            "matchCriteriaId" : "52500AC3-F89B-4A95-8C44-B74DA14EF9F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9304:*:*:*:*:*:*",
            "matchCriteriaId" : "1A2C7747-9D88-4962-B8F6-0B4309D0F168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9305:*:*:*:*:*:*",
            "matchCriteriaId" : "E788E5CD-4274-42A1-9974-30E0380D87F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9306:*:*:*:*:*:*",
            "matchCriteriaId" : "BD942532-B9A1-4F7B-8E1B-C456516E7168"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9307:*:*:*:*:*:*",
            "matchCriteriaId" : "6F16D144-7DDA-4151-8763-FC846BF114EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9308:*:*:*:*:*:*",
            "matchCriteriaId" : "43AF43F0-A9E2-4A3F-8011-D52B9D5A2A0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9309:*:*:*:*:*:*",
            "matchCriteriaId" : "B70C28C0-77C2-4A77-8958-A055EB307008"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9310:*:*:*:*:*:*",
            "matchCriteriaId" : "BE28CD2C-2B3A-43CF-BDA4-D98852D75EBA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9311:*:*:*:*:*:*",
            "matchCriteriaId" : "BD8C312B-8348-4476-B0C3-1544F2D378F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9312:*:*:*:*:*:*",
            "matchCriteriaId" : "F56255C6-9E9A-48C4-A83A-C8FA8EEE2190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9313:*:*:*:*:*:*",
            "matchCriteriaId" : "2510E11A-992C-4ED7-9338-AF3B7BBA7160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9314:*:*:*:*:*:*",
            "matchCriteriaId" : "778D0E3E-E77B-44BD-8155-5464405C8691"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9315:*:*:*:*:*:*",
            "matchCriteriaId" : "D708A96D-F89E-44D0-B655-6A8BD1D08B72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9316:*:*:*:*:*:*",
            "matchCriteriaId" : "4524947C-3F09-4DC7-BE0E-B695BC4C00EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9317:*:*:*:*:*:*",
            "matchCriteriaId" : "FA1D85B3-8327-4032-96A1-CF3EAF477160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9318:*:*:*:*:*:*",
            "matchCriteriaId" : "78B40A2C-6289-4581-AA84-58FF00DF8861"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9319:*:*:*:*:*:*",
            "matchCriteriaId" : "26C645F1-4C43-4D82-B223-2A037A154466"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9320:*:*:*:*:*:*",
            "matchCriteriaId" : "FA95FDD5-5530-4B25-9702-12A39FF49F65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9321:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8CA6EF-F82C-40A7-B8B4-476082E8F6A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9322:*:*:*:*:*:*",
            "matchCriteriaId" : "27627445-9D74-4A82-80C1-17D32B7FF498"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9323:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C1BB5D-890E-4A9D-9F2F-68C18DB6BB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9324:*:*:*:*:*:*",
            "matchCriteriaId" : "3DA73624-42A9-4FB6-B04A-A06AAE3550AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9325:*:*:*:*:*:*",
            "matchCriteriaId" : "488F83E8-B1C3-4FF9-82AA-6E849146716A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9326:*:*:*:*:*:*",
            "matchCriteriaId" : "B68BF79E-EBB3-4427-AF00-818368FB2873"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9327:*:*:*:*:*:*",
            "matchCriteriaId" : "32795B52-2EBE-49D5-9CF2-7809E07D9773"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9328:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5FB7E0-7480-4621-A891-F0B146362068"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9329:*:*:*:*:*:*",
            "matchCriteriaId" : "01DCE8C6-9F6F-492F-836A-F2959D4D6B2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9330:*:*:*:*:*:*",
            "matchCriteriaId" : "99E9D0C9-98B1-40C9-AB15-ED26C2FD3618"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9331:*:*:*:*:*:*",
            "matchCriteriaId" : "6939C42F-7B4E-4D63-B2A3-45624307AE05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9332:*:*:*:*:*:*",
            "matchCriteriaId" : "61804D75-F80A-4432-9872-3CCF74719AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9333:*:*:*:*:*:*",
            "matchCriteriaId" : "84B391A6-11E1-4269-8697-1ED54420B4AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9334:*:*:*:*:*:*",
            "matchCriteriaId" : "D8FFC18D-60E1-4E0C-9E1B-73CEEC751882"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9335:*:*:*:*:*:*",
            "matchCriteriaId" : "B09F30F9-2EF8-4E93-BD62-E57A553F5BD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.3:9336:*:*:*:*:*:*",
            "matchCriteriaId" : "6E8AAA4B-9A8B-4C62-AFAC-D16AD4B4BF1E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5B76DE-A0AA-430C-B28F-C9787E7A2EC4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9400:*:*:*:*:*:*",
            "matchCriteriaId" : "0261CF58-FB52-40F2-AFB2-F48E9D9F3673"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9401:*:*:*:*:*:*",
            "matchCriteriaId" : "8AE37BD3-5FDE-4A0E-9741-60F9E764D7D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9402:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C7DD80-BCA4-4121-B1B3-50798BDA71B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9403:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC29FD5-BD55-44BB-B8F3-8D04C23DB745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9404:*:*:*:*:*:*",
            "matchCriteriaId" : "551778C6-7F1F-425F-A6C9-5DB05B0A7079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9405:*:*:*:*:*:*",
            "matchCriteriaId" : "2A59669F-DA4C-4CA6-8707-A68F70D7CEF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9406:*:*:*:*:*:*",
            "matchCriteriaId" : "B01B3E70-E529-4152-97B8-98CE35582BE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9407:*:*:*:*:*:*",
            "matchCriteriaId" : "81A265ED-AE4A-4458-81D1-CB8D7EE64442"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9408:*:*:*:*:*:*",
            "matchCriteriaId" : "3CAE5F44-B29C-43D9-8F15-CA45AF9FBB34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9409:*:*:*:*:*:*",
            "matchCriteriaId" : "9A66E0C6-071B-4211-ADDD-0555222FEBB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9410:*:*:*:*:*:*",
            "matchCriteriaId" : "A4F3A38F-F263-49C0-BE02-8F8C06E11153"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9411:*:*:*:*:*:*",
            "matchCriteriaId" : "7995FB82-C17D-40A4-88E7-D2CB2D41F34C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9412:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D73AC6-9715-4ED5-9E9B-F25B9A4A9CDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9413:*:*:*:*:*:*",
            "matchCriteriaId" : "BB66FAC9-E0D2-444E-9568-2556662B008B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9414:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1F53F4-CAA0-4529-A951-263C5FD00270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9415:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1F303C-DBAD-4019-833D-CC92CC3DF32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9416:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8AEDA6-E161-4386-8E0F-424CB6F87CB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9417:*:*:*:*:*:*",
            "matchCriteriaId" : "03FA25BC-B64A-4424-B7D3-97644BDF2015"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9418:*:*:*:*:*:*",
            "matchCriteriaId" : "C5244D26-D896-4A8F-A9A7-0B1EC2CDDC06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9419:*:*:*:*:*:*",
            "matchCriteriaId" : "827EFFB4-E0E6-4F3B-8397-AE73A3D11B94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9420:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9B0CF3-FE52-4CA1-B1F7-A018FD121FEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9421:*:*:*:*:*:*",
            "matchCriteriaId" : "C410A5F5-2415-4767-B120-80645B211013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9422:*:*:*:*:*:*",
            "matchCriteriaId" : "D261E9EC-EFFE-4206-A046-B66DFB8E696C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9423:*:*:*:*:*:*",
            "matchCriteriaId" : "778FE067-DAE0-483F-8C73-78906F43ED02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9424:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB32A17-00B0-4424-88CD-C9C9253B14E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9425:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E09302-1460-4909-8DA7-5904C448CA3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9426:*:*:*:*:*:*",
            "matchCriteriaId" : "A4E0DF6C-1980-4634-9A10-740895379369"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:9.4:9427:*:*:*:*:*:*",
            "matchCriteriaId" : "F6553A33-8FF8-48B3-ACAF-C7CBAB6B8383"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0D82AD-4041-489A-B6BC-9122A5C4284D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "97CABEC7-2B76-4B17-B906-1CB2B49515A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10000:*:*:*:*:*:*",
            "matchCriteriaId" : "B8254ACB-5C97-4C05-A3DC-E28428DFB3B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10001:*:*:*:*:*:*",
            "matchCriteriaId" : "1F68FFBD-EFD8-4DC7-BBBF-53C37B58C075"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10002:*:*:*:*:*:*",
            "matchCriteriaId" : "B8EF8D0F-F50E-4C22-8B41-BD2D5F4DBE41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10003:*:*:*:*:*:*",
            "matchCriteriaId" : "548CAD7B-9738-4764-84F3-8D7EFFB0F7EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10004:*:*:*:*:*:*",
            "matchCriteriaId" : "01754D60-5592-4193-A2DF-4CE12D30CF24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10005:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5B570B-8C33-448C-84D9-BC9D5F9FEACD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10006:*:*:*:*:*:*",
            "matchCriteriaId" : "21DC1DA3-012F-4AF2-B6CA-968E50A503EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10007:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE94B05-7B6A-4912-8590-D9C1791F9B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10008:*:*:*:*:*:*",
            "matchCriteriaId" : "16C27699-4157-4473-9FB3-01151B3E21F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10009:*:*:*:*:*:*",
            "matchCriteriaId" : "F9AC6EC8-E1CA-4889-8AF8-482649CF2139"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10010:*:*:*:*:*:*",
            "matchCriteriaId" : "4186B73E-0E0F-48E1-9A51-B90E228BDA14"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10011:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA6C73A-F3DE-469B-9F1E-6B9037F3F6F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10012:*:*:*:*:*:*",
            "matchCriteriaId" : "3C86FB31-05E2-4C18-B5CE-81D5A9DFD267"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10013:*:*:*:*:*:*",
            "matchCriteriaId" : "F58627E0-0171-4DDF-B9D4-0CE41C1DEA25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10014:*:*:*:*:*:*",
            "matchCriteriaId" : "1CD8BB75-E9F0-4675-835B-131C1B459138"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10015:*:*:*:*:*:*",
            "matchCriteriaId" : "32CFCFEF-FA96-405A-AF7A-A652371A44F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10016:*:*:*:*:*:*",
            "matchCriteriaId" : "7354B26B-EA51-4BAF-B059-3BEEEE2A2F51"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10017:*:*:*:*:*:*",
            "matchCriteriaId" : "FE3E1888-FCFF-407F-8ABB-CA802DE5D2B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10018:*:*:*:*:*:*",
            "matchCriteriaId" : "9B48D8ED-0539-402C-92A0-0BE8F88ABA46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10019:*:*:*:*:*:*",
            "matchCriteriaId" : "20604986-B662-4553-A481-9AC2979C2871"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10020:*:*:*:*:*:*",
            "matchCriteriaId" : "FF77ADEA-AC44-49FF-BA41-C130FFD01F30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.0.0:10021:*:*:*:*:*:*",
            "matchCriteriaId" : "1EFE95CE-EA08-462D-B5EA-1F9E9737CCF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F10A782D-24BB-477D-B828-38FF8C008E85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10500:*:*:*:*:*:*",
            "matchCriteriaId" : "EF3B542D-DC8F-4717-B0A8-4466BED2D113"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10501:*:*:*:*:*:*",
            "matchCriteriaId" : "982C13E3-8FFD-4112-8866-76C8318BA394"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10502:*:*:*:*:*:*",
            "matchCriteriaId" : "300DBEAF-859F-4EBC-919D-0FEDF83CF60F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10503:*:*:*:*:*:*",
            "matchCriteriaId" : "8CD6A14F-CE77-41A5-8B11-7CE23A5156E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10504:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DF283F-EC49-4930-9319-55562EE1274D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10505:*:*:*:*:*:*",
            "matchCriteriaId" : "58C762E2-9B16-4398-A130-5F7AE4171C15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10506:*:*:*:*:*:*",
            "matchCriteriaId" : "CB6C1D7E-00AA-421F-9937-78A837AD41E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10507:*:*:*:*:*:*",
            "matchCriteriaId" : "100F898D-525D-4EC1-802D-63BA0EF5690A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10508:*:*:*:*:*:*",
            "matchCriteriaId" : "259A3358-86C4-49AB-A113-F000AC076497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10509:*:*:*:*:*:*",
            "matchCriteriaId" : "897FFAD7-D739-4F54-B496-726DA42D1B53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10510:*:*:*:*:*:*",
            "matchCriteriaId" : "D7DDEBCC-8375-4209-883C-CBF669F71DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10511:*:*:*:*:*:*",
            "matchCriteriaId" : "230A0B00-DE83-472A-A6F9-91DEF51C3756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10512:*:*:*:*:*:*",
            "matchCriteriaId" : "8DB3456E-E1AB-497E-80C4-4B039445146D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10513:*:*:*:*:*:*",
            "matchCriteriaId" : "B86DFA37-FBBF-46A7-9350-C97A15514290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:10.5:10514:*:*:*:*:*:*",
            "matchCriteriaId" : "44226AFE-5AA4-4D83-A85B-6BAB6B1B5609"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BD81D0B5-4C34-4260-A35C-225BBCA3D71A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11000:*:*:*:*:*:*",
            "matchCriteriaId" : "3C858317-2F95-4BA2-A9A0-F03BBC3CC2C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11001:*:*:*:*:*:*",
            "matchCriteriaId" : "0D2B81A8-C2EE-4666-8D17-A09CCBE6E789"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11002:*:*:*:*:*:*",
            "matchCriteriaId" : "BF4C5D27-877D-4E79-8634-CC6F2DCB66FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11003:*:*:*:*:*:*",
            "matchCriteriaId" : "01F753C4-11F6-4F65-8C38-3A308AA577E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11004:*:*:*:*:*:*",
            "matchCriteriaId" : "330149F0-BBE4-4890-B1A8-E96666927802"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11005:*:*:*:*:*:*",
            "matchCriteriaId" : "AA22E70B-F031-4ADA-B8CE-4B8FF6957F0F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11006:*:*:*:*:*:*",
            "matchCriteriaId" : "D79D1272-025B-40E2-BE9D-141577DC1FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11007:*:*:*:*:*:*",
            "matchCriteriaId" : "725B0345-D7BD-4302-B81A-C17115FF1070"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11008:*:*:*:*:*:*",
            "matchCriteriaId" : "2D0E9A21-D7CB-4129-925F-9D3105071FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11009:*:*:*:*:*:*",
            "matchCriteriaId" : "01750E0E-29E5-4FFA-8194-813FA363467E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.0:11010:*:*:*:*:*:*",
            "matchCriteriaId" : "E2C953DF-2F29-488E-B4DD-F64BA0BD6A39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "298623A4-60DF-41F6-B2FD-ED84E6D2C06C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11100:*:*:*:*:*:*",
            "matchCriteriaId" : "523C554B-076C-4F59-A04B-92D57CDAF7E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11101:*:*:*:*:*:*",
            "matchCriteriaId" : "3A85A576-6144-41DB-9ACF-1DD93D5A8852"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11102:*:*:*:*:*:*",
            "matchCriteriaId" : "02EC45C8-CD28-4B2A-A1FA-1EA9F8B392F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11103:*:*:*:*:*:*",
            "matchCriteriaId" : "1A4A02F3-4427-4E4C-9245-EF5D73A7AC71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11104:*:*:*:*:*:*",
            "matchCriteriaId" : "063D71A3-F1DF-486A-92E1-338C6D5C9E8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11105:*:*:*:*:*:*",
            "matchCriteriaId" : "14A2C9CC-D434-41A7-A01A-03933675556A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11106:*:*:*:*:*:*",
            "matchCriteriaId" : "B283BD0B-22E3-4AD3-AE4B-07431DA00E5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11107:*:*:*:*:*:*",
            "matchCriteriaId" : "42FDD0DE-EEE7-4D82-B9CA-EFA052728C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11108:*:*:*:*:*:*",
            "matchCriteriaId" : "DED26B68-E61F-4575-85AD-48EC2E128712"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11109:*:*:*:*:*:*",
            "matchCriteriaId" : "F69FF4ED-AFCE-49A2-AD4C-E6A870FFA32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11110:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFCBA54-26E4-4C56-82BB-135FCA210419"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11111:*:*:*:*:*:*",
            "matchCriteriaId" : "9B594A55-DBF5-4C3F-855F-843A7F26DFEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11112:*:*:*:*:*:*",
            "matchCriteriaId" : "53E10E88-28AE-4F01-AE6E-C76CB3309F69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11113:*:*:*:*:*:*",
            "matchCriteriaId" : "1909D29B-7532-4C60-9F16-BD310022E2A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11114:*:*:*:*:*:*",
            "matchCriteriaId" : "8B5FA504-BFA4-4740-A3C0-B917AF301E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11115:*:*:*:*:*:*",
            "matchCriteriaId" : "2694C1E1-7596-4183-9B09-4BB5BA5C5551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11116:*:*:*:*:*:*",
            "matchCriteriaId" : "31A7FA61-399B-4778-828C-BB65548966AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:11117:*:*:*:*:*:*",
            "matchCriteriaId" : "E33CAA7E-2F7B-4833-94F6-6C0F607903CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:build11118:*:*:*:*:*:*",
            "matchCriteriaId" : "2B9E544F-F9B0-4B19-977F-3232FB9E2D2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_servicedesk_plus:11.1:build11119:*:*:*:*:*:*",
            "matchCriteriaId" : "67FF6912-9756-4858-A424-322AC9996018"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-11",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21432",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-09T18:15:13.583",
      "lastModified" : "2024-11-21T05:48:21.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vela is a Pipeline Automation (CI/CD) framework built on Linux container technology written in Golang. An authentication mechanism added in version 0.7.0 enables some malicious user to obtain secrets utilizing the injected credentials within the `~/.netrc` file. Refer to the referenced GitHub Security Advisory for complete details. This is fixed in version 0.7.5."
      }, {
        "lang" : "es",
        "value" : "Vela es un framework de Pipeline Automation (CI/CD) construido sobre la tecnología de contenedores de Linux escrita en Golang.&#xa0;Un mecanismo de autenticación agregado en versión 0.7.0, permite a algunos usuarios maliciosos obtener secretos usando las credenciales inyectadas dentro del archivo \"~/.netrc\".&#xa0;Consulte el Aviso de Seguridad de GitHub al que se hace referencia para obtener detalles completos.&#xa0;Esto es corregido en versión 0.7.5"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:go-vela:vela:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.7.5",
            "matchCriteriaId" : "52D2883A-60E5-41B9-86D8-83393D400F1F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/go-vela/server/commit/cb4352918b8ecace9fe969b90404d337b0744d46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/pull/337",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/releases/tag/v0.7.5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/security/advisories/GHSA-8j3f-mhq8-gmh4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/go-vela/server",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/commit/cb4352918b8ecace9fe969b90404d337b0744d46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/pull/337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/releases/tag/v0.7.5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/go-vela/server/security/advisories/GHSA-8j3f-mhq8-gmh4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pkg.go.dev/github.com/go-vela/server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21433",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-09T18:15:13.693",
      "lastModified" : "2024-11-21T05:48:21.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discord Recon Server is a bot that allows you to do your reconnaissance process from your Discord. Remote code execution in version 0.0.1 would allow remote users to execute commands on the server resulting in serious issues. This flaw is patched in 0.0.2."
      }, {
        "lang" : "es",
        "value" : "Discord Recon Server, es un bot que te permite realizar tu proceso de reconocimiento desde tu Discord.&#xa0;Una ejecución de código remota en versión 0.0.1, permitiría a usuarios remotos ejecutar comandos en el servidor, resultando en serios problemas.&#xa0;Este fallo es parcheado en versión 0.0.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:demon1a:discord-recon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.2",
            "matchCriteriaId" : "E569C42D-3A2C-40F8-9A2E-D5D1B185047B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/issues/6",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/commit/26e2a084679679cccdeeabbb6889ce120eff7e50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/issues/6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-65fm-5x64-gv9x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21728",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-04-09T18:15:13.833",
      "lastModified" : "2024-11-21T05:48:53.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ZTE product has a configuration error vulnerability. Because a certain port is open by default, an attacker can consume system processing resources by flushing a large number of packets to the port, and successfully exploiting this vulnerability could reduce system processing capabilities. This affects: ZXA10 C300M all versions up to V4.3P8."
      }, {
        "lang" : "es",
        "value" : "Un producto ZTE presenta una vulnerabilidad de error de configuración.&#xa0;Debido a que un determinado puerto está abierto por defecto, un atacante puede consumir recursos de procesamiento del sistema al descargar una gran cantidad de paquetes en el puerto, y explotar con éxito esta vulnerabilidad podría reducir las capacidades de procesamiento del sistema.&#xa0;Esto afecta: ZXA10 C300M todas las versiones hasta V4.3P8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxa10_c300m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5",
            "matchCriteriaId" : "90C656D6-2092-4879-B464-4FEA3296322B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxa10_c300m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99A22A2-6EFD-432D-B01E-4DCD956396A3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014784",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014784",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25356",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.083",
      "lastModified" : "2024-11-21T05:54:49.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper caller check vulnerability in Managed Provisioning prior to SMR APR-2021 Release 1 allows unprivileged application to install arbitrary application, grant device admin permission and then delete several installed application."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación de llamada inapropiada en Managed Provisioning anterior a versión SMR APR-2021 Release 1, permite a una aplicación no privilegiada instalar una aplicación arbitraria, otorgar permiso de administrador al dispositivo y luego eliminar varias aplicaciones instaladas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.oversecured.com/Two-weeks-of-securing-Samsung-devices-Part-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25357",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.240",
      "lastModified" : "2024-11-21T05:54:49.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A pendingIntent hijacking vulnerability in Create Movie prior to SMR APR-2021 Release 1 in Android O(8.x) and P(9.0), 3.4.81.1 in Android Q(10,0), and 3.6.80.7 in Android R(11.0) allows unprivileged applications to access contact information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro pendingIntent en Create Movie versiones anteriores a SMR APR-2021 Release 1 en Android O(8.x) y P(9.0), versiones 3.4.81.1 en Android Q(10,0) y versiones 3.6.80.7 en Android R(11.0 ), permite a aplicaciones no privilegiadas acceder a la información de contacto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25358",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.333",
      "lastModified" : "2024-11-21T05:54:49.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability that stores IMSI values in an improper path prior to SMR APR-2021 Release 1 allows local attackers to access IMSI values without any permission via untrusted applications."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad que almacena los valores de IMSI en una ruta incorrecta anterior a versión SMR APR-2021 Release 1, permite a atacantes locales acceder a los valores de IMSI sin ningún permiso por medio de aplicaciones no confiables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-256"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25359",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.413",
      "lastModified" : "2024-11-21T05:54:50.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper SELinux policy prior to SMR APR-2021 Release 1 allows local attackers to access AP information without proper permissions via untrusted applications."
      }, {
        "lang" : "es",
        "value" : "Una política inapropiada de SELinux anterior a versión SMR APR-2021 Release 1, permite a atacantes locales acceder a la información del AP sin los permisos apropiados  por medio de aplicaciones no confiables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25360",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.490",
      "lastModified" : "2024-11-21T05:54:50.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper input validation vulnerability in libswmfextractor library prior to SMR APR-2021 Release 1 allows attackers to execute arbitrary code on mediaextractor process."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación inapropiada de la entrada en la biblioteca libswmfextractor anterior a versión SMR APR-2021 Release 1, permite a atacantes ejecutar código arbitrario en el proceso mediaextractor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25361",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.617",
      "lastModified" : "2024-11-21T05:54:50.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en stickerCenter anterior a versión SMR APR-2021 Release 1, permite a atacantes locales leer o escribir archivos arbitrarios del proceso del sistema por medio de aplicaciones no confiables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N",
            "baseScore" : 7.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25362",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.693",
      "lastModified" : "2024-11-21T05:54:50.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files."
      }, {
        "lang" : "es",
        "value" : "Una administración inapropiada de permisos en CertInstaller anterior a versión SMR APR-2021 Release 1, permite a aplicaciones no confiables eliminar determinados archivos locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25363",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.787",
      "lastModified" : "2024-11-21T05:54:50.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control in ActivityManagerService prior to SMR APR-2021 Release 1 allows untrusted applications to access running processesdelete some local files."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado en ActivityManagerService anterior a versión SMR APR-2021 Release 1, permite a aplicaciones no confiables acceder a unos procesos en ejecución y eliminar algunos archivos locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25364",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.850",
      "lastModified" : "2024-11-21T05:54:50.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A pendingIntent hijacking vulnerability in Secure Folder prior to SMR APR-2021 Release 1 allows unprivileged applications to access contact information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de secuestro pendingIntent en Secure Folder anterior a versión SMR APR-2021 Release 1, permite a aplicaciones no privilegiadas acceder a la información de contacto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25365",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:14.943",
      "lastModified" : "2024-11-21T05:54:50.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper exception control in softsimd prior to SMR APR-2021 Release 1 allows unprivileged applications to access the API in softsimd."
      }, {
        "lang" : "es",
        "value" : "Un control de excepción inapropiado en softsimd anterior a versión SMR APR-2021 Release 1, permite a aplicaciones no privilegiadas acceder a la API en softsimd"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25373",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.023",
      "lastModified" : "2024-11-21T05:54:51.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent."
      }, {
        "lang" : "es",
        "value" : "Un uso de PendingIntent no seguro en el Customization Service anterior a versión 2.2.02.1 en Android O(8.x), versiones 2.4.03.0 en Android P(9.0), versiones 2.7.02.1 en Android Q(10.0) y versiones 2.9.01.1 en Android R(11.0), permite a atacantes locales llevar a cabo un acción no autorizada sin permiso por medio del secuestro de PendingIntent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:customization_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.02.1",
            "matchCriteriaId" : "08B5C4ED-B65C-4FB0-941C-97F757AF6CA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:customization_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.03.0",
            "matchCriteriaId" : "86791435-F9BD-40A1-868A-457F430AFA18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:customization_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.02.1",
            "matchCriteriaId" : "2866B3C6-AE95-40C5-878A-BE19953D369C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:customization_service:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.01.1",
            "matchCriteriaId" : "6286A16B-C002-42A4-9632-25BAB376F8AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25374",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.100",
      "lastModified" : "2024-11-21T05:54:51.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authorization vulnerability in Samsung Members \"samsungrewards\" scheme for deeplink in versions 2.4.83.9 in Android O(8.1) and below, and 3.9.00.9 in Android P(9.0) and above allows remote attackers to access a user data related with Samsung Account."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autorización inapropiada en el esquema \"samsungrewards\" de Samsung Members para deeplink en versiones 2.4.83.9 en Android O(8.1) y por debajo y versiones 3.9.00.9 en Android P(9.0) y superiores, permite a atacantes remotos acceder a datos de usuario relacionados con Samsung Account"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.4.83.9",
            "matchCriteriaId" : "F4702C92-F06E-4732-8DA5-B28FBDA5DF51"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.00.9",
            "matchCriteriaId" : "47075F11-E4BB-41EA-B107-BF975F280EE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25375",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.163",
      "lastModified" : "2024-11-21T05:54:52.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using predictable index for attachments in Samsung Email prior to version 6.1.41.0 allows remote attackers to get attachments of another emails when users open the malicious attachment."
      }, {
        "lang" : "es",
        "value" : "Un uso de índices predecibles para archivos adjuntos en Samsung Email anterior a versión 6.1.41.0, permite a atacantes remotos obtener archivos adjuntos de otros correos electrónicos cuando unos usuarios abren el archivo adjunto malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:email:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.14.0",
            "matchCriteriaId" : "6F73D3C2-2808-47B3-9DBB-165B6C030A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25376",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.240",
      "lastModified" : "2024-11-21T05:54:52.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper synchronization logic in Samsung Email prior to version 6.1.41.0 can leak messages in certain mailbox in plain text when STARTTLS negotiation is failed."
      }, {
        "lang" : "es",
        "value" : "Una lógica de sincronización inapropiada en Samsung Email anterior a versión 6.1.41.0, puede filtrar mensajes en determinados buzones de correo en texto plano cuando se presenta un fallo en la negociación STARTTLS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-662"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:email:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.41.0",
            "matchCriteriaId" : "C8212599-7A71-4DFE-971B-0FF5000FBD0B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25377",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.320",
      "lastModified" : "2024-11-21T05:54:52.310",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intent redirection in Samsung Experience Service versions 10.8.0.4 in Android P(9.0) below, and 12.2.0.5 in Android Q(10.0) above allows attacker to execute privileged action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Intent redirection en Samsung Experience Service versiones 10.8.0.4 en Android P(9.0) por debajo y versiones 12.2.0.5 en Android Q(10.0) y superiores, permite a un atacante ejecutar una acción privilegiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:experience_service:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.0.4",
            "matchCriteriaId" : "3A50CB24-E86C-4EE1-9AF6-4320C9C385DE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:experience_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.0.5",
            "matchCriteriaId" : "ACCABF12-E63B-40F4-B576-5808F3FFECB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25378",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.380",
      "lastModified" : "2024-11-21T05:54:52.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service."
      }, {
        "lang" : "es",
        "value" : "Un control de acceso inapropiado de determinado puerto en SmartThings anterior a versión 1.7.63.6, permite una denegación de servicio temporal remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:smartthings:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.63.6",
            "matchCriteriaId" : "69949E84-33D3-487C-ADED-920362FE97E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25379",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.460",
      "lastModified" : "2024-11-21T05:54:52.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Intent redirection en Gallery anterior a versión 5.4.16.1, permite a un atacante ejecutar una acción con privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-926"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:gallery:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.4.16.1",
            "matchCriteriaId" : "1457CE15-5F02-4D9A-97B7-5C1AFD6B072C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25380",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.850",
      "lastModified" : "2024-11-21T05:54:52.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user."
      }, {
        "lang" : "es",
        "value" : "Un manejo inapropiado de condiciones excepcionales en Bixby anterior a versión 3.0.53.02, permite a un atacante ejecutar las acciones registradas por el usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:bixby:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.53.02",
            "matchCriteriaId" : "A2576C81-4E55-46BF-96D5-324864D54D9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25381",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-09T18:15:15.943",
      "lastModified" : "2024-11-21T05:54:52.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Using unsafe PendingIntent in Samsung Account in versions 10.8.0.4 in Android P(9.0) and below, and 12.1.1.3 in Android Q(10.0) and above allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent."
      }, {
        "lang" : "es",
        "value" : "Al usar un PendingIntent no seguro en Samsung Account en versiones 10.8.0.4 en Android P(9.0) y por debajo, y versiones 12.1.1.3 en Android Q(10.0) y por encima, permite a atacantes locales llevar a cabo acciones no autorizadas sin permiso por medio del secuestro del PendingIntent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:account:10.8.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8F33D6-493C-4A77-B032-C01C0B1370A1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0721FD34-5F94-4828-A8AA-EF70FAB71FC8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73CA4D29-321A-41ED-A75A-1EBB14A771C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C354829-6BEB-4C67-972A-60367073753C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "702B40EB-76BC-4686-A46E-D02DBE3A86E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4685EA90-1E01-4FFB-AE31-91FD5D69E2D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "938DC86D-C783-4EFA-9AB6-3ADC8CD7BB41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A33DBF65-09A6-4149-BABE-2FFFBF10C31D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78B69434-13B2-4A43-AEB0-55E0ED403E54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*",
            "matchCriteriaId" : "D1755B91-1B6B-4A9E-BB6B-22B399A6DD02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A92E88F-CCED-41D7-AFB7-CE1F9265E546"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13D3A00-27A0-4635-9D50-05CA81950691"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EB959DB-AFE7-4667-9662-949ADAB81CE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18669EEC-ABB9-4CE4-8C0E-A88BE08EC368"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3:rev1:*:*:*:*:*:*",
            "matchCriteriaId" : "61D64B87-F1F1-4E52-86AE-F28E2C43A9A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB2497-59DE-4253-A758-A3D03FAEB913"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E197EC0-82DF-49D5-BD1A-7EA22EC0B806"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "286EED24-E011-4009-BC2E-B63CA06072CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D634E2E3-4E8A-4C88-A6BF-DBE7439EB3B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77E6F4DF-F80F-4A9B-871E-155C0D3DD449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC08431-C70E-4964-B7C0-C9C45F70DCD2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:2.3.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2A79C6-A7BD-46C2-8320-B9652135F3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6997F035-D2F5-4174-B979-5D42FF69D9AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FD2E59-59BF-4611-B65B-A2981127CAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86BFE05E-9749-43AA-8DB6-E2F13C2E1759"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48DCE4AD-D629-4F0B-AFA8-6CAD061D5FA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DAAB25F-26E4-4493-B3DA-F87240633031"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CD6B49-B9D4-493E-902D-B4EF48260BB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:3.2.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB73EBA4-A9BE-4C40-9E6D-649E89D2C3F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB318EA4-2908-4B91-8DBB-20008FDF528A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F4E46A9-B652-47CE-92E8-01021E57724B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DA9F0F7-D592-481E-884C-B1A94E702825"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1BBFD29-6A53-4B1E-9611-680442CD04EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49413FF7-7910-4F74-B106-C3170612CB2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C32982-095C-4628-9958-118A3D3A9CAA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3CEEA22-63B4-4702-A400-01349DF0EC1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C4E6353-B77A-464F-B7DE-932704003B33"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77125688-2CCA-4990-ABB2-551D47CB0CDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9915371-C730-41F7-B86E-7E4DE0DF5385"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1D94CDD-DE7B-444E-A3AE-AE9C9A779374"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691FA41B-C2CE-413F-ABB1-0B22CB322807"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09E6085C-A61E-4A89-BF80-EDD9A7DF1E47"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC30B2A2-9674-4052-B402-20348E50F9E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D835D592-2423-44C6-804A-3AD010112E7C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:7.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "568E2561-A068-46A2-B331-BBA91FC96F0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samsung:account:12.1.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56CA14C5-60F5-46BE-9401-1824CCF95043"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/serviceWeb.smsb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21194",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-09T22:15:17.350",
      "lastModified" : "2024-11-21T05:47:45.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en screen sharing en Google Chrome versiones anteriores a 89.0.4389.114, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.114",
            "matchCriteriaId" : "5332EEC9-C4B8-44AE-8470-E0E7C0FB7303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1181228",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1181228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21195",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-09T22:15:17.397",
      "lastModified" : "2024-11-21T05:47:45.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en V8 en Google Chrome versiones anteriores a 89.0.4389.114, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.114",
            "matchCriteriaId" : "5332EEC9-C4B8-44AE-8470-E0E7C0FB7303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1182647",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1182647",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21196",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-09T22:15:17.460",
      "lastModified" : "2024-11-21T05:47:45.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en TabStrip en Google Chrome en Windows versiones anteriores a 89.0.4389.114, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.114",
            "matchCriteriaId" : "5332EEC9-C4B8-44AE-8470-E0E7C0FB7303"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175992",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175992",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21197",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-09T22:15:17.507",
      "lastModified" : "2024-11-21T05:47:45.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en TabStrip en Google Chrome versiones anteriores a 89.0.4389.114, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.114",
            "matchCriteriaId" : "5332EEC9-C4B8-44AE-8470-E0E7C0FB7303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173903",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173903",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21198",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-09T22:15:17.570",
      "lastModified" : "2024-11-21T05:47:45.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una lectura fuera de límites en IPC en Google Chrome versiones anteriores a 89.0.4389.114, permitía a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.114",
            "matchCriteriaId" : "5332EEC9-C4B8-44AE-8470-E0E7C0FB7303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162973/Chrome-Legacy-ipc-Message-Passed-Via-Shared-Memory.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1184399",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162973/Chrome-Legacy-ipc-Message-Passed-Via-Shared-Memory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1184399",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21199",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-09T22:15:17.633",
      "lastModified" : "2024-11-21T05:47:45.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Aura en Google Chrome en Linux versiones anteriores a 89.0.4389.114, permitía a un atacante remoto que había comprometido el proceso del renderizador explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.114",
            "matchCriteriaId" : "5332EEC9-C4B8-44AE-8470-E0E7C0FB7303"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1179635",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1179635",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30480",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-09T23:15:12.957",
      "lastModified" : "2024-11-21T06:04:00.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An attacker must be within the same organization, or an external party who has been accepted as a contact. NOTE: this is specific to the Zoom Chat software, which is different from the chat feature of the Zoom Meetings and Zoom Video Webinars software."
      }, {
        "lang" : "es",
        "value" : "Zoom Chat versión hasta el 09-04-2021 en Windows y macOS, permite a determinados atacantes autenticados remotamente ejecutar código arbitrario sin la interacción del usuario.&#xa0;Un atacante debe pertenecer a la misma organización o una parte externa que haya sido aceptada como contacto.&#xa0;NOTA: esto es específico del software Zoom Chat, que es diferente de la funcionalidad de chat del software Zoom Meetings y Zoom Video Webinars"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zoom:chat:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-04-09",
            "matchCriteriaId" : "319ECBD3-CE8D-461B-A0C8-B1586E8F9B29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/04/zoom-zero-day-discovery-makes-calls-safer-hackers-200000-richer/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sector7.computest.nl/post/2021-08-zoom/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/thezdi/status/1379855435730149378",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/thezdi/status/1379859851061395459",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.securityweek.com/200000-awarded-zero-click-zoom-exploit-pwn2own",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zdnet.com/article/critical-zoom-vulnerability-triggers-remote-code-execution-without-user-input/",
        "source" : "cve@mitre.org",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-971/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zoom.us/feature/messaging",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/04/zoom-zero-day-discovery-makes-calls-safer-hackers-200000-richer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://explore.zoom.us/en/trust/security/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://sector7.computest.nl/post/2021-08-zoom/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/thezdi/status/1379855435730149378",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/thezdi/status/1379859851061395459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.securityweek.com/200000-awarded-zero-click-zoom-exploit-pwn2own",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zdnet.com/article/critical-zoom-vulnerability-triggers-remote-code-execution-without-user-input/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-971/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://zoom.us/feature/messaging",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20020",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-04-10T07:15:10.503",
      "lastModified" : "2024-11-21T05:45:47.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de ejecución de comandos en SonicWall GMS versión 9.3, permite a un atacante remoto no autenticado escalar localmente privilegios a root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:global_management_system:9.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA9DA0AC-1F4D-40E8-9C54-D583AE09F57C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0009",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0009",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30481",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-10T19:15:11.707",
      "lastModified" : "2025-11-03T06:15:32.857",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click."
      }, {
        "lang" : "es",
        "value" : "Valve Steam hasta el 10-04-2021, cuando un juego del motor de Origen es instalado, permite a usuarios autenticados remotos ejecutar código arbitrario debido a un desbordamiento del búfer que ocurre para una invitación de Steam después de un clic"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:valvesoftware:steam_client:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-04-10",
            "matchCriteriaId" : "3F4F455F-5897-4F4D-B3BE-8CF1CEDB1627"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://news.ycombinator.com/item?id=26762170",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/floesen_/status/1337107178096881666",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/the_secret_club/status/1380868759129296900",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=rNQn--9xR1Q",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://news.ycombinator.com/item?id=26762170",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/floesen_/status/1337107178096881666",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/the_secret_club/status/1380868759129296900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.youtube.com/watch?v=rNQn--9xR1Q",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30485",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-11T16:15:13.140",
      "lastModified" : "2024-11-21T06:04:01.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML file, performs incorrect memory handling, leading to a NULL pointer dereference while running strcmp() on a NULL pointer."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en libezxml.a en ezXML versión 0.8.6.&#xa0;La función ezxml_internal_dtd(), mientras analiza un archivo XML diseñado, lleva a cabo un manejo de memoria incorrecto, conllevando a una desreferencia del puntero NULL mientras se ejecuta strcmp() en un puntero NULL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D40D46-20EB-4287-8B80-9CF98AD4DE97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/25/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/25/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-11T20:15:12.627",
      "lastModified" : "2024-11-21T06:00:21.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.50.0, read_to_end() does not validate the return value from Read in an unsafe context. This bug could lead to a buffer overflow."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar de Rust versiones anteriores a 1.50.0, la función read_to_end() no comprueba el valor de retorno de Read en un contexto no seguro.&#xa0;Este bug podría conllevar a un desbordamiento de búfer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.50.0",
            "matchCriteriaId" : "921FB9CC-684E-4BBA-AD38-980D986D254B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/issues/80894",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/80895",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/issues/80894",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/80895",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28876",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-11T20:15:12.687",
      "lastModified" : "2024-11-21T06:00:21.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar de Rust versiones anteriores a 1.52.0, la implementación de Zip presenta un problema de seguridad de pánico.&#xa0;Llama a la función __iterator_get_unchecked() más de una vez para el mismo índice cuando el iterador subyacente entra en pánico (en determinadas condiciones).&#xa0;Este bug podría conllevar a una violación de seguridad de la memoria debido a un requisito de seguridad no cumplido para el rasgo TrustedRandomAccess"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.52.0",
            "matchCriteriaId" : "8E9A2A10-536D-4719-9D35-637A525E1E04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/issues/81740",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/81741",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/issues/81740",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/81741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28877",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-11T20:15:12.737",
      "lastModified" : "2024-11-21T06:00:21.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.51.0, the Zip implementation calls __iterator_get_unchecked() for the same index more than once when nested. This bug can lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar en Rust versiones anteriores a 1.51.0, la implementación de Zip llama a la función __iterator_get_unchecked() para el mismo índice más de una vez cuando está anidado.&#xa0;Este bug puede conllevar a una violación de seguridad de la memoria debido a un requisito de seguridad no cumplido para el rasgo TrustedRandomAccess"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.51.0",
            "matchCriteriaId" : "C9E57FE9-6452-4391-B83F-677045452AAC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/pull/80670",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/80670",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28878",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-11T20:15:12.813",
      "lastModified" : "2024-11-21T06:00:21.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety violation due to an unmet safety requirement for the TrustedRandomAccess trait."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar en Rust versiones anteriores a 1.52.0, la implementación de Zip llama a la función __iterator_get_unchecked() más de una vez para el mismo índice (bajo determinadas condiciones) cuando las funciones next_back() y next() son usadas juntas.&#xa0;Este bug podría conllevar a una violación de seguridad de la memoria debido a un requisito de seguridad no cumplido para el rasgo TrustedRandomAccess"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.52.0",
            "matchCriteriaId" : "8E9A2A10-536D-4719-9D35-637A525E1E04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/issues/82291",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/82292",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/issues/82291",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/82292",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-11T20:15:12.877",
      "lastModified" : "2024-11-21T06:00:21.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar de Rust versiones anteriores a 1.52.0, la implementación de Zip puede reportar un tamaño incorrecto debido a un desbordamiento de enteros.&#xa0;Este bug puede conllevar a un desbordamiento del búfer cuando un iterador Zip consumido es usado nuevamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.52.0",
            "matchCriteriaId" : "8E9A2A10-536D-4719-9D35-637A525E1E04"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/issues/82282",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/82289",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/issues/82282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/82289",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29379",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T05:15:12.503",
      "lastModified" : "2024-11-21T06:01:01.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered on D-Link DIR-802 A1 devices through 1.00b05. Universal Plug and Play (UPnP) is enabled by default on port 1900. An attacker can perform command injection by injecting a payload into the Search Target (ST) field of the SSDP M-SEARCH discover packet. NOTE: This vulnerability only affects products that are no longer supported by the maintainer"
      }, {
        "lang" : "es",
        "value" : "** NO COMPATIBLE CUANDO SE ASIGNÓ ** Se detectó un problema en los dispositivos D-Link DIR-802 A1 versiones hasta 1.00b05.&#xa0;Universal Plug and Play (UPnP) está habilitado por defecto en el puerto 1900. Un atacante puede llevar a cabo una inyección de comandos al inyectar una carga útil en el campo Search Target (ST) del paquete de descubrimiento SSDP M-SEARCH.&#xa0;NOTA: Esta vulnerabilidad solo afecta a los productos que ya no son compatibles por el mantenedor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-802_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.00b05",
            "matchCriteriaId" : "462AF67F-63BA-49A9-99AD-81BA65F9B7CD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-802:a1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1838D76E-EA30-4D22-9F05-1C97E7F9512A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cool-y.github.io/2021/03/02/DIR-802-OS-Command-Injection",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10206",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cool-y.github.io/2021/03/02/DIR-802-OS-Command-Injection",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10206",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23371",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-12T13:15:13.303",
      "lastModified" : "2024-11-21T05:51:35.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package chrono-node before 2.2.4. It hangs on a date-like string with lots of embedded spaces."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete chrono-node versiones anteriores a 2.2.4.&#xa0;Cuelga de una cadena similar a una fecha con muchos espacios insertados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chrono-node_project:chrono-node:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.2.4",
            "matchCriteriaId" : "8A6826FF-35BE-472B-BCFF-170CC42D85BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wanasit/chrono/commit/98815b57622443b5c498a427210ebd603d705f4c",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wanasit/chrono/issues/382",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-CHRONONODE-1083228",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wanasit/chrono/commit/98815b57622443b5c498a427210ebd603d705f4c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wanasit/chrono/issues/382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-CHRONONODE-1083228",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23368",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-12T14:15:14.257",
      "lastModified" : "2024-11-21T05:51:35.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package postcss from 7.0.0 and before 8.2.10 are vulnerable to Regular Expression Denial of Service (ReDoS) during source map parsing."
      }, {
        "lang" : "es",
        "value" : "El paquetes postcss desde versiones 7.0.0 y anteriores a 8.2.10 son vulnerables a una Denegación de Servicio de Expresiones Regulares (ReDoS) durante el análisis del mapa de origen"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postcss:postcss:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.36",
            "matchCriteriaId" : "B0644E66-D301-4D2D-8019-27F2B5921EF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postcss:postcss:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.2.10",
            "matchCriteriaId" : "4E58DE0A-C914-45F6-AB3F-D643AEAED341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/postcss/postcss/commit/8682b1e4e328432ba692bed52326e84439cec9e4",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/postcss/postcss/commit/b6f3e4d5a8d7504d553267f80384373af3a3dec5",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r00158f5d770d75d0655c5eef1bdbc6150531606c8f8bcb778f0627be%40%3Cdev.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/r16e295b4f02d81b79981237d602cb0b9e59709bafaa73ac98be7cef1%40%3Cdev.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/r49afb49b38748897211b1f89c3a64dc27f9049474322b05715695aab%40%3Cdev.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5acd89f3827ad9a9cad6d24ed93e377f7114867cd98cfba616c6e013%40%3Ccommits.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8def971a66cf3e375178fbee752e1b04a812a047cc478ad292007e33%40%3Cdev.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad5af2044afb51668b1008b389ac815a28ecea9eb75ae2cab5a00ebb%40%3Ccommits.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244795",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-POSTCSS-1090595",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/postcss/postcss/commit/8682b1e4e328432ba692bed52326e84439cec9e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/postcss/postcss/commit/b6f3e4d5a8d7504d553267f80384373af3a3dec5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r00158f5d770d75d0655c5eef1bdbc6150531606c8f8bcb778f0627be%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r16e295b4f02d81b79981237d602cb0b9e59709bafaa73ac98be7cef1%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r49afb49b38748897211b1f89c3a64dc27f9049474322b05715695aab%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5acd89f3827ad9a9cad6d24ed93e377f7114867cd98cfba616c6e013%40%3Ccommits.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8def971a66cf3e375178fbee752e1b04a812a047cc478ad292007e33%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad5af2044afb51668b1008b389ac815a28ecea9eb75ae2cab5a00ebb%40%3Ccommits.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-POSTCSS-1090595",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23369",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-12T14:15:14.383",
      "lastModified" : "2024-11-21T05:51:35.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package handlebars before 4.7.7 are vulnerable to Remote Code Execution (RCE) when selecting certain compiling options to compile templates coming from an untrusted source."
      }, {
        "lang" : "es",
        "value" : "El paquete handlebars versiones anteriores a 4.7.7, son vulnerables a una Ejecución de Código Remota (RCE) al seleccionar determinadas opciones de compilación para compilar plantillas que provienen de una fuente no confiable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:handlebarsjs:handlebars:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.7.7",
            "matchCriteriaId" : "D57084A5-784A-4392-AF0D-6EB14CF4B573"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/handlebars-lang/handlebars.js/commit/b6d3de7123eebba603e321f04afdbae608e8fea8",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0008/",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074950",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074951",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074952",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/handlebars-lang/handlebars.js/commit/b6d3de7123eebba603e321f04afdbae608e8fea8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1074950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1074951",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1074952",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1056767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23370",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-12T14:15:14.537",
      "lastModified" : "2024-11-21T05:51:35.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects the package swiper before 6.5.1."
      }, {
        "lang" : "es",
        "value" : "Esto afecta al paquete swiper versiones anteriores a 6.5.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:swiperjs:swiper:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "6.5.1",
            "matchCriteriaId" : "65064704-F9E2-44DD-9CC3-22E20BDE74E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-SWIPER-1088062",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nolimits4web/swiper/commit/9dad2739b7474f383474773d5ab898a0c29ac178",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1244698",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1244699",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBNOLIMITS4WEB-1244697",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1244696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-SWIPER-1088062",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24197",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:14.710",
      "lastModified" : "2024-11-21T05:52:34.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to access the data of another user that are present in the same table by taking over the user permissions on the table through formdata[wdt_ID] parameter. By exploiting this issue an attacker is able to access and manage the data of all users in the same table."
      }, {
        "lang" : "es",
        "value" : "El plugin wpDataTables – Tables &amp; Table Charts premium WordPress versiones anteriores a 3.4.2, presenta un Control de Acceso Inapropiado.&#xa0;Un usuario autenticado poco privilegiado que visita la página donde es publicada la tabla puede manipular los parámetros para acceder a los datos de otro usuario que están presentes en la misma tabla al asumir los permisos de usuario en la tabla por medio del parámetro formdata[wdt_ID].&#xa0;Al explotar este problema, un atacante puede acceder y administrar los datos de todos los usuarios en la misma tabla"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tms-outsource:wpdatatables:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "00C79193-0FAF-4101-B078-43245C9012E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a56c04a4-dda0-4a7f-a525-d0349a1fda2b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a56c04a4-dda0-4a7f-a525-d0349a1fda2b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24198",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:14.850",
      "lastModified" : "2024-11-21T05:52:34.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 has Improper Access Control. A low privilege authenticated user that visits the page where the table is published can tamper the parameters to delete the data of another user that are present in the same table through id_key and id_val parameters. By exploiting this issue an attacker is able to delete the data of all users in the same table."
      }, {
        "lang" : "es",
        "value" : "El plugin wpDataTables – Tables &amp; Table Charts premium WordPress versiones anteriores a 3.4.2, presenta un Control de Acceso Inapropiado.&#xa0;Un usuario autenticado poco privilegiado que visita la página donde es publicada la tabla puede manipular los parámetros para eliminar los datos de otro usuario que están presentes en la misma tabla por medio de los parámetros id_key e id_val.&#xa0;Al explotar este problema, un atacante puede eliminar los datos de todos los usuarios de la misma tabla"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tms-outsource:wpdatatables:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "00C79193-0FAF-4101-B078-43245C9012E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d953bc62-8a6f-445b-a556-bc25cdd200e3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d953bc62-8a6f-445b-a556-bc25cdd200e3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24199",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:14.930",
      "lastModified" : "2024-11-21T05:52:34.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'start' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application."
      }, {
        "lang" : "es",
        "value" : "El plugin wp DataTables – Tables &amp; Table Charts premium WordPress versiones anteriores a 3.4.2, permite a un usuario autenticado poco privilegiado llevar a cabo una inyección SQL ciega basada en Booleanos en la página de lista de tablas en el endpoint /wp-admin/admin-ajax.php?action=get_wdtable&amp;table_id=1, en el parámetro HTTP POST \"start!\".&#xa0;Esto permite a un atacante acceder a todos los datos de la base de datos y conseguir acceso a la aplicación de WordPress"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tms-outsource:wpdatatables:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "00C79193-0FAF-4101-B078-43245C9012E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5c98c2d6-d002-4cff-9d6f-633cb3ec6280",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5c98c2d6-d002-4cff-9d6f-633cb3ec6280",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24200",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.007",
      "lastModified" : "2024-11-21T05:52:34.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wpDataTables – Tables & Table Charts premium WordPress plugin before 3.4.2 allows a low privilege authenticated user to perform Boolean-based blind SQL Injection in the table list page on the endpoint /wp-admin/admin-ajax.php?action=get_wdtable&table_id=1, on the 'length' HTTP POST parameter. This allows an attacker to access all the data in the database and obtain access to the WordPress application."
      }, {
        "lang" : "es",
        "value" : "El plugin wpDataTables – Tables &amp; Table Charts premium WordPress versiones anteriores a 3.4.2, permite a un usuario autenticado poco privilegiado llevar a cabo una inyección SQL ciega basada en Booleanos en la página de lista de tablas en el endpoint /wp-admin/admin-ajax.php?action=get_wdtable&amp;table_id=1, en el parámetro POST HTTP \"length\".&#xa0;Esto permite a un atacante acceder a todos los datos de la base de datos y conseguir acceso a la aplicación de WordPress"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tms-outsource:wpdatatables:*:*:*:*:premium:wordpress:*:*",
            "versionEndExcluding" : "3.4.2",
            "matchCriteriaId" : "00C79193-0FAF-4101-B078-43245C9012E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/21aa7e18-0162-45bf-a5c6-ceee64ffa1f9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://n4nj0.github.io/advisories/wordpress-plugin-wpdatatables-ii/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpdatatables.com/help/whats-new-changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/21aa7e18-0162-45bf-a5c6-ceee64ffa1f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24213",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.070",
      "lastModified" : "2024-11-21T05:52:36.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The GiveWP – Donation Plugin and Fundraising Platform WordPress plugin before 2.10.0 was affected by a reflected Cross-Site Scripting vulnerability inside of the administration panel, via the 's' GET parameter on the Donors page."
      }, {
        "lang" : "es",
        "value" : "El plugin GiveWP - Donation Plugin and Fundraising Platform WordPress versiones anteriores a 2.10.0, estuvo afectado por una vulnerabilidad de tipo Cross-Site Scripting reflejado dentro del panel de administración, por medio del parámetro GET \"s\" en la página Donors"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:givewp:givewp:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "2.4.0",
            "versionEndExcluding" : "2.10.0",
            "matchCriteriaId" : "78B6D445-6B65-44E0-88B3-AF493E3B26BA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bentl.ee/posts/cve-givewp/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/da4ab508-a423-4c7f-a1d4-42ec6f989309",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://bentl.ee/posts/cve-givewp/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/da4ab508-a423-4c7f-a1d4-42ec6f989309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24215",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.133",
      "lastModified" : "2024-11-21T05:52:36.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2. Uncontrolled access to the website customization functionality and global CMS settings, like /wp-admin/customization.php and /wp-admin/options.php, can lead to a complete compromise of the target resource."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de Control de Acceso inapropiado en el plugin Controlled Admin Access WordPress versiones anteriores a 1.5.2.&#xa0;Un acceso no controlado a la funcionalidad website customization y una configuración global de CMS, como los archivos /wp-admin/customization.php y /wp-admin/options.php, puede conllevar a un compromiso total del recurso apuntado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpruby:controlled_admin_access:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.2",
            "matchCriteriaId" : "2FA3A4A2-23DF-43D4-9AEB-20E6F807F56A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-18%5D-%5BWordPress%5D-%5BCWE-284%5D-Controlled-Admin-Access-WordPress-Plugin-v1.4.0.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/eec0f29f-a985-4285-8eed-d1855d204a20",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-18%5D-%5BWordPress%5D-%5BCWE-284%5D-Controlled-Admin-Access-WordPress-Plugin-v1.4.0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wpscan.com/vulnerability/eec0f29f-a985-4285-8eed-d1855d204a20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24217",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.240",
      "lastModified" : "2024-11-21T05:52:36.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The run_action function of the Facebook for WordPress plugin before 3.0.0 deserializes user supplied data making it possible for PHP objects to be supplied creating an Object Injection vulnerability. There was also a useable magic method in the plugin that could be used to achieve remote code execution."
      }, {
        "lang" : "es",
        "value" : "La función run_action del plugin de Facebook para WordPress versiones anteriores a 3.0.0, deserializa unos datos suministrados por el usuario, haciendo posible que sean suministrados objetos PHP creando una vulnerabilidad de Inyección de Objetos.&#xa0;También había un método mágico usable en el plugin que podía ser usado para lograr una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:facebook:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.0.0",
            "matchCriteriaId" : "0307B3CB-4FA3-44DC-BBBA-A575D88DF90A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/509f2754-a1a1-4142-9126-ae023a88533a",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/509f2754-a1a1-4142-9126-ae023a88533a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24218",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.337",
      "lastModified" : "2024-11-21T05:52:37.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The wp_ajax_save_fbe_settings and wp_ajax_delete_fbe_settings AJAX actions of the Facebook for WordPress plugin before 3.0.4 were vulnerable to CSRF due to a lack of nonce protection. The settings in the saveFbeSettings function had no sanitization allowing for script tags to be saved."
      }, {
        "lang" : "es",
        "value" : "Las acciones  AJAX wp_ajax_save_fbe_settings y wp_ajax_delete_fbe_settings del plugin de Facebook para WordPress versiones anteriores a 3.0.4, eran vulnerables a un ataque de tipo CSRF debido a una falta de protección nonce.&#xa0;La configuración de la función saveFbeSettings no tenía saneamiento, permitiendo a unas etiquetas de script sean guardadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:facebook:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.4",
            "matchCriteriaId" : "8681901A-6DC0-4300-80DE-41438FD09CC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/169d21fc-d191-46ff-82e8-9ac887aed8a4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/169d21fc-d191-46ff-82e8-9ac887aed8a4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/two-vulnerabilities-patched-in-facebook-for-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24219",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.413",
      "lastModified" : "2024-11-21T05:52:37.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Thrive Optimize WordPress plugin before 1.4.13.3, Thrive Comments WordPress plugin before 1.4.15.3, Thrive Headline Optimizer WordPress plugin before 1.3.7.3, Thrive Leads WordPress plugin before 2.3.9.4, Thrive Ultimatum WordPress plugin before 2.3.9.4, Thrive Quiz Builder WordPress plugin before 2.3.9.4, Thrive Apprentice WordPress plugin before 2.3.9.4, Thrive Visual Editor WordPress plugin before 2.6.7.4, Thrive Dashboard WordPress plugin before 2.3.9.3, Thrive Ovation WordPress plugin before 2.4.5, Thrive Clever Widgets WordPress plugin before 1.57.1 and Rise by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0, Thrive Themes Builder WordPress theme before 2.2.4 register a REST API endpoint associated with Zapier functionality. While this endpoint was intended to require an API key in order to access, it was possible to access it by supplying an empty api_key parameter in vulnerable versions if Zapier was not enabled. Attackers could use this endpoint to add arbitrary data to a predefined option in the wp_options table."
      }, {
        "lang" : "es",
        "value" : "El plugin Thrive Optimize WordPress versiones anteriores a 1.4.13.3,  el plugin Thrive Comments WordPress versiones anteriores a 1.4.15.3, el plugin Thrive Headline Optimizer WordPress versiones anteriores a 1.3.7.3, el plugin Thrive Leads WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Ultimatum WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Quiz Builder WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Apprentice WordPress versiones anteriores a 2.3.9.4, el plugin Thrive Visual Editor WordPress versiones anteriores a 2.6.7.4, el plugin Thrive Dashboard WordPress versiones anteriores a 2.3.9.3, el plugin Thrive Ovation WordPress versiones anteriores a 2.4.5, el plugin Thrive Clever Widgets WordPress versiones anteriores a 1.57.1 y Rise para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Ignition para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Luxe para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, FocusBlog para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Minus para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Squared para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, el tema Voice WordPress versiones anteriores a 2.0.0, Performag para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Pressive para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Storied para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, el temaThrive Themes Builder WordPress versiones anteriores a 2.2.4, registra un endpoint de la API REST asociado con la funcionalidad de Zapier.&#xa0;Si bien este endpoint estaba destinado a requerir una clave de API para acceder, era posible acceder a él proporcionando un parámetro api_key vacío en versiones vulnerables si Zapier no estaba habilitado.&#xa0;Los atacantes podrían usar este endpoint para agregar datos arbitrarios a una opción predefinida en la tabla wp_options"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:focusblog:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "3BB48628-4B45-4EA1-9687-CEB8FD91D0C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:ignition:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "34F8D47C-0A83-4F99-8DBD-93E84237FBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:luxe:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "1760E6FC-E15D-4F80-A703-F47FC34E0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:minus:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "C17B650A-18C6-4479-B9A3-8B765450EB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:performag:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "5C9BD6E6-F0D2-4C6D-B4A9-4C9DCB197F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:pressive:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "2C9C11DF-0A77-43FD-B2D6-4C9BB59855AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:rise:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "AEC69A5B-13F5-4B20-98E2-016CB0B22CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:squared:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "960214E4-1349-4C85-929C-2CF7A5295358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:storied:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "9652A2E0-34E6-4308-B7C7-CC6F9D71AE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_apprentice:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.9.4",
            "matchCriteriaId" : "96E2DC47-B4B8-45FF-8AF9-ACF2F5BE5CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_clever_widgets:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.57.1",
            "matchCriteriaId" : "EF154898-4115-4350-A398-31AF488685CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_comments:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.15.3",
            "matchCriteriaId" : "ADDAB456-1BFB-46D9-901D-43B3EB345D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_dashboard:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.9.3",
            "matchCriteriaId" : "84F3741F-5C7B-4D0A-B7DE-59D317CEF444"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_headline_optimizer:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.7.3",
            "matchCriteriaId" : "F05B68B6-29CB-4B5D-BD79-D87B24F161A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_optimize:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.4.13.3",
            "matchCriteriaId" : "E032C438-D4B5-41EF-8BD2-12AA8CF71201"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_ovation:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.4.5",
            "matchCriteriaId" : "70B26EBB-3E01-479F-9A5F-26C203BAB027"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_quiz_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.9.4",
            "matchCriteriaId" : "01E54305-0BB0-4B25-B751-96A8B6495ED2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_themes_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.4",
            "matchCriteriaId" : "86931663-0F2C-4A5F-A412-B9FE51FC954C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:thrive_visual_editor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.6.7.4",
            "matchCriteriaId" : "7FC5C8D7-3FA9-437D-8F99-9E472DCD68BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:voice:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "1A4ACF69-0C88-4765-A028-4DD2DDDA7743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/35acd2d8-85fc-4af5-8f6c-224fa7d92900",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/35acd2d8-85fc-4af5-8f6c-224fa7d92900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24220",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.490",
      "lastModified" : "2024-11-21T05:52:37.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Thrive “Legacy” Rise by Thrive Themes WordPress theme before 2.0.0, Luxe by Thrive Themes WordPress theme before 2.0.0, Minus by Thrive Themes WordPress theme before 2.0.0, Ignition by Thrive Themes WordPress theme before 2.0.0, FocusBlog by Thrive Themes WordPress theme before 2.0.0, Squared by Thrive Themes WordPress theme before 2.0.0, Voice WordPress theme before 2.0.0, Performag by Thrive Themes WordPress theme before 2.0.0, Pressive by Thrive Themes WordPress theme before 2.0.0, Storied by Thrive Themes WordPress theme before 2.0.0 register a REST API endpoint to compress images using the Kraken image optimization engine. By supplying a crafted request in combination with data inserted using the Option Update vulnerability, it was possible to use this endpoint to retrieve malicious code from a remote URL and overwrite an existing file on the site with it or create a new file.This includes executable PHP files that contain malicious code."
      }, {
        "lang" : "es",
        "value" : "Thrive \"Legacy\" Rise by Thrive Themes de WordPress versiones anteriores a 2.0.0, Luxe para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Minus para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Ignition para el tema Thrive Themes WordPress versiones anteriores a 2.0.0,  FocusBlog para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Squared para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, el tema Voice WordPress versiones anteriores a 2.0.0, Performag para el tema Thrive Themes WordPress versiones anteriores a 2.0.0,  Pressive para el tema Thrive Themes WordPress versiones anteriores a 2.0.0, Storied para el tema Thrive Themes WordPress versiones anteriores a 20.0, registra un endpoint de la API REST para comprimir imágenes utilizando el motor de optimización de imágenes Kraken.&#xa0;Al suministrar una petición diseñada en combinación con los datos insertados usando la vulnerabilidad de Actualización de Opciones, era posible utilizar este endpoint para recuperar código malicioso de una URL remota y sobrescribir un archivo existente en el sitio con él o crear un nuevo archivo. Esto incluye archivos PHP ejecutables que contienen código malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:focusblog:*:*:*:*:*:wordpress_:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "BFFF0175-A293-4B84-B638-CBB57C36A847"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:ignition:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "34F8D47C-0A83-4F99-8DBD-93E84237FBD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:luxe:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "1760E6FC-E15D-4F80-A703-F47FC34E0A3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:minus:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "C17B650A-18C6-4479-B9A3-8B765450EB78"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:performag:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "5C9BD6E6-F0D2-4C6D-B4A9-4C9DCB197F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:pressive:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "2C9C11DF-0A77-43FD-B2D6-4C9BB59855AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:rise:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "AEC69A5B-13F5-4B20-98E2-016CB0B22CF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:squared:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "960214E4-1349-4C85-929C-2CF7A5295358"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:storied:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "9652A2E0-34E6-4308-B7C7-CC6F9D71AE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:thrivethemes:voice:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "1A4ACF69-0C88-4765-A028-4DD2DDDA7743"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a2424354-2639-4f53-a24f-afc11f6c4cac",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a2424354-2639-4f53-a24f-afc11f6c4cac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/03/recently-patched-vulnerability-in-thrive-themes-actively-exploited-in-the-wild",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24221",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.570",
      "lastModified" : "2024-11-21T05:52:37.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin before 7.1.12 did not sanitise the result_id GET parameter on pages with the [qsm_result] shortcode without id attribute, concatenating it in a SQL statement and leading to an SQL injection. The lowest role allowed to use this shortcode in post or pages being author, such user could gain unauthorised access to the DBMS. If the shortcode (without the id attribute) is embed on a public page or post, then unauthenticated users could exploit the injection."
      }, {
        "lang" : "es",
        "value" : "El plugin Quiz And Survey Master â€“ Best Quiz, Exam and Survey Plugin for WordPress versiones anteriores a 7.1.12, no saneaba el parámetro GET result_id en las páginas con el shortcode [qsm_result] sin el atributo id, concatenando en una declaración SQL y conllevando a una inyección SQL.&#xa0;El rol más bajo permitido para usar este shortcode en publicaciones o páginas siendo autor, tal usuario podría conseguir acceso no autorizado al DBMS.&#xa0;Si el código abreviado (sin el atributo id) está insertado en una página o publicación pública, los usuarios no autenticados podrían explotar la inyección"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:expresstech:quiz_and_survey_master:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "7.1.12",
            "matchCriteriaId" : "642A35DC-1C04-428E-B52C-A561CF6216C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2479603/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3b52b25c-82a1-41c7-83ac-92e244f7c5ab",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2479603/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3b52b25c-82a1-41c7-83ac-92e244f7c5ab",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24222",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.633",
      "lastModified" : "2024-11-21T05:52:37.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The WP-Curriculo Vitae Free WordPress plugin through 6.3 suffers from an arbitrary file upload issue in page where the [formCadastro] is embed. The form allows unauthenticated user to register and submit files for their profile picture as well as resume, without any file extension restriction, leading to RCE."
      }, {
        "lang" : "es",
        "value" : "El plugin WP-Curriculo Vitae Free WordPress versiones hasta 6.3, sufre de un problema de carga de archivo arbitrario en la página donde está insertado [formCadastro].&#xa0;El formulario permite a un usuario no autenticado registrarse y enviar archivos para su foto de perfil, así como reanudar, sin ninguna restricción de extensión de archivo, conllevando a una vulnerabilidad de RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:williamluis:wp-curriculo_vitae_free:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "6.3",
            "matchCriteriaId" : "BAEACD5F-D6EC-407B-BB02-AFE8BF372440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/145fc4e34c9b9799275c8e19d6b02f544c88126b/WP_Curriculo_Free.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4d715de6-8595-4da9-808a-04a28e409900",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/145fc4e34c9b9799275c8e19d6b02f544c88126b/WP_Curriculo_Free.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4d715de6-8595-4da9-808a-04a28e409900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24223",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.697",
      "lastModified" : "2024-11-21T05:52:37.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The N5 Upload Form WordPress plugin through 1.0 suffers from an arbitrary file upload issue in page where a Form from the plugin is embed, as any file can be uploaded. The uploaded filename might be hard to guess as it's generated with md5(uniqid(rand())), however, in the case of misconfigured servers with Directory listing enabled, accessing it is trivial."
      }, {
        "lang" : "es",
        "value" : "El plugin N5 Upload Form WordPress versiones hasta 1.0, sufre un problema de carga de archivos arbitrario en la página donde es insertado un Formulario del plugin, ya que cualquier archivo puede ser cargado.&#xa0;El nombre del archivo cargado puede ser difícil de adivinar ya que se genera con md5 (uniqid (rand())), sin embargo, en el caso de servidores configurados inapropiadamente con la lista de Directorios habilitada, acceder a él es trivial"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:n5_upload_form_project:n5_upload_form:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "4574B2B6-93D5-42AB-8F4C-7CECAE38FA74"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/12863f80ced5361e2e2c3f7209566ab3730aa37b/N5_upload.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d7a72183-0cd1-45de-b98b-2e295b27e5db",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/12863f80ced5361e2e2c3f7209566ab3730aa37b/N5_upload.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d7a72183-0cd1-45de-b98b-2e295b27e5db",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24224",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.773",
      "lastModified" : "2024-11-21T05:52:37.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The EFBP_verify_upload_file AJAX action of the Easy Form Builder WordPress plugin through 1.0, available to authenticated users, does not have any security in place to verify uploaded files, allowing low privilege users to upload arbitrary files, leading to RCE."
      }, {
        "lang" : "es",
        "value" : "La acción AJAX EFBP_verify_upload_file del plugin Easy Form Builder WordPress  versiones hasta 1.0, disponible para usuarios autenticados, no presenta ninguna seguridad para verificar los archivos cargados, permitiendo a usuarios poco privilegiados cargar archivos arbitrarios, conllevando a una vulnerabilidad de RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:easy-form-builder-by-bitware_project:easy-form-builder-by-bitware:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0",
            "matchCriteriaId" : "73FE31DC-C7F1-4728-883F-C8ED50EC7600"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/e4c33529b20fa70e3a764ff9b1125839fb9900b5/Easy%20Form%20Builder.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ed0c054b-54bf-4df8-9015-c76704c93484",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/e4c33529b20fa70e3a764ff9b1125839fb9900b5/Easy%20Form%20Builder.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ed0c054b-54bf-4df8-9015-c76704c93484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24225",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.837",
      "lastModified" : "2024-11-21T05:52:38.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced Booking Calendar WordPress plugin before 1.6.7 did not sanitise the calId GET parameter in the \"Seasons & Calendars\" page before outputing it in an A tag, leading to a reflected XSS issue"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Advanced Booking Calendar versiones anteriores a 1.6.7, no saneaba el parámetro GET calId en la página \"Seasons &amp; Calendars\" antes de mostrarlo en una etiqueta A, conllevando un problema de tipo XSS reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elbtide:advanced_booking_calendar:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.7",
            "matchCriteriaId" : "730F55A8-710E-43EB-ADBB-40F529BD568E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2503971/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/25ca8af5-ab48-4e6d-b2ef-fc291742f1d5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2503971/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/25ca8af5-ab48-4e6d-b2ef-fc291742f1d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24226",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.913",
      "lastModified" : "2024-11-21T05:52:38.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the AccessAlly WordPress plugin before 3.5.7, the file \"resource/frontend/product/product-shortcode.php\" responsible for the [accessally_order_form] shortcode is dumping serialize($_SERVER), which contains all environment variables. The leakage occurs on all public facing pages containing the [accessally_order_form] shortcode, no login or administrator role is required."
      }, {
        "lang" : "es",
        "value" : "En el plugin AccessAlly WordPress versiones anteriores a 3.5.7, el archivo \"resource/frontend/product/product-shortcode.php\" responsable de que el shortcode [accessally_order_form] este volcando serialize($ _ SERVER), que contiene todas las variables de entorno.&#xa0;El filtrado ocurre en todas las páginas públicas que contienen el código abreviado [accessally_order_form], no es requerido un inicio de sesión o rol de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accessally:accessally:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.5.7",
            "matchCriteriaId" : "5367730D-609C-4836-BEFB-81172CA275CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8e3e89fd-e380-4108-be23-00e87fbaad16",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8e3e89fd-e380-4108-be23-00e87fbaad16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24227",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:15.977",
      "lastModified" : "2024-11-21T05:52:38.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials and cryptographic keys used in the generation of nonces and cookies."
      }, {
        "lang" : "es",
        "value" : "El equipo de Jetpack Scan identificó una vulnerabilidad de Divulgación de Archivos Locales en el plugin Patreon WordPress versiones anteriores a 1.7.0, que podría ser abusado por cualquiera que visite el sitio.&#xa0;Con este vector de ataque, un atacante podría filtrar archivos internos importantes como wp-config.php, que contiene credenciales de base de datos y claves criptográficas utilizadas en la generación de nonces y cookies"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "81276AAA-507E-4A2E-91C2-FA7A017066D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f62df02d-7678-440f-84a1-ddbf09364016",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f62df02d-7678-440f-84a1-ddbf09364016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24228",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:16.040",
      "lastModified" : "2024-11-21T05:52:38.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jetpack Scan team identified a Reflected Cross-Site Scripting in the Login Form of the Patreon WordPress plugin before 1.7.2. The WordPress login form (wp-login.php) is hooked by the plugin and offers to allow users to authenticate on the site using their Patreon account. Unfortunately, some of the error logging logic behind the scene allowed user-controlled input to be reflected on the login page, unsanitized."
      }, {
        "lang" : "es",
        "value" : "El equipo de Jetpack Scan identificó una vulnerabilidad de tipo Cross-Site Scripting Reflejado en el Formulario de Inicio de Sesión en el plugin Patreon WordPress versiones anteriores a 1.7.2.&#xa0;El formulario de inicio de sesión de WordPress (wp-login.php) está conectado por el plugin y ofrece permitir a los usuarios autenticarse en el sitio utilizando su cuenta de Patreon.&#xa0;Desafortunadamente, parte de la lógica del registro de errores detrás de la escena permitió que la entrada controlada por el usuario sea reflejada en la página de inicio de sesión, sin sanear"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "79EEFCA2-51D1-4B8C-8B01-B826130B6C57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7a5fadb1-3f1c-4779-8ff6-356fccb5269b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7a5fadb1-3f1c-4779-8ff6-356fccb5269b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24229",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:16.100",
      "lastModified" : "2024-11-21T05:52:38.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jetpack Scan team identified a Reflected Cross-Site Scripting via the patreon_save_attachment_patreon_level AJAX action of the Patreon WordPress plugin before 1.7.2. This AJAX hook is used to update the pledge level required by Patreon subscribers to access a given attachment. This action is accessible for user accounts with the ‘manage_options’ privilege (i.e.., only administrators). Unfortunately, one of the parameters used in this AJAX endpoint is not sanitized before being printed back to the user, so the risk it represents is the same as the previous XSS vulnerability."
      }, {
        "lang" : "es",
        "value" : "El equipo de Jetpack Scan identificó una vulnerabilidad de tipo Cross-Site Scripting Reflejado por medio de la acción AJAX patreon_save_attachment_patreon_level del plugin Patreon WordPress versiones anteriores a 1.7.2.&#xa0;Este enlace AJAX es utilizado para actualizar el nivel de compromiso requerido por los suscriptores de Patreon para acceder a un archivo adjunto determinado.&#xa0;Esta acción es accesible para cuentas de usuario con el privilegio \"manage_options\" (es decir, solo administradores).&#xa0;Desafortunadamente, uno de los parámetros utilizados en este endpoint AJAX no es saneado antes de volver a imprimirse al usuario, por lo que el riesgo que representa es el mismo que el de la vulnerabilidad XSS previo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.2",
            "matchCriteriaId" : "79EEFCA2-51D1-4B8C-8B01-B826130B6C57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/001755c4-add3-4566-a022-ab1f83546c1f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/001755c4-add3-4566-a022-ab1f83546c1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24230",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:16.163",
      "lastModified" : "2024-11-21T05:52:38.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged in user overwrite or create arbitrary user metadata on the victim’s account once visited. If exploited, this bug can be used to overwrite the “wp_capabilities” meta, which contains the affected user account’s roles and privileges. Doing this would essentially lock them out of the site, blocking them from accessing paid content."
      }, {
        "lang" : "es",
        "value" : "El equipo de Jetpack Scan identificó una vulnerabilidad de tipo Cross-Site Request Forgery en el plugin Patreon de WordPress versiones anteriores a 1.7.0, permitiendo a un atacante hacer que un usuario registrado sobrescriba o cree metadatos de usuario arbitrarios en la cuenta de la víctima una vez visitada.&#xa0;Si se explota, este error se puede utilizar para sobrescribir la meta \"wp_capabilities\", que contiene los roles y privilegios de la cuenta de usuario afectada.&#xa0;Hacer esto esencialmente los bloquearía fuera del sitio, impidiéndoles acceder a contenido pago"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "81276AAA-507E-4A2E-91C2-FA7A017066D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2deefa2d-3043-42e5-afef-a42c37703531",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/2deefa2d-3043-42e5-afef-a42c37703531",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24231",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-12T14:15:16.240",
      "lastModified" : "2024-11-21T05:52:38.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jetpack Scan team identified a Cross-Site Request Forgery vulnerability in the Patreon WordPress plugin before 1.7.0, allowing attackers to make a logged administrator disconnect the site from Patreon by visiting a specially crafted link."
      }, {
        "lang" : "es",
        "value" : "El equipo de Jetpack Scan identificó una vulnerabilidad de tipo Cross-Site Request Forgery en el plugin Patreon de WordPress versiones anteriores a 1.7.0, permitiendo a un atacante hacer que un administrador registrado desconecte el sitio de Patreon al visitar un enlace especialmente diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:patreon:patreon_wordpress:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.0",
            "matchCriteriaId" : "81276AAA-507E-4A2E-91C2-FA7A017066D9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f8ab6855-a319-47ac-82fb-58b181e77500",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jetpack.com/2021/03/26/vulnerabilities-found-in-patreon-wordpress-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f8ab6855-a319-47ac-82fb-58b181e77500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25925",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-04-12T14:15:16.303",
      "lastModified" : "2025-04-30T18:15:34.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information."
      }, {
        "lang" : "es",
        "value" : "En SiCKRAGE, versiones 4.2.0 versiones hasta 10.0.11.dev1, son vulnerables a un ataque de tipo Cross-Site-Scripting (XSS) Almacenado, debido a que la entrada del usuario no está siendo comprobada apropiadamente cuando es procesada por el servidor.&#xa0;Por lo tanto, un atacante puede inyectar código JavaScript arbitrario dentro de la aplicación y posiblemente robar información confidencial de un usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sickrage:sickrage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndIncluding" : "10.0.11",
            "matchCriteriaId" : "2F1DC835-FB7D-4290-AAFC-D403CECAC645"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sickrage:sickrage:10.0.11:-:*:*:*:*:*:*",
            "matchCriteriaId" : "ACDBC619-C68F-4DB4-B0EB-55D8A5936AAA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sickrage:sickrage:10.0.11:dev1:*:*:*:*:*:*",
            "matchCriteriaId" : "256E21C4-7299-4471-AC05-91C99C507A80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25925",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25926",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-04-12T14:15:16.413",
      "lastModified" : "2025-04-30T18:15:34.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SiCKRAGE, versions 9.3.54.dev1 to 10.0.11.dev1 are vulnerable to Reflected Cross-Site-Scripting (XSS) due to user input not being validated properly in the `quicksearch` feature. Therefore, an attacker can steal a user's sessionID to masquerade as a victim user, to carry out any actions in the context of the user."
      }, {
        "lang" : "es",
        "value" : "En SiCKRAGE, versiones 9.3.54.dev1 versiones hasta 10.0.11.dev1, son vulnerables a un ataque de tipo Cross-Site-Scripting (XSS) Reflejado, debido a que la entrada del usuario no está siendo comprobada apropiadamente en la funcionalidad \"quicksearch\".&#xa0;Por lo tanto, un atacante puede robar el ID de sesión de un usuario para hacerse pasar por un usuario víctima, para llevar a cabo cualquier acción en el contexto del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sickrage:sickrage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.3.54",
            "versionEndExcluding" : "10.0.11",
            "matchCriteriaId" : "EE3C8187-9890-40AF-80B2-3B005E12249F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sickrage:sickrage:10.0.11:dev1:*:*:*:*:*:*",
            "matchCriteriaId" : "256E21C4-7299-4471-AC05-91C99C507A80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926%2C",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SiCKRAGE/SiCKRAGE/commit/9f42426727e16609ad3d1337f6637588b8ed28e4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25926%2C",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22190",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-12T15:15:14.517",
      "lastModified" : "2024-11-21T05:49:40.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto ruta por medio del GitLab Workhorse en todas las versiones de GitLab podría resultar en la fuga de un token JWT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "F1714BD0-B993-4753-B97D-AA2B5EA52E56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.7.8",
            "matchCriteriaId" : "80EE110E-20B8-4801-AC5A-33F098265EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "26177756-A7AE-432F-8379-9752EC65E090"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.8.5",
            "matchCriteriaId" : "EA4DB41D-BB15-4B41-A00F-D4AD1C20115D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "02A4523B-FA8E-42C6-B291-C8F7811F7216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.2",
            "matchCriteriaId" : "E2A84D4C-6526-43AD-9FEF-01435CF17B9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22190.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/300281",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1040786",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22190.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/300281",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1040786",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24024",
      "sourceIdentifier" : "psirt@fortinet.com",
      "published" : "2021-04-12T15:15:14.890",
      "lastModified" : "2024-11-21T05:52:13.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A clear text storage of sensitive information into log file vulnerability in FortiADCManager 5.3.0 and below, 5.2.1 and below and FortiADC 5.3.7 and below may allow a remote authenticated attacker to read other local users' password in log files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de almacenamiento de texto sin cifrar de información confidencial en el archivo de registro en FortiADCManager versiones 5.3.0 y por debajo, versiones 5.2.1 y por debajo y FortiADC versiones 5.3.7 y por debajo puede permitir a un atacante autenticado remoto leer la contraseña de otros usuarios locales en los archivos de registro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@fortinet.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiadc:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.7",
            "matchCriteriaId" : "469D4C5C-6A16-42DB-987F-FE486FC26E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fortinet:fortiadc_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.3.0",
            "matchCriteriaId" : "44B24E17-E953-4FF1-8DB9-AA9266DA5047"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fortiguard.com/advisory/FG-IR-19-244",
        "source" : "psirt@fortinet.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://fortiguard.com/advisory/FG-IR-19-244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27486",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-12T15:15:15.530",
      "lastModified" : "2024-11-21T05:58:05.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FATEK Automation WinProladder Versions 3.30 and prior is vulnerable to an integer underflow, which may cause an out-of-bounds write and allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "Fatek Automation WinProladder versiones 3.30 y anteriores, es vulnerable a un subdesbordamiento de enteros, que puede causar una escritura fuera de límites y permitir a un atacante ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fatek:winproladder:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.30",
            "matchCriteriaId" : "B20C2F2A-8F6A-4642-B921-99948FE5E0FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-098-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-098-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3465",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-12T15:15:15.703",
      "lastModified" : "2023-11-07T03:38:01.213",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none."
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20519",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-12T18:15:13.093",
      "lastModified" : "2024-11-21T05:46:42.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Jazz Team Server products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198441."
      }, {
        "lang" : "es",
        "value" : "Los productos IBM Jazz Team Server son vulnerables a un ataque de tipo cross-site scripting. Esta vulnerabilidad permite a  usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista conllevando potencialmente a una divulgación de credenciales dentro de una sesión confiable. IBM X-Force ID: 198441"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88D8E27B-1B01-4EBE-A28B-31CFB5CB3D55"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC9B60C-F4C7-40EB-AF44-28ABE46157D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:collaborative_lifecycle_management:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06699AD1-2DB4-4A97-B02B-79BA3DE0AEC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B81856F-2D20-4FD0-9CE3-1943226662C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "517B31C8-6BB6-4C46-A836-2B029909B079"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:doors_next:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578775A7-94F0-4715-B239-5712B3726A53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D98161E-9EC9-4736-AEB3-347AC30B8723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCC1773-1BAE-4407-A9EE-49A87E513BF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_insights:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE02ED7-E365-4AAF-9935-19E0B4711BE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F94BA36-ECDF-4997-8AE3-D014C3F257EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76A44AB0-E777-48F4-AEE9-AD32397B7F9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_lifecycle_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE002557-60D2-46E8-9E40-A8C3DF516C42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7A8206-BB16-4559-A672-54C80FE1F32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC36ADE-3058-4210-8C8D-5B4E458FAB8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_requirements_management_doors_next:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3093272-25CB-4478-9729-CD2E4710361A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E72DED9-4D72-4AC9-962A-BC73A324A9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3E6C51-5565-40CA-86CB-8D5389D2C903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_test_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC281E37-FEF1-400D-8BD1-A59162FF533A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851FF0C7-64EC-4A6A-9C81-0791C3E68D82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46C5E316-FB11-4EDD-A22C-22E571DF9091"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:engineering_workflow_management:7.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E5C3FDC-DD05-423A-8A14-8372C9741D9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F242460-F1F6-4D37-8817-4F6040FB5F5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07056A3E-E464-4E08-8BEC-0801E851236C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_engineering_lifecycle_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31B4E66-AA82-4EB4-A6D7-6BEEEBC86E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED82318-CB9F-4EC4-BABF-1F473B3AA799"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E4E17CB-517F-4976-BBBC-3CD0188710E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_quality_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E698C1B9-529C-42A1-9C8D-8088A2C1FC01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "380BB05E-6ADE-4A45-897D-9AA16E3408D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FA2148-90A1-437D-8AD6-F626705FC780"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rational_team_concert:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF6288A2-92B2-49EA-B5A7-9BB210BE93CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:removable_media_management:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B7AE33-7246-43AA-8AD1-F73DF9BB02CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:removable_media_management:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83D1A24-D51A-4608-BF3F-37D3DD2E748E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:removable_media_management:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "774AD9F6-BB46-4781-BF0A-A74E0D17311D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:removable_media_management:7.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5745900D-3EEC-4B33-8E1C-C6345BA5833A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:removable_media_management:7.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E27D1E-B177-4964-939A-91313648E595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:6.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "854EB28F-E803-4FBF-86A0-3D9B59B21E57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:6.0.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30966CBA-B11A-446A-81C4-D382BC130CD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:rhapsody_model_manager:6.0.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EAF6B9-0892-4B1B-A424-6E2C2C1D0142"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198441",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6441803",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6441803",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23270",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T19:15:14.517",
      "lastModified" : "2024-11-21T05:51:28.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Gargoyle OS 1.12.0, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set."
      }, {
        "lang" : "es",
        "value" : "En Gargoyle OS versión 1.12.0, cuando un IPv6 es usado, puede ocurrir un bucle de enrutamiento que genera un tráfico de red excesivo entre un dispositivo afectado y el enrutador de su ISP ascendente. Esto ocurre cuando una ruta de prefijo de enlace apunta a un enlace punto a punto, una dirección IPv6 de destino pertenece al prefijo y no es una dirección IPv6 local, y un anuncio de enrutador es recibido con al menos un prefijo IPv6 único global para el cual el flag on-link se establece"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gargoyle-router:gargoyle:1.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8E093EC-5408-4970-8432-D7FFBC064D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ericpaulbishop/gargoyle/commit/24afe944a6ffff53d84a748384e276a4e95912ec",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ericpaulbishop/gargoyle/commit/24afe944a6ffff53d84a748384e276a4e95912ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29302",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T19:15:14.580",
      "lastModified" : "2024-11-21T06:00:56.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "TP-Link TL-WR802N(US), Archer_C50v5_US v4_200 <= 2020.06 contains a buffer overflow vulnerability in the httpd process in the body message. The attack vector is: The attacker can get shell of the router by sending a message through the network, which may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "TP-Link TL-WR802N (EE. UU.), Archer_C50v5_US v4_200 versiones 2020.06 incluyéndola, contiene una vulnerabilidad de desbordamiento de búfer en el proceso httpd en el cuerpo del mensaje. El vector de ataque es: el atacante puede obtener el shell del enrutador mediante el envío de un mensaje por medio de la red, lo que puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wr802n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2020.06",
            "matchCriteriaId" : "F0E493B9-213E-4D3B-B18F-B4D48296CAFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wr802n:v4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA6C0FF-B3F6-41CA-A0CD-FBF40EDC413B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-29302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tl-wr802n/#Firmware",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/liyansong2018/CVE/tree/main/2021/CVE-2021-29302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://static.tp-link.com/beta/2021/202103/20210319/TL-WR802Nv4_US_0.9.1_3.17_up_boot%5B210317-rel64474%5D.zip",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.tp-link.com/us/support/download/tl-wr802n/#Firmware",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29357",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T19:15:14.660",
      "lastModified" : "2024-11-21T06:00:59.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ECT Provider component in OutSystems Platform Server 10 before 10.0.1104.0 and 11 before 11.9.0 (and LifeTime management console before 11.7.0) allows SSRF for arbitrary outbound HTTP requests."
      }, {
        "lang" : "es",
        "value" : "El componente ECT Provider en OutSystems Platform Server versiones 10 anteriores a 10.0.1104.0 y versiones 11 anteriores a 11.9.0 (y la consola de administración de LifeTime versiones anteriores a 11.7.0) permite un ataque de tipo SSRF para peticiones HTTP salientes arbitrarias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outsystems:lifetime_management_console:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndExcluding" : "11.7.0",
            "matchCriteriaId" : "844A1C31-3A1E-4AFD-9577-301197DE82BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outsystems:outsystems:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10",
            "versionEndExcluding" : "10.0.1104.0",
            "matchCriteriaId" : "E6708C41-0EFD-4134-B60F-75DD421C5870"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:outsystems:platform_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndExcluding" : "11.9.0",
            "matchCriteriaId" : "861FDDF7-4E0D-4EA3-909F-E8F4B552CA1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://labs.integrity.pt/advisories/cve-2021-29357/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://labs.integrity.pt/advisories/cve-2021-29357/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://success.outsystems.com/Support/Security/Vulnerabilities/Vulnerability_RTAF-2226",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3125",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T19:15:14.753",
      "lastModified" : "2024-11-21T06:20:56.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In TP-Link TL-XDR3230 < 1.0.12, TL-XDR1850 < 1.0.9, TL-XDR1860 < 1.0.14, TL-XDR3250 < 1.0.2, TL-XDR6060 Turbo < 1.1.8, TL-XDR5430 < 1.0.11, and possibly others, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set."
      }, {
        "lang" : "es",
        "value" : "En TP-Link TL-XDR3230 versiones anteriores a 1.0.12, TL-XDR1850 versiones anteriores a 1.0.9, TL-XDR1860 versiones anteriores a 1.0.14, TL-XDR3250 versiones anteriores a 1.0.2, TL-XDR6060 Turbo versiones anteriores a 1.1.8, TL-XDR5430 versiones anteriores a 1.0 .11, y posiblemente otros, cuando se utiliza IPv6, puede producirse un bucle de enrutamiento que genere un tráfico de red excesivo entre un dispositivo afectado y el enrutador de su ISP aguas arriba. Esto ocurre cuando una ruta de prefijo de enlace apunta a un enlace punto a punto, una dirección IPv6 de destino pertenece al prefijo y no es una dirección IPv6 local, y un anuncio de enrutador es recibido con al menos un prefijo IPv6 único global para el cual el flag on-link se establece"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-xdr3230_firmware:*:*:*:*:*:easy_exhibition_turbo:*:*",
            "versionEndExcluding" : "1.0.12",
            "matchCriteriaId" : "A0D17DEE-C4E7-478E-B70E-CDE2F775C8C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-xdr3230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F2F0B3B-F393-4667-B579-FF7E53494A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-xdr5430_firmware:*:*:*:*:*:easy_exhibition:*:*",
            "versionEndExcluding" : "1.0.11",
            "matchCriteriaId" : "9748491C-2C0F-4C87-94BA-4D01F5B334AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-xdr5430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB818559-2DD9-41FF-8160-33E59516F061"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-xdr3250_firmware:*:*:*:*:*:easy_exhibition:*:*",
            "versionEndExcluding" : "1.0.2",
            "matchCriteriaId" : "3DB26B3D-F802-429D-B303-00F1ECF085AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-xdr3250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36FE5CF6-4941-4E9E-8584-E9BA6BA73D72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-xdr1860_firmware:*:*:*:*:*:easy_exhibition:*:*",
            "versionEndExcluding" : "1.0.14",
            "matchCriteriaId" : "8B1FC40F-5F0A-458D-B00D-BF933BA0136C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-xdr1860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37F81B38-9711-4748-A8C4-B65F0FB94AD8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-xdr1850_firmware:*:*:*:*:*:easy_exhibition:*:*",
            "versionEndExcluding" : "1.0.9",
            "matchCriteriaId" : "3897116B-E78E-40B1-986B-24456237B852"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-xdr1850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DAC6CF-72E8-47A4-9803-80171D5E0055"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-xdr6060_firmware:*:*:*:*:*:easy_exhibition:*:*",
            "versionEndExcluding" : "1.1.8",
            "matchCriteriaId" : "315B5D50-DB9F-476D-8F16-1F51ED6AC143"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-xdr6060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2A60FB6-25AC-4443-AA29-8E13944E3F8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://service.tp-link.com.cn/detail_download_8719.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8720.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8722.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8723.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8724.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8725.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8719.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8720.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8722.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8723.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8724.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://service.tp-link.com.cn/detail_download_8725.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T19:15:14.830",
      "lastModified" : "2024-11-21T06:20:56.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASUS routers with firmware < 3.0.0.4.386.42095 or < 9.0.0.4.386.41994, when IPv6 is used, a routing loop can occur that generates excessive network traffic between an affected device and its upstream ISP's router. This occurs when a link prefix route points to a point-to-point link, a destination IPv6 address belongs to the prefix and is not a local IPv6 address, and a router advertisement is received with at least one global unique IPv6 prefix for which the on-link flag is set."
      }, {
        "lang" : "es",
        "value" : "En ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U y otros enrutadores ASUS con versiones de firmware anteriores a 3.0.0.4.386.42095 o versiones anteriores a 9.0.0.4.386.41994, cuando una IPv6 es usada, puede ocurrir un bucle de enrutamiento que genera un tráfico excesivo  de red entre un dispositivo afectado y el enrutador de su ISP aguas arriba. Esto ocurre cuando una ruta de prefijo de enlace apunta a un enlace punto a punto, una dirección IPv6 de destino pertenece al prefijo y no es una dirección IPv6 local, y un anuncio de enrutador es recibido con al menos un prefijo IPv6 único global para el cual el flag on-link se establece"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-834"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:zenwifi_ax_\\(xt8\\)_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "CCA548F8-CDAF-4674-AC43-189654091622"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:zenwifi_ax_\\(xt8\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7599D8-8837-41B3-B25A-002B2E2147DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:zenwifi_ax_\\(xt8\\)_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "C6363212-8299-4D57-BE46-CA307681BB5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:zenwifi_ax_\\(xt8\\):-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7599D8-8837-41B3-B25A-002B2E2147DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax3000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "6DB6EF4F-D4BE-4F06-B015-DD047700D15C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1515AF83-732F-489B-A25C-5D67A03A3B25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax3000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "E2179DE9-2382-4676-8EE6-8BABEE3C8E67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1515AF83-732F-489B-A25C-5D67A03A3B25"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax55_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "876963C7-D541-46A6-B71B-B7DB8A75757E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F27D4F-EDC4-4676-8C66-545378850BF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax55_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "196B4AD6-F8B1-4E86-AB11-559DA16E731E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8F27D4F-EDC4-4676-8C66-545378850BF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "A03E1DF2-F169-4B93-ABA9-D6E9693FC7A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D747097-702E-4046-9723-01A586336534"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax56u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "F08ECBA7-6E49-4A2B-AC37-DCBBA9A36F70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax56u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D747097-702E-4046-9723-01A586336534"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "B03F1D13-38AE-4DEC-A9AE-62E7AF320EBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855509B2-CE29-4A04-B412-C160139EA392"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "C45408C6-445F-45DE-B895-F4049D209B20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "855509B2-CE29-4A04-B412-C160139EA392"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "040306E4-72CD-4DB7-AA14-D15EC5FB9ABA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E27ED92-86BD-4FDB-A7AF-D308AA4A14DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "D35F3029-C288-4A71-8484-A7D2D9A4AFF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E27ED92-86BD-4FDB-A7AF-D308AA4A14DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax82u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "AECA5D6E-9484-4950-899A-0CAA6F0441C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax82u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D118305-CAFD-425F-8352-3B241D2E7702"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax82u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "E66EB478-D484-4670-AA5B-A05B6BF6F958"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax82u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D118305-CAFD-425F-8352-3B241D2E7702"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax86u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "77409646-AD42-47D2-87E3-DB30665AEF31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax86u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB28700C-02EB-46D0-9BAD-833CE4790264"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax86u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "B1169F29-1B45-40FE-888C-E458F32B182A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax86u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB28700C-02EB-46D0-9BAD-833CE4790264"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "BF676FDB-6DE7-4869-A88B-F2FAE153866E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB91E047-5AE1-4CA0-9E67-84170D79770C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ax88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "C274F684-2B01-413E-9A98-7ABE9D20E43E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ax88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB91E047-5AE1-4CA0-9E67-84170D79770C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac66u_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "DEA18BE5-9A22-442B-82D0-AB17E794B4C5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6B0EC4-797D-4059-AA90-EC09A49FE105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac66u_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "F009F6DE-2188-411E-95FB-8610A8F6FD09"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac66u_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F6B0EC4-797D-4059-AA90-EC09A49FE105"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1750_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "3E5C4A00-D9FF-4D50-A36A-206092F4C018"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1750_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FC355D-5C81-4041-B649-EB271CA55AFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1750_b1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "FEB88F34-A298-4915-855C-A39E93DD3011"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1750_b1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51FC355D-5C81-4041-B649-EB271CA55AFD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "9EB3CD53-D4CB-4C6B-BB34-AC4048053F88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E715D86-A7FC-415E-8C13-1ACAF9C49C3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "6B77654C-EBD6-4EF2-93F2-71C68B422089"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E715D86-A7FC-415E-8C13-1ACAF9C49C3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "D58EB4F6-905D-4FF9-AD2F-E8D5A387642E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5EEF4-D19B-41D1-86B6-F2CBB745570E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1900p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "9419624C-D78F-428B-A3D0-4883D28D3BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1900p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E5EEF4-D19B-41D1-86B6-F2CBB745570E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1900u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "1DC56C41-B6DF-4FEE-B958-2AFCADECE8BC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1900u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E285091-0B5F-43AE-A59C-4D3439E77053"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac1900u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "465EE87F-C72A-46E4-8CC2-88EFBD0A5247"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac1900u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E285091-0B5F-43AE-A59C-4D3439E77053"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac2900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "93267B3A-F1D8-45B2-9D16-738073B757A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac2900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2640D39-F0C3-49AA-87D1-F423150FDF2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac2900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "7BABFE10-3EA3-4998-9EEB-4680D9A0E4F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac2900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2640D39-F0C3-49AA-87D1-F423150FDF2E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac3100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "BAAB5EF4-C425-4783-BF0D-3727D3208650"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B17C2B-A1EC-4FC1-8AB1-F35D9E3A0AA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac3100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "485EFBFC-F5EB-488C-A645-DF9CA0D428FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9B17C2B-A1EC-4FC1-8AB1-F35D9E3A0AA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac5300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "AF21B730-B21A-477E-96B0-047966A3AC70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EE62D6-1E29-4E84-8944-D3D68E212140"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac5300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "703F3249-FC55-4533-AFA5-A0F55463B187"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55EE62D6-1E29-4E84-8944-D3D68E212140"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "8016A389-5080-426E-B9BC-E36C6ED2EA29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D22A86-7CA0-49EC-8B1D-47D6B7E8E15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac58u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "97AE35FB-905B-4639-9E37-7BA9083A9805"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac58u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50D22A86-7CA0-49EC-8B1D-47D6B7E8E15F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac65u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "CD7D1A5A-92E4-4548-896A-7DFF6780E314"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac65u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F69BB5-8269-4E72-9BDE-60964F833C99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac65u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "42D23E04-C9B2-4F14-986D-F1D93B427C3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac65u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F69BB5-8269-4E72-9BDE-60964F833C99"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "B1696843-FBE8-42CA-A4C6-71D544717455"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713F0F3-B616-42B7-A0D8-7983F00E79FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "D84359E8-6BCD-494C-8869-A08133DDE2E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5713F0F3-B616-42B7-A0D8-7983F00E79FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "95033F65-77A3-44D5-9631-FC8600DBC4CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2F0504-2FB5-4983-BD98-8080D4BF49DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68r_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "F749BAA0-C2ED-4B19-BDA1-4B8579F695EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2F0504-2FB5-4983-BD98-8080D4BF49DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68rw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "D5EE945C-5811-439A-9F89-2F00F0463C87"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68rw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7509DC-0D72-4624-8970-28CC61B7DC1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68rw_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "8850CB55-7B56-427F-932E-98132D76058F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68rw:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7509DC-0D72-4624-8970-28CC61B7DC1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "2F2F845F-D7F7-4047-B453-D640E4A0FF20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E23D00B-76E3-438C-8023-3D7CC6AEEE15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "8610683A-2297-4291-9E2D-68E608A92E2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E23D00B-76E3-438C-8023-3D7CC6AEEE15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "4A7E5A76-3770-45F3-8164-F23685CD2236"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB2F5A0-ADD6-4725-8B27-F10B5F4CEC6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac68w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "A90776D8-1882-49FD-9B2D-B668BCE58F63"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac68w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBB2F5A0-ADD6-4725-8B27-F10B5F4CEC6A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac85u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "254CA3A7-0903-4361-90E8-E0D41A17C8BA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac85u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40933EE3-E7D1-438E-B551-892D20042593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac85u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "9F62768D-C79B-4CC7-BE45-37E4B7084526"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac85u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40933EE3-E7D1-438E-B551-892D20042593"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac86u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "6DE55DE2-53B8-44B5-91E7-EF7AEE41B5B0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89095282-ABBD-4056-B731-7F05638DB1A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac86u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "4E713204-70A0-4515-8931-5D9E45ABD429"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac86u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89095282-ABBD-4056-B731-7F05638DB1A6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42095",
            "matchCriteriaId" : "BF5784E3-CB7C-4E4F-8D50-3EF1BC431357"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81008E66-B5E8-4DE5-B14D-E6983C69BC29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:rt-ac88u_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0.4.386.41994",
            "matchCriteriaId" : "45677F2B-CD13-48BC-B245-8C97235A320A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:rt-ac88u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81008E66-B5E8-4DE5-B14D-E6983C69BC29"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX3000/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX55/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX56U/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX58U/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX68U/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX82U/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX86U/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX88U/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC66U-B1/HelpDesk_Download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1750_B1/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1900/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1900P/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1900U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC2900/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC3100/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC5300/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC58U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC65U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68P/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68R/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68RW/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68W/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC85U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC86U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC88U/HelpDesk_download/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/Whole-Home-Mesh-WiFi-System/ZenWiFi-WiFi-Systems/ASUS-ZenWiFi-AX-XT8-/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX3000/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX55/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX56U/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX58U/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX68U/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX82U/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX86U/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-6/All-series/RT-AX88U/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-WiFi-Routers/RT-AC66U-B1/HelpDesk_Download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1750_B1/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1900/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1900P/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC1900U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC2900/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC3100/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC5300/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC58U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC65U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68P/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68R/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68RW/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC68W/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC85U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC86U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.asus.com/supportonly/RT-AC88U/HelpDesk_download/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21524",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-12T20:15:11.680",
      "lastModified" : "2024-11-21T05:48:31.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may lead to system compromise by unauthenticated attackers."
      }, {
        "lang" : "es",
        "value" : "Dell SRM versiones anteriores a 4.5.0.1 y Dell SMR versiones anteriores a 4.5.0.1, contienen una vulnerabilidad de Deserialización No Confiable.&#xa0;Un atacante remoto no autenticado podría potencialmente explotar esta vulnerabilidad, conllevando una ejecución de código arbitraria privilegiada en la aplicación vulnerable.&#xa0;La gravedad es Crítica, ya que esto puede conllevar a comprometer el sistema por parte de atacantes no autenticados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:storage_monitoring_and_reporting:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.0.1",
            "matchCriteriaId" : "21994916-AA81-4287-AF20-6849D53D5396"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:storage_resource_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.0.1",
            "matchCriteriaId" : "A1CA2142-2C18-4FF6-8223-39ED31AF7787"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21545",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-12T20:15:11.807",
      "lastModified" : "2024-11-21T05:48:33.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation vulnerability that could be potentially exploited to gain arbitrary code execution on the system with privileges of the system user."
      }, {
        "lang" : "es",
        "value" : "Dell Peripheral Manager versiones 1.3.1 o superiores, contiene soluciones para una vulnerabilidad de escalada de privilegios local que podría potencialmente ser explotada para conseguir una ejecución de código arbitraria en el sistema con los privilegios de usuario system"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:peripheral_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "5C991195-9994-428B-AA7D-72A48C520575"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000185100/dsa-2021-079-dell-client-security-update-for-dell-peripheral-manager-local-privilege-escalation-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000185100/dsa-2021-079-dell-client-security-update-for-dell-peripheral-manager-local-privilege-escalation-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21394",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-12T21:15:14.013",
      "lastModified" : "2024-11-21T05:48:16.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Note that the groups feature is not part of the Matrix specification and the chosen maximum lengths are arbitrary. Not all clients might abide by them. Refer to referenced GitHub security advisory for additional details including workarounds."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para Mensajería Instantánea y Volp federada abierta.&#xa0;En Synapse anterior a versión 1.28.0 Synapse presenta una falta de comprobación de entrada de algunos parámetros en los endpoints utilizados para confirmar que identificadores de terceros podrían causar un uso excesivo del espacio en disco y la memoria conllevando a un agotamiento de los recursos.&#xa0;Tome en cuenta que la funcionalidad de grupos no forma parte de la especificación de Matrix y que las longitudes máximas elegidas son arbitrarias.&#xa0;No todos los clientes pueden acatarlos.&#xa0;Consulte el aviso de seguridad de GitHub al que se hace referencia para obtener detalles adicionales, incluyendo las soluciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "0.17.0",
            "versionEndExcluding" : "1.28.0",
            "matchCriteriaId" : "24B2E697-E183-4782-ACC9-D136F7C02133"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/pull/9321",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9393",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-w9fg-xffh-p362",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://pypi.org/project/matrix-synapse/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-w9fg-xffh-p362",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pypi.org/project/matrix-synapse/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22497",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-12T21:15:14.123",
      "lastModified" : "2024-11-21T05:50:13.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Advanced Authentication versions prior to 6.3 SP4 have a potential broken authentication due to improper session management issue."
      }, {
        "lang" : "es",
        "value" : "Advanced Authentication versiones anteriores a 6.3, SP4, presentan una posible autenticación rota debido a un problema de administración de sesión inapropiada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@opentext.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.3",
            "matchCriteriaId" : "7D8BAEC8-626A-4520-A89F-DB40CC774D87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "689649F7-75D8-4D13-9A71-50C2908EACA5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "A0F82417-D88A-40C5-AD90-7AB826E29C2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "0DD98BB8-7A85-41D6-B1CB-7849D61F085A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:netiq_advanced_authentication:6.3:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "729C4860-8CAC-4D4B-8C68-00B1E84E700A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-634/data/advanced-authentication-releasenotes-634.html",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://www.netiq.com/documentation/advanced-authentication-63/advanced-authentication-releasenotes-634/data/advanced-authentication-releasenotes-634.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3163",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-12T21:15:14.340",
      "lastModified" : "2024-11-21T06:21:02.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTML editor of Slab Quill 4.8.0 allows an attacker to execute arbitrary JavaScript by storing an XSS payload (a crafted onloadstart attribute of an IMG element) in a text field. Note: Researchers have claimed that this issue is not within the product itself, but is intended behavior in a web browser"
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** Una vulnerabilidad en el editor HTML de Slab Quill versión 4.8.0, permite a un atacante ejecutar JavaScript arbitrario almacenando una carga útil XSS (un atributo onloadstart diseñado de un elemento IMG) en un campo de texto. Nota: Los investigadores han afirmado que este problema no está dentro del propio producto, sino que es un comportamiento previsto en un navegador web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:slab:quill:4.8.0:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "AE851EDE-63BD-4A7A-9A1E-7AE5575DDEB0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://burninatorsec.blogspot.com/2021/04/cve-2021-3163-xss-slab-quill-js.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/quilljs/quill/issues/3273",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/quilljs/quill/issues/3364",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://quilljs.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://burninatorsec.blogspot.com/2021/04/cve-2021-3163-xss-slab-quill-js.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/quilljs/quill/issues/3273",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/quilljs/quill/issues/3364",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://quilljs.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21392",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-12T22:15:13.147",
      "lastModified" : "2024-11-21T05:48:15.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 requests to user provided domains were not restricted to external IP addresses when transitional IPv6 addresses were used. Outbound requests to federation, identity servers, when calculating the key validity for third-party invite events, sending push notifications, and generating URL previews are affected. This could cause Synapse to make requests to internal infrastructure on dual-stack networks. See referenced GitHub security advisory for details and workarounds."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para VoIP y mensajería instantánea federada abierta.&#xa0;En Synapse, versiones anteriores a 1.28.0, las peticiones a los dominios proporcionados por el usuario no estaban restringidas a direcciones IP externas cuando se usaban direcciones IPv6 de transición.&#xa0;Las peticiones salientes a la federación, los servidores de identidad, al calcular la validez de la clave para eventos de invitación de terceros, el envío de notificaciones push y la generación de vistas previas de URL están afectadas.&#xa0;Esto podría causar que Synapse realice peticiones a la infraestructura interna en redes de doble pila.&#xa0;Consulte el aviso de seguridad de GitHub al que se hace referencia para obtener detalles y soluciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.28.0",
            "matchCriteriaId" : "23F4FE7B-D273-4A8C-8B2C-102FD4E1B1EE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/pull/9240",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-5wrh-4jwv-5w78",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://pypi.org/project/matrix-synapse/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-5wrh-4jwv-5w78",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pypi.org/project/matrix-synapse/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21393",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-12T22:15:13.227",
      "lastModified" : "2024-11-21T05:48:16.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Synapse is a Matrix reference homeserver written in python (pypi package matrix-synapse). Matrix is an ecosystem for open federated Instant Messaging and VoIP. In Synapse before version 1.28.0 Synapse is missing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. Note that the groups feature is not part of the Matrix specification and the chosen maximum lengths are arbitrary. Not all clients might abide by them. Refer to referenced GitHub security advisory for additional details including workarounds."
      }, {
        "lang" : "es",
        "value" : "Synapse es un servidor doméstico de referencia de Matrix escrito en python (paquete pypi matrix-synapse).&#xa0;Matrix es un ecosistema para VoIP y mensajería instantánea federada abierta.&#xa0;En Synapse versiones anteriores a 1.28.0. Synapse presenta una falta de comprobación de entrada de algunos parámetros en los endpoints usados para confirmar que los identificadores de terceros podrían causar un uso excesivo del espacio en disco y la memoria conllevando a un agotamiento de los recursos.&#xa0;Note que la funcionalidad de grupos no forma parte de la especificación de Matrix y que las longitudes máximas elegidas son arbitrarias.&#xa0;No todos los clientes pueden acatarlos.&#xa0;Consulte el aviso de seguridad de GitHub al que se hace referencia para obtener detalles adicionales, incluyendo las soluciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:synapse:*:*:*:*:*:*:*:*",
            "versionStartExcluding" : "0.24.0",
            "versionEndExcluding" : "1.28.0",
            "matchCriteriaId" : "B973D697-BF35-4DCF-AD93-9AEBAE62270E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/synapse/pull/9321",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9393",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-jrh7-mhhx-6h88",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://pypi.org/project/matrix-synapse/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/pull/9393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/synapse/security/advisories/GHSA-jrh7-mhhx-6h88",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNNAJOZNMVMXM6AS7RFFKB4QLUJ4IFEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://pypi.org/project/matrix-synapse/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29429",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-12T22:15:13.320",
      "lastModified" : "2024-11-21T06:01:04.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded into the system temporary directory first. Sensitive information contained in these files can be exposed to other local users on the same system. If you do not use the `TextResourceFactory` API, you are not vulnerable. As of Gradle 7.0, uses of the system temporary directory have been moved to the Gradle User Home directory. By default, this directory is restricted to the user running the build. As a workaround, set a more restrictive umask that removes read access to other users. When files are created in the system temporary directory, they will not be accessible to other users. If you are unable to change your system's umask, you can move the Java temporary directory by setting the System Property `java.io.tmpdir`. The new path needs to limit permissions to the build user only."
      }, {
        "lang" : "es",
        "value" : "En Gradle versiones anteriores a 7.0, los archivos creados con permisos abiertos en el directorio temporal del sistema pueden permitir a un atacante acceder a la información descargada por Gradle.&#xa0;Algunas compilaciones pueden ser vulnerables a una divulgación de información local.&#xa0;Los archivos remotos a los que se accede por medio de TextResourceFactory son descargados primero en el directorio temporal del sistema.&#xa0;Información confidencial contenida en estos archivos pueden ser expuestas a otros usuarios locales en el mismo sistema.&#xa0;Si no usa la API \"TextResourceFactory\", no es vulnerable.&#xa0;A partir de Gradle versión 7.0, los usos del directorio temporal del sistema han sido movido al directorio Gradle User Home. Por defecto, este directorio está restringido al usuario que ejecuta la compilación.&#xa0;Como solución alternativa, establezca una máscara de usuario más restrictiva que elimine el acceso de lectura a otros usuarios.&#xa0;Cuando se crean archivos en el directorio temporal del sistema,&#xa0;no serán accedidos por otros usuarios.&#xa0;Si no puede cambiar la umask de su sistema, puede mover el directorio temporal de Java al configurar el System Property \"java.io.tmpdir\".&#xa0;La nueva ruta debe limitar los permisos solo al usuario de la compilación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "1CBD5FF7-3589-474C-8BA7-0385D3E4BC0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "EF712520-1CFD-473A-B3F5-3CDDFE9C2C9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.gradle.org/7.0/release-notes.html#security-advisories",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-fp8h-qmr5-j4c8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.gradle.org/7.0/release-notes.html#security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-fp8h-qmr5-j4c8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T00:15:12.373",
      "lastModified" : "2024-11-21T06:03:14.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Remote Clinic versión v2.0 por medio del campo Full Name en el archivo register-patient.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30034",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T00:15:12.453",
      "lastModified" : "2024-11-21T06:03:14.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Remote Clinic versión v2.0 por medio del campo Symptons en el archivo patients/register-report.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/5",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30039",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T00:15:12.513",
      "lastModified" : "2024-11-21T06:03:14.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in Remote Clinic v2.0 via the \"Fever\" or \"Blood Pressure\" field on the patients/register-report.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Remote Clinic versión v2.0 por medio del campo \"Fever\" o \"Blood Pressure\" en el archivo patients/register-report.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/8",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30042",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T00:15:12.577",
      "lastModified" : "2024-11-21T06:03:15.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in Remote Clinic v2.0 via the \"Clinic Name\", \"Clinic Address\", \"Clinic City\", or \"Clinic Contact\" field on clinics/register.php"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Remote Clinic versión v2.0 por medio del campo \"Clinic Name\", \"Clinic Address\", \"Clinic City\" o \"Clinic Contact\" en el archivo clinics/register.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/11",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162291/RemoteClinic-2.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/11",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30044",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T00:15:12.640",
      "lastModified" : "2024-11-21T06:03:15.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Remote Clinic versión v2.0, por medio del campo First Name o Last Name en el archivo staff/register.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162262/RemoteClinic-2-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/13",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162262/RemoteClinic-2-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30503",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T02:15:13.480",
      "lastModified" : "2024-11-21T06:04:03.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration."
      }, {
        "lang" : "es",
        "value" : "La extensión GLSL Linting no oficial versiones anteriores a 1.4.0 para Visual Studio Code, permite una Ejecución de Código Remota por medio de una función glslangValidatorPath diseñada en la configuración del workspace"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:glsl_linting_project:glsl_linting:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "1.4.0",
            "matchCriteriaId" : "AA120FE0-5F21-4FD8-9CF1-01559DEAF81A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/27",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30637",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T05:15:13.993",
      "lastModified" : "2024-11-21T06:04:20.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php."
      }, {
        "lang" : "es",
        "value" : "htmly versión 2.8.0, permite un ataque de tipo XSS almacenado por medio del título del blog, el eslogan o la descripción en el archivo config.html.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:htmly:htmly:2.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6ECEDB6-2CA0-49EF-9701-A0E661C36C67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162195/htmly-2.8.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/danpros/htmly/issues/456",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162195/htmly-2.8.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/danpros/htmly/issues/456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28938",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T06:15:12.420",
      "lastModified" : "2024-11-21T06:00:25.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.x before 7.10.2-22.2, and 7.11.x before 7.11.2-23.0 can leak user information across thread contexts. This occurs in opportunistic circumstances when there is concurrent query execution by a low-privilege user and a high-privilege user. The former query might run with the latter query's privileges."
      }, {
        "lang" : "es",
        "value" : "Sirena Federate versiones anteriores a 6.8.14-10.3.9, versiones 6.9.x hasta 7.6.x versiones anteriores a 7.6.2-20.2, versiones 7.7.x hasta 7.9.x versiones anteriores a 7.9.3-21.6,  versiones 7.10.x anteriores a 7.10.2-22.2, y versiones 7.11.x anteriores a 7.11.2-23.0, puede filtrar información de usuario en contextos de subprocesos.&#xa0;Esto ocurre en circunstancias oportunistas cuando se presenta una ejecución simultánea de consultas por parte de un usuario poco privilegiado y un usuario muy privilegiado.&#xa0;La primera consulta puede ejecutarse con los privilegios de la última consulta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siren:federate:*:*:*:*:*:elasticsearch:*:*",
            "versionEndExcluding" : "6.8.14-10.3.9",
            "matchCriteriaId" : "F3307B1C-19E2-40CA-86C2-C6E08DDCF860"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siren:federate:*:*:*:*:*:elasticsearch:*:*",
            "versionStartIncluding" : "7.3.2-19.0",
            "versionEndExcluding" : "7.6.2-20.2",
            "matchCriteriaId" : "897F620C-A917-44C1-87DE-F6313F963516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siren:federate:*:*:*:*:*:elasticsearch:*:*",
            "versionStartIncluding" : "7.7.1-20.0",
            "versionEndExcluding" : "7.9.3-21.6",
            "matchCriteriaId" : "0AB5482B-5A53-4071-A6C8-1DF091BC0DA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siren:federate:*:*:*:*:*:elasticsearch:*:*",
            "versionStartIncluding" : "7.10.1-22.0",
            "versionEndExcluding" : "7.10.2-22.2",
            "matchCriteriaId" : "7B18A0F0-510E-46F5-BACE-EF8528ABF395"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.siren.io/siren-federate-user-guide/22/siren-federate/release-notes.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.siren.io/siren-federate-user-guide/22/siren-federate/release-notes.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29003",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T06:15:12.483",
      "lastModified" : "2024-11-21T06:00:30.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Genexis PLATINUM 4410 versión 2.1 P4410-V2- versión 1.28, permiten a atacantes remotos ejecutar código arbitrario por medio de metacaracteres de shell para el archivo sys_config_valid.xgi, como es demostrado por el URI sys_config_valid.xgi?exeshell=% 60telnetd%20%26%60"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:genexis:platinum_4410_firmware:p4410-v2-1.28:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCFCA821-8738-455C-B1E3-74F2E6EE290F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:genexis:platinum_4410:2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7711B98-A395-467D-8698-97A2C90CC1F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162174/Genexis-PLATINUM-4410-2.1-P4410-V2-1.28-Remote-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://hackerworld.home.blog/2021/03/19/rce-in-genexis-router/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29054",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T06:15:12.547",
      "lastModified" : "2024-11-21T06:00:36.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Certain Papoo products are affected by: Cross Site Request Forgery (CSRF) in the admin interface. This affects Papoo CMS Light through 21.02 and Papoo CMS Pro through 6.0.1. The impact is: gain privileges (remote)."
      }, {
        "lang" : "es",
        "value" : "Determinados productos de Papoo están afectados por: Cross Site Request Forgery (CSRF) en la interfaz de administración.&#xa0;Esto afecta a Papoo CMS Light versiones hasta 21.02 y Papoo CMS Pro versiones hasta 6.0.1.&#xa0;El impacto es: alcanzar privilegios (remoto)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "6.0.1",
            "matchCriteriaId" : "95E05823-380F-4965-8487-E9CDEC069C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:papoo:papoo:*:*:*:*:light:*:*:*",
            "versionEndIncluding" : "21.02",
            "matchCriteriaId" : "2474C5C0-70F3-4B14-8170-D3FF71730067"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/raginx/security/blob/main/rADV-2021-01.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/162077/Papoo-CMS-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.papoo.de/achtung---sicherheitsfeature-bitte-aktivieren.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/raginx/security/blob/main/rADV-2021-01.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/162077/Papoo-CMS-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.papoo.de/achtung---sicherheitsfeature-bitte-aktivieren.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27905",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-13T07:15:12.137",
      "lastModified" : "2024-11-21T05:58:44.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ReplicationHandler (normally registered at \"/replication\" under a Solr core) in Apache Solr has a \"masterUrl\" (also \"leaderUrl\" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate index data into the local core. To prevent a SSRF vulnerability, Solr ought to check these parameters against a similar configuration it uses for the \"shards\" parameter. Prior to this bug getting fixed, it did not. This problem affects essentially all Solr versions prior to it getting fixed in 8.8.2."
      }, {
        "lang" : "es",
        "value" : "La función ReplicationHandler (normalmente registrado en \"/replication\" bajo un core Solr) en Apache Solr presenta un parámetro \"masterUrl\" (también se conoce como \"leaderUrl\") que es usada para designar otro ReplicationHandler en otro core Solr para replicar datos de índice en el core local .&#xa0;Para impedir una vulnerabilidad de SSRF, Solr debería comparar estos parámetros con una configuración similar que usa para el parámetro \"shards\".&#xa0;Antes de que fuera corregido este bug, no era así.&#xa0;Este problema afecta esencialmente a todas las versiones de Solr anteriores a que fuese corregido en la versión 8.8.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.8.2",
            "matchCriteriaId" : "B8DCA294-D45F-4B22-8183-301F60BC4393"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r0ddc3a82bd7523b1453cb7a5e09eb5559517145425074a42eb326b10%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccec7fc54d82591b23c143f1f6a6e38f6e03e75db70870e4cb14a1a%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r720a4a0497fc90bad5feec8aa18b777912ee15c7eeb5f882adbf523e%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r78a3a4f1138a1608b0c6d4a2ee7647848c1a20b0d5c652cd9b02c25a%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8f1152a43c36d878bbeb5a92f261e9efaf3af313b033d7acfccea59d%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rae9ccaecce9859f709ed1458545d90a4c07163070dc98b5e9e59057f%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd232d77c57a8ce172359ab098df9512d8b37373ab87c444be911b430%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re9d64bb8e5dfefddcbf255adb4559e13a0df5b818da1b9b51329723f%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0009/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0ddc3a82bd7523b1453cb7a5e09eb5559517145425074a42eb326b10%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r140128dc6bb4f4e0b6a39e962c7ca25a8cbc8e48ed766176c931fccc%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3da74965aba2b5f5744b7289ad447306eeb2940c872801819faa9314%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6ccec7fc54d82591b23c143f1f6a6e38f6e03e75db70870e4cb14a1a%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r720a4a0497fc90bad5feec8aa18b777912ee15c7eeb5f882adbf523e%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r78a3a4f1138a1608b0c6d4a2ee7647848c1a20b0d5c652cd9b02c25a%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8f1152a43c36d878bbeb5a92f261e9efaf3af313b033d7acfccea59d%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r95df34bb158375948da82b4dfe9a1b5d528572d586584162f8f5aeef%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rae9ccaecce9859f709ed1458545d90a4c07163070dc98b5e9e59057f%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd232d77c57a8ce172359ab098df9512d8b37373ab87c444be911b430%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re9d64bb8e5dfefddcbf255adb4559e13a0df5b818da1b9b51329723f%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29262",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-13T07:15:12.247",
      "lastModified" : "2024-11-21T06:00:54.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When starting Apache Solr versions prior to 8.8.2, configured with the SaslZkACLProvider or VMParamsAllAndReadonlyDigestZkACLProvider and no existing security.json znode, if the optional read-only user is configured then Solr would not treat that node as a sensitive path and would allow it to be readable. Additionally, with any ZkACLProvider, if the security.json is already present, Solr will not automatically update the ACLs."
      }, {
        "lang" : "es",
        "value" : "Cuando se inicia Apache Solr versiones anteriores a 8.8.2, configuradas con la función SaslZkACLProvider o VMParamsAllAndReadonlyDigestZkACLProvider y ningún znode security.json existente, si el usuario de solo lectura opcional está configurado, Solr no trataría ese nodo como una ruta confidencial y le permitiría ser legible.&#xa0;Además, con cualquier ZkACLProvider, si el archivo security.json ya está presente, Solr no actualizará automáticamente las ACL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.8.2",
            "matchCriteriaId" : "B8DCA294-D45F-4B22-8183-301F60BC4393"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r1171f6417eeb6d5e1206d53e2b2ff2d6ee14026f8b595ef7d8a33b79%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1e92a2eff6c47a65c4a6e95e809a9707181de76f8062403a0bea1012%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r51b29ff62060b67bc9999ded5e252b36b09311fe5a02d27f6de3e4d3%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r536da4c4e4e406f7843461cc754a3d0a3fe575aa576e2b71a9cd57d0%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7151081abab92a827a607205c4260b0a3d22280b52d15bc909177608%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8d35eeb9a470d2682b5bcf3be0b8942faa7e28f9ca5861c058d17fff%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9c4ce6903218c92ef2583070e64af5a69e483821c4b3016dc41e3c6f%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb6db683903174eaa44ec80cc118a38574319b0d4181f36b61ee6278f%40%3Cdev.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc680cbfd745f22d182158217428a296e8e398cde16f3f428fe4bddc%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd85f87e559ee27e9c69795e3ad93a77621895e0328ea3df41d711d72%40%3Coak-commits.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ref84e60192f4bdc3206b247f260513e8d4e71f3e200792f75386d07a%40%3Cdev.jackrabbit.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0009/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r1171f6417eeb6d5e1206d53e2b2ff2d6ee14026f8b595ef7d8a33b79%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1e92a2eff6c47a65c4a6e95e809a9707181de76f8062403a0bea1012%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r51b29ff62060b67bc9999ded5e252b36b09311fe5a02d27f6de3e4d3%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r536da4c4e4e406f7843461cc754a3d0a3fe575aa576e2b71a9cd57d0%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r7151081abab92a827a607205c4260b0a3d22280b52d15bc909177608%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8d35eeb9a470d2682b5bcf3be0b8942faa7e28f9ca5861c058d17fff%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9c4ce6903218c92ef2583070e64af5a69e483821c4b3016dc41e3c6f%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb6db683903174eaa44ec80cc118a38574319b0d4181f36b61ee6278f%40%3Cdev.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbc680cbfd745f22d182158217428a296e8e398cde16f3f428fe4bddc%40%3Coak-issues.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd85f87e559ee27e9c69795e3ad93a77621895e0328ea3df41d711d72%40%3Coak-commits.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ref84e60192f4bdc3206b247f260513e8d4e71f3e200792f75386d07a%40%3Cdev.jackrabbit.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29425",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-13T07:15:12.327",
      "lastModified" : "2024-11-21T06:01:04.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"//../foo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value."
      }, {
        "lang" : "es",
        "value" : "En Apache Commons IO versiones anteriores a 2.7, Cuando se invoca el método FileNameUtils.normalize con una cadena de entrada inapropiada, como \"//../foo\" o \"\\\\..\\ foo\", el resultado sería el mismo valor, por lo que posiblemente proporcionar acceso a archivos en el directorio principal, pero no más arriba (por lo tanto, salto de ruta \"limited\"), si el código de llamada usara el resultado para construir un valor de ruta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_io:2.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "55B8E817-8D9D-433E-99D8-4E412F006400"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_io:2.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "911E607E-5A34-44DC-B9E0-01D3571DD014"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_io:2.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B5AB5A45-486F-4B37-9E5B-4EEB81F4F78A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_io:2.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "2DAD478C-FBF7-4FAE-8939-2FD625F8D71C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:commons_io:2.6:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA21029-762D-4E84-A80A-DB417CA8BD00"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:access_manager:11.1.2.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEAFEDC-2D0F-4A5F-99A0-BD41DD6DC017"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:access_manager:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A287FA5D-D7D9-40B4-8DB2-1D7CE1808408"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:access_manager:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20EB3430-0FF2-4668-BB20-A5611ACC73F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C9DBB8-3D50-4D5D-859A-B022EB7C2E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:agile_plm:9.3.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C650FEDB-E903-4C2D-AD40-282AB5F2E3C2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_performance_management:13.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F84E5662-0289-4ED5-A112-BC506508216C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_performance_management:13.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD312681-73A4-4B21-BDE8-50DED7E3E0CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A125E817-F974-4509-872C-B71933F42AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "869D51B3-FB50-4BD6-8A0C-D0984267525F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:18.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08B8F413-2000-493B-82B1-BEFE343BB8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "042269E6-D3B4-4867-86FA-9301FACA9FF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF34B11F-3DE1-4C22-8EB1-AEE5CE5E4172"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F03B63-F922-45CD-A7D1-326DB0042875"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CBFC93F-8B39-45A2-981C-59B187169BD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0843465C-F940-4FFC-998D-9A2668B75EA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:17.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "560F20E6-AEA1-4CE5-A393-C9B2CF334C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE7BF09-B89C-4590-821E-6C0587E096B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7231D2D-4092-44F3-B60A-D7C9ED78AFDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7BDFC10-45A0-46D8-AB92-4A5E2C1C76ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18127694-109C-4E7E-AE79-0BA351849291"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33F68878-BC19-4DB8-8A72-BD9FE3D0ACEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D6895A6-511A-4DC6-9F9B-58E05B86BDB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E60C0966-BF0D-4D18-B09B-5D0BB96DBFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FCD3BC-33D8-49D1-844B-6B9DE0CA4997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473749BD-267E-480F-8E7F-C762702DB66E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74C7E2F1-17FC-4322-A5C3-F7EB612BA4F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "320D36DA-D99F-4149-B582-3F4AB2F41A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_enterprise_default_managment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndIncluding" : "2.4.0",
            "matchCriteriaId" : "05E4EB25-7B7A-4A10-A535-8C7CA4D6FEB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_party_management:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C542DC5E-6657-4178-9C69-46FD3C187D56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.3.0",
            "versionEndIncluding" : "2.4.1",
            "matchCriteriaId" : "6D0F559E-0790-461B-ACED-5B00F4D40893"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132CE62A-FBFC-4001-81EC-35D81F73AF48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "282150FF-C945-4A3E-8A80-E8757A8907EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "645AA3D1-C8B5-4CD2-8ACE-31541FA267F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.1.2",
            "matchCriteriaId" : "D0DBC938-A782-433F-8BF1-CA250C332AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:commerce_guided_search:11.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3622F5-5976-4BBC-A147-FC8A6431EA79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_application_session_controller:3.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787E2C1B-9BAD-4018-8495-E9BE75628BB8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:11.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A9E4125-B744-4A9D-BFE6-5D82939958FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261212BD-125A-487F-97E8-A9587935DFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_network_repository_function:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E463039-5E48-4AA0-A42B-081053FA0111"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.14.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4479F76A-4B67-41CC-98C7-C76B81050F8E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1BC31C-6016-42A8-9517-2FBBC92620CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_contacts_server:8.0.0.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2ACE8A-6D85-4401-88D8-46B678BA0063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_converged_application_server_-_service_controller:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0535B116-57D6-4448-86A2-09BCE50894B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_convergence:3.0.2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DF939F5-C0E1-40A4-95A2-0CE7A03AB4EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_design_studio:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.4.2",
            "matchCriteriaId" : "6512DC4C-C331-4F6B-9DC9-D9DA5B8945DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B54457C-8305-4F82-BE1E-DBA030A8E676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.1.0",
            "matchCriteriaId" : "B5B4A191-44AE-4C35-9164-19237D2CF013"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.0",
            "versionEndIncluding" : "8.2.3",
            "matchCriteriaId" : "A543B4F8-149A-48AB-B388-AB7FA2ECAC18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_interactive_session_recorder:6.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "46E23F2E-6733-45AF-9BD9-1A600BD278C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E812639B-EE28-4C68-9F6F-70C8BF981C86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_offline_mediation_controller:12.0.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23B00C1-878A-4B55-B87B-EFFFA6A5E622"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_order_and_service_management:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21CC9E01-616E-411B-B0C7-DE6E599D3319"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_order_and_service_management:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F015E20-7886-4713-B4EC-FE7894066D09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_policy_management:12.5.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B388677-D3A7-4304-8FDF-3C5ED51C8BA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A28F42F0-FBDA-4574-AD30-7A04F27FEA3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129CA55C-C770-4D42-BD17-9011F3AC93C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_service_broker:6.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6235EAE-47DD-4292-9941-6FF8D0A83843"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_communications_broker:3.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BE83BC6-5A6F-40A1-AAC7-314A575D8E07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7015A8CB-8FA6-423E-8307-BD903244F517"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_session_border_controller:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A4E206-56C7-4578-AC9C-088B0C8D9CFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.7",
            "versionEndIncluding" : "8.1.1",
            "matchCriteriaId" : "7EA4D3C5-6A7C-4421-88EF-445A96DBCE0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_model_management_and_governance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.8",
            "versionEndIncluding" : "8.1.1",
            "matchCriteriaId" : "0E8FD060-E9A8-499C-87B0-AF7BBED7771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_core_banking:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndIncluding" : "11.8.0",
            "matchCriteriaId" : "AB8A1479-591A-4858-9B18-3B595694A965"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_core_banking:5.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFE7E72-D419-4040-81AB-B4934C13909F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_core_banking:11.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B283B614-9E31-4148-8688-B0672B3A77B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA86EF7E-6162-4244-9C88-7AF5CAB787E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_data_management_workbench:2.5.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9A32B-B776-4704-818D-977B4B20D677"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_data_management_workbench:3.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6989178B-A3D5-4441-A56C-6C639D4759DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.1",
            "versionEndIncluding" : "3.0.4",
            "matchCriteriaId" : "16AEA21E-0B11-44A5-8BFB-550521D8E0D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:healthcare_data_repository:8.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C673C4-A825-46C0-816B-103E1C058D03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:helidon:1.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CB181A-803A-4C8D-BB6A-8B7CE65C5A7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:helidon:2.2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA1985E-D3D4-4053-A538-22C428D160CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F89EC4B-6D34-40F0-B7C6-C03D03F81C13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C9E689-ED91-4A9D-B9C0-5BF4EC131409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC2370B5-F41B-45F6-AC9F-9C7B258AA717"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF958C28-4289-4433-8CD9-B6551F01926F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57E9FC66-F6A0-4FB0-8D92-2C9B9E3F2184"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3E25293-CB03-44CE-A8ED-04B3A0487A6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F9721E3-EE25-4C8A-9E0A-E60D465E0A97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.2.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B47C49C-3662-4FCB-82E8-7484F7151858"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A6C04D-43B3-4B83-A185-7CBD838C97E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:insurance_rules_palette:11.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B51896-E4DA-4FDA-979F-481FFB3E588A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.42",
            "matchCriteriaId" : "71CB79ED-A93E-4CBD-BCDD-82C5A00B373B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.7",
            "versionEndIncluding" : "17.12",
            "matchCriteriaId" : "08FA59A8-6A62-4B33-8952-D6E658F8DAC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "202AD518-2E9B-4062-B063-9858AE1F9CE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10864586-270E-4ACF-BDCC-ECFCD299305F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38340E3C-C452-4370-86D4-355B6B4E0A06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C55C69-E22E-4B80-9371-5CD821D79FE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CADD7026-EF85-40A5-8563-7A34C6941B1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F019E8-F68D-41B5-9480-0A81616F2E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "21.2",
            "matchCriteriaId" : "3AC56890-3225-4A0F-B48A-1FB761810062"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:rest_data_services:21.3:*:*:*:-:*:*:*",
            "matchCriteriaId" : "37DDB2B3-1C16-44D6-BEE2-9D34637230F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48C9BD8E-7214-4B44-B549-6F11B3EA8A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.1",
            "versionEndIncluding" : "16.0.3",
            "matchCriteriaId" : "A921C710-1C59-429F-B985-67C0DBFD695E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:13.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40AABFD3-1D0D-4C6B-BA9A-9DA70241B51C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:14.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EEF867A-587A-45E1-B2F6-0B903903F0F9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CFCE558-9972-46A2-8539-C16044F1BAA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1194C4E-CF42-4B4D-BA9A-40FDD28F1D58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:19.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFDF4CB0-4680-449A-8576-915721D59500"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD311C33-A309-44D5-BBFB-539D72C7F8C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_merchandising_system:16.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8383028-B719-41FD-9B6A-71F8EB4C5F8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE1BC44A-F0AF-41CD-9CEB-B07AB5ADAB38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38E74E68-7F19-4EF3-AC00-3C249EAAA39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0783F0D1-8FAC-4BCA-A6F5-C5C60E86D56D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BD0D41-1BED-4C4F-95C8-8987C98908DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_pricing:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5D06393-D43A-4A5E-BED5-4DF2F4F38C74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0.1",
            "versionEndIncluding" : "16.0.3",
            "matchCriteriaId" : "0CE45891-A6A5-4699-90A6-6F49E60A7987"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:14.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054F9E62-A6D6-4850-83AD-3628C74A4384"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E702EBED-DB39-4084-84B1-258BC5FE7545"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F7956BF-D5B6-484B-999C-36B45CD8B75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:19.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D14A54A-4B04-41DE-B731-844D8AC3BE23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA6B655-A445-42E5-B6D9-70AB1C04774A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_size_profile_optimization:16.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74ACC94B-4A9F-451D-B639-6008A108BDDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEC41EB8-73B4-4BDF-9321-F34EC0BAF9E6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48EFC111-B01B-4C34-87E4-D6B2C40C0122"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "073FEA23-E46A-4C73-9D29-95CFF4F5A59D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A69FB468-EAF3-4E67-95E7-DF92C281C1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:solaris_cluster:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A83709-4D38-4844-8928-0C2D6F2033BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3ED272C-A545-4F8C-86C0-2736B3F2DCAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B4C338-11E1-4235-9D5A-960B2711AC39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C93F84E-9680-44EF-8656-D27440B51698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A4F71A-4269-40FC-8F61-1D1301F2B728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:webcenter_portal:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A502118-5B2B-47AE-82EC-1999BD841103"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:linux:*:*",
            "matchCriteriaId" : "F3E0B672-3E06-4422-B2A4-0BD073AEC2A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://issues.apache.org/jira/browse/IO-556",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34%40%3Cdev.myfaces.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e%40%3Cpluto-scm.portals.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa%40%3Cuser.commons.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31%40%3Cdev.commons.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a%40%3Cuser.commons.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab%40%3Cuser.commons.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c%40%3Cdev.creadur.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330%40%3Cdev.commons.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220210-0004/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://issues.apache.org/jira/browse/IO-556",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r01b4a1fcdf3311c936ce33d75a9398b6c255f00c1a2f312ac21effe1%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0bfa8f7921abdfae788b1f076a12f73a92c93cc0a6e1083bce0027c5%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0d73e2071d1f1afe1a15da14c5b6feb2cf17e3871168d5a3c8451436%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r1c2f4683c35696cf6f863e3c107e37ec41305b1930dd40c17260de71%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r20416f39ca7f7344e7d76fe4d7063bb1d91ad106926626e7e83fb346%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2345b49dbffa8a5c3c589c082fe39228a2c1d14f11b96c523da701db%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r27b1eedda37468256c4bb768fde1e8b79b37ec975cbbfd0d65a7ac34%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2bc986a070457daca457a54fe71ee09d2584c24dc262336ca32b6a19%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2df50af2641d38f432ef025cd2ba5858215cc0cf3fc10396a674ad2e%40%3Cpluto-scm.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r345330b7858304938b7b8029d02537a116d75265a598c98fa333504a%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4050f9f6b42ebfa47a98cbdee4aabed4bb5fb8093db7dbb88faceba2%40%3Ccommits.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r462db908acc1e37c455e11b1a25992b81efd18e641e7e0ceb1b6e046%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r477c285126ada5c3b47946bb702cb222ac4e7fd3100c8549bdd6d3b2%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r47ab6f68cbba8e730f42c4ea752f3a44eb95fb09064070f2476bb401%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5149f78be265be69d34eacb4e4b0fc7c9c697bcdfa91a1c1658d717b%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r523a6ffad58f71c4f3761e3cee72df878e48cdc89ebdce933be1475c%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r808be7d93b17a7055c1981a8453ae5f0d0fce5855407793c5d0ffffa%40%3Cuser.commons.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8569a41d565ca880a4dee0e645dad1cd17ab4a92e68055ad9ebb7375%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86528f4b7d222aed7891e7ac03d69a0db2a2dfa17b86ac3470d7f374%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r873d5ddafc0a68fd999725e559776dc4971d1ab39c0f5cc81bd9bc04%40%3Ccommits.pulsar.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8bfc7235e6b39d90e6f446325a5a44c3e9e50da18860fdabcee23e29%40%3Cissues.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r8efcbabde973ea72f5e0933adc48ef1425db5cde850bf641b3993f31%40%3Cdev.commons.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r92ea904f4bae190b03bd42a4355ce3c2fbe8f36ab673e03f6ca3f9fa%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra8ef65aedc086d2d3d21492b4c08ae0eb8a3a42cc52e29ba1bc009d8%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/raa053846cae9d497606027816ae87b4e002b2e0eb66cb0dee710e1f5%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rad4ae544747df32ccd58fff5a86cd556640396aeb161aa71dd3d192a%40%3Cuser.commons.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbebd3e19651baa7a4a5503a9901c95989df9d40602c8e35cb05d3eb5%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc10fa20ef4d13cbf6ebe0b06b5edb95466a1424a9b7673074ed03260%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc2dd3204260e9227a67253ef68b6f1599446005bfa0e1ddce4573a80%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc359823b5500e9a9a2572678ddb8e01d3505a7ffcadfa8d13b8780ab%40%3Cuser.commons.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc5f3df5316c5237b78a3dff5ab95b311ad08e61d418cd992ca7e34ae%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc65f9bc679feffe4589ea0981ee98bc0af9139470f077a91580eeee0%40%3Cpluto-dev.portals.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rca71a10ca533eb9bfac2d590533f02e6fb9064d3b6aa3ec90fdc4f51%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd09d4ab3e32e4b3a480e2ff6ff118712981ca82e817f28f2a85652a6%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re41e9967bee064e7369411c28f0f5b2ad28b8334907c9c6208017279%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/red3aea910403d8620c73e1c7b9c9b145798d0469eb3298a7be7891af%40%3Cnotifications.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfa2f08b7c0caf80ca9f4a18bd875918fdd4e894e2ea47942a4589b9c%40%3Cdev.creadur.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfcd2c649c205f12b72dde044f905903460669a220a2eb7e12652d19d%40%3Cdev.zookeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfd01af05babc95b8949e6d8ea78d9834699e1b06981040dde419a330%40%3Cdev.commons.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00016.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20220210-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29943",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-13T07:15:12.403",
      "lastModified" : "2024-11-21T06:02:01.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When using ConfigurableInternodeAuthHadoopPlugin for authentication, Apache Solr versions prior to 8.8.2 would forward/proxy distributed requests using server credentials instead of original client credentials. This would result in incorrect authorization resolution on the receiving hosts."
      }, {
        "lang" : "es",
        "value" : "Cuando se usa la función ConfigurableInternodeAuthHadoopPlugin para la autenticación, Apache Solr versiones anteriores a versión 8.8.2 reenviaría y realizaría proxy de unas peticiones distribuidas usando unas credenciales del servidor en lugar de las credenciales originales del cliente. Esto podría resultar en una resolución de autorización incorrecta en los hosts receptores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:solr:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.8.2",
            "matchCriteriaId" : "B8DCA294-D45F-4B22-8183-301F60BC4393"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r91dd0ff556e0c9aab4c92852e0e540c59d4633718ce12881558cf44d%40%3Cusers.solr.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0009/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r91dd0ff556e0c9aab4c92852e0e540c59d4633718ce12881558cf44d%40%3Cusers.solr.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0009/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25250",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-04-13T13:15:13.333",
      "lastModified" : "2024-11-21T05:54:37.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a sensitive file could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One, Trend Micro Apex One as a Service y OfficeScan XG SP1, en un archivo confidencial podría permitir a un atacante local escalar los privilegios en las instalaciones afectadas.&#xa0;Nota: un atacante primero debe obtener la habilidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:saas:*:*:*",
            "matchCriteriaId" : "8FA15535-6AC8-4062-BE7B-CD545B7516E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-400/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-400/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25253",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-04-13T13:15:13.443",
      "lastModified" : "2024-11-21T05:54:38.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper access control vulnerability in Trend Micro Apex One, Trend Micro Apex One as a Service and OfficeScan XG SP1 on a resource used by the service could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en Trend Micro Apex One, Trend Micro Apex One as a Service y OfficeScan XG SP1, en un recurso usado por el servicio podría permitir a un atacante local escalar privilegios en las instalaciones afectadas.&#xa0;Nota: un atacante primero debe obtener la habilidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:saas:*:*:*",
            "matchCriteriaId" : "8FA15535-6AC8-4062-BE7B-CD545B7516E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-401/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-401/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28645",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-04-13T13:15:13.520",
      "lastModified" : "2024-11-21T06:00:00.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An incorrect permission assignment vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de asignación de permisos incorrecta en Trend Micro Apex One, Apex One as a Service y OfficeScan XG SP1, podría permitir a un atacante local escalar los privilegios en las instalaciones afectadas.&#xa0;Nota: un atacante primero debe obtener la habilidad de ejecutar código poco privilegiado en el sistema de destino para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:saas:*:*:*",
            "matchCriteriaId" : "8FA15535-6AC8-4062-BE7B-CD545B7516E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-402/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-402/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28646",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-04-13T13:15:13.583",
      "lastModified" : "2024-11-21T06:00:00.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An insecure file permissions vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a local attacker to take control of a specific log file on affected installations."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de permisos de archivo no segura en Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1, podría permitir a un atacante local tomar el control de un archivo de registro específico en las instalaciones afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF019D2D-C426-4D2D-A254-442CE777B41E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:apex_one:2019:*:*:*:saas:*:*:*",
            "matchCriteriaId" : "8FA15535-6AC8-4062-BE7B-CD545B7516E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:officescan:xg:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "64600B42-4884-41F2-A683-AE1EDB79372E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://success.trendmicro.com/solution/000286157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28647",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-04-13T13:15:13.647",
      "lastModified" : "2024-11-21T06:00:01.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Password Manager version 5 (Consumer) is vulnerable to a DLL Hijacking vulnerability which could allow an attacker to inject a malicious DLL file during the installation progress and could execute a malicious program each time a user installs a program."
      }, {
        "lang" : "es",
        "value" : "Trend Micro Password Manager versión 5 (Consumer) es vulnerable a una vulnerabilidad de secuestro DLL que podría permitir a un atacante inyectar un archivo DLL malicioso durante el progreso de la instalación y podría ejecutar un programa malicioso cada vez que un usuario instala un programa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:password_manager:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0.0.1217",
            "matchCriteriaId" : "658B9844-B410-4757-A4C1-EBE313BA7524"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10282",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10282",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22505",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-13T14:15:13.833",
      "lastModified" : "2024-11-21T05:50:14.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Escalation of privileges vulnerability in Micro Focus Operations Agent, affects versions 12.0x, 12.10, 12.11, 12.12, 12.14 and 12.15. The vulnerability could be exploited to escalate privileges and execute code under the account of the Operations Agent."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios en Micro Focus Operations Agent afecta a versiones 12.0x, 12.10, 12.11, 12.12, 12.14 y 12.15.&#xa0;La vulnerabilidad podría ser explotada para escalar privilegios y ejecutar código bajo la cuenta del Operations Agent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B386C147-D89B-45C2-9C68-545C1102F519"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.01:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A21863B-4079-44B7-9E77-AEF2ACFEE866"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.02:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCB70185-D717-4CCD-96D7-D87DB0B26D23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.03:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFAEA425-6775-422A-810F-34148C0568D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.04:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D8E42D-76B8-44F1-9D5E-1E028856048B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CE2D00B-25CF-46C5-9A59-7288D027FF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4AF06A9-7934-49E4-BA84-4060F069FE12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71E8620F-E030-4A29-9630-E52FE9F8CBAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7DCB40C1-168E-41AE-B346-C3579ECCE8B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.12:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89DB61A8-FE89-46FA-AE38-65B79998BB82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.14:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B55488BF-8BF0-489C-8FEF-2B68F5964B15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:operations_agent:12.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "973DFAB3-05AE-49A0-917B-ADAD9C296322"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03792442",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03792442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28421",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T14:15:14.113",
      "lastModified" : "2023-11-07T03:32:08.800",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-21417. Reason: This candidate is a duplicate of CVE-2021-21417. Notes: All CVE users should reference CVE-2021-21417 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30175",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T14:15:14.363",
      "lastModified" : "2024-11-21T06:03:27.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page."
      }, {
        "lang" : "es",
        "value" : "ZEROF Web Server versión 1.0 (Abril de 2021) permite una inyección SQL por medio del endpoint /HandleEvent para la página de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zerof:web_server:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF8B0A5-0D61-4922-81C5-EDC1FDFCC901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awillix/research/blob/main/cve/CVE-2021-30175.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pro.zerof.ru",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/awillix/research/blob/main/cve/CVE-2021-30175.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pro.zerof.ru",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30176",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T14:15:14.427",
      "lastModified" : "2024-11-21T06:03:27.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ZEROF Expert pro/2.0 application for mobile devices allows SQL Injection via the Authorization header to the /v2/devices/add endpoint."
      }, {
        "lang" : "es",
        "value" : "La aplicación ZEROF Expert versión pro/2.0 para dispositivos móviles permite una inyección SQL por medio del encabezado Authorization para el endpoint /v2/devices/add"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zerof:expert:2.0:*:*:*:pro:*:*:*",
            "matchCriteriaId" : "856D810B-709C-4D5A-BBB4-8FC31FDE4CF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awillix/research/blob/main/cve/CVE-2021-30176.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pro.zerof.ru",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/awillix/research/blob/main/cve/CVE-2021-30176.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://pro.zerof.ru",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21729",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-04-13T16:15:12.373",
      "lastModified" : "2024-11-21T05:48:53.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Some ZTE products have CSRF vulnerability. Because some pages lack CSRF random value verification, attackers could perform illegal authorization operations by constructing messages.This affects: ZXHN H168N V3.5.0_EG1T5_TE, V2.5.5, ZXHN H108N V2.5.5_BTMT1"
      }, {
        "lang" : "es",
        "value" : "Algunos productos ZTE presentan una vulnerabilidad de tipo CSRF.&#xa0;Debido a que algunas páginas presentan un fallo de verificación de valor aleatorio de CSRF, atacantes podrían llevar a cabo operaciones de autorización ilegales mediante la construcción de mensajes. Esto afecta a: ZXHN H168N versión V3.5.0_EG1T5_TE, versión V2.5.5, ZXHN H108N V2.5.5_BTMT1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxhn_h168n_firmware:3.5.0_eg1t5_te:*:*:*:*:*:*:*",
            "matchCriteriaId" : "504FD446-1E1A-45DD-AB20-38C665AB4E4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxhn_h168n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391EB61C-0A7B-48A6-8BBD-944C848ACD10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxhn_h108n_firmware:2.5.5_btmt1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02F52956-9DFE-4FB6-887D-130E762237DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxhn_h108n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6094FC9D-0E19-499B-8D3E-7C1BF5D7FEBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014904",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21730",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-04-13T16:15:12.450",
      "lastModified" : "2024-11-21T05:48:53.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A ZTE product is impacted by improper access control vulnerability. The attacker could exploit this vulnerability to access CLI by brute force attacks.This affects: ZXHN H168N V3.5.0_TY.T6"
      }, {
        "lang" : "es",
        "value" : "Un producto ZTE está afectado por una vulnerabilidad de control de acceso inapropiado.&#xa0;El atacante podría explotar esta vulnerabilidad para acceder a la CLI por medio de ataques de fuerza bruta. Esto afecta a: ZXHN H168N versión V3.5.0_TY.T6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:zte:zxhn_h168n_firmware:3.5.0_ty.t6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9554EABB-AE2E-43B0-9F67-C10F9EAC9FDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:zte:zxhn_h168n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "391EB61C-0A7B-48A6-8BBD-944C848ACD10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014864",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21731",
      "sourceIdentifier" : "psirt@zte.com.cn",
      "published" : "2021-04-13T16:15:12.513",
      "lastModified" : "2025-01-28T15:36:03.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CSRF vulnerability exists in the management page of a ZTE product.The vulnerability is caused because the management page does not fully verify whether the request comes from a trusted user. The attacker could submit a malicious request to the affected device to delete the data. This affects: ZXCLOUD iRAI All versions up to KVM-ProductV6.03.04"
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de tipo CSRF en la página de administración de un producto ZTE. La vulnerabilidad es debido a que la página de administración no verifica completamente si la petición proviene de un usuario confiable.&#xa0;El atacante podría enviar una petición maliciosa hacia el dispositivo afectado para eliminar los datos.&#xa0;Esto afecta: ZXCLOUD iRAI Todas las versiones hasta KVM-ProductV6.03.04"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zte:zxcloud_irai:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.03.04",
            "matchCriteriaId" : "9EFAC29A-DE5B-42C6-9A48-8AE6419DB37C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:zte:zxcloud_irai:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96352962-7748-44B8-9490-B95202771469"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014824",
        "source" : "psirt@zte.com.cn",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1014824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28973",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T17:15:12.217",
      "lastModified" : "2024-11-21T06:00:28.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The XML Import functionality of the Administration console in Perforce Helix ALM 2020.3.1 Build 22 accepts XML input data that is parsed by insecurely configured software components, leading to XXE attacks."
      }, {
        "lang" : "es",
        "value" : "La funcionalidad XML Import de la consola de Administración en Perforce Helix ALM versión 2020.3.1 Build 22, acepta datos de entrada XML que son analizados por componentes de software configurados de forma no segura, conllevando a ataques de tipo XXE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:perforce:helix_alm:2020.3.1:build_22:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C75478-3F9D-4219-9DE2-5F06010B6FA4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.compass-security.com/fileadmin/Research/Advisories/2021-01_CSNC-2021-005_Helix_ALM_XXE.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Research/Advisories/2021-01_CSNC-2021-005_Helix_ALM_XXE.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29997",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T17:15:12.263",
      "lastModified" : "2024-11-21T06:02:08.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Wind River VxWorks 7 before 21.03. A specially crafted packet may lead to buffer over-read on IKE."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Wind River VxWorks 7 antes de la versión 21.03. Un paquete especialmente diseñado puede provocar una sobrelectura del búfer en IKE."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0",
            "versionEndExcluding" : "21.03",
            "matchCriteriaId" : "DB07AF57-0F8D-4DCD-80DA-64096674F017"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2021-29997",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support2.windriver.com/index.php?page=security-notices",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support2.windriver.com/index.php?page=cve&on=view&id=CVE-2021-29997",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support2.windriver.com/index.php?page=security-notices",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29998",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T17:15:12.310",
      "lastModified" : "2024-11-21T06:02:08.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Wind River VxWorks versiones anteriores a 6.5.&#xa0;Se presenta un posible desbordamiento de la pila en el cliente dhcp"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5",
            "matchCriteriaId" : "03B0DF42-7A4C-4D11-845C-43FDD54C3E18"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:ruggedcom_win_subscriber_station_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "789B059C-4E07-44A3-A69F-A77FEC3ED3D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:ruggedcom_win_subscriber_station:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8442F026-8F07-40C1-8845-460FE87DD16E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200-4_p_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5402555C-7F00-4CB2-8EB7-8CC678170C58"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200-4_p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E42E20-18CB-40A7-B6D5-751F26303995"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F45960F-8E24-497B-86D3-40816FDAFCAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3268CF75-6DAB-416A-B19B-2A8F95C268CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E81C7358-632C-47AC-A2D2-F3C390CC452A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492E8AC1-338B-4AC3-90C7-1FADCD4528C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68AB0A4C-7867-4C50-A500-9D7F00219B5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577D1E21-717C-4508-AE91-0BC490C89F85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11AEF3D6-96B0-431F-A664-E8E281CDA61C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB62730-E759-455A-A308-F9DB084B35B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70610406-76B7-47E6-A389-622074C72617"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4726901-34BF-4F70-80A6-71648A4A29FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "538627CD-9730-4F63-83A8-CA9C447E4766"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31F0E-389B-4925-88DE-726F2F0D2A23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034BA07A-82E8-49BC-A392-55D617BB52D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF096BA-A6F4-46B3-9B9B-7FCEE7E6A6C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C3DA812-8E86-4C23-B92D-3655575B2676"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CE5A4-3EB1-4E93-BEB7-520E08DA6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E170F607-8B16-4F54-81E5-97F0D02D1EB7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCBC784-8EA0-4C6C-B504-DFC164028E4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA642A1-6054-48FB-A6B8-8E0859B377D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE27611-53E7-4162-8630-5BC334B02E37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1A11A6-1ECD-4F41-9175-90E78D097B5B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDEBD6B-6BE4-4FAD-A4E6-BE762595434D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56885E0C-CF3A-4DBC-87D1-113A2578C641"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FFC1E9-4326-4F41-A86A-C52AB6A9A674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72B90335-C0B4-4AB8-89ED-C7DE860871CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5BB0F2-DD4C-4AB4-9B8F-B2501B239080"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC23F70-522C-4963-87C7-9F28D3D2C1E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFF7FB7-774B-45ED-8400-951230DF0511"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697984F9-8A95-42A4-BCA9-D181D849299E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B574E2-F7BA-496B-887C-D25F386AA5E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x208_pro_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF06E74-9DD6-42BF-85FB-CB6A50D25063"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x208_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2C9BA52-59BD-49B2-B932-9A364D9E6365"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2620D247-4608-44CF-90B2-1097D98EB067"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E716A4E-50A9-4C52-8DA9-098F7506F4B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B0864B-8696-42B9-A409-958D879294D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08CDEE3-43EB-475E-8571-6E12824714FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D73D50F-6BC0-47A3-BBCE-51AC3E42E6D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C4BAB5-E161-4B59-8A8C-369C7852A66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39963CE4-018F-4229-90BF-F647F4E264AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2203895-BC4E-4B2F-9110-C2CD88A121F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x300_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42E2C599-41E1-473A-8E05-011C5DE120D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3F6299B-D7E3-4750-B016-7DCBC83C2287"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x408_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "161EF365-C693-4FFE-97DF-DE96B84B98A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x408:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47F713E4-4B75-476E-BC21-92CA10198AE9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C4E4AA9-CDFF-4742-8680-79711FBE865D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41614C70-97B4-44C8-A441-530A413A26F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08E037EF-75CD-4A27-96BC-7DAF113A7BE5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6751FB7D-C72C-4321-B535-5880FE696FC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89727F5E-2482-4C47-BAF7-91735B098790"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1AE867-67B4-4871-BF56-88017533A737"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57808C94-3438-4DA9-9995-6CE2FCA06D59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DDF1EB-80E7-491F-A197-1B220E35CDF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F0D5718-455A-4FE1-B2D4-14CD1A3C4096"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69285324-4C0B-4BDC-B60D-F653679DD52D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F316894-3BBB-4B72-8636-23868BF557AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E6AFAA-B903-47BB-B0F3-7650B039C0FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7CC146-F73F-4635-A356-DE0CA8D8DE59"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B40D2EB-5C69-47FA-801B-DC48407D418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5446CA2B-054C-4804-BBDD-685A8F802FF0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898613B2-4A9D-44B9-A3FC-4347A2AD7CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf_181_eip_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B750B38E-EB65-4812-B9AA-33CA3F887B80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf_181_eip:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69DC3D78-6E5C-4623-A416-D135DC978D57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simatic_rf_182c_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7DFC5CB-F4DF-489E-B438-7FD5E4061DF7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simatic_rf_182c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0074582F-B557-462A-9A77-13EAE9F8654F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:sinamics_perfect_harmony_gh180_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2015",
            "versionEndExcluding" : "2022",
            "matchCriteriaId" : "6E22ACA9-EBF1-43D0-ADC2-DA9A965CEDB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:sinamics_perfect_harmony_gh180:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C86C1E-8320-4C73-80C9-E4257E7A7D31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support2.windriver.com/index.php?page=security-notices",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-560465.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-910883.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support2.windriver.com/index.php?page=security-notices",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-194-12",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29999",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T17:15:12.357",
      "lastModified" : "2024-11-21T06:02:08.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Wind River VxWorks through 6.8. There is a possible stack overflow in dhcp server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Wind River VxWorks versiones hasta 6.8.&#xa0;Se presenta un posible desbordamiento de pila en el servidor DHCP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:windriver:vxworks:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.8",
            "matchCriteriaId" : "8EB179D9-BA84-4DEA-88DF-AC3D0DE76EE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support2.windriver.com/index.php?page=security-notices",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support2.windriver.com/index.php?page=security-notices",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0400",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.147",
      "lastModified" : "2024-11-21T05:42:39.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In injectBestLocation and handleUpdateLocation of GnssLocationProvider.java, there is a possible incorrect reporting of location data to emergency services due to improper input validation. This could lead to incorrect reporting of location data to emergency services with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11Android ID: A-177561690"
      }, {
        "lang" : "es",
        "value" : "En las funciones injectBestLocation y handleUpdateLocation del archivo GnssLocationProvider.java, se presenta un posible reporte incorrecto de los datos de ubicación para los servicios de emergencia debido a una comprobación inapropiada de entrada.&#xa0;Esto podría conllevar a reportes incorrectos de los datos de ubicación a los servicios de emergencia con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11, ID de Android: A-177561690"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0426",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.553",
      "lastModified" : "2024-11-21T05:42:42.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In parsePrimaryFieldFirstUidAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174485572"
      }, {
        "lang" : "es",
        "value" : "En la función parsePrimaryFieldFirstUidAnnotation del archivo LogEvent.cpp, se presenta una posible escritura fuera de límites debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-174485572"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0427",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.617",
      "lastModified" : "2024-11-21T05:42:42.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In parseExclusiveStateAnnotation of LogEvent.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174488848"
      }, {
        "lang" : "es",
        "value" : "En la función parseExclusiveStateAnnotation del archivo LogEvent.cpp, se presenta una posible escritura fuera de límites debido a un desbordamiento del búfer de la pila.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-174488848"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0428",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.677",
      "lastModified" : "2024-11-21T05:42:42.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In getSimSerialNumber of TelephonyManager.java, there is a possible way to read a trackable identifier due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10Android ID: A-173421434"
      }, {
        "lang" : "es",
        "value" : "En la función getSimSerialNumber del archivo TelephonyManager.java, se presenta una forma posible de leer un identificador rastreable debido a una falta comprobación de permiso.&#xa0;Esto podría conllevar a una divulgación de información local con los privilegios de ejecución User necesarios.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10, ID de Android: A-173421434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-09-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-09-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0429",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.727",
      "lastModified" : "2024-11-21T05:42:42.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pollOnce of ALooper.cpp, there is possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-175074139"
      }, {
        "lang" : "es",
        "value" : "En la función pollOnce del archivo ALooper.cpp, se presenta una posible corrupción de memoria debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11 Android-8.1, ID de Android: A-175074139"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0430",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.787",
      "lastModified" : "2024-11-21T05:42:42.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution via a malicious NFC packet with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-178725766"
      }, {
        "lang" : "es",
        "value" : "En la función rw_mfc_handle_read_op del archivo rw_mfc.cc, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una ejecución de código remota por medio de un paquete NFC malicioso sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-10 Android-11, ID de Android: A-178725766"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162380/Android-NFC-Stack-Out-Of-Bounds-Write.html",
        "source" : "security@android.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162380/Android-NFC-Stack-Out-Of-Bounds-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0431",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.850",
      "lastModified" : "2024-11-21T05:42:42.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_msg_cback of avrc_api.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure to a paired device with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174149901"
      }, {
        "lang" : "es",
        "value" : "En la función avrc_msg_cback del arcjhvo avrc_api.cc, se presenta una posible lectura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una divulgación de información remota a un dispositivo emparejado sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, Android-8.1 Android-9 Android-10, ID de Android: A-174149901"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0432",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.913",
      "lastModified" : "2024-11-21T05:42:42.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ClearPullerCacheIfNecessary and ForceClearPullerCache of StatsPullerManager.cpp, there is a possible use-after-free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-173552790"
      }, {
        "lang" : "es",
        "value" : "En las funciones ClearPullerCacheIfNeeded y ForceClearPullerCache del archivo StatsPullerManager.cpp, se presenta un posible uso de la memoria previamente liberada debido a una condición de carrera.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-173552790"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0433",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:12.960",
      "lastModified" : "2024-11-21T05:42:42.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onCreate of DeviceChooserActivity.java, there is a possible way to bypass user consent when pairing a Bluetooth device due to a tapjacking/overlay attack. This could lead to local escalation of privilege and pairing malicious devices with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-171221090"
      }, {
        "lang" : "es",
        "value" : "En la función onCreate del archivo DeviceChooserActivity.java, se presenta una forma posible de omitir el consentimiento del usuario al emparejar un dispositivo Bluetooth debido a un ataque de tapjacking/overlay.&#xa0;Esto podría conllevar a una escalada de privilegios local y al emparejamiento de dispositivos maliciosos sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-171221090"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.4,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 5.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0435",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.023",
      "lastModified" : "2024-11-21T05:42:43.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In avrc_proc_vendor_command of avrc_api.cc, there is a possible leak of heap data due to uninitialized data. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-174150451"
      }, {
        "lang" : "es",
        "value" : "En la función avrc_proc_vendor_command del archivo avrc_api.cc, se presenta una posible fuga de datos de la pila debido a datos no inicializados.&#xa0;Esto podría conllevar a una divulgación de información remota sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, Android-8.1 Android-9 Android-10, ID de Android: A-174150451"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0436",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.087",
      "lastModified" : "2024-11-21T05:42:43.313",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In CryptoPlugin::decrypt of CryptoPlugin.cpp, there is a possible out of bounds read due to integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-176496160"
      }, {
        "lang" : "es",
        "value" : "En la función CryptoPlugin::decrypt del archivo CryptoPlugin.cpp, se presenta una posible lectura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-176496160"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0437",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.147",
      "lastModified" : "2024-11-21T05:42:43.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setPlayPolicy of DrmPlugin.cpp, there is a possible double free. This could lead to local escalation of privilege in a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-176168330"
      }, {
        "lang" : "es",
        "value" : "En la función setPlayPolicy del archivo DrmPlugin.cpp, se presenta una posible doble liberación.&#xa0;Esto podría conllevar a una escalada de privilegios local en un proceso privilegiado sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, Android-8.1 Android-9 Android-10, ID de Android: A-176168330"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0438",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.193",
      "lastModified" : "2024-11-21T05:42:43.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of InputDispatcher.cpp, WindowManagerService.java, and related files, there is a possible tapjacking attack due to an incorrect FLAG_OBSCURED value. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10Android ID: A-152064592"
      }, {
        "lang" : "es",
        "value" : "En varias funciones de los archivos InputDispatcher.cpp, WindowManagerService.java y archivos relacionados, se presenta un posible ataque de tapjacking debido a un valor FLAG_OBSCURED incorrecto.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10, ID de Android: A-152064592"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0439",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.257",
      "lastModified" : "2024-11-21T05:42:43.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In setPowerModeWithHandle of com_android_server_power_PowerManagerService.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174243830"
      }, {
        "lang" : "es",
        "value" : "En la función setPowerModeWithHandle del archivo com_android_server_power_PowerManagerService.cpp, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-174243830"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0442",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.320",
      "lastModified" : "2024-11-21T05:42:43.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In updateInfo of android_hardware_input_InputApplicationHandle.cpp, there is a possible control of code flow due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174768985"
      }, {
        "lang" : "es",
        "value" : "En la función updateInfo del archivo android_hardware_input_InputApplicationHandle.cpp, se presenta un posible control del flujo de código debido a un uso de la memoria previamente liberada.&#xa0;Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-174768985"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0443",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.380",
      "lastModified" : "2024-11-21T05:42:44.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In several functions of ScreenshotHelper.java and related files, there is a possible incorrectly saved screenshot due to a race condition. This could lead to local information disclosure across user profiles with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-11Android ID: A-170474245"
      }, {
        "lang" : "es",
        "value" : "En varias funciones del archivo ScreenshotHelper.java y archivos relacionados, se presenta una posible captura de pantalla guardada incorrectamente debido a una condición de carrera.&#xa0;Esto podría conllevar a una divulgación de información local en todos los perfiles de usuario sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.1 Android-9 Android-10 Android-11, ID de Android: A-170474245"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0444",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.443",
      "lastModified" : "2024-11-21T05:42:44.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In onActivityResult of QuickContactActivity.java, there is an unnecessary return of an intent. This could lead to local information disclosure of contact data with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11 Android-8.1 Android-9 Android-10Android ID: A-178825358"
      }, {
        "lang" : "es",
        "value" : "En la función onActivityResult del archivo QuickContactActivity.java, existe un retorno innecesario de una intención.&#xa0;Esto podría conllevar a una divulgación de información local de los datos de contacto sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, Android-8.1 Android-9 Android-10, ID de Android: A-178825358"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0445",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.507",
      "lastModified" : "2024-11-21T05:42:44.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In start of WelcomeActivity.java, there is a possible residual profile due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-9Android ID: A-172322502"
      }, {
        "lang" : "es",
        "value" : "En la función Star del archivo WelcomeActivity.java, se presenta un posible perfil residual debido a un confused deputy. Esto podría conllevar a una escalada de privilegios local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, Android-9, ID de Android: A-172322502"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0446",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.570",
      "lastModified" : "2024-11-21T05:42:44.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In ImportVCardActivity, there is a possible way to bypass user consent due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-172252122"
      }, {
        "lang" : "es",
        "value" : "En la función ImportVCardActivity, se presenta una forma posible de omitir el consentimiento del usuario debido a un ataque de tapjacking/overlay.&#xa0;Esto podría conllevar a una escalada de privilegios local con los privilegios de ejecución User necesarios.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-11, ID de Android: A-172252122"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1021"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0468",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.633",
      "lastModified" : "2024-11-21T05:42:46.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In LK, there is a possible escalation of privilege due to an insecure default value. This could lead to local escalation of privilege for an attacker who has physical access to the device with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android SoCAndroid ID: A-180427272"
      }, {
        "lang" : "es",
        "value" : "En LK, se presenta una posible escalada de privilegios debido a un valor predeterminado no seguro.&#xa0;Esto podría conllevar a una escalada de privilegios local para un atacante que tiene acceso físico al dispositivo sin ser necesarios privilegios de ejecución adicionales.&#xa0;Es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android SoCAndroid, ID: A-180427272"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0471",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-13T19:15:13.693",
      "lastModified" : "2024-11-21T05:42:46.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In decrypt_1_2 of CryptoPlugin.cpp, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-9 Android-10 Android-11 Android-8.1Android ID: A-176444786"
      }, {
        "lang" : "es",
        "value" : "En la función decrypt_1_2 del archivo CryptoPlugin.cpp, se presenta una posible lectura fuera de límites debido a un desbordamiento de enteros.&#xa0;Esto podría conllevar a una divulgación de información local sin ser necesarios privilegios de ejecución adicionales.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: Android-9 Android-10 Android-11 Android-8.1, ID de Android: A-176444786"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21482",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:13.740",
      "lastModified" : "2024-11-21T05:48:27.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Master Data Management, versions - 710, 710.750, allows a malicious unauthorized user with access to the MDM Server subnet to find the password using a brute force method. If successful, the attacker could obtain access to highly sensitive data and MDM administrative privileges leading to information disclosure vulnerability thereby affecting the confidentiality and integrity of the application. This happens when security guidelines and recommendations concerning administrative accounts of an SAP NetWeaver Master Data Management installation have not been thoroughly reviewed."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Master Data Management, versiones - 710, 710.750, permite a un usuario malicioso no autorizado con acceso a la subred del MDM Server encontrar la contraseña usando un método de fuerza bruta.&#xa0;Si tiene éxito, el atacante podría obtener acceso a datos altamente confidenciales y privilegios administrativos de MDM, conllevando a una vulnerabilidad de divulgación de información que afectaría la confidencialidad e integridad de la aplicación.&#xa0;Esto sucede cuando las pautas y recomendaciones de seguridad relativas a las cuentas administrativas de una instalación de SAP NetWeaver Master Data Management no han sido revisadas a fondo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management:7.10.750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "071CC928-964B-4CCB-AA4B-C61B4EB9AF0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_master_data_management:710:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18569141-CFE0-4829-A44E-343ADBD2E17E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3017908",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3017908",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21483",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:13.867",
      "lastModified" : "2024-11-21T05:48:27.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Under certain conditions SAP Solution Manager, version - 720, allows a high privileged attacker to get access to sensitive information which has a direct serious impact beyond the exploitable component thereby affecting the confidentiality in the application."
      }, {
        "lang" : "es",
        "value" : "Bajo determinadas condiciones, SAP Solution Manager, versión 720, permite a un atacante muy privilegiado conseguir acceso a información confidencial que tiene un impacto serio directo más allá del componente explotable, lo que afecta la confidencialidad de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:solution_manager:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF78CCAF-7998-4C44-AA4D-B443DBEDAB00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3017823",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3017823",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21485",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:13.990",
      "lastModified" : "2024-11-21T05:48:28.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unauthorized attacker may be able to entice an administrator to invoke telnet commands of an SAP NetWeaver Application Server for Java that allow the attacker to gain NTLM hashes of a privileged user."
      }, {
        "lang" : "es",
        "value" : "Un atacante no autorizado puede ser capaz de atraer a un administrador para que invoque comandos telnet de SAP NetWeaver Application Server para Java que permitan al atacante obtener hashes NTLM de un usuario privilegiado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60371A7-F8F4-46F8-9659-DD4EE84B81EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A28C48-4325-4694-88B1-FEE46EBFB0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A1E0B9-8C28-41BC-B050-237B5F929C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAE6C2A-821F-4123-BD56-0FDADF9D63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5308FCE-8B2C-4B4D-BEE7-3CF544570B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3001824",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3001824",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21492",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:14.053",
      "lastModified" : "2024-11-21T05:48:28.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver Application Server Java(HTTP Service), versions - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, does not sufficiently validate logon group in URLs, resulting in a content spoofing vulnerability when directory listing is enabled."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver Application Server Java (HTTP Service), versiones - 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, no comprueba suficientemente el grupo de inicio de sesión en las URL, resultando en una vulnerabilidad de suplantación de contenido cuando la lista de directorios está habilitada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60371A7-F8F4-46F8-9659-DD4EE84B81EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B085AF-8CEE-4A87-B381-F36C989FB2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A28C48-4325-4694-88B1-FEE46EBFB0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A1E0B9-8C28-41BC-B050-237B5F929C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAE6C2A-821F-4123-BD56-0FDADF9D63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5308FCE-8B2C-4B4D-BEE7-3CF544570B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3025637",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3025637",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21784",
      "sourceIdentifier" : "talos-cna@cisco.com",
      "published" : "2021-04-13T19:15:14.163",
      "lastModified" : "2024-11-21T05:48:57.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in the JPG format SOF marker processing of Accusoft ImageGear 19.8. A specially crafted malformed file can lead to memory corruption. An attacker can provide a malicious file to trigger this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en el procesamiento de marcadores SOF en formato JPG de Accusoft ImageGear versión 19.8.&#xa0;Un archivo malformado especialmente diseñado puede conllevar una corrupción de memoria.&#xa0;Un atacante puede proporcionar un archivo malicioso para activar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "talos-cna@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "talos-cna@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:accusoft:imagegear:19.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2A9BA4C-8C2D-44A6-A424-1056DFD01662"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1248",
        "source" : "talos-cna@cisco.com",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      }, {
        "url" : "https://talosintelligence.com/vulnerability_reports/TALOS-2021-1248",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Technical Description", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22716",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-04-13T19:15:14.210",
      "lastModified" : "2024-11-21T05:50:31.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit (V1.15.9 and prior)"
      }, {
        "lang" : "es",
        "value" : "Una  CWE-732: Asignación incorrecta de permisos para recursos críticos que podría permitir la ejecución remota de código cuando un usuario sin privilegios modifica un archivo. Producto afectado: C-Bus Toolkit (V1.15.9 y anteriores)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cybersecurity@se.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.7",
            "matchCriteriaId" : "F0CC2C60-78DD-4959-B70F-CF0A3073FC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-103-01_C-Bus_Toolkit_C-Gate_Server_Security_Notification.pdf",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-105-01",
        "source" : "cybersecurity@se.com"
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2021-103-01_C-Bus_Toolkit_C-Gate_Server_Security_Notification.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-105-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22717",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-04-13T19:15:14.303",
      "lastModified" : "2024-11-21T05:50:31.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files."
      }, {
        "lang" : "es",
        "value" : "Una CWE-22: Se presenta una vulnerabilidad de Limitación Inapropiada de un Nombre de Ruta para un Directorio Restringido (\"Path Traversal\") en C-Bus Toolkit (versiones V1.15.7 y anteriores) que podría permitir una  ejecución de código remota al procesar archivos de configuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.7",
            "matchCriteriaId" : "F0CC2C60-78DD-4959-B70F-CF0A3073FC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-447/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-447/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22718",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-04-13T19:15:14.383",
      "lastModified" : "2024-11-21T05:50:31.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files."
      }, {
        "lang" : "es",
        "value" : "Una CWE-22: se presenta una vulnerabilidad Limitación Inapropiada de un Nombre de Ruta para un Directorio Restringido (\"Path Traversal\") en C-Bus Toolkit (versiones V1.15.7 y anteriores) que podría permitir una  ejecución de código remota al restaurar archivos de proyecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.7",
            "matchCriteriaId" : "F0CC2C60-78DD-4959-B70F-CF0A3073FC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-448/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-448/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22719",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-04-13T19:15:14.460",
      "lastModified" : "2024-11-21T05:50:31.553",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded."
      }, {
        "lang" : "es",
        "value" : "Una CWE-22: Se presenta una vulnerabilidad de Limitación Inapropiada de un Nombre de Ruta para un Directorio Restringido (\"Path Traversal\") en C-Bus Toolkit (versiones V1.15.7 y anteriores) que podría permitir una  ejecución de código remota cuando se carga un archivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.7",
            "matchCriteriaId" : "F0CC2C60-78DD-4959-B70F-CF0A3073FC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-449/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-449/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22720",
      "sourceIdentifier" : "cybersecurity@se.com",
      "published" : "2021-04-13T19:15:14.523",
      "lastModified" : "2024-11-21T05:50:31.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project."
      }, {
        "lang" : "es",
        "value" : "Una CWE-22: Se presenta una vulnerabilidad de Limitación Inapropiada de un Nombre de Ruta para un Directorio Restringido (\"Path Traversal\") en C-Bus Toolkit (versiones V1.15.7 y anteriores) que podría permitir una  ejecución de código remota al restaurar un proyecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cybersecurity@se.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:schneider-electric:c-bus_toolkit:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.15.7",
            "matchCriteriaId" : "F0CC2C60-78DD-4959-B70F-CF0A3073FC56"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-50",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-450/",
        "source" : "cybersecurity@se.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2021-103-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-450/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23276",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2021-04-13T19:15:14.600",
      "lastModified" : "2024-11-21T05:51:29.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated SQL injection. A malicious user can send a specially crafted packet to exploit the vulnerability. Successful exploitation of this vulnerability can allow attackers to add users in the data base."
      }, {
        "lang" : "es",
        "value" : "Eaton Intelligent Power Manager (IPM) versiones anteriores a 1.69, es vulnerable a una inyección de SQL autenticado.&#xa0;Un usuario malicioso puede enviar un paquete especialmente diseñado para explotar la vulnerabilidad. Una explotación con éxito de esta vulnerabilidad puede permitir a atacantes agregar usuarios a la base de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "5E2C63CA-B479-49C4-8C98-F5AE9BF06A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "10CFCD42-A9D6-468B-9287-03B4341B129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.68",
            "matchCriteriaId" : "4A67B7A8-E508-4854-9437-BF702692948C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "CybersecurityCOE@eaton.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23277",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2021-04-13T19:15:14.740",
      "lastModified" : "2024-11-21T05:51:29.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated eval injection vulnerability. The software does not neutralize code syntax from users before using in the dynamic evaluation call in loadUserFile function under scripts/libs/utils.js. Successful exploitation can allow attackers to control the input to the function and execute attacker controlled commands."
      }, {
        "lang" : "es",
        "value" : "Eaton Intelligent Power Manager (IPM) versiones anteriores a 1.69, es susceptible a una vulnerabilidad de inyección de evaluación no autenticada.&#xa0;El software no neutraliza el código syntax de los usuarios antes de usarlo en la llamada de evaluación dinámica en la función loadUserFile en el archivo scripts/libs/utils.js. Una explotación con éxito puede permitir a atacantes controlar la entrada a la función y ejecutar comandos controlados por el atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-95"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "5E2C63CA-B479-49C4-8C98-F5AE9BF06A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "10CFCD42-A9D6-468B-9287-03B4341B129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.68",
            "matchCriteriaId" : "4A67B7A8-E508-4854-9437-BF702692948C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "CybersecurityCOE@eaton.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23278",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2021-04-13T19:15:14.820",
      "lastModified" : "2024-11-21T05:51:29.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/maps_srv.js with action removeBackground and server/node_upgrade_srv.js with action removeFirmware. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed."
      }, {
        "lang" : "es",
        "value" : "Eaton Intelligent Power Manager (IPM) versiones anteriores a 1.69, es susceptible a una vulnerabilidad de eliminación de archivos arbitrarios autenticados inducida debido a una comprobación inapropiada de entrada en el archivo server/maps_srv.js con la acción removeBackground y en el archivo server/node_upgrade_srv.js con la acción removeFirmware.&#xa0;Un atacante puede enviar paquetes especialmente diseñados para eliminar los archivos del sistema donde está instalado el software IPM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "5E2C63CA-B479-49C4-8C98-F5AE9BF06A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "10CFCD42-A9D6-468B-9287-03B4341B129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.68",
            "matchCriteriaId" : "4A67B7A8-E508-4854-9437-BF702692948C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "CybersecurityCOE@eaton.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23279",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2021-04-13T19:15:14.883",
      "lastModified" : "2024-11-21T05:51:29.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in meta_driver_srv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete the files on the system where IPM software is installed."
      }, {
        "lang" : "es",
        "value" : "Eaton Intelligent Power Manager (IPM) versiones anteriores a 1.69, es susceptible a una vulnerabilidad de eliminación de archivos arbitrarios no autenticados inducida debido a una comprobación inapropiada de entrada en la clase meta_driver_srv.js con la acción saveDriverData utilizando un driverID no válido.&#xa0;Un atacante puede enviar paquetes especialmente diseñados para eliminar los archivos del sistema donde está instalado el software IPM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "5E2C63CA-B479-49C4-8C98-F5AE9BF06A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "10CFCD42-A9D6-468B-9287-03B4341B129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.68",
            "matchCriteriaId" : "4A67B7A8-E508-4854-9437-BF702692948C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "CybersecurityCOE@eaton.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23280",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2021-04-13T19:15:14.960",
      "lastModified" : "2024-11-21T05:51:29.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to authenticated arbitrary file upload vulnerability. IPM’s maps_srv.js allows an attacker to upload a malicious NodeJS file using uploadBackgroud action. An attacker can upload a malicious code or execute any command using a specially crafted packet to exploit the vulnerability."
      }, {
        "lang" : "es",
        "value" : "Eaton Intelligent Power Manager (IPM) versiones anteriores a 1.69, es susceptible a una vulnerabilidad de carga de archivos arbitraria autenticada.&#xa0;El archivo Maps_srv.js de IPM permite a un atacante cargar un archivo NodeJS malicioso usando la acción uploadBackgroud.&#xa0;Un atacante puede cargar un código malicioso o ejecutar cualquier comando utilizando un paquete especialmente diseñado para explotar la vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "5E2C63CA-B479-49C4-8C98-F5AE9BF06A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "10CFCD42-A9D6-468B-9287-03B4341B129A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_protector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.68",
            "matchCriteriaId" : "4A67B7A8-E508-4854-9437-BF702692948C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "CybersecurityCOE@eaton.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23281",
      "sourceIdentifier" : "CybersecurityCOE@eaton.com",
      "published" : "2021-04-13T19:15:15.037",
      "lastModified" : "2024-11-21T05:51:29.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eaton Intelligent Power Manager (IPM) prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in meta_driver_srv.js class. Attackers can send a specially crafted packet to make IPM connect to rouge SNMP server and execute attacker-controlled code."
      }, {
        "lang" : "es",
        "value" : "Eaton Intelligent Power Manager (IPM) versiones anteriores a 1.69, es susceptible a una vulnerabilidad de ejecución de código remota no autenticada.&#xa0;El software IPM no sanea la fecha proporcionada por medio de la acción coverterCheckList en la clase meta_driver_srv.js.&#xa0;Los atacantes pueden enviar un paquete especialmente diseñado para hacer que IPM se conecte al servidor SNMP y ejecutar código controlado por el atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "CybersecurityCOE@eaton.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "CybersecurityCOE@eaton.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eaton:intelligent_power_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.69",
            "matchCriteriaId" : "5E2C63CA-B479-49C4-8C98-F5AE9BF06A2F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "CybersecurityCOE@eaton.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/eaton-intelligent-power-manager-ipm-vulnerability-advisory.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27598",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.117",
      "lastModified" : "2024-11-21T05:58:16.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versions - 7.31, 7.40, 7.50, allows an attacker to read some statistical data like product version, traffic, timestamp etc. because of missing authorization check in the servlet."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver AS JAVA (Customer Usage Provisioning Servlet), versiones - 7.31, 7.40, 7.50, permite a un atacante leer algunos datos estadísticos como la versión del producto, el tráfico, la marca de tiempo, etc. debido a una falta de comprobación de autorización en el servlet"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAE6C2A-821F-4123-BD56-0FDADF9D63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5308FCE-8B2C-4B4D-BEE7-3CF544570B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3027937",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3027937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27600",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.193",
      "lastModified" : "2024-11-21T05:58:16.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Manufacturing Execution (System Rules), versions - 15.1, 15.2, 15.3, 15.4, allows an authorized attacker to embed malicious code into HTTP parameter and send it to the server because SAP Manufacturing Execution (System Rules) tab does not sufficiently encode some parameters, resulting in Stored Cross-Site Scripting (XSS) vulnerability. The malicious code can be used for different purposes. e.g., information can be read, modified, and sent to the attacker. However, availability of the server cannot be impacted."
      }, {
        "lang" : "es",
        "value" : "SAP Manufacturing Execution (System Rules), versiones - 15.1, 15.2, 15.3, 15.4, permite a un atacante autorizado insertar código malicioso en el parámetro HTTP y enviarlo al servidor porque la pestaña SAP Manufacturing Execution (reglas del sistema) no codifica suficientemente algunos parámetros , resultando en una vulnerabilidad de tipo Cross-Site Scripting (XSS) Almacenado.&#xa0;El código malicioso que puede ser usado para diferentes propósitos.&#xa0;por ejemplo, la información se puede leer, modificar y enviar al atacante.&#xa0;Sin embargo, la disponibilidad del servidor no puede estar impactada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_execution:15.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23297FB8-B4A8-4E84-80EE-67907C249A70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_execution:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87614D9A-544B-42FE-9C58-5389E3716240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_execution:15.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FC9087-C677-4AD0-8A06-93FC19E06409"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:manufacturing_execution:15.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF7662A-D692-450E-9BDD-82081B25BD17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3024414",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3024414",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27601",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.257",
      "lastModified" : "2024-11-21T05:58:16.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver AS Java (Applications based on HTMLB for Java) allows a basic-level authorized attacker to store a malicious file on the server. When a victim tries to open this file, it results in a Cross-Site Scripting (XSS) vulnerability and the attacker can read and modify data. However, the attacker does not have control over kind or degree."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver AS Java (Aplicaciones basadas en HTMLB para Java) permite a un atacante autorizado de nivel básico almacenar un archivo malicioso en el servidor.&#xa0;Cuando una víctima intenta abrir este archivo, resulta en una vulnerabilidad de tipo Cross-Site Scripting (XSS) y el atacante puede leer y modificar datos.&#xa0;Sin embargo, el atacante no tiene control sobre la clase o el grado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D60371A7-F8F4-46F8-9659-DD4EE84B81EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6B085AF-8CEE-4A87-B381-F36C989FB2A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24A1E0B9-8C28-41BC-B050-237B5F929C9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEAE6C2A-821F-4123-BD56-0FDADF9D63C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5308FCE-8B2C-4B4D-BEE7-3CF544570B68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_java:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C506445-3787-4BFF-A98B-7502A0F7CF80"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/2963592",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/2963592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27602",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.320",
      "lastModified" : "2024-11-21T05:58:16.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Commerce, versions - 1808, 1811, 1905, 2005, 2011, Backoffice application allows certain authorized users to create source rules which are translated to drools rule when published to certain modules within the application. An attacker with this authorization can inject malicious code in the source rules and perform remote code execution enabling them to compromise the confidentiality, integrity and availability of the application."
      }, {
        "lang" : "es",
        "value" : "SAP Commerce, versiones: 1808, 1811, 1905, 2005, 2011, la aplicación Backoffice permite a determinados usuarios autorizados crear reglas de origen que son traducidas en reglas de drools cuando se publican en determinados módulos dentro de la aplicación.&#xa0;Un atacante con esta autorización puede inyectar código malicioso en las reglas de origen y llevar a cabo una ejecución de código remota, permitiendo comprometer la confidencialidad, integridad y disponibilidad de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.9,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:1808:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F352D085-2B1E-44A9-81C6-2E1F5C249AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:1811:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A12336-30BA-439D-A3F2-B7D93D5B52DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:1905:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F665F648-5C35-4EC8-8064-8ED139C8813C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:2005:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C788164A-7724-4CB1-8ADC-B05ADE595020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:commerce:2011:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DE31C0C-31D7-468E-B1D4-CE522086EDD3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3040210",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3040210",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27603",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.397",
      "lastModified" : "2024-11-21T05:58:16.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the Availability of the SAP system."
      }, {
        "lang" : "es",
        "value" : "Un módulo de función SPI_WAIT_MILLIS habilitado para RFC en SAP NetWeaver AS ABAP, versiones - 731, 740, 750, permite mantener un proceso de trabajo ocupado durante cualquier período de tiempo.&#xa0;Un atacante podría llamar a este módulo de funciones varias veces para bloquear todos los procesos de trabajo, conllevando a una Denegación de Servicio y afectaría la Disponibilidad del sistema SAP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC29738-CF17-4E6B-9C9E-879B17F7E001"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:*",
            "matchCriteriaId" : "127E508F-6CC1-41C8-96DF-8D14FFDD4020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7777AA80-1608-420E-B7D5-09ABECD51728"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3028729",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3028729",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27605",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.477",
      "lastModified" : "2024-11-21T05:58:16.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP's HCM Travel Management Fiori Apps V2, version - 608, does not perform proper authorization check, allowing an authenticated but unauthorized attacker to read personnel numbers of employees, resulting in escalation of privileges. However, the attacker can only read some information like last name, first name of the employees, so there is some loss of confidential information, Integrity and Availability are not impacted."
      }, {
        "lang" : "es",
        "value" : "HCM Travel Management Fiori Apps V2 de SAP, versión - 608, no lleva a cabo una comprobación de autorización apropiada, permitiendo a un atacante autenticado pero no autorizado leer los números personales de los empleados, resultando en una escalada de privilegios.&#xa0;Sin embargo, el atacante solo puede leer determinada información como el apellido, el nombre de los empleados, por lo que hay determinada pérdida de información confidencial, la Integridad y Disponibilidad no están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:fiori_apps_2.0_for_travel_management_in_sap_erp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "608",
            "matchCriteriaId" : "54B30165-5E80-4107-9BE0-118D286C7FCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3025054",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3025054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27609",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-13T19:15:15.537",
      "lastModified" : "2024-11-21T05:58:17.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP Focused RUN versions 200, 300, does not perform necessary authorization checks for an authenticated user, which allows a user to call the oData service and manipulate the activation for the SAP EarlyWatch Alert service data collection and sending to SAP without the intended authorization."
      }, {
        "lang" : "es",
        "value" : "SAP Focused RUN versiones 200, 300 no llevan a cabo las comprobaciones de autorización necesarias para un usuario autenticado, el cual permite a un usuario llamar al servicio oData y manipular la activación para la recopilación y envío de datos del servicio SAP EarlyWatch Alert a SAP sin la autorización prevista"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:focused_run:200:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23D18964-F53B-426A-A65B-C47A407992E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:focused_run:300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18EAA789-3AAE-4C69-88B6-F457247A19D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3030948",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3030948",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21399",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:14.843",
      "lastModified" : "2024-11-21T05:48:16.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and workaround guidance see the referenced GitHub security advisory."
      }, {
        "lang" : "es",
        "value" : "Ampache es una aplicación de transmisión de audio y video basada en la web y un administrador de archivos.&#xa0;Las versiones anteriores a 4.4.1 permiten el acceso no autenticado a Ampache usando la API subsonic.&#xa0;Para realizar el ataque con éxito, debe utilizar un nombre de usuario que no forme parte del sitio para omitir las comprobaciones de autenticación.&#xa0;Para obtener más detalles y una guía de solución alternativa, consulte el aviso de seguridad de GitHub al que se hace referencia"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ampache:ampache:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.4.1",
            "matchCriteriaId" : "B3DC4A36-61C8-4507-A2B2-17CD1351917C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ampache/ampache/security/advisories/GHSA-p9pm-j95j-5mjf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ampache/ampache/security/advisories/GHSA-p9pm-j95j-5mjf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23372",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-13T20:15:14.923",
      "lastModified" : "2024-11-21T05:51:35.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of package mongo-express are vulnerable to Denial of Service (DoS) when exporting an empty collection as CSV, due to an unhandled exception, leading to a crash."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete mongo-express son vulnerables a una Denegación de Servicio (DoS) al exportar una colección vacía como CSV, debido a una excepción no controlada, conllevando a un bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongo-express_project:mongo-express:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "372D39D3-8EA9-425F-99C2-7213E6DD0F87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-MONGOEXPRESS-1085403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26413",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.047",
      "lastModified" : "2024-11-21T05:56:19.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Suplantación de Identidad de Windows Installer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26413",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26413",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26415",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.157",
      "lastModified" : "2024-11-21T05:56:20.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Windows Installer. Este ID de CVE es diferente de CVE-2021-28440"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26415",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-409/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26415",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-409/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26416",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.217",
      "lastModified" : "2024-11-21T05:56:20.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Denegación de Servicio de Hyper-V de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26416",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26416",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26417",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.280",
      "lastModified" : "2024-11-21T05:56:20.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Overlay Filter Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Divulgación de Información de Overlay Filter de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26417",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-26417",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27064",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.343",
      "lastModified" : "2024-11-21T05:57:16.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Visual Studio Installer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.9",
            "matchCriteriaId" : "CE03B37D-72FE-4C25-BE62-9C422AEFC80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.4",
            "matchCriteriaId" : "0FEF0A4F-CB6E-4004-8DCE-723877109D7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.6",
            "versionEndIncluding" : "16.7",
            "matchCriteriaId" : "001A6F4F-13F6-440A-BD4B-21C91C5677E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.8",
            "versionEndIncluding" : "16.9",
            "matchCriteriaId" : "861B2F5D-4549-4186-BD88-A5180F4D83DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27064",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27064",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27067",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.407",
      "lastModified" : "2024-11-21T05:57:17.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure DevOps Server and Team Foundation Server Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Azure DevOps Server y Team Foundation Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:team_foundation_server:2015:4.2:*:*:*:*:*:*",
            "matchCriteriaId" : "CCCD9300-295F-4D45-9A34-949F33971974"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:team_foundation_server:2017:3.1:*:*:*:*:*:*",
            "matchCriteriaId" : "C6AE94A8-76A3-4998-A7B4-60EA21530F3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:team_foundation_server:2018:1.2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F78642D-BE17-43A9-97E4-042EDE627678"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:team_foundation_server:2018:3.2:*:*:*:*:*:*",
            "matchCriteriaId" : "5296DF6D-D32A-4D70-9A32-441750704C9A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2019:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "68601DE4-2392-42CD-8A89-720BDF100230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2019:update1.1:*:*:*:*:*:*",
            "matchCriteriaId" : "E0D91002-8F6D-4F58-BA1C-0806E12CA6CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2019.0.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "FD677E75-F110-4C20-A408-0F0620D468BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9C12F023-236E-4AC2-B752-5EBC0BB1D2A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27067",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27072",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.470",
      "lastModified" : "2024-11-21T05:57:17.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de Elevación de Privilegios de Win32k. Este ID de CVE es diferente de CVE-2021-28310"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27072",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27079",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.530",
      "lastModified" : "2024-11-21T05:57:18.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Photo Codec Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Media Photo Codec de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27079",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27086",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.593",
      "lastModified" : "2024-11-21T05:57:19.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Services and Controller App Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios de Services y Controller App de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162157/Microsoft-Windows-SCM-Remote-Access-Check-Limit-Bypass-Privilege-Escalation.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27086",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162157/Microsoft-Windows-SCM-Remote-Access-Check-Limit-Bypass-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27086",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27088",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.657",
      "lastModified" : "2024-11-21T05:57:19.417",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios de Windows Event Tracing"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27088",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27088",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27089",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.717",
      "lastModified" : "2024-11-21T05:57:19.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Internet Messaging API Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Internet Messaging API"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27089",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27089",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27090",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.780",
      "lastModified" : "2024-11-21T05:57:19.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Secure Kernel Mode Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios en Windows Secure Kernel Mode"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27090",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27090",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27091",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.843",
      "lastModified" : "2024-11-21T05:57:19.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "RPC Endpoint Mapper Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios del RPC Endpoint Mapper Service"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27091",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27091",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27092",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.907",
      "lastModified" : "2024-11-21T05:57:19.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure AD Web Sign-in Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Omisión de la Característica de Seguridad de Azure AD Web Sign-in"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27092",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27093",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:15.967",
      "lastModified" : "2024-11-21T05:57:20.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Windows Kernel. Este ID de CVE es diferente de CVE-2021-28309"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27093",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27093",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27094",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.030",
      "lastModified" : "2024-11-21T05:57:20.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Omisión de la Característica de Seguridad en Windows Early Launch Antimalware Driver. Este ID de CVE es diferente de CVE-2021-28447"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bi-zone.medium.com/measured-boot-and-malware-signatures-exploring-two-vulnerabilities-found-in-the-windows-loader-5a4fcc3c4b66",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27094",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bi-zone.medium.com/measured-boot-and-malware-signatures-exploring-two-vulnerabilities-found-in-the-windows-loader-5a4fcc3c4b66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27094",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27095",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.093",
      "lastModified" : "2024-11-21T05:57:20.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Video Decoder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Media Video Decoder de Windows. Este ID de CVE es diferente de CVE-2021-28315"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27095",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27095",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27096",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.157",
      "lastModified" : "2024-11-21T05:57:20.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NTFS Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "NTFS Elevación de vulnerabilidad de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27096",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-27096",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28309",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.203",
      "lastModified" : "2024-11-21T05:59:27.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Kernel Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información del Kernel de Windows. Este ID de CVE es diferente de CVE-2021-27093"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28309",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28310",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.267",
      "lastModified" : "2025-10-30T19:55:23.683",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Win32k Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Win32k. Este ID de CVE es diferente de CVE-2021-27072"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Microsoft Win32k Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00345596-E9E0-4096-8DC6-0212F4747A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E332666-2E03-468E-BC30-299816D6E8ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1B570A8-ED1A-46B6-B8AB-064445F8FC4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4DBE5B2-AE10-4251-BCDA-DC5EDEE6EE67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AFD13A6-A390-4400-9029-2F4058CA17E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_1909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADE7E7B1-64AC-4986-A50B-0918A42C05BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62224791-644C-4D1F-AD77-56B16CF27630"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_20h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F9B6B1-4FEE-4D4B-B35F-B07822CCD669"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28310",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-28310",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28311",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.327",
      "lastModified" : "2024-11-21T05:59:27.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Application Compatibility Cache Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio de Application Compatibility Cache de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28311",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28312",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.390",
      "lastModified" : "2024-11-21T05:59:27.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows NTFS Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio de NTFS de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28312",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28313",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.453",
      "lastModified" : "2024-11-21T05:59:27.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Vulnerabilidad de elevación de privilegios del Diagnostics Hub Standard Collector Service. Este ID de CVE es diferente de CVE-2021-28321, CVE-2021-28322"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "62FE95C2-066B-491D-82BF-3EF173822B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.9",
            "matchCriteriaId" : "CE03B37D-72FE-4C25-BE62-9C422AEFC80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.7",
            "matchCriteriaId" : "57D7DA66-67F6-4B60-AF63-38C3C2C758AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.8",
            "versionEndIncluding" : "16.9",
            "matchCriteriaId" : "861B2F5D-4549-4186-BD88-A5180F4D83DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28313",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28313",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28314",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.500",
      "lastModified" : "2024-11-21T05:59:27.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Hyper-V de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28314",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28314",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28315",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.563",
      "lastModified" : "2024-11-21T05:59:28.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Media Video Decoder Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota del Media Video Decoder de Windows. Este ID de CVE es diferente de CVE-2021-27095"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28315",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28315",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28316",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.640",
      "lastModified" : "2024-11-21T05:59:28.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows WLAN AutoConfig Service Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de la característica de seguridad del WLAN AutoConfig Service de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28316",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28317",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.687",
      "lastModified" : "2024-11-21T05:59:28.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Windows Codecs Library Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de la Codecs Library de Microsoft Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28317",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28317",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28318",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.750",
      "lastModified" : "2024-11-21T05:59:28.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de GDI+ de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28318",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28318",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28319",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.813",
      "lastModified" : "2024-11-21T05:59:28.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows TCP/IP Driver Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación del TCP/IP Driver de Windows. Este ID de CVE es diferente de CVE-2021-28439"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28319",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28319",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28320",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.877",
      "lastModified" : "2024-11-21T05:59:28.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de la Resource Manager PSM Service Extension de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28320",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28320",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28321",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:16.923",
      "lastModified" : "2024-11-21T05:59:28.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Elevación de Privilegios del Diagnostics Hub Standard Collector Service. Este ID de CVE es diferente de CVE-2021-28313, CVE-2021-28322"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "62FE95C2-066B-491D-82BF-3EF173822B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.9",
            "matchCriteriaId" : "CE03B37D-72FE-4C25-BE62-9C422AEFC80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.7",
            "matchCriteriaId" : "57D7DA66-67F6-4B60-AF63-38C3C2C758AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.8",
            "versionEndIncluding" : "16.9",
            "matchCriteriaId" : "861B2F5D-4549-4186-BD88-A5180F4D83DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28321",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28321",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28322",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.030",
      "lastModified" : "2024-11-21T05:59:29.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de Elevación de Privilegios del Diagnostics Hub Standard Collector Service. Este ID de CVE es diferente de CVE-2021-28313, CVE-2021-28321"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "62FE95C2-066B-491D-82BF-3EF173822B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0",
            "versionEndIncluding" : "15.9",
            "matchCriteriaId" : "CE03B37D-72FE-4C25-BE62-9C422AEFC80E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.0",
            "versionEndIncluding" : "16.7",
            "matchCriteriaId" : "57D7DA66-67F6-4B60-AF63-38C3C2C758AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.8",
            "versionEndIncluding" : "16.9",
            "matchCriteriaId" : "861B2F5D-4549-4186-BD88-A5180F4D83DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28322",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28322",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28323",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.093",
      "lastModified" : "2024-11-21T05:59:29.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información del DNS de Windows. Este ID de CVE es diferente de CVE-2021-28328"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-178"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28323",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162251/Microsoft-DiagHub-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/40",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28323",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28324",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.157",
      "lastModified" : "2024-11-21T05:59:29.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows SMB Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información del SMB de Windows. Este ID de CVE es diferente de CVE-2021-28325"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28324",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28324",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28325",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.203",
      "lastModified" : "2024-11-21T05:59:29.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows SMB Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información del SMB de Windows. Este ID de CVE es diferente de CVE-2021-28324"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28325",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28325",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28326",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.267",
      "lastModified" : "2024-11-21T05:59:29.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows AppX Deployment Server Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio de Windows AppX Deployment Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28326",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-424/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28326",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-424/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28327",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.327",
      "lastModified" : "2024-11-21T05:59:29.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28327",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28327",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28328",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.377",
      "lastModified" : "2024-11-21T05:59:29.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows DNS Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de DNS de Windows. Este ID de CVE es diferente de CVE-2021-28323"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28328",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28328",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28329",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.437",
      "lastModified" : "2024-11-21T05:59:30.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28329",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28330",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.500",
      "lastModified" : "2024-11-21T05:59:30.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28330",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28330",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28331",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.563",
      "lastModified" : "2024-11-21T05:59:30.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334 CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28331",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28332",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.627",
      "lastModified" : "2024-11-21T05:59:30.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28332",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28332",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28333",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.673",
      "lastModified" : "2024-11-21T05:59:30.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28333",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28334",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.733",
      "lastModified" : "2024-11-21T05:59:30.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28334",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28335",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.780",
      "lastModified" : "2024-11-21T05:59:31.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28335",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28335",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28336",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.843",
      "lastModified" : "2024-11-21T05:59:31.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28336",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28337",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.907",
      "lastModified" : "2024-11-21T05:59:31.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28337",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28337",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28338",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:17.953",
      "lastModified" : "2024-11-21T05:59:32.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28338",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28339",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.017",
      "lastModified" : "2024-11-21T05:59:32.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28340, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28339",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28340",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.077",
      "lastModified" : "2024-11-21T05:59:32.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28341, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28340",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28340",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28341",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.127",
      "lastModified" : "2024-11-21T05:59:32.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28342, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28341",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28341",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28342",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.187",
      "lastModified" : "2024-11-21T05:59:32.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28342",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28343",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.233",
      "lastModified" : "2024-11-21T05:59:32.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28343",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28343",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28344",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.297",
      "lastModified" : "2024-11-21T05:59:33.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28344",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28345",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.343",
      "lastModified" : "2024-11-21T05:59:33.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28345",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28346",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.407",
      "lastModified" : "2024-11-21T05:59:33.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28346",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28346",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28347",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.453",
      "lastModified" : "2024-11-21T05:59:33.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Speech Runtime Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Speech Runtime de Windows. Este ID de CVE es diferente de CVE-2021-28351, CVE-2021-28436"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28347",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28347",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28348",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.517",
      "lastModified" : "2024-11-21T05:59:33.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de GDI+ de Windows. Este ID de CVE es diferente de CVE-2021-28349, CVE-2021-28350"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28348",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28349",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.563",
      "lastModified" : "2024-11-21T05:59:33.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de GDI+ de Windows. Este ID de CVE es diferente de CVE-2021-28348, CVE-2021-28350"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28349",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28349",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28350",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.610",
      "lastModified" : "2024-11-21T05:59:34.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows GDI+ Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de GDI+ de Windows. Este ID de CVE es diferente de CVE-2021-28348, CVE-2021-28349"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28350",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28350",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28351",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.673",
      "lastModified" : "2024-11-21T05:59:34.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Speech Runtime Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Speech Runtime de Windows. Este ID de CVE es diferente de CVE-2021-28347, CVE-2021-28436"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28351",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28351",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28352",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.720",
      "lastModified" : "2024-11-21T05:59:34.333",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28353, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28352",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28352",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28353",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.780",
      "lastModified" : "2024-11-21T05:59:34.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28354, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28353",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28354",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.843",
      "lastModified" : "2024-11-21T05:59:34.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333 CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28355, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28354",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28355",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.907",
      "lastModified" : "2024-11-21T05:59:34.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021- 28356, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28355",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28355",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28356",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:18.970",
      "lastModified" : "2024-11-21T05:59:34.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021- 28355, CVE-2021-28357, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28356",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28356",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28357",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.030",
      "lastModified" : "2024-11-21T05:59:35.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021- 28355, CVE-2021-28356, CVE-2021-28358, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28357",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28358",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.093",
      "lastModified" : "2024-11-21T05:59:35.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021- 28355, CVE-2021-28356, CVE-2021-28357, CVE-2021-28434"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28358",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28358",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28434",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.157",
      "lastModified" : "2024-11-21T05:59:39.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Procedure Call Runtime Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota en Remote Procedure Call Runtime. Este ID de CVE es diferente de CVE-2021-28327, CVE-2021-28329, CVE-2021-28330, CVE-2021-28331, CVE-2021-28332, CVE-2021-28333, CVE-2021-28334, CVE-2021-28335, CVE-2021-28336, CVE-2021-28337, CVE-2021-28338, CVE-2021-28339, CVE-2021-28340, CVE-2021-28341, CVE- 2021-28342, CVE-2021-28343, CVE-2021-28344, CVE-2021-28345, CVE-2021-28346, CVE-2021-28352, CVE-2021-28353, CVE-2021-28354, CVE-2021- 28355, CVE-2021-28356, CVE-2021-28357, CVE-2021-28358"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28434",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28434",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28435",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.220",
      "lastModified" : "2024-11-21T05:59:39.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Event Tracing Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Event Tracing de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28435",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28435",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28436",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.280",
      "lastModified" : "2024-11-21T05:59:39.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Speech Runtime Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Speech Runtime de Windows. Este ID de CVE es diferente de CVE-2021-28347, CVE-2021-28351"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28436",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28437",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.343",
      "lastModified" : "2024-11-21T05:59:40.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Windows Installer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66CAFDB7-9D41-4E67-AB83-5EB104551FF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28437",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28437",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28438",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.407",
      "lastModified" : "2024-11-21T05:59:40.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Console Driver Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio del Console Driver de Windows. Este ID de CVE es diferente de CVE-2021-28443"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28438",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28438",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28439",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.453",
      "lastModified" : "2024-11-21T05:59:40.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows TCP/IP Driver Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio del TCP/IP Driver de Windows. Este ID de CVE es diferente de CVE-2021-28319"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28439",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28439",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28440",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.517",
      "lastModified" : "2024-11-21T05:59:40.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Installer Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de elevación de privilegios de Windows Installer. Este ID de CVE es diferente de CVE-2021-26415"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28440",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28440",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28441",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.577",
      "lastModified" : "2024-11-21T05:59:40.643",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Hyper-V de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28441",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28441",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28442",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.640",
      "lastModified" : "2024-11-21T05:59:40.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows TCP/IP Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de TCP/IP de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28442",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28443",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.703",
      "lastModified" : "2024-11-21T05:59:40.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Console Driver Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio del controlador de la consola de Windows. Este ID de CVE es diferente de CVE-2021-28438"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28443",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28444",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.767",
      "lastModified" : "2024-11-21T05:59:41.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Hyper-V Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de omisión de la característica de seguridad de Hyper-V de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "084984D5-D241-497B-B118-50C6C1EAD468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "21074553-EDF2-468D-8E79-C39851B5BC79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "897A48D7-FCA1-4560-AFBB-718AF19BA3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "1981BA0D-0920-40C0-8A6A-5D5A1B221560"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "6CF580BA-6938-40F6-9D86-F43044A6BACA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "61F0792D-7587-4297-8EE7-D4DC3A30EE84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "09D9A720-8D3C-4699-AC57-CB4531E5BFEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:x64:*",
            "matchCriteriaId" : "C936FD4F-959C-43B8-9917-E2A0DF4A8793"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28444",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28444",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28445",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.827",
      "lastModified" : "2024-11-21T05:59:41.200",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Network File System Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota del Network File System de Windows"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28445",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28445",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28446",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.890",
      "lastModified" : "2024-11-21T05:59:41.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Portmapping Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Windows Portmapping"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F422A8C-2C4E-42C8-B420-E0728037E15C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*",
            "matchCriteriaId" : "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28446",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28446",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28447",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:19.953",
      "lastModified" : "2024-11-21T05:59:41.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Windows Early Launch Antimalware Driver Security Feature Bypass Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Omisión de la Característica de Seguridad de Early Launch Antimalware Driver de Windows. Este ID de CVE es diferente de CVE-2021-27094"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21540673-614A-4D40-8BD7-3F07723803B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E2C378B-1507-4C81-82F6-9F599616845A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB85C75-4D35-480E-843D-60579EC75FCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9273B95-20ED-4547-B0A8-95AD15B30372"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE74AF3-C559-4645-A6C0-25C3D647AAC8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6CE5198-C498-4672-AF4C-77AB4BE06C5C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7DF96F8-BA6A-4780-9CA3-F719B3F81074"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB18C4CE-5917-401E-ACF7-2747084FD36E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:20h2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A190388-AA82-4504-9D5A-624F23268C9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C253A63F-03AB-41CB-A03A-B2674DEA98AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B60D940-80C7-49F0-8F4E-3F99AC15FA82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB79EE26-FC32-417D-A49C-A1A63165A968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bi-zone.medium.com/measured-boot-and-malware-signatures-exploring-two-vulnerabilities-found-in-the-windows-loader-5a4fcc3c4b66",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28447",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bi-zone.medium.com/measured-boot-and-malware-signatures-exploring-two-vulnerabilities-found-in-the-windows-loader-5a4fcc3c4b66",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28447",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28448",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.017",
      "lastModified" : "2024-11-21T05:59:41.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Kubernetes Tools Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code Kubernetes Tools"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code_kubernetes_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.0",
            "matchCriteriaId" : "60E718A8-8CCD-4F05-972E-50C97AE8215C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28448",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28448",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28449",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.077",
      "lastModified" : "2024-11-21T05:59:41.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Office Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Office"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:-:*:-:*:-:*",
            "matchCriteriaId" : "DC9D0A78-9F16-41E0-910E-E93269DB9B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28449",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28449",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28450",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.140",
      "lastModified" : "2024-11-21T05:59:41.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft SharePoint Denial of Service Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una Actualización de una Denegación de Servicio de Microsoft SharePoint"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_foundation:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "81443CAD-F47E-4FD1-8E0E-8D646C90E4E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "157CBD57-8A1B-4B57-8371-88EF4254A663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28450",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28450",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28451",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.220",
      "lastModified" : "2024-11-21T05:59:42.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Excel.. Este ID de CVE es diferente de CVE-2021-28454"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF47B12-FC83-461C-8F18-A67CBDEFDE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "F564117D-450D-45C4-9688-AF35F630A8A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28451",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28451",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28452",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.280",
      "lastModified" : "2024-11-21T05:59:42.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Outlook Memory Corruption Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Corrupción en la Memoria de Microsoft Outlook"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBF47B12-FC83-461C-8F18-A67CBDEFDE62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "F9A115C1-45EB-4688-AD7C-C1854850EE9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "8D513A61-6427-4F85-AADF-99D6F223AF2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "DDA98A76-D0D1-4BFA-BEAC-1C2313F7B859"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:outlook:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B1657C-0FF4-461A-BE2A-641275C4B0A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28452",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28452",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28453",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.343",
      "lastModified" : "2024-11-21T05:59:42.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Word Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Word"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A8235774-4B57-4793-BE26-2CDE67532EDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "9A57C675-05A9-4BC2-AE95-7CA5CA6B1F73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "16F33176-442C-4EFF-8EA0-C640D203B939"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2016:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "F815EF1D-7B60-47BE-9AC2-2548F99F10E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:sharepoint_server:2019:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6122D014-5BF1-4AF4-8B4D-80205ED7785E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "24EEDAD9-9656-4B21-82E4-D60B83777492"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "D7A48E44-F01A-40AD-B8AF-8FE368248003"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "45E21528-4B0F-4A6F-82AD-DF7FDBF67C8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:word:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA042D4-B14E-4DDF-8423-DFB255679EFE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28453",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-423/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-423/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28454",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.407",
      "lastModified" : "2024-11-21T05:59:42.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Excel. Este ID de CVE es diferente de CVE-2021-28451"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "081DE1E3-4622-4C32-8B9C-9AEC1CD20638"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "120690A6-E0A1-4E36-A35A-C87109ECC064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "F7DDFFB8-2337-4DD7-8120-56CC8EF134B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2016:*:-:*:-:*:-:*",
            "matchCriteriaId" : "DC9D0A78-9F16-41E0-910E-E93269DB9B30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28454",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-410/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28454",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-410/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28456",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.470",
      "lastModified" : "2024-11-21T05:59:42.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Excel Information Disclosure Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Divulgación de Información de Microsoft Excel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "40C15EDD-98D4-4D06-BA06-21AE0F33C72D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2010:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "E36D981E-E56D-46C7-9486-FC691A75C497"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:-:*:*:*",
            "matchCriteriaId" : "BF89FEC4-936E-4226-94F9-2BD0CB0CA09F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2013:sp1:*:*:rt:*:*:*",
            "matchCriteriaId" : "3A062169-527E-43DA-8AE0-FD4FBA1B2A9B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:excel:2016:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09BF0981-749E-470B-A7AC-95AD087797EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*",
            "matchCriteriaId" : "C5282C83-86B8-442D-851D-B54E88E8B1F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office:2019:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "40961B9E-80B6-42E0-A876-58B3CE056E4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_online_server:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98AE986-FA31-4301-8025-E8915BA4AC5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:office_web_apps_server:2013:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "941B16A2-931D-4031-A016-5EA60E87BE20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28456",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28456",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28457",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.530",
      "lastModified" : "2024-11-21T05:59:42.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28469, CVE-2021-28473, CVE-2021-28475, CVE-2021-28477"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55.2",
            "matchCriteriaId" : "008AB2BB-A852-401F-B3E3-FB3AC6EBE0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28457",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28457",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28458",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.610",
      "lastModified" : "2024-11-21T05:59:42.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Elevación de Privilegios de Azure ms-rest-nodeauth Library"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:ms-rest-nodeauth:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.0.8",
            "matchCriteriaId" : "49BFD13B-51DA-4189-9E00-AEA35A646836"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28458",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28458",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28459",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.673",
      "lastModified" : "2024-11-21T05:59:43.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure DevOps Server Spoofing Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Suplantación de Azure DevOps Server"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:microsoft:azure_devops_server:2020.0.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A82E5DE8-39BD-4843-B3CD-EE9C95DA0DFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162190/Microsoft-Azure-DevOps-Server-2020.0.1-Cross-Site-Scripting.html",
        "source" : "secure@microsoft.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/25",
        "source" : "secure@microsoft.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28459",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162190/Microsoft-Azure-DevOps-Server-2020.0.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28459",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28460",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.733",
      "lastModified" : "2024-11-21T05:59:43.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Azure Sphere Unsigned Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Sin Firmar de Azure Sphere"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:azure_sphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDAE8D62-5BAE-4975-ABBB-B2AAD424C299"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28460",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28460",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28464",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.797",
      "lastModified" : "2024-11-21T05:59:43.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VP9 Video Extensions Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de VP9 Video Extensions"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:vp9_video_extensions:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "156CD8DF-B24E-49FD-BCBD-E6EC7EAE4507"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28464",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28464",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28466",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.860",
      "lastModified" : "2024-11-21T05:59:43.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raw Image Extension Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Raw Image Extension. Este ID de CVE es diferente de CVE-2021-28468"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD211DA-89B2-4C91-9F73-20E97F420BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28466",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28466",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28468",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.923",
      "lastModified" : "2024-11-21T05:59:43.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Raw Image Extension Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Raw Image Extension. Este ID de CVE es diferente de CVE-2021-28466"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:raw_image_extension:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD211DA-89B2-4C91-9F73-20E97F420BE1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28468",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-421/",
        "source" : "secure@microsoft.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28468",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-421/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28469",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:20.970",
      "lastModified" : "2024-11-21T05:59:43.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28457, CVE-2021-28473, CVE-2021-28475, CVE-2021-28477"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55.2",
            "matchCriteriaId" : "008AB2BB-A852-401F-B3E3-FB3AC6EBE0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28469",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28469",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28470",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.030",
      "lastModified" : "2024-11-21T05:59:44.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code GitHub Pull Requests and Issues Extension"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code_github_pull_requests_and_issues:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.25.1",
            "matchCriteriaId" : "12C15BDF-197C-4465-8B3F-44B491406615"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28470",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28470",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28471",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.093",
      "lastModified" : "2024-11-21T05:59:44.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Remote Development Extension for Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Remote Development Extension para Visual Studio Code"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55.2",
            "matchCriteriaId" : "008AB2BB-A852-401F-B3E3-FB3AC6EBE0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28471",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28471",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28472",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.203",
      "lastModified" : "2024-11-21T05:59:44.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Maven for Java Extension Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code Maven para Java Extension"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:vscode-maven:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.29.0",
            "matchCriteriaId" : "44FB4179-C8A7-47E4-B41E-0E899AC7382E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28472",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28472",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28473",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.267",
      "lastModified" : "2024-11-21T05:59:44.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28457, CVE-2021-28469, CVE-2021-28475, CVE-2021-28477"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55.2",
            "matchCriteriaId" : "008AB2BB-A852-401F-B3E3-FB3AC6EBE0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28473",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28475",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.343",
      "lastModified" : "2024-11-21T05:59:44.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28457, CVE-2021-28469, CVE-2021-28473, CVE-2021-28477"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55.2",
            "matchCriteriaId" : "008AB2BB-A852-401F-B3E3-FB3AC6EBE0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28475",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28475",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28477",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.407",
      "lastModified" : "2024-11-21T05:59:44.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Visual Studio Code Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Visual Studio Code. Este ID de CVE es diferente de CVE-2021-28457, CVE-2021-28469, CVE-2021-28473, CVE-2021-28475"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:visual_studio_code:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.55.2",
            "matchCriteriaId" : "008AB2BB-A852-401F-B3E3-FB3AC6EBE0D2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28477",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28477",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28480",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.470",
      "lastModified" : "2024-11-21T05:59:45.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-28481, CVE-2021-28482, CVE-2021-28483"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "19C1EE0C-B8DD-4B91-BE4B-1C42D72FB718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "71CDF29B-116B-4DE2-AFD0-B62477FF0AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28480",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28480",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28481",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.530",
      "lastModified" : "2024-11-21T05:59:45.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-28480, CVE-2021-28482, CVE-2021-28483"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "19C1EE0C-B8DD-4B91-BE4B-1C42D72FB718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "71CDF29B-116B-4DE2-AFD0-B62477FF0AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28481",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28482",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.577",
      "lastModified" : "2024-11-21T05:59:45.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-28480, CVE-2021-28481, CVE-2021-28483"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "19C1EE0C-B8DD-4B91-BE4B-1C42D72FB718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "71CDF29B-116B-4DE2-AFD0-B62477FF0AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28482",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28482",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28483",
      "sourceIdentifier" : "secure@microsoft.com",
      "published" : "2021-04-13T20:15:21.640",
      "lastModified" : "2024-11-21T05:59:45.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Microsoft Exchange Server Remote Code Execution Vulnerability"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Ejecución de Código Remota de Microsoft Exchange Server. Este ID de CVE es diferente de CVE-2021-28480, CVE-2021-28481, CVE-2021-28482"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secure@microsoft.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 7.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.1,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2013:cumulative_update_23:*:*:*:*:*:*",
            "matchCriteriaId" : "DA166F2A-D83B-4D50-AD0B-668D813E0585"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_19:*:*:*:*:*:*",
            "matchCriteriaId" : "28FCA0E8-7D27-4746-9731-91B834CA3E64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2016:cumulative_update_20:*:*:*:*:*:*",
            "matchCriteriaId" : "19C1EE0C-B8DD-4B91-BE4B-1C42D72FB718"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "44ECF39A-1DE1-4870-A494-06A53494338D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microsoft:exchange_server:2019:cumulative_update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "71CDF29B-116B-4DE2-AFD0-B62477FF0AEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28483",
        "source" : "secure@microsoft.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2021-28483",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29427",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:21.703",
      "lastModified" : "2024-11-21T06:01:04.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Gradle from version 5.1 and before version 7.0 there is a vulnerability which can lead to information disclosure and/or dependency poisoning. Repository content filtering is a security control Gradle introduced to help users specify what repositories are used to resolve specific dependencies. This feature was introduced in the wake of the \"A Confusing Dependency\" blog post. In some cases, Gradle may ignore content filters and search all repositories for dependencies. This only occurs when repository content filtering is used from within a `pluginManagement` block in a settings file. This may change how dependencies are resolved for Gradle plugins and build scripts. For builds that are vulnerable, there are two risks: 1) Information disclosure: Gradle could make dependency requests to repositories outside your organization and leak internal package identifiers. 2) Dependency poisoning/Dependency confusion: Gradle could download a malicious binary from a repository outside your organization due to name squatting. For a full example and more details refer to the referenced GitHub Security Advisory. The problem has been patched and released with Gradle 7.0. Users relying on this feature should upgrade their build as soon as possible. As a workaround, users may use a company repository which has the right rules for fetching packages from public repositories, or use project level repository content filtering, inside `buildscript.repositories`. This option is available since Gradle 5.1 when the feature was introduced."
      }, {
        "lang" : "es",
        "value" : "En Gradle desde versión 5.1 y anterior a la versión 7.0, se presenta una vulnerabilidad que puede conducir a la divulgación de información y/o envenenamiento por dependencia.&#xa0;El filtrado de contenido del repositorio es un control de seguridad que Gradle introdujo para ayudar a los usuarios a especificar qué repositorios se usan para resolver dependencias específicas.&#xa0;Esta función se introdujo a raíz de la publicación de blog \"A Confusing Dependency\".&#xa0;En algunos casos, Gradle puede ignorar los filtros de contenido y buscar dependencias en todos los repositorios.&#xa0;Esto solo ocurre cuando el filtrado de contenido del repositorio se usa dentro de un bloque `pluginManagement` en un archivo de configuración.&#xa0;Esto puede cambiar la forma en que se resuelven las dependencias para los plugins de Gradle y los scripts de compilación.&#xa0;Para las compilaciones que son vulnerables, existen dos riesgos: 1) Divulgación de información:&#xa0;Gradle podría realizar peticiones de dependencia a repositorios fuera de su organización y filtrar identificadores de paquetes internos.&#xa0;2) Envenenamiento por Dependencia / Confusión de Dependencia: Gradle podría descargar un binario malicioso de un repositorio fuera de su organización debido a la ocupación ilegal de nombres.&#xa0;Para obtener un ejemplo completo y más detalles, consulte el Aviso de seguridad de GitHub al que se hace referencia.&#xa0;El problema se ha corregido y publicado con Gradle versión 7.0.&#xa0;Los usuarios que confían en esta función deben actualizar su compilación lo antes posible.&#xa0;Como solución alternativa, los usuarios pueden utilizar un repositorio de la empresa que tenga las reglas adecuadas para recuperar paquetes de repositorios públicos, o utilizar el filtrado de contenido del repositorio a nivel de proyecto, dentro de `buildscript.repositories`.&#xa0;Esta opción está disponible desde Gradle versión 5.1 cuando se introdujo la función"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-829"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "76D1A1A2-F95B-481D-8EAE-9E54EF5B1F1B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "EF712520-1CFD-473A-B3F5-3CDDFE9C2C9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.gradle.org/7.0/release-notes.html#security-advisories",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-jvmj-rh6q-x395",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.gradle.org/7.0/release-notes.html#security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-jvmj-rh6q-x395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29428",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:21.797",
      "lastModified" : "2024-11-21T06:01:04.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreating files in the system temporary directory. This vulnerability impacted builds using precompiled script plugins written in Kotlin DSL and tests for Gradle plugins written using ProjectBuilder or TestKit. If you are on Windows or modern versions of macOS, you are not vulnerable. If you are on a Unix-like operating system with the \"sticky\" bit set on your system temporary directory, you are not vulnerable. The problem has been patched and released with Gradle 7.0. As a workaround, on Unix-like operating systems, ensure that the \"sticky\" bit is set. This only allows the original user (or root) to delete a file. If you are unable to change the permissions of the system temporary directory, you can move the Java temporary directory by setting the System Property `java.io.tmpdir`. The new path needs to limit permissions to the build user only. For additional details refer to the referenced GitHub Security Advisory."
      }, {
        "lang" : "es",
        "value" : "En Gradle versiones anteriores a 7.0, en sistemas similares a Unix, el directorio temporal del sistema puede ser creado con permisos abiertos que permiten a varios usuarios crear y eliminar archivos dentro de él.&#xa0;Las compilaciones de Gradle podrían ser vulnerables a una escalada de privilegios local de un atacante que elimine y vuelva a crear rápidamente archivos en el directorio temporal del sistema.&#xa0;Esta vulnerabilidad afectó las compilaciones que usan plugins de script precompilados escritos en Kotlin DSL y pruebas para plugins de Gradle escritos con ProjectBuilder o TestKit.&#xa0;Si tiene Windows o versiones modernas de macOS, no es vulnerable.&#xa0;Si está en un sistema operativo similar a Unix con el bit  \"sticky\" configurado en el directorio temporal de su sistema, no es vulnerable.&#xa0;El problema se ha corregido y publicado con Gradle 7.0.&#xa0;Como solución alternativa, en sistemas operativos similares a Unix, asegúrese de que el bit \"sticky\" está establecido.&#xa0;Esto solo permite que el usuario original (o root) elimine un archivo.&#xa0;Si no puede cambiar los permisos del directorio temporal del sistema, puede mover el directorio temporal de Java configurando la propiedad del sistema `java.io.tmpdir`.&#xa0;La nueva ruta debe limitar los permisos solo al usuario de la compilación.&#xa0;Para obtener detalles adicionales, consulte el Aviso de Seguridad de GitHub al que se hace referencia"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gradle:gradle:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0",
            "matchCriteriaId" : "1CBD5FF7-3589-474C-8BA7-0385D3E4BC0F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.2.3",
            "matchCriteriaId" : "EF712520-1CFD-473A-B3F5-3CDDFE9C2C9A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.gradle.org/7.0/release-notes.html#security-advisories",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/pull/15240",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/pull/15654",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-89qm-pxvm-p336",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.gradle.org/7.0/release-notes.html#security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/pull/15240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/pull/15654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gradle/gradle/security/advisories/GHSA-89qm-pxvm-p336",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29435",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:21.907",
      "lastModified" : "2024-11-21T06:01:05.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "trestle-auth is an authentication plugin for the Trestle admin framework. A vulnerability in trestle-auth versions 0.4.0 and 0.4.1 allows an attacker to create a form that will bypass Rails' built-in CSRF protection when submitted by a victim with a trestle-auth admin session. This potentially allows an attacker to alter protected data, including admin account credentials. The vulnerability has been fixed in trestle-auth 0.4.2 released to RubyGems."
      }, {
        "lang" : "es",
        "value" : "trestle-auth es un plugin de autenticación para el framework de administración de Trestle.&#xa0;Una vulnerabilidad en trestle-auth versiones 0.4.0 y 0.4.1, permite a un atacante crear un formulario que omitirá la protección CSRF incorporada de Rails cuando lo envíe una víctima con una sesión de administración de trestle-auth.&#xa0;Esto potencialmente permite a un atacante alterar los datos protegidos, incluyendo las credenciales de la cuenta de administrador.&#xa0;La vulnerabilidad ha sido corregida en trestle-auth versión 0.4.2,  publicada en RubyGems"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trestle-auth_project:trestle-auth:0.4.0:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "03D0B300-CDE9-4E0D-BFD2-E9EDD5C533B5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trestle-auth_project:trestle-auth:0.4.1:*:*:*:*:ruby:*:*",
            "matchCriteriaId" : "0991DB53-B830-45AF-AAA2-320C578924F6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TrestleAdmin/trestle-auth/commit/cb95b05cdb2609052207af07b4b8dfe3a23c11dc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TrestleAdmin/trestle-auth/security/advisories/GHSA-h8hx-2c5r-32cf",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/trestle-auth",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TrestleAdmin/trestle-auth/commit/cb95b05cdb2609052207af07b4b8dfe3a23c11dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TrestleAdmin/trestle-auth/security/advisories/GHSA-h8hx-2c5r-32cf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rubygems.org/gems/trestle-auth",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29436",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:22.000",
      "lastModified" : "2024-11-21T06:01:05.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Anuko Time Tracker is an open source, web-based time tracking application written in PHP. In Time Tracker before version 1.19.27.5431 a Cross site request forgery (CSRF) vulnerability existed. The nature of CSRF is that a logged on user may be tricked by social engineering to click on an attacker-provided form that executes an unintended action such as changing user password. The vulnerability is fixed in Time Tracker version 1.19.27.5431. Upgrade is recommended. If upgrade is not practical, introduce ttMitigateCSRF() function in /WEB-INF/lib/common.php.lib using the latest available code and call it from ttAccessAllowed()."
      }, {
        "lang" : "es",
        "value" : "Anuko Time Tracker es una aplicación de seguimiento del tiempo de código abierto basada en web escrita en PHP.&#xa0;En Time Tracker versiones anteriores a 1.19.27.5431, se presentaba una vulnerabilidad de tipo Cross site request forgery (CSRF).&#xa0;La naturaleza de CSRF es que un usuario que ha iniciado sesión puede ser engañado por ingeniería social para que haga clic en un formulario proporcionado por un atacante que ejecuta una acción no prevista, tal y como cambiar la contraseña del usuario.&#xa0;La vulnerabilidad se corrigió en la versión 1.19.27.5431 de Time Tracker.&#xa0;Una actualización es recomendada.&#xa0;Si la actualización no es práctica, introduzca la función ttMitigateCSRF() en la biblioteca /WEB-INF/lib/common.php.lib usando el último código disponible y llámelo desde la función ttAccessAllowed()"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:anuko:time_tracker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.19.27.5431",
            "matchCriteriaId" : "8AA337D3-0BE0-449A-9E94-A08AD1153B35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/anuko/timetracker/commit/e3f8222ee308322942bcebcd86b78ecf19382563",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/commit/e77be7eea69df5d52e19f9f25b5b89a0e66a5b8e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/security/advisories/GHSA-pgpx-rfvj-9g4f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/commit/e3f8222ee308322942bcebcd86b78ecf19382563",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/commit/e77be7eea69df5d52e19f9f25b5b89a0e66a5b8e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/anuko/timetracker/security/advisories/GHSA-pgpx-rfvj-9g4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29437",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:22.093",
      "lastModified" : "2024-11-21T06:01:05.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ScratchOAuth2 is an Oauth implementation for Scratch. Any ScratchOAuth2-related data normally accessible and modifiable by a user can be read and modified by a third party. 1. Scratch user visits 3rd party site. 2. 3rd party site asks user for Scratch username. 3. 3rd party site pretends to be user and gets login code from ScratchOAuth2. 4. 3rd party site gives code to user and instructs them to post it on their profile. 5. User posts code on their profile, not knowing it is a ScratchOAuth2 login code. 6. 3rd party site completes login with ScratchOAuth2. 7. 3rd party site has full access to anything the user could do if they directly logged in. See referenced GitHub security advisory for patch notes and workarounds."
      }, {
        "lang" : "es",
        "value" : "ScratchOAuth2 es una implementación de Oauth para Scratch.&#xa0;Cualquier dato relacionado con ScratchOAuth2 normalmente accesible y modificable por un usuario puede ser leído y modificado por un tercero.&#xa0;1. El usuario de Scratch visita un sitio de terceros.&#xa0;2. El sitio de terceros solicita al usuario el nombre de usuario de Scratch.&#xa0;3. El sitio de terceros pretende ser un usuario y obtiene el código de inicio de sesión de ScratchOAuth2.&#xa0;4. El sitio de terceros proporciona un código al usuario y le indica que lo publique en su perfil.&#xa0;5. El usuario publica el código en su perfil, sin saber que es un código de inicio de sesión de ScratchOAuth2.&#xa0;6. El sitio de terceros completa el inicio de sesión con ScratchOAuth2.&#xa0;7. El sitio de terceros tiene acceso completo a cualquier cosa que el usuario pueda hacer si inicia sesión directamente. Consulte el aviso de seguridad de GitHub al que se hace referencia para ver notas de parches y soluciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:scratchoauth2_project:scratchoauth2:*:*:*:*:*:scratch:*:*",
            "versionEndExcluding" : "2021-04-13",
            "matchCriteriaId" : "FA485728-97AA-480C-BE2A-B4ACB8F6F65D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ScratchVerifier/ScratchOAuth2/commit/9220c2a77eda3df37a84486ad722f1ad0985d8e7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ScratchVerifier/ScratchOAuth2/security/advisories/GHSA-gvpg-23fh-8g75",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ScratchVerifier/ScratchOAuth2/commit/9220c2a77eda3df37a84486ad722f1ad0985d8e7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://github.com/ScratchVerifier/ScratchOAuth2/security/advisories/GHSA-gvpg-23fh-8g75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29438",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:22.187",
      "lastModified" : "2024-11-21T06:01:05.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Nextcloud dialogs library (npm package @nextcloud/dialogs) before 3.1.2 insufficiently escaped text input passed to a toast. If your application displays toasts with user-supplied input, this could lead to a XSS vulnerability. The vulnerability has been patched in version 3.1.2 If you need to display HTML in the toast, explicitly pass the `options.isHTML` config flag."
      }, {
        "lang" : "es",
        "value" : "La biblioteca de diálogos de Nextcloud (paquete npm  @nextcloud/dialogs) versiones anteriores a 3.1.2, la entrada de texto con un escape insuficiente se pasó a un toast.&#xa0;Si su aplicación muestra toast con información suministrada por un usuario, esto podría conllevar a una vulnerabilidad de tipo XSS.&#xa0;La vulnerabilidad ha sido parcheada en la versión 3.1.2. Si necesita mostrar HTML en el toast pase explícitamente el flag de configuración \"options.isHTML\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud\\/dialogs_project:nextcloud\\/dialogs:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.1.2",
            "matchCriteriaId" : "DE179B6C-DD65-4C85-9F8B-DB9CB28A4B5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/nextcloud-dialogs/security/advisories/GHSA-g3fq-3v3g-mh32",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40nextcloud/dialogs",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/nextcloud/nextcloud-dialogs/security/advisories/GHSA-g3fq-3v3g-mh32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40nextcloud/dialogs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29439",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:22.297",
      "lastModified" : "2024-11-21T06:01:06.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Grav admin plugin prior to version 1.10.11 does not correctly verify caller's privileges. As a consequence, users with the permission `admin.login` can install third-party plugins and their dependencies. By installing the right plugin, an attacker can obtain an arbitrary code execution primitive and elevate their privileges on the instance. The vulnerability has been addressed in version 1.10.11. As a mitigation blocking access to the `/admin` path from untrusted sources will reduce the probability of exploitation. "
      }, {
        "lang" : "es",
        "value" : "El plugin de administración de Grav anterior a versión 1.10.11, no verifica correctamente los privilegios de la persona que llama.&#xa0;Como consecuencia, los usuarios con el permiso \"admin.login\" pueden instalar plugins de terceros y sus dependencias.&#xa0;Al instalar el plugin correcto, un atacante puede obtener una primitiva ejecución de código arbitraria y elevar sus privilegios en la instancia.&#xa0;La vulnerabilidad ha sido solucionada en la versión 1.10.11.&#xa0;Como mitigación, el bloqueo del acceso a la ruta \"/admin\" desde fuentes no confiables reducirá la probabilidad de explotación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getgrav:grav_admin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.11",
            "matchCriteriaId" : "2EC60F80-734D-44A8-AA79-EFC1159369AC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/getgrav/grav-plugin-admin/commit/a220359877fd1281f76ba732e5308e0e3002e4b1",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-wg37-cf5x-55hq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getgrav/grav-plugin-admin/commit/a220359877fd1281f76ba732e5308e0e3002e4b1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-wg37-cf5x-55hq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29440",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-13T20:15:22.360",
      "lastModified" : "2024-11-21T06:01:06.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arbitrary code execution and elevate privileges on the instance. The issue was addressed in version 1.7.11."
      }, {
        "lang" : "es",
        "value" : "Grav es una plataforma web basada en archivos.&#xa0;El procesamiento de Twig de páginas estáticas puede ser habilitado en la materia inicial por cualquier usuario administrativo autorizado para crear o editar páginas.&#xa0;Como el procesador Twig se ejecuta sin sandbox, este comportamiento puede ser usado para obtener una ejecución de código arbitraria y elevar los privilegios en la instancia.&#xa0;El problema se solucionó en la versión 1.7.11"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getgrav:grav:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.11",
            "matchCriteriaId" : "3DDB0D78-D53F-4A5F-B1EB-0A4E3E986E30"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162987/Grav-CMS-1.7.10-Server-Side-Template-Injection.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getgrav/grav/security/advisories/GHSA-g8r4-p96j-xfxc",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/getgrav/grav",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162987/Grav-CMS-1.7.10-Server-Side-Template-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/grav-cms-code-execution-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getgrav/grav/security/advisories/GHSA-g8r4-p96j-xfxc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://packagist.org/packages/getgrav/grav",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3460",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-13T21:15:25.037",
      "lastModified" : "2024-11-21T06:21:35.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Motorola MH702x devices, prior to version 2.0.0.301, do not properly verify the server certificate during communication with the support server which could lead to the communication channel being accessible by an attacker."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Motorola MH702x, anteriores a versión 2.0.0.301, no verifican apropiadamente el certificado del servidor durante la comunicación con el servidor de soporte,  lo que podría conllevar que un canal de comunicación sea accedido por un atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:motorola:mh702x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0.301",
            "matchCriteriaId" : "638069D4-50A2-47FF-957A-75294EAF99CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:motorola:mh702x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "034DBE0E-A4C7-4BB9-8DCC-AA0325BC5036"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://motorolamentor.zendesk.com/hc/en-us/articles/1260804087249",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://motorolamentor.zendesk.com/hc/en-us/articles/1260804087249",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3462",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-13T21:15:25.193",
      "lastModified" : "2024-11-21T06:21:36.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios en Lenovo Power Management Driver para Windows 10, anteriores a versión 1.67.17.54, que podría permitir el acceso no autorizado al objeto del dispositivo del controlador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:windows_10:*:*",
            "versionEndExcluding" : "1.67.17.54",
            "matchCriteriaId" : "3A801AF5-BEDF-4FA9-93A0-F742CB85488A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E68C4CB-7316-4FD2-A89B-123E5014AE1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_yoga_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA392C0-4D5A-4440-8910-C248F17077CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C2F35D-79A1-4671-BA7E-4AAF2BA13744"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE4830F-2C86-4DF0-8E37-D2894B4518FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577AACCC-001A-4C73-B036-CA942080304F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259D895B-9968-41CF-8DB4-FAAB5A4C04AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1D9347-9561-45A3-A434-3A0802BC8953"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B871C5-73F4-43FF-BCF1-B9B1B52FAC31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0A0B6A-7932-4811-BC62-575B3FA9F86C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e14_gen2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E042C00A-D60D-447E-A0F5-8E19A06D4E59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9EC7DC-D272-4986-8320-B5920E3EC2F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e15_gen2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEA640B-96BB-440A-8C2C-1A1C4D97CB11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3B20B-F86E-4D83-BFD1-A70BE06B55CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e470c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C0CDE-30B4-4A99-BA7C-31C1D1C72E3B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e475:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7A17E2-C8F2-4AF0-BF87-14B3AD0EF75A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F18F059-A701-41EE-B711-46DC7B5A1389"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3647F05A-FE86-494A-BA16-0009C7ACB799"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5863D590-FE1A-4731-9E05-AEBF57D9796F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE35D0C7-721B-4AD7-A483-E1671C00C227"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e570c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137B926A-28AE-4C6D-AD98-AE9EBEE14222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e575:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16C4BFE-5054-470D-9BF8-8A8B2DE3F4E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E574BA8-65D9-4836-B448-254D613DA86E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03AC004-4251-47AB-AE46-2BDD93F884D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BA84C7-B436-4073-B04F-CD83773B3A36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99429424-2602-458B-BB57-C2E161005587"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC30C8B-425F-4D72-922C-C68237E0D408"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E560943-6A00-4423-91F3-FBBBBB978F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1295E4F8-431A-43ED-8104-DBBD0CDB1978"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF0BBFF-9649-4778-9812-767CFB05CF01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB43443-ED65-4CF5-8FDA-3BCC1E2BD5A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l14_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0528272-3E6D-41A6-B87D-66C3DB4E1B41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l14_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE86BB2-232D-4DD9-9630-EA6517C64EB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l15_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658E6C1D-7C9D-4934-A232-38F7A0809328"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l15_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DDB8D3-F2BD-42AB-B927-D38FB54EE902"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FFC7C4-2CAF-440A-8ED8-F25EA19F86C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l380_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187E37E-E3D6-467A-934C-D5613FBF8641"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072FAC2E-2349-465C-96C0-C24E3891A7B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DD928B-F0BF-44F1-9EA4-DC82233A2E69"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0930094D-D5E5-4941-8C0C-1C8208310D68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146462F0-69DA-4583-84C5-E1F2CE27E274"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE6D03B-0689-482E-8034-D7DC06249F0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CD2E9F-18D9-4D04-BA83-42653424A006"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3245C2B-CED0-442E-ADE4-240F77D8AEC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82885E0E-257F-4F3F-B16B-35C9FA8D349B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF379C36-AD7A-4C89-9636-2EC418D34D59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p1_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47363A2-D794-4A61-8F53-8DB0C6139235"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p1_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FCBD54-3BF7-4F72-93B8-7205721E0E9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p14s_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07EE7CC-32C6-4470-8A2C-BF6DF6E6E917"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p14s_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE970F53-856F-4DFF-B845-A8C5A8B14C90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FD8941-85F8-404B-93A8-3B5A0E0C0A9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15s_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC564275-320C-46E5-9B2F-DE795C4FB9CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15s_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AE8F28-A87C-4F62-951D-92EE9952E4B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15v_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F7266E-3C5C-4936-B43F-4860E09FED09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p17_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB689F79-18B4-46A4-967C-E95DBE29A88C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74FF429-1EB1-46EC-A2CC-0A250D727049"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A724CF4-587A-4475-B27B-ACD99FC3F7E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEFFA8C-6EA1-4DD4-A6C0-9EDCE6A7D5F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A6498-072B-4541-87E5-379ECC36EC77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79A7D7F-7F46-4AD8-B90F-79E43B410E75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p53s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602E98D1-5EC0-4982-BD0A-F475C0D1098A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50A012-EFAE-485E-AADB-7D0AADEF21AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37552828-D225-4FCD-B762-A099A63E38E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p73:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5456AA95-094C-461C-85D4-22BDD23DF826"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_r14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438ACF29-9418-42FD-B4AB-F67A80A52C32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_r14_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5A3C94-3133-4FA8-AAA3-14D7CBF216B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_r480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620B705F-9030-410B-811C-437D4358FED4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_gen_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF9FA1F-195B-4C65-A6C1-E7C2B2BB8ECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9DD540-02AF-4069-AC9D-FDE554471E88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE17F4C-2D95-4677-A8E7-A3B840EE3EAE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3A2ACE-E9E9-4A93-9543-044096A8BAFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392936BA-C4E0-46BD-A677-E6F537932665"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2279C8-0F44-4CA3-9AED-F31E3C3327D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s3_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3319D1-F0B2-4E48-B55D-90E7AD5123BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s5_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394BE953-1B73-4F6B-86FF-54DD6FF9CD63"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602BF8DB-B3D2-4078-8369-0C4608468C25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6A601D-0427-453F-B4A8-4EB9C18A58C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14s_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEAF8E5-B937-41C8-8D74-4ABC4035A2B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14s_gen_2i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A7367D-61E8-4B04-A2C2-F669D2A61626"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BCB18-BFAE-4590-A2E4-0C017DFBCD7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9FB9A3-B1B5-42FF-9B07-0245E54237E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15g_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667C012B-C203-45CD-9E12-CAF954D13CC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15p_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01601852-005B-4654-BF5F-38925DF98F87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8796BA28-2705-4798-A95C-A821BB941A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93959B3-4DE0-4AD3-8242-BF0BB45FABF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F55DB9-1677-4E50-A8A6-AFCE2FB1E609"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3249C664-2699-47D2-B17A-2B1EF24FCB05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEFD400-CED2-4F84-BEE0-02A81F3B333A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t490s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8B88F8-437C-4982-BBAA-ACC666522475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D1AB23-EF93-48F6-BB7C-BC809EB69163"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC1A912-C9FA-4D12-97A3-1D53B8209314"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D3F23E-1160-4B0A-91A0-80773DE4ECB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160DE174-DB5E-4F76-91B2-5C9DC53AAC01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88244565-F518-4FEE-AE52-B713969981A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9E3A81-C519-4A04-93E6-254913441558"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "788D3256-B315-419E-8CC7-CDA244AC1840"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BDB699-4344-4280-A241-AF6CDA850A16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_extreme:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B89E5E-808D-4500-A33D-3B86E8CB28D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_extreme_2nd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A78112B-6318-4E0C-8E45-BE660E7ABE0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_extreme_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A8860C-BD0D-4DC9-B430-DF3A23C5E523"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_nano_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E97E1F-97A5-4095-A015-E8CDBCCDB32F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D4520A-47B3-4E2A-9A1D-9738EB8167A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAC1F64-CE82-4519-8449-D47637E1D6CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_titanium_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3134EF-5CFD-4CCE-8BA0-D0C149793FCA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC29C336-3A92-4A55-8764-0A99CDA9F5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771425C2-D43E-4A67-93CF-C7DDAAB9DD82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F54ED9-4F61-44C6-9B2F-FF2902C60E28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33927CDB-57A6-4E91-BF0C-3F75BB2E69D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829280DE-DE81-4CA2-A67A-C63474B352CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147D3B6-C18F-46F8-AA70-E4B6AFA8D615"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_gen_2i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677B63C9-C5DA-4711-B0EB-0796A54FEA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A9CBB7-9624-4BB0-84AB-59752A0B5238"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF0472-8C1B-4E80-B632-9DBA2B1EACD1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94532BBF-D9CF-4164-BACA-AFEA8C35806C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEA1745-32A2-4261-8572-12D1565E3A55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E1704F-6BB6-4B7C-ADE6-720533FB46E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x390_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D40345-389F-4727-B549-1883C3454129"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D5D2DC-32C0-4540-82AF-D97735383028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB28CB4-CB95-4E19-B10F-961D1ED997C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B0E5C1-5A7B-4310-A4D3-A12E1F059568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-59174",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-59174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3463",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-13T21:15:25.257",
      "lastModified" : "2024-11-21T06:21:36.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A null pointer dereference vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could cause systems to experience a blue screen error."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de desreferencia de puntero null en Lenovo Power Management Driver para Windows 10, anteriores a versión 1.67.17.54, que podría causar que los sistemas experimenten un error de pantalla azul"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:power_management_driver:*:*:*:*:*:windows_10:*:*",
            "versionEndExcluding" : "1.67.17.54",
            "matchCriteriaId" : "3A801AF5-BEDF-4FA9-93A0-F742CB85488A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E68C4CB-7316-4FD2-A89B-123E5014AE1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_11e_yoga_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA392C0-4D5A-4440-8910-C248F17077CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_13_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59C2F35D-79A1-4671-BA7E-4AAF2BA13744"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE4830F-2C86-4DF0-8E37-D2894B4518FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577AACCC-001A-4C73-B036-CA942080304F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a285:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "259D895B-9968-41CF-8DB4-FAAB5A4C04AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a475:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1D9347-9561-45A3-A434-3A0802BC8953"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_a485:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37B871C5-73F4-43FF-BCF1-B9B1B52FAC31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD0A0B6A-7932-4811-BC62-575B3FA9F86C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e14_gen2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E042C00A-D60D-447E-A0F5-8E19A06D4E59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E9EC7DC-D272-4986-8320-B5920E3EC2F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e15_gen2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEA640B-96BB-440A-8C2C-1A1C4D97CB11"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB3B20B-F86E-4D83-BFD1-A70BE06B55CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e470c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A5C0CDE-30B4-4A99-BA7C-31C1D1C72E3B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e475:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE7A17E2-C8F2-4AF0-BF87-14B3AD0EF75A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F18F059-A701-41EE-B711-46DC7B5A1389"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3647F05A-FE86-494A-BA16-0009C7ACB799"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5863D590-FE1A-4731-9E05-AEBF57D9796F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE35D0C7-721B-4AD7-A483-E1671C00C227"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e570c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "137B926A-28AE-4C6D-AD98-AE9EBEE14222"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e575:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F16C4BFE-5054-470D-9BF8-8A8B2DE3F4E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E574BA8-65D9-4836-B448-254D613DA86E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D03AC004-4251-47AB-AE46-2BDD93F884D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_e595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29BA84C7-B436-4073-B04F-CD83773B3A36"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99429424-2602-458B-BB57-C2E161005587"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC30C8B-425F-4D72-922C-C68237E0D408"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E560943-6A00-4423-91F3-FBBBBB978F6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1295E4F8-431A-43ED-8104-DBBD0CDB1978"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFF0BBFF-9649-4778-9812-767CFB05CF01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l13_yoga_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0CB43443-ED65-4CF5-8FDA-3BCC1E2BD5A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l14_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0528272-3E6D-41A6-B87D-66C3DB4E1B41"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l14_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CE86BB2-232D-4DD9-9630-EA6517C64EB1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l15_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "658E6C1D-7C9D-4934-A232-38F7A0809328"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l15_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77DDB8D3-F2BD-42AB-B927-D38FB54EE902"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FFC7C4-2CAF-440A-8ED8-F25EA19F86C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l380_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2187E37E-E3D6-467A-934C-D5613FBF8641"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "072FAC2E-2349-465C-96C0-C24E3891A7B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l390_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17DD928B-F0BF-44F1-9EA4-DC82233A2E69"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0930094D-D5E5-4941-8C0C-1C8208310D68"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "146462F0-69DA-4583-84C5-E1F2CE27E274"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE6D03B-0689-482E-8034-D7DC06249F0A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61CD2E9F-18D9-4D04-BA83-42653424A006"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3245C2B-CED0-442E-ADE4-240F77D8AEC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_l590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82885E0E-257F-4F3F-B16B-35C9FA8D349B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF379C36-AD7A-4C89-9636-2EC418D34D59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p1_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F47363A2-D794-4A61-8F53-8DB0C6139235"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p1_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5FCBD54-3BF7-4F72-93B8-7205721E0E9A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p14s_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C07EE7CC-32C6-4470-8A2C-BF6DF6E6E917"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p14s_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE970F53-856F-4DFF-B845-A8C5A8B14C90"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FD8941-85F8-404B-93A8-3B5A0E0C0A9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15s_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC564275-320C-46E5-9B2F-DE795C4FB9CB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15s_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AE8F28-A87C-4F62-951D-92EE9952E4B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p15v_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82F7266E-3C5C-4936-B43F-4860E09FED09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p17_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB689F79-18B4-46A4-967C-E95DBE29A88C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B74FF429-1EB1-46EC-A2CC-0A250D727049"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p51:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A724CF4-587A-4475-B27B-ACD99FC3F7E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p51s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A84E6D8C-CB5E-4B50-B364-4E8AB4985A57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p52:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AEFFA8C-6EA1-4DD4-A6C0-9EDCE6A7D5F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p52s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0A6498-072B-4541-87E5-379ECC36EC77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D79A7D7F-7F46-4AD8-B90F-79E43B410E75"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p53s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602E98D1-5EC0-4982-BD0A-F475C0D1098A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p71:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF50A012-EFAE-485E-AADB-7D0AADEF21AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p72:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37552828-D225-4FCD-B762-A099A63E38E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_p73:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5456AA95-094C-461C-85D4-22BDD23DF826"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_r14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "438ACF29-9418-42FD-B4AB-F67A80A52C32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_r14_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5A3C94-3133-4FA8-AAA3-14D7CBF216B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_r480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "620B705F-9030-410B-811C-437D4358FED4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s1_gen_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF9FA1F-195B-4C65-A6C1-E7C2B2BB8ECF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF9DD540-02AF-4069-AC9D-FDE554471E88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE17F4C-2D95-4677-A8E7-A3B840EE3EAE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF3A2ACE-E9E9-4A93-9543-044096A8BAFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "392936BA-C4E0-46BD-A677-E6F537932665"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s2_yoga_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B2279C8-0F44-4CA3-9AED-F31E3C3327D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s3_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC3319D1-F0B2-4E48-B55D-90E7AD5123BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_s5_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "394BE953-1B73-4F6B-86FF-54DD6FF9CD63"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "602BF8DB-B3D2-4078-8369-0C4608468C25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6A601D-0427-453F-B4A8-4EB9C18A58C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14s_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CEAF8E5-B937-41C8-8D74-4ABC4035A2B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t14s_gen_2i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8A7367D-61E8-4B04-A2C2-F669D2A61626"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39BCB18-BFAE-4590-A2E4-0C017DFBCD7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF9FB9A3-B1B5-42FF-9B07-0245E54237E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15g_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "667C012B-C203-45CD-9E12-CAF954D13CC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t15p_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01601852-005B-4654-BF5F-38925DF98F87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6515A024-F5A8-494F-BCB6-0DD2D1CA4EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8796BA28-2705-4798-A95C-A821BB941A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t470s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A93959B3-4DE0-4AD3-8242-BF0BB45FABF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84F55DB9-1677-4E50-A8A6-AFCE2FB1E609"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t480s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3249C664-2699-47D2-B17A-2B1EF24FCB05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FEFD400-CED2-4F84-BEE0-02A81F3B333A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t490s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B8B88F8-437C-4982-BBAA-ACC666522475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59D1AB23-EF93-48F6-BB7C-BC809EB69163"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEC1A912-C9FA-4D12-97A3-1D53B8209314"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D90A3FD-A8FA-43E1-AB52-9F4B0960BDC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_t590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87D3F23E-1160-4B0A-91A0-80773DE4ECB3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "160DE174-DB5E-4F76-91B2-5C9DC53AAC01"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88244565-F518-4FEE-AE52-B713969981A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_7:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA9E3A81-C519-4A04-93E6-254913441558"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_8:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "788D3256-B315-419E-8CC7-CDA244AC1840"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_carbon_gen_9:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BDB699-4344-4280-A241-AF6CDA850A16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_extreme:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B89E5E-808D-4500-A33D-3B86E8CB28D4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_extreme_2nd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A78112B-6318-4E0C-8E45-BE660E7ABE0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_extreme_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4A8860C-BD0D-4DC9-B430-DF3A23C5E523"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_nano_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36E97E1F-97A5-4095-A015-E8CDBCCDB32F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61D4520A-47B3-4E2A-9A1D-9738EB8167A6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_tablet_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CAC1F64-CE82-4519-8449-D47637E1D6CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_titanium_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD3134EF-5CFD-4CCE-8BA0-D0C149793FCA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC29C336-3A92-4A55-8764-0A99CDA9F5F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D9CB267-B2FE-4B2A-BF96-32229FB5B6F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771425C2-D43E-4A67-93CF-C7DDAAB9DD82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4F54ED9-4F61-44C6-9B2F-FF2902C60E28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x1_yoga_gen_6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33927CDB-57A6-4E91-BF0C-3F75BB2E69D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "829280DE-DE81-4CA2-A67A-C63474B352CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C147D3B6-C18F-46F8-AA70-E4B6AFA8D615"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_gen_2i:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "677B63C9-C5DA-4711-B0EB-0796A54FEA74"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5A9CBB7-9624-4BB0-84AB-59752A0B5238"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x13_yoga_gen_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ECF0472-8C1B-4E80-B632-9DBA2B1EACD1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94532BBF-D9CF-4164-BACA-AFEA8C35806C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABEA1745-32A2-4261-8572-12D1565E3A55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x380_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5E1704F-6BB6-4B7C-ADE6-720533FB46E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2E05FC7-F957-4FE0-A9F1-E125419B7BFD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x390_yoga:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30D40345-389F-4727-B549-1883C3454129"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_x395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D5D2DC-32C0-4540-82AF-D97735383028"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_11e_gen_5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB28CB4-CB95-4E19-B10F-961D1ED997C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkpad_yoga_370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30B0E5C1-5A7B-4310-A4D3-A12E1F059568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-59174",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-59174",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3471",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-13T21:15:25.347",
      "lastModified" : "2023-11-07T03:38:01.603",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3473",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-13T21:15:25.410",
      "lastModified" : "2024-11-21T06:21:37.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An internal product security audit of Lenovo XClarity Controller (XCC) discovered that the XCC configuration backup/restore password may be written to an internal XCC log buffer if Lenovo XClarity Administrator (LXCA) is used to perform the backup/restore. The backup/restore password typically exists in this internal log buffer for less than 10 minutes before being overwritten. Generating an FFDC service log will include the log buffer contents, including the backup/restore password if present. The FFDC service log is only generated when requested by a privileged XCC user and it is only accessible to the privileged XCC user that requested the file. The backup/restore password is not captured if the backup/restore is initiated directly from XCC."
      }, {
        "lang" : "es",
        "value" : "Una auditoría interna de seguridad del producto de Lenovo XClarity Controller (XCC) detectó que la contraseña de copia de seguridad y restauración de la configuración de XCC puede ser escrita en un búfer de registro interno de XCC si Lenovo XClarity Administrator (LXCA) es usada para llevar a cabo la copia de seguridad y restauración.&#xa0;La contraseña de copia de seguridad y restauración normalmente se presenta en este búfer de registro interno durante menos de 10 minutos antes ser sobrescrito.&#xa0;Al generar un registro de servicio FFDC incluirá el contenido del búfer del registro, incluyendo la contraseña de copia de seguridad y restauración, si está presente.&#xa0;El registro de servicio FFDC solo es generado cuando es requerido por un usuario XCC privilegiado y solo es accesible para el usuario XCC privilegiado que requirió el archivo.&#xa0;La contraseña de copia de seguridad y restauración no es capturada si la copia de seguridad y restauración es iniciada directamente desde XCC"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_controller:6.00_cdi370q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78EECA5F-3439-4E53-AD24-1E93F215E2C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562D18F3-5241-4B0B-AC5A-093795AE057B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx_certified_nodes:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39169F30-ACE5-48EC-9D51-34C8F52D33C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61CA8EA-F59F-4BB3-963A-163FE450A052"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663D3BA7-F1A9-4EC5-8D31-0FC9AEEF337E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_dense:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E560B9E-CF34-42F5-83E3-21F50E459EF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C6628A-8A99-4841-A7C5-0445A03C638D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A7C5BE3-5429-46B0-B0B5-C86A9B6376A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3DC615C-A88A-4C45-892F-77C5E84104E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7F10C8D-C9C7-4FAD-980D-7A602C8BE81D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C2B5BB-6E1F-4E01-AAE8-A8239AB8945E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B19107-5B45-4E45-8B34-90B5A1FF3962"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st558:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30CFA6D5-7D07-4BFF-8AD2-DE591EDE0186"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_controller:1.10_tgbt12q:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F5151FA-DA37-475F-A748-DBDCE8EC14EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562D18F3-5241-4B0B-AC5A-093795AE057B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx_certified_nodes:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39169F30-ACE5-48EC-9D51-34C8F52D33C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_mx1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF0E5EF6-2664-4DEC-BD90-BF3128DC9DA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61CA8EA-F59F-4BB3-963A-163FE450A052"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663D3BA7-F1A9-4EC5-8D31-0FC9AEEF337E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_dense:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E560B9E-CF34-42F5-83E3-21F50E459EF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_se350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD4B877C-8D19-4AD2-948D-ADBD9B1BEEED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF1664DE-A6AE-4365-A652-80CEFECB62DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A833BF2-DD7B-4A09-AAB8-14C0C7C5DE10"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_controller:2.14_psi338i:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1225B77-7799-4365-8BF2-FE61404F4BA7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0407D-D603-48AE-9A42-F4C68056E19D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:xclarity_controller:4.40_tei3b2p:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77357A60-44C5-4988-926A-470F54F0FA70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx1320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E72B2526-8BD9-49FD-BDCF-B654BCEAC8AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx2320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "562D18F3-5241-4B0B-AC5A-093795AE057B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03D3EBE9-34C1-45CA-A800-B313110409DC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8126219-A07C-42A6-9553-B6AE499DB6BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3520-g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B9D354C3-0183-42D9-97D0-C9888B023195"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx3720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38326D-97DD-4A6B-985F-968570528C19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A9FDCC0-F45C-4AA1-BB11-0761A25BF16B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16776C5F-CCAF-4F22-B570-FE49A0B73FF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_hx7820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2540A2-1462-42F7-949C-9881544DE684"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_1u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C61CA8EA-F59F-4BB3-963A-163FE450A052"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_2u:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663D3BA7-F1A9-4EC5-8D31-0FC9AEEF337E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinkagile_vx_dense:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E560B9E-CF34-42F5-83E3-21F50E459EF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2588DA2E-6E58-4FA2-9AA6-FC669C042197"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sd650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF5D0-CC08-42B0-9798-55ED911B3EF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DB64709-93BA-43D8-A1DB-4CE405291430"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sn850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1DB0C393-2CB4-485F-93E2-2F28B19F9325"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6334030-07E4-45F4-A233-4A37F77FC573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr158:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D94182EE-10FE-4506-BDE0-06F4140923FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5B52AC1-714E-4217-8599-80D99E0D33B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB19D273-4975-4957-AE94-117B607CD746"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19771143-D5F1-4F2F-AB83-09913894681E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_sr860:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF08144-ECCB-477B-A934-E4578522BFEE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBF2350D-34B1-44DB-8E4A-6F29B37D96CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:lenovo:thinksystem_st258:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089F97B1-FEDE-4A5D-91D3-0517E8D39174"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-52117",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.lenovo.com/us/en/product_security/LEN-52117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29370",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-13T22:15:13.067",
      "lastModified" : "2024-11-21T06:01:00.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A UXSS was discovered in the Thanos-Soft Cheetah Browser in Android 1.2.0 due to the inadequate filter of the intent scheme. This resulted in Cross-site scripting on the cheetah browser in any website."
      }, {
        "lang" : "es",
        "value" : "Se detectó un UXSS en Thanos-Soft Cheetah Browser en Android versión 1.2.0, debido al filtro inadecuado del esquema de intención.&#xa0;Esto resultó en una vulnerabilidad de tipo Cross-site scripting  en el navegador Cheetah en cualquier sitio web"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cheetah_browser_project:cheetah_browser:1.2.0:*:*:*:*:android:*:*",
            "matchCriteriaId" : "3A496DFB-2966-4B30-BB94-C15E351A1534"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40kunal94/indirect-uxss-issues-on-a-private-integrated-browser-219f6b809b6c",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40kunal94/indirect-uxss-issues-on-a-private-integrated-browser-219f6b809b6c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24028",
      "sourceIdentifier" : "cve-assign@fb.com",
      "published" : "2021-04-14T00:15:13.057",
      "lastModified" : "2024-11-21T05:52:14.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An invalid free in Thrift's table-based serialization can cause the application to crash or potentially result in code execution or other undesirable effects. This issue affects Facebook Thrift prior to v2021.02.22.00."
      }, {
        "lang" : "es",
        "value" : "Una liberación no válida en la serialización basada en tablas de Thrift puede causar que la aplicación se bloquee o potencialmente resultar en una ejecución de código u otros efectos no deseados.&#xa0;Este problema afecta a Facebook Thrift versiones anteriores a v2021.02.22.00"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-assign@fb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:facebook:thrift:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.02.22.00",
            "matchCriteriaId" : "A18FDF19-9F34-428F-A9C3-BB2E870D080C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24028",
        "source" : "cve-assign@fb.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/facebook/fbthrift/commit/bfda1efa547dce11a38592820916db01b05b9339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.facebook.com/security/advisories/cve-2021-24028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31162",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T07:15:12.227",
      "lastModified" : "2024-11-21T06:05:12.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the standard library in Rust before 1.52.0, a double free can occur in the Vec::from_iter function if freeing the element panics."
      }, {
        "lang" : "es",
        "value" : "En la biblioteca estándar de Rust versiones anteriores a 1.52.0, se puede producir una doble liberación en la función Vec::from_iter si se libera los pánicos del elemento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rust-lang:rust:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.48.0",
            "versionEndExcluding" : "1.52.0",
            "matchCriteriaId" : "3522EF72-A890-4F56-A49D-723B4B153E10"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rust-lang/rust/issues/83618",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/83629",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/84603",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/issues/83618",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/83629",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rust-lang/rust/pull/84603",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CZ337CM4GFJLRDFVQCGC7J25V65JXOG5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TFUO3URYCO73D2Q4WYJBWAMJWGGVXQO4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VZG65GUW6Z2CYOQHF7T3TB5CZKIX6ZJE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28797",
      "sourceIdentifier" : "security@qnapsecurity.com.tw",
      "published" : "2021-04-14T09:15:13.910",
      "lastModified" : "2024-11-21T06:00:13.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stack-based buffer overflow vulnerability has been reported to affect QNAP NAS devices running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. QNAP have already fixed this vulnerability in the following versions: Surveillance Station 5.1.5.4.3 (and later) for ARM CPU NAS (64bit OS) and x86 CPU NAS (64bit OS) Surveillance Station 5.1.5.3.3 (and later) for ARM CPU NAS (32bit OS) and x86 CPU NAS (32bit OS)"
      }, {
        "lang" : "es",
        "value" : "Se ha reportado una vulnerabilidad de desbordamiento del búfer en la región stack de la memoria que afecta a los dispositivos QNAP NAS que ejecutan Surveillance Station.&#xa0;Si es explotada, esta vulnerabilidad permite a atacantes ejecutar código arbitrario.&#xa0;QNAP ya ha corregido esta vulnerabilidad en las siguientes versiones: Surveillance Station versiones 5.1.5.4.3 (y posteriores) para ARM CPU NAS (Sistema Operativo de 64 bits) y x86 CPU NAS (Sistema Operativo de 64 bits) Surveillance Station versiones 5.1.5.3.3 (y posteriores) para ARM CPU NAS (Sistema Operativo de 32 bits) y CPU NAS x86 (Sistema Operativo de 32 bits)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@qnapsecurity.com.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@qnapsecurity.com.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.5.3.3",
            "matchCriteriaId" : "60DB076A-4279-4E8E-80C2-D1237B99C4A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qnap:surveillance_station:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.5.4.0",
            "versionEndExcluding" : "5.1.5.4.3",
            "matchCriteriaId" : "E0928C86-06D9-4FFB-AC70-9BB18DB49956"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qnap:nas:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C76690-809E-4A12-BF56-D713DD49ED27"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qnap.com/en/security-advisory/qsa-21-07",
        "source" : "security@qnapsecurity.com.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.qnap.com/en/security-advisory/qsa-21-07",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25316",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2021-04-14T10:15:13.087",
      "lastModified" : "2024-11-21T05:54:44.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux Enterprise Server 15-SP2 s390-tools versions prior to 2.11.0-9.20.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Archivo Temporal No Seguro en s390-tools de SUSE Linux Enterprise Server versión 12-SP5, SUSE Linux Enterprise Server versión 15-SP2, permite a atacantes locales emitir migraciones en vivo de VM. Este problema afecta a: SUSE Linux Enterprise Server versiones 12-SP5 s390-tools anteriores a 2.1.0-18.29.1.&#xa0;SUSE Linux Enterprise Server versiones 15-SP2 s390-tools anteriores a 2.11.0-9.20.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-377"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:s390-tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.0-18.29.1",
            "matchCriteriaId" : "9043CC83-B42F-423B-9163-F39CB199A1AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:15:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "F6461786-1240-4D6A-B767-9EE3BD4A6DAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:s390-tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.11.0-9.20.1",
            "matchCriteriaId" : "89C429A6-FDD5-479C-BF06-547092526312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:15:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "5372BB07-73C9-4DB3-95C4-108C1A06683C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182777",
        "source" : "meissner@suse.de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27989",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T12:15:12.227",
      "lastModified" : "2024-11-21T05:58:57.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appspace 6.2.4 is vulnerable to stored cross-site scripting (XSS) in multiple parameters within /medianet/sgcontentset.aspx."
      }, {
        "lang" : "es",
        "value" : "Appspace versión 6.2.4, es vulnerable a un ataque de tipo cross-site scripting almacenado en varios parámetros dentro del archivo /medianet/sgcontentset.aspx"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appspace:appspace:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD7EBEE-1FA6-4C7D-ACE7-B3D7D62373EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/syedsohaibkarim/PoC-StoredXSS-Appspace6.2.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/syedsohaibkarim/PoC-StoredXSS-Appspace6.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22879",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-04-14T13:15:13.040",
      "lastModified" : "2024-11-21T05:50:49.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nextcloud Desktop Client prior to 3.1.3 is vulnerable to resource injection by way of missing validation of URLs, allowing a malicious server to execute remote commands. User interaction is needed for exploitation."
      }, {
        "lang" : "es",
        "value" : "Nextcloud Desktop Client versiones anteriores a 3.1.3, es vulnerable a una inyección de recursos debido a una falta de comprobación de las URL, permitiendo a un servidor malicioso ejecutar comandos remotos. Una interacción del usuario es necesaria para su explotación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-99"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nextcloud:desktop:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.3",
            "matchCriteriaId" : "6B91F382-D9ED-4928-90D2-3ED9DBFAF550"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nextcloud/desktop/pull/2906",
        "source" : "support@hackerone.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1078002",
        "source" : "support@hackerone.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTWBJAS5DJJIK7LLVBZZQTSJASUVIRVE/",
        "source" : "support@hackerone.com"
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=NC-SA-2021-008",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-37",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nextcloud/desktop/pull/2906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1078002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTWBJAS5DJJIK7LLVBZZQTSJASUVIRVE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://nextcloud.com/security/advisory/?id=NC-SA-2021-008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26805",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.350",
      "lastModified" : "2024-11-21T05:56:50.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in tsMuxer 2.6.16 allows attackers to cause a Denial of Service (DoS) by running the application with a malicious WAV file."
      }, {
        "lang" : "es",
        "value" : "Un Desboradomiento de Búfer en la función \"add_a_user\" de tsMuxer versión 2.6.16, permite a atacantes causar una Denegación de Servicio (DoS) al ejecutar la aplicación con un archivo WAV malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tsmuxer_project:tsmuxer:2.6.16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9880E94-9CCB-4A6A-97BA-B6DDEB30C0B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/justdan96/tsMuxer/issues/395",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/justdan96/tsMuxer/issues/395",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.413",
      "lastModified" : "2024-11-21T05:56:51.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the \"sessionpriv.php\" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the application."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el plugin Jitsi Meet  versiones 2.7 hasta 2.8.3 para Moodle, por medio del módulo \"sessionpriv.php\".&#xa0;Esto permite a atacantes crear una URL maliciosa, que cuando los usuarios hacen clic en ella, puede inyectar código javascript para que lo ejecute la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jitsi:meet:*:*:*:*:*:moodle:*:*",
            "versionStartIncluding" : "2.7",
            "versionEndIncluding" : "2.8.3",
            "matchCriteriaId" : "D297DB3D-2A13-4189-8BFD-21118DD56229"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/udima-university/moodle-mod_jitsi/issues/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/udima-university/moodle-mod_jitsi/issues/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26827",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.460",
      "lastModified" : "2024-11-21T05:56:52.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in TP-Link WR2041 v1 firmware for the TL-WR2041+ router allows remote attackers to cause a Denial-of-Service (DoS) by sending an HTTP request with a very long \"ssid\" parameter to the \"/userRpm/popupSiteSurveyRpm.html\" webpage, which crashes the router."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en el firmware TP-Link WR2041 v1 para el enrutador TL-WR2041+, permite a atacantes remotos causar una denegación de servicio (DoS) mediante el envío de una petición HTTP con un parámetro \"ssid\" muy largo al \"/userRpm/popupSiteSurveyRpm.html \", que bloquea el enrutador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:tl-wr2041\\+_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AFCEF61-3B7D-4181-9366-1DE3438A4EC7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:tl-wr2041\\+:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A56BF51-E06B-4699-B72F-22B22D553128"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GD008/vuln/blob/main/tplink_wr2041/tplink_WR2041pv1.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GD008/vuln/blob/main/tplink_wr2041/tplink_WR2041pv1.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26832",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.523",
      "lastModified" : "2024-11-21T05:56:52.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in the \"Reset Password\" page form of Priority Enterprise Management System v8.00 allows attackers to execute javascript on behalf of the victim by sending a malicious URL or directing the victim to a malicious site."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el formulario de la página \"Reset Password\" de Priority Enterprise Management System versión v8.00, permite a atacantes ejecutar javascript en nombre de la víctima mediante el envío de una URL maliciosa o dirigiendo a la víctima a un sitio malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:priority-software:priority_enterprise_management_system:8.00:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E62AD0D5-821E-4A6D-BE79-908E7B12BEF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NagliNagli/CVE-2021-26832",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NagliNagli/CVE-2021-26832",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27113",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.587",
      "lastModified" : "2024-11-21T05:57:21.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. An HTTP request parameter is used in command string construction within the handler function of the /goform/addRouting route. This could lead to Command Injection via Shell Metacharacters."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos D-Link DIR-816 A2 versión 1.10 B05. Un parámetro HTTP request es usada en la construcción de cadenas de comandos dentro de la función handler de la ruta /goform/addRouting. Esto podría conllevar a una Inyección de Comandos por medio de los Metacaracteres de Shell"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-816_firmware:1.10b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12CE36E-C7F7-4FE7-BA46-8EC5B61F617E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3AC507-7219-401E-AC60-12D96382E4B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GD008/vuln/blob/main/DIR-816_2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GD008/vuln/blob/main/DIR-816_2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27114",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.647",
      "lastModified" : "2024-11-21T05:57:22.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in D-Link DIR-816 A2 1.10 B05 devices. Within the handler function of the /goform/addassignment route, a very long text entry for the\"'s_ip\" and \"s_mac\" fields could lead to a Stack-Based Buffer Overflow and overwrite the return address."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en los dispositivos D-Link DIR-816 A2 versión 1.10 B05.&#xa0;Dentro de la función handler de la ruta /goform/addassignment, una entrada de texto muy larga para los campos \"'s_ip\" y \"s_mac\" podría conllevar a un desbordamiento del búfer en la región stack de la memoria y sobrescribir la dirección de retorno"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dir-816_firmware:1.10b05:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B12CE36E-C7F7-4FE7-BA46-8EC5B61F617E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dir-816:a2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A3AC507-7219-401E-AC60-12D96382E4B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GD008/vuln/blob/main/DIR-816_stackoverflow.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/GD008/vuln/blob/main/DIR-816_stackoverflow.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink.com/en/security-bulletin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27288",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.710",
      "lastModified" : "2024-11-21T05:57:45.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in X2Engine X2CRM v7.1 allows remote attackers to obtain sensitive information by injecting arbitrary web script or HTML via the \"Comment\" field in \"/profile/activity\" page."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en X2Engine X2CRM versión v7.1, permite a atacantes remotos obtener información confidencial al inyectar un script web o HTML arbitrario por medio del campo \"\"Comment\" en la página \"/profile/activity\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x2engine:x2crm:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EC1EFA1-2C2E-4B7A-B8D4-7A30FD3BA2CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/X2Engine/X2CRM/issues/183",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/X2Engine/X2CRM/issues/183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.787",
      "lastModified" : "2024-11-21T05:58:36.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Deference in the exif command line tool, when printing out XML formatted EXIF data, in exif v0.6.22 and earlier allows attackers to cause a Denial of Service (DoS) by uploading a malicious JPEG file, causing the application to crash."
      }, {
        "lang" : "es",
        "value" : "Una desreferencia de puntero NULL en la herramienta de línea de comandos exif, al imprimir datos EXIF con formato XML, en exif versión v0.6.22 y anteriores permite a atacantes causar una Denegación de Servicio (DoS) al cargar un archivo JPEG malicioso, causando que la aplicación se bloquee"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libexif_project:exif:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.6.22",
            "matchCriteriaId" : "F50641F5-B6E2-440C-8737-9E153C8BB3DA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libexif/exif/issues/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSWAXZVNXYLV3E4R6YQTEGRGMGWEAR76/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMC6OTXZRPCUD3LOSWO4ISR7CH7NJQDT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQ3L45F7S7PQPG5HEHXOCGNOO64MJOS/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-28",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libexif/exif/commit/eb84b0e3c5f2a86013b6fcfb800d187896a648fa",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libexif/exif/commit/f6334d9d32437ef13dc902f0a88a2be0063d9d1c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/libexif/exif/issues/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JSWAXZVNXYLV3E4R6YQTEGRGMGWEAR76/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QMC6OTXZRPCUD3LOSWO4ISR7CH7NJQDT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZQ3L45F7S7PQPG5HEHXOCGNOO64MJOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27990",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:13.977",
      "lastModified" : "2024-11-21T05:58:57.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Appspace 6.2.4 is vulnerable to a broken authentication mechanism where pages such as /medianet/mail.aspx can be called directly and the framework is exposed with layouts, menus and functionalities."
      }, {
        "lang" : "es",
        "value" : "Appspace versión 6.2.4 es vulnerable a un mecanismo de autenticación roto donde se puede llamar directamente a páginas como /medianet/mail.aspx y el framework es expuesto con diseños, menús y funcionalidades"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:appspace:appspace:6.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AD7EBEE-1FA6-4C7D-ACE7-B3D7D62373EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://appspace.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/syedsohaibkarim/PoC-BrokenAuth-AppSpace6.2.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://appspace.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/syedsohaibkarim/PoC-BrokenAuth-AppSpace6.2.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28300",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:14.053",
      "lastModified" : "2024-11-21T05:59:26.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NULL Pointer Dereference in the \"isomedia/track.c\" module's \"MergeTrack()\" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file."
      }, {
        "lang" : "es",
        "value" : "Una desreferencia del puntero NULL en la función \"MergeTrack()\" del módulo del archivo \"isomedia/track.c\" de GPAC versión v0.5.2 permite a atacantes ejecutar código arbitrario o causar una denegación de servicio (DoS) al cargar un archivo MP4 malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CD3BB9D-838C-4431-AF39-F279C9869726"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/issues/1702",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1702",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29338",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:14.133",
      "lastModified" : "2025-11-03T20:15:46.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer Overflow in OpenJPEG v2.4.0 allows remote attackers to crash the application, causing a Denial of Service (DoS). This occurs when the attacker uses the command line option \"-ImgDir\" on a directory that contains 1048576 files."
      }, {
        "lang" : "es",
        "value" : "Integer Overflow en OpenJPEG versión v2.4.0 permite a atacantes remotos bloquear la aplicación, causando una denegación de servicio (DoS).&#xa0;Esto ocurre cuando el atacante usa la opción de línea de comando \"-ImgDir\" en un directorio que contiene 1048576 archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:uclouvain:openjpeg:2.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AA6CD3E-09FE-442F-A7E5-C661960ACBCD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/uclouvain/openjpeg/issues/1338",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-04",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/uclouvain/openjpeg/issues/1338",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/04/msg00006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2025/04/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZ54FGM2IGAP4AWSJ22JKHOPHCR3FGYU/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QB6AI7CWXWMEDZIQY4LQ6DMIEXMDOHUP/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-04",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T14:15:14.210",
      "lastModified" : "2024-11-21T06:05:11.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers."
      }, {
        "lang" : "es",
        "value" : "Multilaser Router AC1200 versión V02.03.01.45_pt contiene una vulnerabilidad de tipo cross-site request forgery (CSRF).&#xa0;Un atacante puede habilitar el acceso remoto, cambiar contraseñas y llevar a cabo otras acciones por medio de peticiones, entradas y encabezados configurados inapropiadamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:multilaser:ac1200_re018_firmware:v02.03.01.45_pt:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BFD13C8-F6B9-41D5-A465-470C550CF35C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:multilaser:ac1200_re018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D7EA424-365A-48E8-8D4E-B8D2FDE72983"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162258/Multilaser-Router-RE018-AC1200-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Mar/1",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.youtube.com/watch?v=zN3DVrcu6Eg",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162258/Multilaser-Router-RE018-AC1200-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2024/Mar/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.youtube.com/watch?v=zN3DVrcu6Eg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25314",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2021-04-14T15:15:13.517",
      "lastModified" : "2024-11-21T05:54:43.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 12-SP5 hawk2 versions prior to 2.6.3+git.1614685906.812c31e9. SUSE Linux Enterprise High Availability 15-SP2 hawk2 versions prior to 2.6.3+git.1614684118.af555ad9."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Creation de Archivo Temporal con Permisos No Seguros en hawk2 de SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2, permite a atacantes locales escalar a root.&#xa0;Este problema afecta a: SUSE Linux Enterprise High Availability 12-SP3 hawk2 versiones anteriores a 2.6.3+ git.1614685906.812c31e9.&#xa0;SUSE Linux Enterprise High Availability 12-SP5 hawk2 versiones anteriores a 2.6.3+git.1614685906.812c31e9.&#xa0;SUSE Linux Enterprise High Availability 15-SP2 hawk2 versiones anteriores a 2.6.3+git.1614684118.af555ad9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:hawk2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3\\+git.1614685906.812c31e9-2.42.1",
            "matchCriteriaId" : "3C3980F5-90DD-463A-AE25-3FABC73AE7D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_high_availability_extension:12:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8ACCE8-426F-4956-8E15-733E1317A3B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:hawk2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3\\+git.1614684118.af555ad9",
            "matchCriteriaId" : "C2832040-A0EB-47B0-A518-D51A75B1D88D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_high_availability_extension:15:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "75369E9E-2A37-434F-8241-1514E0FD8F82"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:hawk2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3\\+git.1614685906.812c31e9",
            "matchCriteriaId" : "B9B732E1-A352-4B3E-B4DF-28D7F981AEC8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_high_availability_extension:12:sp5:*:*:*:*:*:*",
            "matchCriteriaId" : "09774141-B610-4DFD-8D09-5D64373C08F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182166",
        "source" : "meissner@suse.de",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27130",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:13.627",
      "lastModified" : "2026-04-14T21:31:28.317",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Online Reviewer System 1.0 contains a SQL injection vulnerability through authentication bypass, which may lead to a reverse shell upload."
      }, {
        "lang" : "es",
        "value" : "Online Reviewer System versión 1.0, contiene una vulnerabilidad de inyección SQL por medio de una omisión de autenticación, que puede conllevar a una carga de shell inversa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:janobe:online_reviewer_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "063C94E3-E7C7-403E-BB13-0878AB4B70DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/161219/Online-Reviewer-System-1.0-SQL-Injection-Shell-Upload.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161219/Online-Reviewer-System-1.0-SQL-Injection-Shell-Upload.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27599",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-14T15:15:13.690",
      "lastModified" : "2024-11-21T05:58:16.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Integration Builder Framework), versions - 7.10, 7.30, 7.31, 7.40, 7.50, allows an attacker to access information under certain conditions, which would otherwise be restricted."
      }, {
        "lang" : "es",
        "value" : "SAP NetWeaver ABAP Server y ABAP Platform (Process Integration - Integration Builder Framework), versiones - 7.10, 7.30, 7.31, 7.40, 7.50, permiten que un atacante acceda a información bajo determinadas condiciones, que de otro modo estarían restringidas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E83C25-D30B-4459-A1F1-DE7EC9FD46BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3062CE84-B6E2-40DE-B7B1-0752FC21BFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587D81FB-B2ED-4184-9258-A38A18B36DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A325699D-6AB0-4BBC-A21C-A974FA1612DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3A3226-28D1-4B43-942B-F41BD340E746"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3012277",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3012277",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27604",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-14T15:15:13.800",
      "lastModified" : "2024-11-21T05:58:16.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In order to prevent XML External Entity vulnerability in SAP NetWeaver ABAP Server and ABAP Platform (Process Integration - Enterprise Service Repository JAVA Mappings), versions - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recommends to refer this note."
      }, {
        "lang" : "es",
        "value" : "A fin de impedir una vulnerabilidad de XML External Entity en SAP NetWeaver ABAP Server y ABAP Platform (Process Integration - Enterprise Service Repository JAVA Mappings), versiones - 7.10, 7.20, 7.30, 7.31, 7.40, 7.50, SAP recomienda consultar esta nota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@sap.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75E83C25-D30B-4459-A1F1-DE7EC9FD46BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.20:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57CEB9D-5C06-4B3E-A36E-5B8689CA5657"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.30:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3062CE84-B6E2-40DE-B7B1-0752FC21BFAD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.31:*:*:*:*:*:*:*",
            "matchCriteriaId" : "587D81FB-B2ED-4184-9258-A38A18B36DC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A325699D-6AB0-4BBC-A21C-A974FA1612DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:netweaver_process_integration:7.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A3A3226-28D1-4B43-942B-F41BD340E746"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3036436",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3036436",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27608",
      "sourceIdentifier" : "cna@sap.com",
      "published" : "2021-04-14T15:15:13.907",
      "lastModified" : "2024-11-21T05:58:17.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability."
      }, {
        "lang" : "es",
        "value" : "Una ruta de servicio sin comillas en SAPSetup, versión 9.0, podría conllevar a una escalada de privilegios durante el proceso de instalación que es llevado a cabo cuando se registra un archivo ejecutable.&#xa0;Esto podría conllevar aún más a un compromiso total de confidencialidad, Integridad y Disponibilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "cna@sap.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sap:setup:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845C9F09-18DD-4493-8AF3-B3111A207CFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://launchpad.support.sap.com/#/notes/3039649",
        "source" : "cna@sap.com",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "cna@sap.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://launchpad.support.sap.com/#/notes/3039649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required" ]
      }, {
        "url" : "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=573801649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27705",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:13.970",
      "lastModified" : "2024-11-21T05:58:27.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/\"qosIndex \"request. This occurs because the \"formQOSRuleDel\" function directly passes the parameter \"qosIndex\" to strcpy without limit."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en los enrutadores Tenda versiones G1 y G3 con firmware v15.11.0.17(9502) _CN, permite a atacantes remotos ejecutar código arbitrario por medio de una petición diseñada action/\"qosIndex\".&#xa0;Esto ocurre porque la función \"formQOSRuleDel\" pasa directamente el parámetro \"qosIndex\" a strcpy sin límite"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g1_firmware:v15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98669DBF-D56B-4E2D-9A12-813CEC185170"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD313047-8A0F-44BD-A75B-F4CF2F4DD8F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g3_firmware:v15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01254E20-AFFD-4A1A-A956-36BFD85017D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1B3B7C-2164-40B6-959A-188796737C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/Zb7lfFaNR0ScpaTssECFbg",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/Zb7lfFaNR0ScpaTssECFbg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27706",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:14.033",
      "lastModified" : "2024-11-21T05:58:27.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in Tenda G1 and G3 routers with firmware version V15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/\"IPMacBindIndex \"request. This occurs because the \"formIPMacBindDel\" function directly passes the parameter \"IPMacBindIndex\" to strcpy without limit."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en los enrutadores Tenda G1 y G3 con versión de firmware V15.11.0.17(9502) _CN permite a atacantes remotos ejecutar código arbitrario por medio de una petición diseñada action/\"IPMacBindIndex\".&#xa0;Esto ocurre porque la función \"formIPMacBindDel\" pasa directamente el parámetro \"IPMacBindIndex\" a strcpy sin límite"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g1_firmware:v15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98669DBF-D56B-4E2D-9A12-813CEC185170"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD313047-8A0F-44BD-A75B-F4CF2F4DD8F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g3_firmware:v15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01254E20-AFFD-4A1A-A956-36BFD85017D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1B3B7C-2164-40B6-959A-188796737C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/BhzJ4H20TjqKUiBrDOIKaw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/BhzJ4H20TjqKUiBrDOIKaw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27707",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:14.440",
      "lastModified" : "2024-11-21T05:58:27.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer Overflow in Tenda G1 and G3 routers with firmware v15.11.0.17(9502)_CN allows remote attackers to execute arbitrary code via a crafted action/\"portMappingIndex \"request. This occurs because the \"formDelPortMapping\" function directly passes the parameter \"portMappingIndex\" to strcpy without limit."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en los enrutadores Tenda versiones G1 y G3 con firmware v15.11.0.17(9502) _CN, permite a atacantes remotos ejecutar código arbitrario por medio de una petición diseñada action/\"portMappingIndex\".&#xa0;Esto ocurre porque la función \"formDelPortMapping\" pasa directamente el parámetro \"portMappingIndex\" a strcpy sin límite"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g1_firmware:v15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98669DBF-D56B-4E2D-9A12-813CEC185170"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD313047-8A0F-44BD-A75B-F4CF2F4DD8F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tenda:g3_firmware:v15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01254E20-AFFD-4A1A-A956-36BFD85017D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tenda:g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1B3B7C-2164-40B6-959A-188796737C16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/U7OVgYIuRcOKV7SW5-euHw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/U7OVgYIuRcOKV7SW5-euHw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:14.503",
      "lastModified" : "2024-11-21T05:59:05.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and writes logs entries to a file in %PROGRAMDATA%\\ForeScout SecureConnector\\ that has full permissions for the Everyone group. Using a symbolic link allows an attacker to point the log file to a privileged location such as %WINDIR%\\System32. The resulting log file adopts the file permissions of the source of the symbolic link (in this case, the Everyone group). The log file in System32 can be replaced and renamed with a malicious DLL for DLL hijacking."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Forescout CounterACT versiones anteriores a 8.1.4.&#xa0;Se presenta una vulnerabilidad de escalada de privilegios local en la función de registro.&#xa0;SecureConnector se ejecuta con privilegios administrativos y escribe entradas de registros en un archivo in %PROGRAMDATA%\\ForeScout SecureConnector\\ que presenta permisos completos para el grupo Everyone.&#xa0;El uso de un enlace simbólico permite que un atacante apunte el archivo de registro a una ubicación privilegiada como %WINDIR%\\System32.&#xa0;El archivo de registro resultante adopta los permisos de archivo de la fuente del enlace simbólico (en este caso, el grupo Everyone).&#xa0;El archivo de registro en System32 se puede reemplazar y renombrar con una DLL maliciosa para el secuestro de DLL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        }, {
          "lang" : "en",
          "value" : "CWE-427"
        }, {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:forescout:counteract:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.1.4",
            "matchCriteriaId" : "148F4D54-E531-4BAC-AB37-703FC29721BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.forescout.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jordanpotti.com/2021/03/30/forescout-priv-esc-folder-permissions/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.adversis.io/research/2021/3/30/forescout-secure-connector-local-privilege-escalation",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.forescout.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jordanpotti.com/2021/03/30/forescout-priv-esc-folder-permissions/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.adversis.io/research/2021/3/30/forescout-secure-connector-local-privilege-escalation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30493",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:14.690",
      "lastModified" : "2024-11-21T06:04:01.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBroadcast subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations)."
      }, {
        "lang" : "es",
        "value" : "Múltiples servicios del sistema instalados junto con el paquete de software Razer Synapse versión 3, llevan a cabo operaciones privilegiadas en las entradas dentro de la subclave ChromaBroadcast.&#xa0;Estas operaciones privilegiadas consisten en la concatenación de nombres de archivo de un archivo de registro de tiempo de ejecución que es usado para almacenar información de registro de tiempo de ejecución.&#xa0;En otras palabras, un atacante puede crear un archivo en un directorio no deseado (con algunas limitaciones)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razer:synapse:3.5.1030.101917:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9905986-86A5-4335-946B-8819B7F51624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://versprite.com/advisories/razer-synapse-3-cve-2021-30493/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/security-resources/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/advisories/razer-synapse-3-cve-2021-30493/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/security-resources/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30494",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T15:15:14.753",
      "lastModified" : "2024-11-21T06:04:02.063",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations)."
      }, {
        "lang" : "es",
        "value" : "Múltiples servicios del sistema instalados junto con el paquete de software Razer Synapse versión 3, llevan a cabo operaciones privilegiadas en las entradas dentro de la subclave Razer Chroma SDK.&#xa0;Estas operaciones privilegiadas consisten en la concatenación de nombres de archivo de un archivo de registro de tiempo de ejecución que es usado para almacenar información de registro de tiempo de ejecución.&#xa0;En otras palabras, un atacante puede crear un archivo en un directorio no deseado (con algunas limitaciones)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:razer:synapse:3.5.1030.101917:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9905986-86A5-4335-946B-8819B7F51624"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://versprite.com/advisories/razer-synapse-3-1/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/security-resources/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/advisories/razer-synapse-3-1/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://versprite.com/security-resources/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27246",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.127",
      "lastModified" : "2024-11-21T05:57:40.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of TP-Link Archer A7 AC1750 1.0.15 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of MAC addresses by the tdpServer endpoint. A crafted TCP message can write stack pointers to the stack. An attacker can leverage this vulnerability to execute code in the context of the root user. Was ZDI-CAN-12306."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de los enrutadores TP-Link Archer A7 AC1750 versión 1.0.15.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del manejo de direcciones MAC por parte del endpoint tdpServer.&#xa0;Un mensaje TCP diseñado puede escribir punteros stack en la pila.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del usuario root.&#xa0;Era ZDI-CAN-12306"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 5.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tp-link:ac1750_firmware:1.0.15:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DC6CC0-E337-484C-8469-18A2F2BC27AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tp-link:ac1750:a7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F42A7EDC-ECE1-4D62-8DD7-8EB68A0F8215"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-215/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-215/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27247",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.250",
      "lastModified" : "2024-11-21T05:57:40.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to disclose sensitive information on affected installations of Tencent WeChat 2.9.5 desktop version. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WXAM decoder. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the current process. Was ZDI-CAN-11907."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos divulgar información confidencial sobre las instalaciones afectadas de la versión de escritorio Tencent WeChat versión 2.9.5.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta dentro del decodificador WXAM.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un búfer asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para ejecutar código arbitrario en el contexto del proceso actual.&#xa0;Era ZDI-CAN-11907"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tencent:wechat:2.9.5:*:*:*:*:-:*:*",
            "matchCriteriaId" : "2B3334E7-A034-47AB-B968-1A99F93E86A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-217/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-217/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27248",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.360",
      "lastModified" : "2024-11-21T05:57:40.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the getpage parameter, the process does not properly validate the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-10932."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de los puntos de acceso Wi-Fi D-Link DAP-2020 v1.01rc001.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del procesamiento de scripts CGI.&#xa0;Cuando se analiza el parámetro getpage, el proceso no comprueba apropiadamente la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región stack de la memoria de longitud fija.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-10932"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-2020_firmware:1.01:rc001:*:*:*:*:*:*",
            "matchCriteriaId" : "B0962F7C-1425-478D-9E83-D6560578DFA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FF47C9-C3D0-4F84-92A7-FCAA390F4AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-203/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-203/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27249",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.453",
      "lastModified" : "2024-11-21T05:57:41.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-11369."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de los puntos de acceso Wi-Fi D-Link DAP-2020 versión v1.01rc001.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del procesamiento de scripts CGI.&#xa0;El problema resulta de una falta de comprobación apropiada de una cadena suministrada por el usuario antes de usarla para ejecutar una llamada al sistema.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-11369"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-2020_firmware:1.01:rc001:*:*:*:*:*:*",
            "matchCriteriaId" : "B0962F7C-1425-478D-9E83-D6560578DFA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FF47C9-C3D0-4F84-92A7-FCAA390F4AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-204/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-204/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27250",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.533",
      "lastModified" : "2024-11-21T05:57:41.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the errorpage request parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-11856."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red divulgar información confidencial sobre las instalaciones afectadas de los puntos de acceso Wi-Fi D-Link DAP-2020 versión v1.01rc001.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del procesamiento de scripts CGI.&#xa0;Cuando se analiza el parámetro de petición errorpage, el proceso no comprueba apropiadamente una ruta suministrada por el usuario antes de usarla en operaciones de archivo.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para divulgar las credenciales almacenadas, conllevando un mayor compromiso.&#xa0;Era ZDI-CAN-11856"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-2020_firmware:1.01:rc001:*:*:*:*:*:*",
            "matchCriteriaId" : "B0962F7C-1425-478D-9E83-D6560578DFA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9FF47C9-C3D0-4F84-92A7-FCAA390F4AD0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-205/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10201",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-205/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27251",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.657",
      "lastModified" : "2024-11-21T05:57:41.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Authentication is not required to exploit this vulnerability The specific flaw exists within handling of firmware updates. The issue results from a fallback to a insecure protocol to deliver updates. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12308."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de NETGEAR Nighthawk R7800.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad. Un fallo específico se presenta dentro del manejo de las actualizaciones del firmware.&#xa0;El problema es el resultado de un retroceso a un protocolo no seguro para entregar actualizaciones.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-12308"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "0EF79426-64C8-4FAB-A199-AB7CB82FCD53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946947C2-E4B2-4984-9233-4D4890E1BE07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44B9FAB-7EC4-4B2B-B3E5-A372645AE661"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-247/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-247/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27252",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.737",
      "lastModified" : "2024-11-21T05:57:41.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R7800 firmware version 1.0.2.76. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the vendor_specific DHCP opcode. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12216."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de NETGEAR R7800 versiones de firmware 1.0.2.76.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del manejo del código de operación DHCP específico del proveedor.&#xa0;El problema resulta de una falta de comprobación apropiada de una cadena suministrada por el usuario antes de usarla para ejecutar una llamada al sistema.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-12216"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "0EF79426-64C8-4FAB-A199-AB7CB82FCD53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946947C2-E4B2-4984-9233-4D4890E1BE07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44B9FAB-7EC4-4B2B-B3E5-A372645AE661"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-248/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-248/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27253",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.797",
      "lastModified" : "2024-11-21T05:57:41.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR Nighthawk R7800. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of the rc_service parameter provided to apply_bind.cgi. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-12303."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes adyacentes a la red ejecutar código arbitrario en las instalaciones afectadas de NETGEAR Nighthawk R7800.&#xa0;Aunque es requerido autenticación para explotar esta vulnerabilidad, el mecanismo de autenticación existente puede ser omitido.&#xa0;El fallo específico se presenta dentro del manejo del parámetro rc_service proporcionado para el archivo apply_bind.cgi.&#xa0;El problema resulta de una falta de comprobación apropiada de una cadena suministrada por el usuario antes de usarla para ejecutar una llamada al sistema.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto de root.&#xa0;Era ZDI-CAN-12303"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br200_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "9680E98E-021B-4C71-AAA0-AEF49C6AD95F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED01605-09B9-417E-AE6F-1F62888A0C93"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:br500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0.5",
            "matchCriteriaId" : "89EDAF30-2238-495C-920F-F32CC17C046B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:br500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "261C0D85-C951-4F0C-B9C4-0E42B15834EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:d7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.60",
            "matchCriteriaId" : "6CBD5FC4-2EF7-49A9-8F23-C9398441E7BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:d7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA2D4987-3726-4A72-8D32-592F59FAC46D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6100v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "53C5C134-0778-4098-B8B4-F9589516C297"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6100:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88DD070C-7CBD-48A5-8D77-7C3D1C502D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6150_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.98",
            "matchCriteriaId" : "0EF79426-64C8-4FAB-A199-AB7CB82FCD53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6150:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49846803-C6FB-4DD3-ADA7-78B9923536F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6250_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "F0F8C423-2E5C-4A50-AF7B-AC67C3771DD3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7694D0C-2CC6-4A6E-A251-5CBFC67D2AA9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "9A60E332-CA18-4617-B7C1-4BE82470DE34"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1289BBB4-1955-46A4-B5FE-BF11153C24F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6400v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "208CF907-B3ED-4A7D-BA5B-16A00F44683D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6400:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "946947C2-E4B2-4984-9233-4D4890E1BE07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6410_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "74ED019D-C07A-44BE-BD3E-30885C748DDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C63267D8-4632-4D14-B39C-BEEC62AD8F87"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex6420_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "34EB68F4-B710-47C9-A01B-A6361B185A19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B2C00E1-4A23-4304-B92F-B7D9F4818D90"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.158",
            "matchCriteriaId" : "374F6EAA-A607-4A8F-BA86-EA770BA99189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F285D60D-A5DA-4467-8F79-15EF8135D007"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7300v2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E02DD6E2-3A3E-4857-9761-1B40FFA4E755"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7300:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A44B9FAB-7EC4-4B2B-B3E5-A372645AE661"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7320_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.134",
            "matchCriteriaId" : "E53DAB63-389B-4B73-8F75-231320DC71C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1D4DF51-84EA-4296-9E06-CE5E1F4A53D1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex7700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.0.216",
            "matchCriteriaId" : "D8DC1B77-994C-473C-AC97-7CC06341C607"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D140E3B-9AE5-473A-82DE-9B9DBAE4C34A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:ex8000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.232",
            "matchCriteriaId" : "B4F00B47-FFC8-4D45-B49E-8347504A9A4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:ex8000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D9781C9-799A-4BDA-A027-987627A01633"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:lbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.3.50",
            "matchCriteriaId" : "37C80013-2E0F-459F-BE08-18D60B109AC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:lbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "863E45EA-2DA0-4C9A-9B87-79E42B3FF97C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7800_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.2.80",
            "matchCriteriaId" : "3A43D307-64B1-46BF-8237-75518D1703CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17CF7445-6950-45FE-9D1A-E23F63316329"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r8900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "01F57C27-EB5A-4F3E-ADF7-684DF8860DA2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F859165-8D89-4CDD-9D48-9C7923D2261F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.5.28",
            "matchCriteriaId" : "8F67B805-17B5-4053-8399-0AFB2EF6E1D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D74F1BFC-562E-4E7D-BBAB-2F8B593B5A57"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk12_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "2135FFEC-0437-43C6-B146-3EF43E1B007B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk12:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5465A78-4826-4F72-9CBE-528CBF286A79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk13_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "5A413E57-A780-486E-AF85-EE460C99D696"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk13:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "783EEEE0-BB9A-4C54-82B2-046B1033091C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk14_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0E9B0ED1-3D84-44A6-BA37-E5F8D0EBCB10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CD91050-5FE0-4810-8E6F-EF9B9B2F02E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk15_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "E19C965E-FA8D-4B42-BCB1-23788621DF45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B801EC38-5B86-49F2-AB81-63F0F07A9BBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "DAA4BD93-AE89-4506-936F-26C605685193"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6C9F31C-3E12-4787-9C9B-14883D9D152A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk23_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "33146BAB-5A18-4A1F-BDD8-3BB33200CDB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk23:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17D7D346-6F52-4473-A4EA-6059C177BF0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "85AD5F45-F940-4FB5-B4D4-E44D816A3449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12DDD83C-6FF1-433F-ACA1-7B4B147F9A8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "564B0FDF-7159-42EA-9CAA-BEF791274915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC2B9C48-9FE6-462B-88EE-046F15E66430"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk43s_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "998C6A17-5ADC-47F1-AF63-9B425143C086"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk43s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5604E66-E9CC-4B78-AF6A-2341B30E3594"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk44_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "252643DB-46F7-41E9-96E0-0669DD486E5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk44:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1924FC8B-4031-4EA3-B214-AF6F77D94654"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "1FBFA62B-2EBC-426A-98DC-235879902E72"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA66D07-D017-49D6-8E72-5C48E940DE1B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbk53_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "66034CFD-1303-4B90-AF70-18B7EDBEFE32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbk53:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF03B2BB-34BB-4A0D-81CD-1841E524F885"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "237758B3-C096-465F-95C4-EB3F9835D91F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DADAA79-9A5C-4B6F-A58D-704ACD1C3334"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "217B0E6E-BCC9-4D12-ADD4-E2C65323018B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DBD66-9C2A-4EFF-87AB-03E791D584B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "C8E13FC6-D0BF-4674-8A3B-FF5D81B15059"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E20E59-2B1E-4E43-A494-2C20FD716D4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbr50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "82504AE8-4D6F-4A49-A611-FBFB303CD237"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbr50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2CAEA32-6934-4743-9E6B-22D52AC5E7F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs10_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "41B066B3-37CD-4839-909B-A8EC636E5F11"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32BAB5C0-F645-4A90-833F-6345335FA1AF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs20_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "9CED8944-D61A-4FDA-A9DB-76CBED16F338"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs20:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC7F5B-7E4F-4A68-8427-D1F553EBE8CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs40_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "BDAE8049-9102-4B4A-A2CF-B6A2F638B4E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FDCDE39-0355-43B9-BF57-F3718DA2988D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.7.2.104",
            "matchCriteriaId" : "0484BCA5-6DD3-43B9-BB83-24B6BF99C4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFD959-D522-4FA0-AD01-2937DAEE1EDF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:rbs50y_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.2.104",
            "matchCriteriaId" : "56489CFF-D34F-4C66-B69B-FB2CE4333D75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:rbs50y:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27F93A76-6EFF-4DA6-9129-4792E2C125D4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr450_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "FF01111F-8A37-4366-A63E-210E6CE0DB0E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B9CE4D-D1EC-4F55-8226-D159CF5F3AB6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr500_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.2.114",
            "matchCriteriaId" : "4476F0C6-0A7D-4735-940C-F5C75316EEE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E203D92-F97B-4F5B-B395-3A5DEDBF1C1C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:xr700_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.38",
            "matchCriteriaId" : "1D92A0CE-769D-402F-8FD7-BDD8DF247CFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:xr700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E12892C8-5E01-49A6-BF47-09D630377093"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-249/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.netgear.com/000062883/Security-Advisory-for-Multiple-Vulnerabilities-on-Some-Routers-Satellites-and-Extenders",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-249/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27258",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.877",
      "lastModified" : "2024-11-21T05:57:42.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute escalate privileges on affected installations of SolarWinds Orion Platform 2020.2. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SaveUserSetting endpoint. The issue results from improper restriction of this endpoint to unprivileged users. An attacker can leverage this vulnerability to escalate privileges their privileges from Guest to Administrator. Was ZDI-CAN-11903."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar privilegios escalados en las instalaciones afectadas de SolarWinds Orion Platform versión 2020.2.&#xa0;No es requerida una autenticación para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del endpoint SaveUserSetting.&#xa0;El problema es debido a una restricción inapropiada de este endpoint para usuarios sin privilegios.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar los privilegios de sus privilegios de invitado a administrador.&#xa0;Era ZDI-CAN-11903"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:orion_platform:2020.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "5857C0F0-37C5-4CF6-B921-7D5BFE065EAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-192/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-192/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27259",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:13.953",
      "lastModified" : "2024-11-21T05:57:42.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12021."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.0.1-48919.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, que puede resultar en un desbordamiento de enteros antes de asignar un búfer.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Era ZDI-CAN-12021"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.0.1:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "249D33E0-876B-4964-8CAE-E987F7DCB6C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-212/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-212/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27260",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-14T16:15:14.047",
      "lastModified" : "2024-11-21T05:57:42.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 16.0.1-48919. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12068."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales divulgar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 16.0.1-48919.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado de destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un búfer asignado.&#xa0;Un atacante puede aprovechar esto junto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Era ZDI-CAN-12068"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.0.1:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "249D33E0-876B-4964-8CAE-E987F7DCB6C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-213/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-213/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27708",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T16:15:14.127",
      "lastModified" : "2024-11-21T05:58:27.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system function with untrusted input. In the function, \"command\" parameter is directly passed to the attacker, allowing them to control the \"command\" field to attack the OS."
      }, {
        "lang" : "es",
        "value" : "Una inyección de comandos en el enrutador TOTOLINK X5000R con firmware v9.1.0u.6118_B20201102, permite a atacantes remotos ejecutar comandos arbitrarios del Sistema Operativo mediante el envío de una petición HTTP modificada.&#xa0;Esto ocurre porque la función ejecuta la función del sistema de glibc con una entrada que no es confiable.&#xa0;En la función, el parámetro \"command\" se pasa directamente al atacante, lo que le permite controlar el campo \"command\" para atacar el sistema operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCC3B52-0985-4F61-BBCC-16A271E15CD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x5000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC45BFB0-0CF0-4F9E-B19D-D274B17F1591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.470_b20200911:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B3C9D3-E762-4AEE-9E03-B2A1819785A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a720r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DE5168-B787-462C-B024-2B8F73759034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/7FtB06f-SJ-SCfkMYcXYxA",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/mDgIBvoxSPCZrZiZjfQGhw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/7FtB06f-SJ-SCfkMYcXYxA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/mDgIBvoxSPCZrZiZjfQGhw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28060",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T17:15:14.083",
      "lastModified" : "2024-11-21T05:59:03.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Server-Side Request Forgery (SSRF) vulnerability in Group Office 6.4.196 allows a remote attacker to forge GET requests to arbitrary URLs via the url parameter to group/api/upload.php."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Server-Side Request Forgery  (SSRF) en Group Office versión 6.4.196, permite a un atacante remoto falsificar peticiones GET en unas URL arbitrarias por medio del parámetro url para el archivo group/api/upload.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:group-office:group_office:6.4.196:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC015968-AEB1-48FF-9458-E2F662D64D6E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fatihhcelik.blogspot.com/2020/12/group-office-crm-ssrf.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://fatihhcelik.github.io/posts/Group-Office-CRM-SSRF/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://fatihhcelik.blogspot.com/2020/12/group-office-crm-ssrf.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://fatihhcelik.github.io/posts/Group-Office-CRM-SSRF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28825",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-04-14T17:15:14.147",
      "lastModified" : "2024-11-21T06:00:16.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Community Edition: versions 1.3.0 and below and TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition: versions 1.3.0 and below."
      }, {
        "lang" : "es",
        "value" : "El componente Windows Installation de TIBCO Messaging de TIBCO Software Inc. - Eclipse Mosquitto Distribution - Core - Community Edition y TIBCO Messaging - Eclipse Mosquitto Distribution - Core - Enterprise Edition, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso local en algunas versiones del Sistema Operativo Windows  insertar software malicioso.&#xa0;El componente afectado puede ser abusado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad resulta de una falta de restricciones de acceso a determinados archivos y/o carpetas de la instalación.&#xa0;Las versiones afectadas son TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition: versión 1.3.0 y por debajo y TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition: versiones 1.3.0 y por debajo, de TIBCO Software Inc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:messaging_-_eclipse_mosquitto_distribution_-_core:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "4F394564-6EDD-4C96-97FC-DDFFF9064B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:messaging_-_eclipse_mosquitto_distribution_-_core:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "12F8CF5F-25B5-4B7F-9527-0270649DE372"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-14-2021-tibco-messaging-2021-28825",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-14-2021-tibco-messaging-2021-28825",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28826",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-04-14T17:15:14.300",
      "lastModified" : "2024-11-21T06:00:16.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Windows Installation component of TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition contains a vulnerability that theoretically allows a low privileged attacker with local access on some versions of the Windows operating system to insert malicious software. The affected component can be abused to execute the malicious software inserted by the attacker with the elevated privileges of the component. This vulnerability results from a lack of access restrictions on certain files and/or folders in the installation. Affected releases are TIBCO Software Inc.'s TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition: versions 1.3.0 and below and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition: versions 1.3.0 and below."
      }, {
        "lang" : "es",
        "value" : "El componente Windows Installation de TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition and TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition, de TIBCO Software Inc, contiene una vulnerabilidad que teóricamente permite a un atacante poco privilegiado con acceso local en algunas versiones del Sistema Operativo Windows insertar software malicioso.&#xa0;El componente afectado puede ser abusado para ejecutar el software malicioso insertado por el atacante con los privilegios elevados del componente.&#xa0;Esta vulnerabilidad resulta de una falta de restricciones de acceso a determinados archivos y/o carpetas de la instalación.&#xa0;Las versiones afectadas son TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Community Edition: versión 1.3.0 y por debajo y TIBCO Messaging - Eclipse Mosquitto Distribution - Bridge - Enterprise Edition: versiones 1.3.0 y por debajo, de TIBCO Software Inc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:messaging_-_eclipse_mosquitto_distribution_-_bridge:*:*:*:*:community:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "D73AC0E8-38BE-4430-A254-F3BC8432CD2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:messaging_-_eclipse_mosquitto_distribution_-_bridge:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "1.3.0",
            "matchCriteriaId" : "FAF72CDA-4DA5-4D3C-82CA-079B7E1EF258"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-14-2021-tibco-messaging-2021-28826",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-14-2021-tibco-messaging-2021-28826",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28855",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T17:15:14.363",
      "lastModified" : "2026-01-26T17:16:08.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Deark before 1.5.8, a specially crafted input file can cause a NULL pointer dereference in the dbuf_write function (src/deark-dbuf.c)."
      }, {
        "lang" : "es",
        "value" : "En Deark versiones anteriores a 15.8, un archivo de entrada especialmente diseñado puede causar una desreferencia del puntero NULL en la función dbuf_write (en el archivo src/deark-dbuf.c)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:deark:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.8",
            "matchCriteriaId" : "DDEFD567-5B77-4505-9D83-F9A2EF0BBAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fuzzing2026/CVE-PoCs/tree/main/deark-CVE-2021-28855",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jsummers/deark/commit/287f5ac31dfdc074669182f51ece637706070eeb",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://fatihhcelik.github.io/posts/NULL-Pointer-Dereference-Deark/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/deark/commit/287f5ac31dfdc074669182f51ece637706070eeb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T17:15:14.427",
      "lastModified" : "2026-01-26T17:16:08.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Deark before v1.5.8, a specially crafted input file can cause a division by zero in (src/fmtutil.c) because of the value of pixelsize."
      }, {
        "lang" : "es",
        "value" : "En Deark antes antes de la versión v1.5.8, un archivo de entrada especialmente diseñado puede causar una división por cero en (src/fmtutil.c) debido al valor de pixelsize"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-369"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:entropymine:deark:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.8",
            "matchCriteriaId" : "DDEFD567-5B77-4505-9D83-F9A2EF0BBAB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://fatihhcelik.github.io/posts/Division-By-Zero-Deark/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/fuzzing2026/CVE-PoCs/tree/main/deark-CVE-2021-28856",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/jsummers/deark/commit/62acb7753b0e3c0d3ab3c15057b0a65222313334",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://fatihhcelik.github.io/posts/Division-By-Zero-Deark/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jsummers/deark/commit/62acb7753b0e3c0d3ab3c15057b0a65222313334",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26030",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-04-14T18:15:14.097",
      "lastModified" : "2024-11-21T05:55:46.587",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page"
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.0.0 hasta 3.9.25.&#xa0;El escape inadecuado permitió ataques de tipo XSS, usando el parámetro logo de las plantillas predeterminadas en la página de error"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.9.25",
            "matchCriteriaId" : "97C221BD-AC8C-4D9E-A242-2B44632850E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/850-20210401-core-escape-xss-in-logo-parameter-error-pages.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/850-20210401-core-escape-xss-in-logo-parameter-error-pages.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26031",
      "sourceIdentifier" : "security@joomla.org",
      "published" : "2021-04-14T18:15:14.160",
      "lastModified" : "2024-11-21T05:55:46.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate filters on module layout settings could lead to an LFI."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Joomla!&#xa0;versiones 3.0.0 hasta 3.9.25.&#xa0;Los filtros Inadecuados en la configuración del diseño del módulo podrían conllevar a un LFI"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "3.9.25",
            "matchCriteriaId" : "97C221BD-AC8C-4D9E-A242-2B44632850E7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://developer.joomla.org/security-centre/851-20210402-core-inadequate-filters-on-module-layout-settings.html",
        "source" : "security@joomla.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://developer.joomla.org/security-centre/851-20210402-core-inadequate-filters-on-module-layout-settings.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27710",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T18:15:14.377",
      "lastModified" : "2024-11-21T05:58:28.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in TOTOLINK X5000R router with firmware v9.1.0u.6118_B20201102, and TOTOLINK A720R router with firmware v4.1.5cu.470_B20200911 allows remote attackers to execute arbitrary OS commands by sending a modified HTTP request. This occurs because the function executes glibc's system function with untrusted input. In the function, \"ip\" parameter is directly passed to the attacker, allowing them to control the \"ip\" field to attack the OS."
      }, {
        "lang" : "es",
        "value" : "Una Inyección de Comandos en el enrutador TOTOLINK X5000R con versiones de firmware v9.1.0u.6118_B20201102 y el enrutador TOTOLINK A720R con versiones de firmware v4.1.5cu.470_B20200911, permite a atacantes remotos ejecutar comandos arbitrarios del Sistema Operativo mediante el envío de una petición HTTP modificada.&#xa0;Esto ocurre porque la función ejecuta la función del sistema de glibc con una entrada no confiable.&#xa0;En la función, el parámetro \"ip\" es pasado directamente al atacante, permitiéndoles controlar el campo \"ip\" para atacar el Sistema Operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:x5000r_firmware:9.1.0u.6118_b20201102:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFCC3B52-0985-4F61-BBCC-16A271E15CD4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:x5000r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC45BFB0-0CF0-4F9E-B19D-D274B17F1591"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:totolink:a720r_firmware:4.1.5cu.470_b20200911:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B3C9D3-E762-4AEE-9E03-B2A1819785A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:totolink:a720r:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1DE5168-B787-462C-B024-2B8F73759034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/Hy3oVgtcQiuqAtv9FdylHw",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/KjXzQdjDRjOuRjoZZXQo_A",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/Hy3oVgtcQiuqAtv9FdylHw",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://hackmd.io/KjXzQdjDRjOuRjoZZXQo_A",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28484",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T18:15:14.440",
      "lastModified" : "2024-11-21T05:59:45.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the /api/connector endpoint handler in Yubico yubihsm-connector before 3.0.1 (in YubiHSM SDK before 2021.04). The handler did not validate the length of the request, which can lead to a state where yubihsm-connector becomes stuck in a loop waiting for the YubiHSM to send it data, preventing any further operations until the yubihsm-connector is restarted. An attacker can send 0, 1, or 2 bytes to trigger this."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el manejador de endpoint api/connector en Yubico yubihsm-connector versiones anteriores a 3.0.1 (en YubiHSM SDK versiones anteriores a 2021.04).&#xa0;El manejador no comprobó la longitud de la petición, lo que puede conllevar a un estado en el que yubihsm-connector se atasca en un bucle esperando a que YubiHSM le envíe datos, lo que impide cualquier otra operación hasta que yubihsm-connector es reiniciado.&#xa0;Un atacante puede enviar 0, 1 o 2 bytes para activar esto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yubico:yubihsm_connector:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "EEADBC15-0C67-4198-B4C0-AB7CBB4AAB1C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Yubico/yubihsm-connector/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7Q2KGXSPQEEONAWMFZRVH2TXWX3QPCQ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.yubico.com/support/security-advisories/ysa-2021-02/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Yubico/yubihsm-connector/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7Q2KGXSPQEEONAWMFZRVH2TXWX3QPCQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.yubico.com/support/security-advisories/ysa-2021-02/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29654",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T18:15:14.737",
      "lastModified" : "2024-11-21T06:01:35.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AjaxSearchPro before 4.20.8 allows Deserialization of Untrusted Data (in the import database feature of the administration panel), leading to Remote Code execution."
      }, {
        "lang" : "es",
        "value" : "AjaxSearchPro versiones anteriores a 4.20.8, permite la deserialización de datos que no son confiables (en la funcionalidad import database del panel de administración), conllevando a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stackpath:ajaxsearchpro:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.20.8",
            "matchCriteriaId" : "316DAB8A-4A4E-48BE-8C83-CC0D8F48BBCF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synacktiv.com/sites/default/files/2021-04/WP_AjaxSearchPro_Vulnerability.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.synacktiv.com/sites/default/files/2021-04/WP_AjaxSearchPro_Vulnerability.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30459",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T18:15:14.877",
      "lastModified" : "2024-11-21T06:03:57.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL en el panel SQL en Jazzband Django Debug Toolbar versiones anteriores a 1.11.1, versiones 2.x anteriores a 2.2.1 y versiones 3.x anteriores a 3.2.1, permite a atacantes ejecutar sentencias SQL al cambiar el campo de entrada raw_sql del formulario de explicación, análisis o selección de SQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jazzband:django_debug_toolbar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "1.11.1",
            "matchCriteriaId" : "9155971C-2E44-4DBF-8AAA-B08687454051"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jazzband:django_debug_toolbar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.2.1",
            "matchCriteriaId" : "C582D6A7-0A92-4C7F-9392-FBBA302AAADC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jazzband:django_debug_toolbar:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "F28FC87E-8A6E-44E0-8E93-9A498B18F2E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jazzband/django-debug-toolbar/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jazzband/django-debug-toolbar/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3017",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T18:15:14.940",
      "lastModified" : "2024-11-21T06:20:45.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the def_wirelesspassword line in the HTML source code."
      }, {
        "lang" : "es",
        "value" : "La interfaz web en los dispositivos Intelbras WIN 300 y WRN 342 hasta el 04-01-2021, permite a atacantes remotos detectar credenciales mediante la lectura de la línea def_wirelesspassword en el código fuente HTML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intelbras:win_300_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-01-04",
            "matchCriteriaId" : "22C2CF4E-D07E-43C7-8006-139CBA2EB924"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intelbras:win_300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3919E128-03F8-4443-A3D6-D3370F3B9122"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:intelbras:wrn_342_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-01-04",
            "matchCriteriaId" : "FE6D03B2-83B4-4E70-B053-19E1CC44DBEE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:intelbras:wrn_342:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CB76D60-414A-4CDA-8EE5-10215E156787"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/cTYTf0Yn",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.intelbras.com/pt-br/ajuda-download/faq/roteador-wireless-veloz-wrn-342",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pastebin.com/cTYTf0Yn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.intelbras.com/pt-br/ajuda-download/faq/roteador-wireless-veloz-wrn-342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T20:15:11.317",
      "lastModified" : "2024-11-21T05:59:02.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An overly permissive CORS policy in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una política CORS demasiado permisiva en Devolutions Server versiones anteriores a 2021.1 y Devolutions Server LTS versiones anteriores a 2020.3.18, permite a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2020.3.18",
            "matchCriteriaId" : "20539E3B-1639-4E4A-8C72-541D0ACF5E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2021.1",
            "matchCriteriaId" : "AA99F2C8-3A8E-441F-8E37-5B1B91E09A03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2021-0004",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2021-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28157",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T20:15:11.410",
      "lastModified" : "2024-11-21T05:59:12.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An SQL Injection issue in Devolutions Server before 2021.1 and Devolutions Server LTS before 2020.3.18 allows an administrative user to execute arbitrary SQL commands via a username in api/security/userinfo/delete."
      }, {
        "lang" : "es",
        "value" : "Un problema de inyección SQL en Devolutions Server versiones anteriores a 2021.1 y Devolutions Server LTS versiones anteriores a 2020.3.18, permite a un usuario administrativo ejecutar comandos SQL arbitrarios por medio de un nombre de usuario en api/security/userinfo/delete"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "2020.3.18",
            "matchCriteriaId" : "20539E3B-1639-4E4A-8C72-541D0ACF5E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:devolutions:devolutions_server:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2021.1",
            "matchCriteriaId" : "AA99F2C8-3A8E-441F-8E37-5B1B91E09A03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://devolutions.net/security/advisories/DEVO-2021-0004",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://devolutions.net/security/advisories/DEVO-2021-0004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29449",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-14T22:15:12.513",
      "lastModified" : "2026-04-06T15:17:04.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details."
      }, {
        "lang" : "es",
        "value" : "Pi-hole es una aplicación de bloqueo de anuncios y rastreadores de Internet a nivel de red de Linux.&#xa0;Se detectaron múltiples vulnerabilidades de escalada de privilegios en versión 5.2.4 de Pi-hole core.&#xa0;Véase el aviso de seguridad de GitHub al que se hace referencia para más detalles"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:pi-hole:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.2.4",
            "matchCriteriaId" : "96CDEA47-5675-4873-BC11-486D327423B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163715/Pi-Hole-Remove-Commands-Linux-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/pi-hole/pi-hole/security/advisories/GHSA-3597-244c-wrpj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Research/Advisories/2021-02_CSNC-2021-008_Pi-hole_Privilege_Escalation.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27180",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T23:15:12.147",
      "lastModified" : "2024-11-21T05:57:30.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MDaemon versiones anteriores a 20.0.4.&#xa0;Se presenta una vulnerabilidad de tipo XSS reflejado en Webmail (también se conoce como WorldClient).&#xa0;Puede ser explotado por medio de una petición GET.&#xa0;Permite llevar a cabo cualquier acción con los privilegios del usuario atacado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altn:mdaemon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.4",
            "matchCriteriaId" : "A018FBF4-FA32-4A42-8C24-927D8851B719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27181",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T23:15:12.197",
      "lastModified" : "2024-11-21T05:57:30.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided by the attacker and successfully authenticate into the application. Having the value of the anti-CSRF token, the attacker may trick the user into visiting his malicious page and performing any request with the privileges of attacked user."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MDaemon versiones anteriores a 20.0.4.&#xa0;Una Administración Remota permite a un atacante llevar a cabo una reparación del token anti-CSRF.&#xa0;Para explotar este problema, el usuario debe hacer clic en una URL maliciosa proporcionada por el atacante y autenticarse con éxito en la aplicación.&#xa0;Teniendo el valor del token anti-CSRF, el atacante puede engañar al usuario al visitar su página maliciosa y llevar a cabo cualquier petición con los privilegios del usuario atacado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altn:mdaemon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.4",
            "matchCriteriaId" : "A018FBF4-FA32-4A42-8C24-927D8851B719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27182",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T23:15:12.430",
      "lastModified" : "2024-11-21T05:57:30.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MDaemon versiones anteriores a 20.0.4.&#xa0;Se presenta una vulnerabilidad de inyección de IFRAME en Webmail (también se conoce como WorldClient).&#xa0;Puede ser explotada por medio de un mensaje de correo electrónico.&#xa0;Permite a un atacante llevar a cabo cualquier acción con los privilegios del usuario atacado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altn:mdaemon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.4",
            "matchCriteriaId" : "A018FBF4-FA32-4A42-8C24-927D8851B719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27183",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-14T23:15:12.523",
      "lastModified" : "2024-11-21T05:57:30.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly lead to Remote Code Execution."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en MDaemon versiones anteriores a 20.0.4.&#xa0;Los administradores pueden usar la administración remota para explotar una vulnerabilidad de escritura arbitraria de archivos.&#xa0;Un atacante puede crear archivos nuevos en cualquier ubicación del sistema de archivos, o puede ser capaz de modificar archivos existentes.&#xa0;Esta vulnerabilidad puede conllevar directamente a una Ejecución de Código Remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:altn:mdaemon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.0.4",
            "matchCriteriaId" : "A018FBF4-FA32-4A42-8C24-927D8851B719"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/chudyPB/MDaemon-Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.altn.com/Support/SecurityUpdate/MD011221_MDaemon_EN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26075",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-04-15T00:15:12.920",
      "lastModified" : "2024-11-21T05:55:49.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an information disclosure vulnerability in the error message when presented with an invalid filename."
      }, {
        "lang" : "es",
        "value" : "El recurso de rest AttachTemporaryFile del plugin de importadores de Jira en Jira Server y Data Center versiones anteriores a 8.5.12, desde versión 8.6.0 versiones anteriores a 8.13.4, y desde versión 8.14.0 versiones anteriores a 8.15.1, permitía a atacantes remotos autentificados obtener la ruta completa del directorio de datos de la aplicación Jira por medio de una vulnerabilidad de divulgación de información en el mensaje de error cuando se presentaba un nombre de archivo no válido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.12",
            "matchCriteriaId" : "09C2E603-3885-467B-8720-DF14A23075C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.12",
            "matchCriteriaId" : "AD4EEB38-868D-4E69-80A7-899BD9323B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.4",
            "matchCriteriaId" : "46468A73-9066-4ADA-BF9A-0DDF3EE9F69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.1",
            "matchCriteriaId" : "9F4C4682-A56A-4BEA-AFD7-6F116FCE8EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.4",
            "matchCriteriaId" : "8BE06262-0589-4549-A3F2-6AA02A2E346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.1",
            "matchCriteriaId" : "3C31DC16-F8E3-4261-B539-C251E4BBC584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72316",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72316",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26076",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-04-15T00:15:12.983",
      "lastModified" : "2024-11-21T05:55:49.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The jira.editor.user.mode cookie set by the Jira Editor Plugin in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.0 allows remote anonymous attackers who can perform an attacker in the middle attack to learn which mode a user is editing in due to the cookie not being set with a secure attribute if Jira was configured to use https."
      }, {
        "lang" : "es",
        "value" : "La cookie jira.editor.user.mode ajustada por Jira Editor Plugin en Jira Server y Data Center versiones anteriores a 8.5.12, desde versión 8.6.0 versiones anteriores a 8.13.4 y desde versión 8.14.0 versiones anteriores a 8.15.0, permite a atacantes anónimos remotos poder llevar a cabo un ataque de tipo  attacker in the middle  para saber en qué modo está editando un usuario debido a que la cookie no está ajustada con un atributo seguro si Jira estaba configurado para usar https"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:data_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.12",
            "matchCriteriaId" : "09C2E603-3885-467B-8720-DF14A23075C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.5.12",
            "matchCriteriaId" : "AD4EEB38-868D-4E69-80A7-899BD9323B3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.4",
            "matchCriteriaId" : "46468A73-9066-4ADA-BF9A-0DDF3EE9F69E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.1",
            "matchCriteriaId" : "9F4C4682-A56A-4BEA-AFD7-6F116FCE8EF9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.13.4",
            "matchCriteriaId" : "8BE06262-0589-4549-A3F2-6AA02A2E346D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.14.0",
            "versionEndExcluding" : "8.15.1",
            "matchCriteriaId" : "3C31DC16-F8E3-4261-B539-C251E4BBC584"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72252",
        "source" : "security@atlassian.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.atlassian.com/browse/JRASERVER-72252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30477",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T00:15:13.047",
      "lastModified" : "2024-11-21T06:04:00.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Zulip Server before 3.4. A bug in the implementation of replies to messages sent by outgoing webhooks to private streams meant that an outgoing webhook bot could be used to send messages to private streams that the user was not intended to be able to send messages to."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Zulip Server versiones anteriores a 3.4.&#xa0;Un bug en la implementación de las respuestas a los mensajes enviados por webhooks salientes a transmisiones privadas significaba que un bot webhook saliente podía usarse para enviar mensajes a transmisiones privadas a las que el usuario no tenía la intención de poder enviar mensajes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "09622761-7CB9-4FD7-82B0-B80CD94D296D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30478",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T00:15:13.107",
      "lastModified" : "2024-11-21T06:04:00.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the can_forge_sender permission (previously is_api_super_user) resulted in users with this permission being able to send messages appearing as if sent by a system bot, including to other organizations hosted by the same Zulip installation."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Zulip Server versiones anteriores a 3.4.&#xa0;Un bug en la implementación del permiso can_forge_sender (anteriormente es_api_super_user) hizo a unos usuarios con este permiso pudieran enviar mensajes que parecían enviados por un bot del sistema, inclusive a otras organizaciones alojadas por la misma instalación de Zulip"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "09622761-7CB9-4FD7-82B0-B80CD94D296D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30479",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T00:15:13.170",
      "lastModified" : "2024-11-21T06:04:00.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Zulip Server before 3.4. A bug in the implementation of the all_public_streams API feature resulted in guest users being able to receive message traffic to public streams that should have been only accessible to members of the organization."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Zulip Server versiones anteriores a 3.4.&#xa0;Un bug en la implementación de la funcionalidad API all_public_streams resultó en que usuarios invitados pudieran recibir tráfico de mensajes a transmisiones públicas que solo deberían haber sido accesibles para los miembros de la organización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "09622761-7CB9-4FD7-82B0-B80CD94D296D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30487",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T00:15:13.247",
      "lastModified" : "2024-11-21T06:04:01.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation."
      }, {
        "lang" : "es",
        "value" : "En el tema de mover API en Zulip Server versiones 3.x anteriores a 3.4, unos administradores de la organización pudieron mover mensajes a transmisiones en otras organizaciones alojadas por la misma instalación de Zulip"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zulip:zulip_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.4",
            "matchCriteriaId" : "89E55845-0044-4407-B9BA-AC3F773536C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.zulip.com/2021/04/14/zulip-server-3-4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23884",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-04-15T08:15:14.510",
      "lastModified" : "2024-11-21T05:52:00.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cleartext Transmission of Sensitive Information vulnerability in the ePO Extension of McAfee Content Security Reporter (CSR) prior to 2.8.0 allows an ePO administrator to view the unencrypted password of the McAfee Web Gateway (MWG) or the password of the McAfee Web Gateway Cloud Server (MWGCS) read only user used to retrieve log files for analysis in CSR."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Transmisión de Texto Sin Cifrar de Información Confidencial en la Extensión ePO de McAfee Content Security Reporter (CSR) anterior a versión 2.8.0, permite a un administrador de ePO visualizar la contraseña no cifrada de McAfee Web Gateway (MWG) o la contraseña del usuario de solo lectura de McAfee Web Gateway Cloud Server (MWGCS) usado para recuperar archivos de registro para su análisis en CSR"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 2.7,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.1,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:content_security_reporter:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.8.0",
            "matchCriteriaId" : "4D6974CE-A6F8-4A23-B876-BABE9BDF4010"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10353",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23886",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-04-15T08:15:14.620",
      "lastModified" : "2024-11-21T05:52:00.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Denial of Service vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to cause a BSoD through suspending a process, modifying the processes memory and restarting it. This is triggered by the hdlphook driver reading invalid memory."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Denegación de Servicio en McAfee Data Loss Prevention (DLP) Endpoint para Windows anterior a versión 11.6.100, permite a un atacante local, poco privilegiado, causar un BSoD al suspender un proceso, modificar la memoria del proceso y reiniciarlo.&#xa0;Esto es desencadenado cuando el controlador hdlphook lee una memoria no válida"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "11.6.100.41",
            "matchCriteriaId" : "4F7C4BC1-0FF3-4D8A-8F05-104ED2615A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10354",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10357",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23887",
      "sourceIdentifier" : "trellixpsirt@trellix.com",
      "published" : "2021-04-15T08:15:14.713",
      "lastModified" : "2024-11-21T05:52:00.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary controlled kernel addresses. This is achieved by launching applications, suspending them, modifying the memory and restarting them when they are monitored by McAfee DLP through the hdlphook driver."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Escalada de Privilegios en McAfee Data Loss Prevention (DLP) Endpoint para Windows anterior a versión 11.6.100, permite a un atacante local, poco privilegiado, escribir direcciones de kernel controladas arbitrariamente.&#xa0;Esto es logrado al iniciar aplicaciones, suspenderlas, modificar la memoria y reiniciarlas cuando son monitoreadas por McAfee DLP por medio del controlador hdlphook"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "trellixpsirt@trellix.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "trellixpsirt@trellix.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:data_loss_prevention_endpoint:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "11.6.100.41",
            "matchCriteriaId" : "4F7C4BC1-0FF3-4D8A-8F05-104ED2615A20"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10354",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10357",
        "source" : "trellixpsirt@trellix.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10357",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27850",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-15T08:15:14.823",
      "lastModified" : "2024-11-21T05:58:38.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-2019-0195. Recap: Before the fix of CVE-2019-0195 it was possible to download arbitrary class files from the classpath by providing a crafted asset file URL. An attacker was able to download the file `AppModule.class` by requesting the URL `http://localhost:8080/assets/something/services/AppModule.class` which contains a HMAC secret key. The fix for that bug was a blacklist filter that checks if the URL ends with `.class`, `.properties` or `.xml`. Bypass: Unfortunately, the blacklist solution can simply be bypassed by appending a `/` at the end of the URL: `http://localhost:8080/assets/something/services/AppModule.class/` The slash is stripped after the blacklist check and the file `AppModule.class` is loaded into the response. This class usually contains the HMAC secret key which is used to sign serialized Java objects. With the knowledge of that key an attacker can sign a Java gadget chain that leads to RCE (e.g. CommonsBeanUtils1 from ysoserial). Solution for this vulnerability: * For Apache Tapestry 5.4.0 to 5.6.1, upgrade to 5.6.2 or later. * For Apache Tapestry 5.7.0, upgrade to 5.7.1 or later."
      }, {
        "lang" : "es",
        "value" : "Se encontró una vulnerabilidad crítica de ejecución de código remota no autenticado en todas las versiones recientes de Apache Tapestry.&#xa0;Las versiones afectadas incluyen 5.4.5, 5.5.0, 5.6.2 y 5.7.0.&#xa0;La vulnerabilidad encontrada es un desvío de la solución para CVE-2019-0195.&#xa0;Resumen: versiones anteriores a corrección de CVE-2019-0195, era posible descargar archivos de clases arbitrarios desde la ruta de clases proporcionando una URL de archivo de activos diseñada.&#xa0;Un atacante pudo descargar el archivo \"AppModule.class\" al requerir la URL \"http://localhost:8080/assets/something/services/AppModule.class\" que contiene una clave secreta HMAC.&#xa0;La corrección para ese error fue un filtro de lista negra que verifica si la URL termina con \".class\",\" properties\" o \".xml\".&#xa0;Omitir: Desafortunadamente, la solución de lista negra puede simplemente ser omitida al agregar un \"/` al final de la URL: \"http: // localhost:8080/assets/something/services/AppModule.class/\". La barra es eliminada después de la comprobación de la lista negra y el archivo` AppModule.class` se carga en la respuesta.&#xa0;Esta clase generalmente contiene la clave secreta HMAC que es usada para firmar objetos Java serializados.&#xa0;Con el conocimiento de esa clave, un atacante puede firmar una cadena de dispositivos Java que conlleva a una RCE (por ejemplo, CommonsBeanUtils1 de ysoserial).&#xa0;Solución para esta vulnerabilidad: *Para Apache Tapestry versiones 5.4.0 hasta 5.6.1, actualice a versiones 5.6.2 o posteriores.&#xa0;*Para Apache Tapestry versión 5.7.0, actualice a versiones 5.7.1 o posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        }, {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tapestry:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.6.2",
            "matchCriteriaId" : "5611789E-E882-49FF-9E33-A8612A394FE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tapestry:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndExcluding" : "5.7.1",
            "matchCriteriaId" : "4709FF63-6606-413B-941E-3E58DDA96203"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/15/1",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r237ff7f286bda31682c254550c1ebf92b0ec61329b32fbeb2d1c8751%40%3Cusers.tapestry.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0002/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/15/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r237ff7f286bda31682c254550c1ebf92b0ec61329b32fbeb2d1c8751%40%3Cusers.tapestry.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27129",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T12:15:13.123",
      "lastModified" : "2025-11-11T18:15:33.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CASAP Automated Enrollment System version 1.0 contains a cross-site scripting (XSS) vulnerability through the Students > Edit > ROUTE parameter."
      }, {
        "lang" : "es",
        "value" : "CASAP Automated Enrollment System versión 1.0, contiene una vulnerabilidad de tipo cross-site scripting (XSS) por medio del parámetro Students ) Edit ) ROUTE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:casap_automated_enrollment_system_project:casap_automated_enrollment_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFA6FCDF-214D-46B9-BDC4-32B296AC4920"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/161080/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49470",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://packetstormsecurity.com/files/161080/CASAP-Automated-Enrollment-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27544",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T12:15:13.343",
      "lastModified" : "2024-11-21T05:58:10.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in the \"add-services.php\" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the \"sername\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el componente \"add-services.php\" de PHPGurukul Beauty Parlor Management System versión v1.0, permite a atacantes remotos ejecutar código arbitrario inyectando HTML arbitrario en el parámetro \"sername\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA81F18-F852-48EE-9C3C-2B87A7289A75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BigTiger2020/Beauty-Parlour-Management-System",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BigTiger2020/Beauty-Parlour-Management-System",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T12:15:13.467",
      "lastModified" : "2024-11-21T05:58:10.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in the \"add-services.php\" component of PHPGurukul Beauty Parlour Management System v1.0 allows remote attackers to obtain sensitive database information by injecting SQL commands into the \"sername\" parameter."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL en el componente \"add-services.php\" del PHPGurukul Beauty Parlour Management System versión v1.0, permite a atacantes remotos obtener información confidencial de la base de datos mediante la inyección de comandos SQL en el parámetro \"sername\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:phpgurukul:beauty_parlour_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DA81F18-F852-48EE-9C3C-2B87A7289A75"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BigTiger2020/Beauty-Parlour-Management-System",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49580",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BigTiger2020/Beauty-Parlour-Management-System",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/161468/Beauty-Parlour-Management-System-1.0-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49580",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0488",
      "sourceIdentifier" : "security@android.com",
      "published" : "2021-04-15T13:15:11.653",
      "lastModified" : "2024-11-21T05:42:48.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In pb_write of pb_encode.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-178754781"
      }, {
        "lang" : "es",
        "value" : "En la función pb_write del archivo pb_encode.c, se presenta una posible escritura fuera de límites debido a una falta de comprobación de límites.&#xa0;Esto podría conllevar a una escalada local de privilegios con los privilegios de ejecución System requeridos.&#xa0;No es requerida una interacción del usuario para su explotación. Producto: Android, Versiones: kernel de Android, ID de Android: A-178754781"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-04-01",
        "source" : "security@android.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://source.android.com/security/bulletin/pixel/2021-04-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21087",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.077",
      "lastModified" : "2024-11-21T05:47:32.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker could abuse this vulnerability to execute arbitrary JavaScript code in context of the current user. Exploitation of this issue requires user interaction."
      }, {
        "lang" : "es",
        "value" : "Las versiones de Adobe Coldfusion 2016 (actualización 16 y anteriores), 2018 (actualización 10 y anteriores) y 2021.0.0.323925 están afectadas por una vulnerabilidad de Neutralización inadecuada de la entrada durante la generación de la página web ('Cross-site Scripting'). Un atacante podría abusar de esta vulnerabilidad para ejecutar código JavaScript arbitrario en el contexto del usuario actual. La explotación de este problema requiere la interacción del usuario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B262F442-FF7F-4CC0-A9C5-FFD0EDB08E38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "9F3D7C8E-6695-44DF-AC9A-1AE09C46C529"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "449A07A6-1D7A-49CF-9316-5EAAFAF38956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "C5265059-D9DD-44E6-B68C-81838BCA64C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update12:*:*:*:*:*:*",
            "matchCriteriaId" : "A2277A67-562B-4185-AE5F-EB93563F16DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "6C6E6735-A72F-4CC7-8239-CC96DEF4E5CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update14:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCED4DC-29A3-4EBB-9ADF-2C56075D7CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "1798CDA5-D0A5-4C92-AB36-1EA401BAA27D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update16:*:*:*:*:*:*",
            "matchCriteriaId" : "4CCB27FA-920A-4E77-B25B-12A725C46D90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "12BAE66C-A745-4661-B5BB-7FC2C169CC82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "E6EC92F3-1EF8-4820-9CD8-ECEA03D27A7B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D7446D70-D616-4EC1-BC64-41CDE56EFEAE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "59453B01-EAAF-4291-B2C2-98835F5AFE80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "63076ED8-FC30-40B1-99A7-D0069423A536"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "E4B4228E-6FBD-492A-8F93-30B1D6861C81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "7D4F5639-F628-4163-BFBA-25B4E7B2DFDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2016:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "5BC3FFF1-A25A-4C15-9162-1DA58350DAFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3B54B2B0-B1E1-4B4E-A529-D0BD3B5DEEF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB126BF-E09D-4E58-A39F-1190407D1CAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "8DDD85DF-69A0-476F-8365-CD67C75CF0CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "59649177-81EE-43C3-BFA5-E56E65B486DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "453B96ED-738A-4642-B461-C5216CF45CA3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "58D32489-627B-4E49-9329-8A3B8F8E4903"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "6D5860E1-D293-48FE-9796-058B78B2D571"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9336CC-E38F-4BCB-83CD-805EC7FEF806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "97964507-047A-4CC8-8D2B-0EA0C7F9BD50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update8:*:*:*:*:*:*",
            "matchCriteriaId" : "82208628-F32A-4380-9B0F-DC8507E7701D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2018:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "1563CE5E-A4F7-40A4-A050-BB96E332D8DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:coldfusion:2021.0.0.323925:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCC19A0A-E248-44E5-B401-B562F3CDB939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/coldfusion/apsb21-16.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21091",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.217",
      "lastModified" : "2024-11-21T05:47:33.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds read vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to disclose sensitive memory information in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 10.1.1 (y anteriores) y versiones 11.0.1 (y anteriores)  están afectadas por una vulnerabilidad de lectura fuera de límites cuando analiza un archivo diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para revelar información confidencial de la memoria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "CE782647-BC3F-45C5-AD2E-C352CA29FB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "533DEE6C-BBEA-4417-B00A-2FBC74507F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-413/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-413/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21092",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.310",
      "lastModified" : "2024-11-21T05:47:33.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 10.1.1 (y anteriores) y versiones 11.0.1 (y anteriores)  están afectadas por una vulnerabilidad de corrupción de la memoria cuando analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "CE782647-BC3F-45C5-AD2E-C352CA29FB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "533DEE6C-BBEA-4417-B00A-2FBC74507F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-415/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-415/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21093",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.403",
      "lastModified" : "2024-11-21T05:47:33.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by a memory corruption vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 10.1.1 (y anteriores) y versiones 11.0.1 (y anteriores), están afectadas por una vulnerabilidad de corrupción de la memoria cuando analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-788"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "CE782647-BC3F-45C5-AD2E-C352CA29FB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "533DEE6C-BBEA-4417-B00A-2FBC74507F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-414/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-414/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21094",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.483",
      "lastModified" : "2024-11-21T05:47:33.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 10.1.1 (y anteriores) y versiones 11.0.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites cuando analiza un archivo especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "CE782647-BC3F-45C5-AD2E-C352CA29FB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "533DEE6C-BBEA-4417-B00A-2FBC74507F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-416/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-416/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21095",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.560",
      "lastModified" : "2024-11-21T05:47:33.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Out-of-bounds write vulnerability when parsing a crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 10.1.1 (y anteriores) y versiones 11.0.1 (y anteriores), están afectadas por una vulnerabilidad de escritura fuera de límites cuando analiza un archivo diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "CE782647-BC3F-45C5-AD2E-C352CA29FB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "533DEE6C-BBEA-4417-B00A-2FBC74507F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-418/",
        "source" : "psirt@adobe.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-418/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21096",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.653",
      "lastModified" : "2024-11-21T05:47:33.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Bridge versions 10.1.1 (and earlier) and 11.0.1 (and earlier) are affected by an Improper Authorization vulnerability in the Genuine Software Service. A low-privileged attacker could leverage this vulnerability to achieve application denial-of-service in the context of the current user. Exploitation of this issue does not require user interaction."
      }, {
        "lang" : "es",
        "value" : "Adobe Bridge versiones 10.1.1 (y anteriores) y versiones 11.0.1 (y anteriores) están afectadas por una vulnerabilidad de Autorización Inapropiada en Genuine Software Service.&#xa0;Un atacante poco privilegiado podría aprovechar esta vulnerabilidad para lograr una denegación de servicio de la aplicación en el contexto del usuario actual.&#xa0;No es requerida una interacción del usuario para la explotación de este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndIncluding" : "10.1.1",
            "matchCriteriaId" : "CE782647-BC3F-45C5-AD2E-C352CA29FB80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:bridge:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndIncluding" : "11.0.1",
            "matchCriteriaId" : "533DEE6C-BBEA-4417-B00A-2FBC74507F15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/bridge/apsb21-23.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21100",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:16.747",
      "lastModified" : "2024-11-21T05:47:34.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Digital Editions versión 4.5.11.187245 (y anteriores) está afectada por una vulnerabilidad de escalada de privilegios durante la instalación.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una escritura arbitraria del sistema de archivos en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:digital_editions:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.5.11.187245",
            "matchCriteriaId" : "F9A36F61-8290-40CD-8F7D-ECE48CF6B7F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/Digital-Editions/apsb21-26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27672",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T14:15:16.857",
      "lastModified" : "2024-11-21T05:58:24.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to obtain sesnitive database information by injecting SQL commands into the \"cID\" parameter when creating a new HTML component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Inyección SQL en el componente \"admin_boxes.ajax.php\" de Tribal Systems Zenario CMS versión v8.8.52729, permite a atacantes remotos obtener información confidencial de la base de datos al inyectar comandos SQL en el parámetro \"cID\" cuando se crea un nuevo componente HTML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribalsystems:zenario:8.8.52729:*:*:*:*:*:*:*",
            "matchCriteriaId" : "522C0CB6-2549-4106-9418-CE961E5FCC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27673",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T14:15:16.920",
      "lastModified" : "2024-11-21T05:58:25.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in the \"admin_boxes.ajax.php\" component of Tribal Systems Zenario CMS v8.8.52729 allows remote attackers to execute arbitrary code by injecting arbitrary HTML into the \"cID\" parameter when creating a new HTML component."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en el componente \"admin_boxes.ajax.php\" de Tribal Systems Zenario CMS versión v8.8.52729, permite a atacantes remotos ejecutar código arbitrario al inyectar HTML arbitrario en el parámetro \"cID\" cuando se crea un nuevo componente HTML"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribalsystems:zenario:8.8.52729:*:*:*:*:*:*:*",
            "matchCriteriaId" : "522C0CB6-2549-4106-9418-CE961E5FCC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163083/Zenario-CMS-8.8.52729-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://deadsh0t.medium.com/blind-error-based-authenticated-sql-injection-on-zenario-8-8-52729-cms-d4705534df38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T14:15:16.997",
      "lastModified" : "2024-11-21T05:59:23.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in the \"evoadm.php\" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the \"cf_name\" parameter when creating a new filter under the \"Collections\" tab."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL en el componente \"evoadm.php\" de b2evolution versión v7.2.2-stable, permite a atacantes remotos obtener información confidencial de la base de datos al inyectar comandos SQL en el parámetro \"cf_name\" al crear un nuevo filtro en la pestaña \"Colecciones\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:b2evolution:b2evolution:7.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75BEB348-D86D-4F78-8B0F-66BB033CDDB4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162489/b2evolution-7-2-2-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://deadsh0t.medium.com/authenticated-boolean-based-blind-error-based-sql-injection-b752225f0644",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/109",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162489/b2evolution-7-2-2-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://deadsh0t.medium.com/authenticated-boolean-based-blind-error-based-sql-injection-b752225f0644",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/b2evolution/b2evolution/issues/109",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28548",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:17.060",
      "lastModified" : "2024-11-21T05:59:49.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.6 (y anteriores) y versiones 22.3 (y anteriores) están afectadas por una vulnerabilidad de desbordamiento de búfer cuando analiza un archivo JSX especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.6",
            "matchCriteriaId" : "1C7C1C09-9D8F-4E5E-839A-F0EF3FF3AB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndExcluding" : "22.3",
            "matchCriteriaId" : "F065DC20-BEE3-48DA-8079-4EA17FE6FD61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28549",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-15T14:15:17.137",
      "lastModified" : "2024-11-21T05:59:49.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Photoshop versions 21.2.6 (and earlier) and 22.3 (and earlier) are affected by a Buffer Overflow vulnerability when parsing a specially crafted JSX file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file."
      }, {
        "lang" : "es",
        "value" : "Adobe Photoshop versiones 21.2.6 (y anteriores) y versiones 22.3 (y anteriores) están afectadas por una vulnerabilidad de desbordamiento de búfer cuando analiza un archivo JSX especialmente diseñado.&#xa0;Un atacante no autenticado podría aprovechar esta vulnerabilidad para lograr una ejecución de código arbitraria en el contexto del usuario actual.&#xa0;Es requerida una interacción del usuario para explotar este problema, ya que la víctima debe abrir un archivo malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "21.2.6",
            "matchCriteriaId" : "1C7C1C09-9D8F-4E5E-839A-F0EF3FF3AB30"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:photoshop:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "22.0",
            "versionEndIncluding" : "22.3",
            "matchCriteriaId" : "B91074BE-7694-46A0-A107-0972E4D6B640"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "387021A0-AF36-463C-A605-32EA7DAC172E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-28.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/photoshop/apsb21-28.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30209",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T14:15:17.217",
      "lastModified" : "2024-11-21T06:03:31.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Textpattern V4.8.4 contains an arbitrary file upload vulnerability where a plug-in can be loaded in the background without any security verification, which may lead to obtaining system permissions."
      }, {
        "lang" : "es",
        "value" : "Textpattern versión V4.8.4, contiene una vulnerabilidad de carga de archivos arbitraria donde un plugin puede ser cargado en segundo plano sin ninguna verificación de seguridad, lo que puede conllevar a una obtención de permisos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:textpattern:textpattern:4.8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "398F55CB-5C6D-405D-B0A3-69A176A55785"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/textpattern/textpattern/issues/1655",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/textpattern/textpattern/issues/1655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3487",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-15T14:15:17.310",
      "lastModified" : "2023-11-20T05:15:08.150",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: Non Security Issue. See the binutils security policy for more details, https://sourceware.org/cgit/binutils-gdb/tree/binutils/SECURITY.txt"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20288",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-15T15:15:12.257",
      "lastModified" : "2024-11-21T05:46:17.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication flaw was found in ceph in versions before 14.2.20. When the monitor handles CEPHX_GET_AUTH_SESSION_KEY requests, it doesn't sanitize other_keys, allowing key reuse. An attacker who can request a global_id can exploit the ability of any user to request a global_id previously associated with another user, as ceph does not force the reuse of old keys to generate new ones. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de autenticación en ceph en versiones anteriores a 14.2.20.&#xa0;Cuando el monitor maneja las peticiones CEPHX_GET_AUTH_SESSION_KEY, no sanea other_keys, permitiendo la reutilización de claves.&#xa0;Un atacante que puede requerir un global_id puede explotar la capacidad de cualquier usuario para requerir un global_id previamente asociado con otro usuario, ya que ceph no obliga a la reutilización de claves antiguas para generar nuevas.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:ceph:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.2.21",
            "matchCriteriaId" : "26BB96DD-5842-4227-8B10-984C536A5FFB"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ceph_storage:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E54096-5D45-4CB2-AC9A-DDB55BF2B94C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1938031",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/362CEPPYF3YMJZBEJQUT3KDE2EHYYIYQ/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BPIAYTRCWAU4XWCDBK2THEFVXSC4XGK/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVWUKUUS5BCIFWRV3JCUQMAPJ4HIWSED/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-39",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1938031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/10/msg00034.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/362CEPPYF3YMJZBEJQUT3KDE2EHYYIYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BPIAYTRCWAU4XWCDBK2THEFVXSC4XGK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JVWUKUUS5BCIFWRV3JCUQMAPJ4HIWSED/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T15:15:12.337",
      "lastModified" : "2024-11-21T06:05:20.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd() performs incorrect memory handling while parsing crafted XML files, which leads to an out-of-bounds write of a one byte constant."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo libezxml.a en ezXML versión 0.8.6.&#xa0;La función ezxml_internal_dtd() lleva a cabo un manejo de la memoria incorrecto mientras analiza archivos XML diseñados, lo que conlleva a una escritura fuera de límites de una constante de un byte"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D40D46-20EB-4287-8B80-9CF98AD4DE97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/26/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/26/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27112",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T16:15:13.907",
      "lastModified" : "2024-11-21T05:57:21.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LightCMS v1.3.5 contains a remote code execution vulnerability in /app/Http/Controllers/Admin/NEditorController.php during the downloading of external images."
      }, {
        "lang" : "es",
        "value" : "LightCMS versión v1.3.5, contiene una vulnerabilidad de ejecución de código remota en el archivo /app/Http/Controllers/Admin/NEditorController.php durante la descarga de imágenes externas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lightcms_project:lightcms:1.3.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92FED2AD-7CB0-4B36-92E4-C3F76A0CA1F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eddy8/LightCMS/issues/19",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eddy8/LightCMS/issues/19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29448",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T16:15:14.033",
      "lastModified" : "2024-11-21T06:01:07.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. The Stored XSS exists in the Pi-hole Admin portal, which can be exploited by the malicious actor with the network access to DNS server. See the referenced GitHub security advisory for patch details."
      }, {
        "lang" : "es",
        "value" : "Pi-hole es una aplicación de bloqueo de anuncios y rastreadores de Internet a nivel de red de Linux.&#xa0;El ataque XSS Almacenado se presenta en el portal de Administración de Pi-hole, que puede ser explotado por el actor malicioso con acceso de red al servidor DNS.&#xa0;Consulte el aviso de seguridad de GitHub al que se hace referencia para los detalles del parche"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:ftldns:5.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58019EAF-690C-4C97-810A-9A8A4300B14A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:pi-hole:5.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62120E3C-0A70-43F9-A442-8F18B43169C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pi-hole:web_interface:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5",
            "matchCriteriaId" : "8F0D090D-0C5F-476F-B857-10C7F5E29349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-cwwf-93p7-73j9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pi-hole/AdminLTE/security/advisories/GHSA-cwwf-93p7-73j9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30138",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T16:15:14.110",
      "lastModified" : "2023-11-07T03:32:58.850",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3243",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T17:15:12.823",
      "lastModified" : "2024-11-21T06:21:09.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wfilter ICF 5.0.117 contains a cross-site scripting (XSS) vulnerability. An attacker in the same LAN can craft a packet with a malicious User-Agent header to inject a payload in its logs, where an attacker can take over the system by through its plugin-running function."
      }, {
        "lang" : "es",
        "value" : "Wfilter ICF versión 5.0.117, contiene una vulnerabilidad de tipo cross-site scripting (XSS).&#xa0;Un atacante en la misma LAN puede crear un paquete con un encabezado User-Agent malicioso para inyectar una carga útil en sus registros, donde un atacante puede tomar el control del sistema a través de su función de ejecución de plugin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wfiltericf:wfilter_internet_content_filter:5.0.117:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1FF3C0-E837-44D3-BD26-9D9A3B1E9677"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://drivertom.blogspot.com/2021/01/wfilter-icf-0day-rce.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26582",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-15T18:15:12.387",
      "lastModified" : "2024-11-21T05:56:31.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability in HPE IceWall SSO Domain Gateway Option (Dgfw) module version 10.0 on RHEL 5/6/7, version 10.0 on HP-UX 11i v3, version 10.0 on Windows and 11.0 on Windows could be exploited remotely to allow cross-site scripting (XSS)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de seguridad en el módulo HPE IceWall SSO Domain Gateway Option (Dgfw) versión 10.0 en RHEL 5/6/7, versión 10.0 en HP-UX 11i versión v3, versión 10.0 en Windows y 11.0 en Windows, podría ser explotado remotamente para permitir ataques de tipo cross-site scripting (XSS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso_dgfw:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EC26F5-25FB-4172-9D76-E599035A4E76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso_dgfw:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47B7FD22-3329-4363-B6F8-69EE1B5ED252"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso_dgfw:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EC26F5-25FB-4172-9D76-E599035A4E76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D8B549B-E57B-4DFE-8A13-CAB06B5356B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F6AB192-9D7D-4A9A-8995-E53A9DE9EAFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:icewall_sso_dgfw:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5EC26F5-25FB-4172-9D76-E599035A4E76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:11i:v3.0:*:*:*:*:*:*",
            "matchCriteriaId" : "BCADC579-2933-40CC-B01B-A08FBA48F75E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04086en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29433",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T18:15:12.497",
      "lastModified" : "2024-11-21T06:01:05.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability is in version 2.3.0. No workarounds are known to exist."
      }, {
        "lang" : "es",
        "value" : "Sydent es un servidor de identidad de Matrix de referencia. En las versiones 2.2.0 y anteriores de Sydent, la falta de validación de la entrada de algunos parámetros en los puntos finales utilizados para confirmar los identificadores de terceros podría causar un uso excesivo de espacio en disco y memoria, lo que llevaría al agotamiento de los recursos. La versión 2.3.0 contiene un parche para esta vulnerabilidad. No se conoce la existencia de soluciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:sydent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "C77C5A80-7302-49F8-8DAA-37B269691C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/sydent/commit/3175fd358ebc2c310eab7a3dbf296ce2bd54c1da",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/3175fd358ebc2c310eab7a3dbf296ce2bd54c1da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-pw4v-gr34-2553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T19:15:12.597",
      "lastModified" : "2024-11-21T05:59:03.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in Centreon-Web in Centreon Platform 20.10.0. The anti-CSRF token generation is predictable, which might allow CSRF attacks that add an admin user."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en Centreon-Web en Centreon Platform versión 20.10.0.&#xa0;La generación de tokens anti-CSRF es predecible, lo que podría permitir ataques de tipo CSRF que agreguen un usuario administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon:20.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72AE0C52-5DF6-4065-AAD3-084AEEB5A034"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/centreon/centreon/pull/9612",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/centreon/centreon/pull/9612",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31402",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-15T19:15:12.673",
      "lastModified" : "2024-11-21T06:05:35.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dio package 4.0.0 for Dart allows CRLF injection if the attacker controls the HTTP method string, a different vulnerability than CVE-2020-35669."
      }, {
        "lang" : "es",
        "value" : "El paquete dio versión 4.0.0 para Dart, permite una inyección CRLF si el atacante controla la cadena del método HTTP, una vulnerabilidad diferente de CVE-2020-35669"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:flutterchina:dio:*:*:*:*:*:dart:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "5.0.0",
            "matchCriteriaId" : "DF303871-154C-4E6B-BDAC-D6B1E369A225"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/flutterchina/dio/issues/1130",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/flutterchina/dio/issues/1130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30245",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-15T20:15:12.493",
      "lastModified" : "2024-11-21T06:03:33.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The project received a report that all versions of Apache OpenOffice through 4.1.8 can open non-http(s) hyperlinks. The problem has existed since about 2006 and the issue is also in 4.1.9. If the link is specifically crafted this could lead to untrusted code execution. It is always best practice to be careful opening documents from unknown and unverified sources. The mitigation in Apache OpenOffice 4.1.10 (unreleased) assures that a security warning is displayed giving the user the option of continuing to open the hyperlink."
      }, {
        "lang" : "es",
        "value" : "El proyecto recibió un reporte de que todas las versiones de Apache OpenOffice versiones hasta 4.1.8, pueden abrir hipervínculos que no sean http.&#xa0;El problema se presenta desde aproximadamente 2006 y el problema también se encuentra en versión 4.1.9.&#xa0;Si el enlace está diseñado específicamente, esto podría conllevar a una ejecución de un código no confiable.&#xa0;Siempre es una buena práctica tener cuidado al abrir documentos de fuentes desconocidas y no comprobadas.&#xa0;La mitigación en Apache OpenOffice versión 4.1.10 (unreleased) asegura que  una alerta de seguridad es mostrada dándole al usuario la opción de continuar abriendo el hipervínculo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:openoffice:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1.8",
            "matchCriteriaId" : "C07FD210-8059-496E-9167-D1790DAB5828"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/r7c01173f763b0c4212ada0e6ab283984d6e058d72258efce85c006ab%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cdev.openoffice.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cdev.openoffice.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cusers.openoffice.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7c01173f763b0c4212ada0e6ab283984d6e058d72258efce85c006ab%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cdev.openoffice.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r87ff11512e4883052991e6b725e20294224034ea8453b811fb3ee735%40%3Cusers.openoffice.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cdev.openoffice.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2cabdc083d5160a84de9a6436296ee5030fb3a16dc490dee4f983d5%40%3Cusers.openoffice.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29430",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T21:15:17.413",
      "lastModified" : "2024-11-21T06:01:04.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sydent is a reference Matrix identity server. Sydent does not limit the size of requests it receives from HTTP clients. A malicious user could send an HTTP request with a very large body, leading to memory exhaustion and denial of service. Sydent also does not limit response size for requests it makes to remote Matrix homeservers. A malicious homeserver could return a very large response, again leading to memory exhaustion and denial of service. This affects any server which accepts registration requests from untrusted clients. This issue has been patched by releases 89071a1, 0523511, f56eee3. As a workaround request sizes can be limited in an HTTP reverse-proxy. There are no known workarounds for the problem with overlarge responses."
      }, {
        "lang" : "es",
        "value" : "Sydent es un servidor de identidad Matrix de referencia.&#xa0;Sydent no limita el tamaño de las peticiones que recibe de los clientes HTTP.&#xa0;Un usuario malicioso podría enviar una petición HTTP con un cuerpo muy grande, conllevando al agotamiento de la memoria y una denegación de servicio.&#xa0;Sydent tampoco limita el tamaño de respuesta para las peticiones que realiza a los servidores domésticos de Matrix remotos.&#xa0;Un servidor doméstico malicioso podría devolver una respuesta muy grande, lo que nuevamente conlleva al agotamiento de la memoria y a una denegación de servicio.&#xa0;Esto afecta a cualquier servidor que acepte peticiones de registro de clientes no confiables.&#xa0;Este problema ha sido parcheado para las versiones 89071a1, 0523511, f56eee3.&#xa0;Como solución alternativa, los tamaños de las peticiones pueden ser limitados en un proxy inverso HTTP.&#xa0;No se conocen soluciones alternativas para el problema de las respuestas demasiado grandes"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:sydent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "C77C5A80-7302-49F8-8DAA-37B269691C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/releases/tag/v2.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/matrix-sydent/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/0523511d2fb40f2738f8a8549868f44b96e5dab7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/89071a1a754c69a50deac89e6bb74002d4cda19d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/f56eee315b6c44fdd9f6aa785cc2ec744a594428",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/releases/tag/v2.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-wmg4-8cp2-hpg9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/matrix-sydent/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29431",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T21:15:17.520",
      "lastModified" : "2024-11-21T06:01:04.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sydent is a reference Matrix identity server. Sydent can be induced to send HTTP GET requests to internal systems, due to lack of parameter validation or IP address blacklisting. It is not possible to exfiltrate data or control request headers, but it might be possible to use the attack to perform an internal port enumeration. This issue has been addressed in in 9e57334, 8936925, 3d531ed, 0f00412. A potential workaround would be to use a firewall to ensure that Sydent cannot reach internal HTTP resources."
      }, {
        "lang" : "es",
        "value" : "Sydent es un servidor de identidad Matrix de referencia. Sydent puede ser inducido a enviar peticiones HTTP GET hacia sistemas internos, debido a una falta de comprobación de parámetros o la lista negra de direcciones IP.&#xa0;No es posible exfiltrar datos o controlar los encabezados de peticiones, pero podría ser posible utilizar el ataque para llevar a cabo una enumeración de puertos internos.&#xa0;Este problema ha sido abordado en 9e57334, 8936925, 3d531ed, 0f00412.&#xa0;Una posible solución alternativa sería utilizar un firewall para garantizar que Sydent no pueda acceder a los recursos HTTP internos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:sydent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "C77C5A80-7302-49F8-8DAA-37B269691C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/releases/tag/v2.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/matrix-sydent/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/0f00412017f25619bc36c264b29ea96808bf310a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/3d531ed50d2fd41ac387f36d44d3fb2c62dd22d3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/8936925f561b0c352c2fa922d5097d7245aad00a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/9e573348d81df8191bbe8c266c01999c9d57cd5f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/releases/tag/v2.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-9jhm-8m8c-c3f4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/matrix-sydent/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29432",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T21:15:17.630",
      "lastModified" : "2024-11-21T06:01:05.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sydent is a reference matrix identity server. A malicious user could abuse Sydent to send out arbitrary emails from the Sydent email address. This could be used to construct plausible phishing emails, for example. This issue has been fixed in 4469d1d."
      }, {
        "lang" : "es",
        "value" : "Sydent es un servidor de identidad de matriz de referencia.&#xa0;Un usuario malicioso podría abusar de Sydent para enviar correos electrónicos arbitrarios desde la dirección de correo electrónico de Sydent.&#xa0;Esto podría ser usado para construir correos electrónicos de phishing plausibles, por ejemplo.&#xa0;Este problema ha sido corregido en versión 4469d1d"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix:sydent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.3.0",
            "matchCriteriaId" : "C77C5A80-7302-49F8-8DAA-37B269691C9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/matrix-org/sydent/commit/4469d1d42b2b1612b70638224c07e19623039c42",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/releases/tag/v2.3.0",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-mh74-4m5g-fcjx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/matrix-sydent/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/commit/4469d1d42b2b1612b70638224c07e19623039c42",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/releases/tag/v2.3.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/matrix-org/sydent/security/advisories/GHSA-mh74-4m5g-fcjx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/matrix-sydent/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29447",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T21:15:17.723",
      "lastModified" : "2024-11-21T06:01:07.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to internal files is possible in a successful XXE attack. This has been patched in WordPress version 5.7.1, along with the older affected versions via a minor release. We strongly recommend you keep auto-updates enabled."
      }, {
        "lang" : "es",
        "value" : "Wordpress es un CMS de código abierto.&#xa0;Un usuario con la capacidad de cargar archivos (como un Autor) puede explotar un problema de análisis de XML en Media Library conllevando a ataques de tipo XXE.&#xa0;Esto requiere que la instalación de WordPress utilice PHP versión 8. El acceso a archivos internos es posible en un ataque de tipo XXE con éxito.&#xa0;Esto ha sido parcheado en versión WordPress versión 5.7.1, junto con las versiones anteriores afectadas por medio de una versión menor. Se recomienda encarecidamente que mantenga habilitadas las actualizaciones automáticas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.6.0",
            "versionEndExcluding" : "5.7.1",
            "matchCriteriaId" : "699CC791-3D2B-4A19-80F1-5D98FA26809E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163148/XML-External-Entity-Via-MP3-File-Upload-On-WordPress.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164198/WordPress-5.7-Media-Library-XML-Injection.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/wordpress-xxe-security-vulnerability/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-rv47-pc52-qrhh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/category/security/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4896",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163148/XML-External-Entity-Via-MP3-File-Upload-On-WordPress.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164198/WordPress-5.7-Media-Library-XML-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://blog.sonarsource.com/wordpress-xxe-security-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-rv47-pc52-qrhh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/category/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21405",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T22:15:11.967",
      "lastModified" : "2024-11-21T05:48:17.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Lotus is an Implementation of the Filecoin protocol written in Go. BLS signature validation in lotus uses blst library method VerifyCompressed. This method accepts signatures in 2 forms: \"serialized\", and \"compressed\", meaning that BLS signatures can be provided as either of 2 unique byte arrays. Lotus block validation functions perform a uniqueness check on provided blocks. Two blocks are considered distinct if the CIDs of their blockheader do not match. The CID method for blockheader includes the BlockSig of the block. The result of these issues is that it would be possible to punish miners for valid blocks, as there are two different valid block CIDs available for each block, even though this must be unique. By switching from the go based `blst` bindings over to the bindings in `filecoin-ffi`, the code paths now ensure that all signatures are compressed by size and the way they are deserialized. This happened in https://github.com/filecoin-project/lotus/pull/5393."
      }, {
        "lang" : "es",
        "value" : "Lotus es una implementación del protocolo Filecoin escrito en Go.&#xa0;La validación de la firma BLS en lotus utiliza el método de biblioteca blst VerifyCompressed.&#xa0;Este método acepta firmas en 2 formas: \"serialized\" y \"compressed\", lo que significa que las firmas BLS se pueden proporcionar como cualquiera de las 2 matrices de bytes únicas.&#xa0;Las funciones de validación de bloques de Lotus realizan una verificación de unicidad en los bloques proporcionados.&#xa0;Dos bloques se consideran distintos si los CID de su encabezado de bloque no coinciden.&#xa0;El método CID para blockheader incluye el BlockSig del bloque.&#xa0;El resultado de estos problemas es que sería posible castigar a los mineros por bloques válidos, ya que hay dos CID de bloque válidos diferentes disponibles para cada bloque, aunque este debe ser único.&#xa0;Al cambiar de los enlaces `blst` basados ??en go a los enlaces en `filecoin-ffi`,&#xa0;las rutas de código ahora garantizan que todas las firmas estén comprimidas por tamaño y la forma en que se deserializan.&#xa0;Esto ocurrió en https://github.com/filecoin-project/lotus/pull/5393"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:filecoin:lotus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "2E70B8AC-AD64-4FD9-9EDE-EB9C83587B69"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/wadeAlexC/2490d522e81a796af9efcad1686e6754",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/filecoin-project/lotus/pull/5393",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/filecoin-project/lotus/security/advisories/GHSA-4g52-pqcj-phvh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/wadeAlexC/2490d522e81a796af9efcad1686e6754",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/filecoin-project/lotus/pull/5393",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/filecoin-project/lotus/security/advisories/GHSA-4g52-pqcj-phvh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29450",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-15T22:15:12.343",
      "lastModified" : "2024-11-21T06:01:07.483",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wordpress is an open source CMS. One of the blocks in the WordPress editor can be exploited in a way that exposes password-protected posts and pages. This requires at least contributor privileges. This has been patched in WordPress 5.7.1, along with the older affected versions via minor releases. It's strongly recommended that you keep auto-updates enabled to receive the fix."
      }, {
        "lang" : "es",
        "value" : "Wordpress es un CMS de código abierto.&#xa0;Uno de los bloques en el editor de WordPress puede ser explotado de manera que exponga publicaciones y páginas protegidas con contraseña.&#xa0;Esto requiere al menos privilegios de colaborador.&#xa0;Esto ha sido parcheado en WordPress versión 5.7.1, junto con las versiones anteriores afectadas mediante versiones menores.&#xa0;Se recomienda encarecidamente que mantenga habilitadas las actualizaciones automáticas para recibir la solución"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.7",
            "versionEndExcluding" : "5.7.1",
            "matchCriteriaId" : "582970BE-2244-49FE-8CBE-42EEDB01E0A9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pmmh-2f36-wvhq",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/category/security/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4896",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pmmh-2f36-wvhq",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00017.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/news/category/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4896",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27691",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-16T00:15:12.007",
      "lastModified" : "2024-11-21T05:58:25.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in Tenda G0 routers with firmware versions v15.11.0.6(9039)_CN and v15.11.0.5(5876)_CN , and Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted action/setDebugCfg request. This occurs because the \"formSetDebugCfg\" function executes glibc's system function with untrusted input."
      }, {
        "lang" : "es",
        "value" : "Una Inyección de Comandos en routers Tenda G0 con versiones de firmware v15.11.0.6 (9039) _CN y v15.11.0.5(5876) _CN, y routers Tenda G1 y G3 con versiones de firmware v15.11.0.17(9502) _CN o v15. 11.0.16(9024) _CN, permite a atacantes remotos ejecutar comandos arbitrarios del sistema operativo a través de una petición action/setDebugCfg deseñada.&#xa0;Esto ocurre porque la función \"formSetDebugCfg\" ejecuta la función del sistema de glibc con una entrada que no es de confianza"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g0_firmware:15.11.0.5\\(5876\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "793EB1BA-9500-4F92-8B2F-05A3E7BF6B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g0_firmware:15.11.0.6\\(9039\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9B3924A-DD50-4F7B-9FF6-3A89EDD7CF91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:g0:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2DC4400-8890-4F5A-AAD3-577626BD4DAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g1_firmware:15.11.0.16\\(9024\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10886B9B-E33E-4748-93BB-3617EF40BF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g1_firmware:15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4A805-B82C-4815-9999-E2D971E082E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6839E6D3-4F3E-40FB-828E-D25088E85A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g3_firmware:15.11.0.16\\(9024\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B52B9F-BBF3-4BDD-8CF1-C253959E4182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g3_firmware:15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67707336-51C8-428B-B4E2-084302C5806D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5CDD3E-C5D2-44DF-B330-065CF8ECC29B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/rkhTCGzMd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27692",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-16T00:15:12.067",
      "lastModified" : "2024-11-21T05:58:26.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command Injection in Tenda G1 and G3 routers with firmware versions v15.11.0.17(9502)_CN or v15.11.0.16(9024)_CN allows remote attackers to execute arbitrary OS commands via a crafted \"action/umountUSBPartition\" request. This occurs because the \"formSetUSBPartitionUmount\" function executes the \"doSystemCmd\" function with untrusted input."
      }, {
        "lang" : "es",
        "value" : "La inyección de comandos en enrutadores Tenda G1 y G3 con versiones de firmware v15.11.0.17(9502) _CN o v15.11.0.16(9024) _CN, permite a atacantes remotos ejecutar comandos arbitrarios del sistema operativo a través de una petición \"action/umountUSBPartition\" diseñada.&#xa0;Esto ocurre porque la función \"formSetUSBPartitionUmount\" ejecuta la función \"doSystemCmd\" con una entrada no confiable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        }, {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g1_firmware:15.11.0.16\\(9024\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10886B9B-E33E-4748-93BB-3617EF40BF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g1_firmware:15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1F4A805-B82C-4815-9999-E2D971E082E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:g1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6839E6D3-4F3E-40FB-828E-D25088E85A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g3_firmware:15.11.0.16\\(9024\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91B52B9F-BBF3-4BDD-8CF1-C253959E4182"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:tendacn:g3_firmware:15.11.0.17\\(9502\\)_cn:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67707336-51C8-428B-B4E2-084302C5806D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:tendacn:g3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5CDD3E-C5D2-44DF-B330-065CF8ECC29B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://hackmd.io/%40aZYpdinUS2SD-yhAeHwOkw/ry-t4QfMu",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26073",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-04-16T03:15:12.033",
      "lastModified" : "2025-02-12T21:15:10.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Broken Authentication in Atlassian Connect Express (ACE) from version 3.0.2 before version 6.6.0: Atlassian Connect Express is a Node.js package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Express app occurs with a server-to-server JWT or a context JWT. Atlassian Connect Express versions from 3.0.2 before 6.6.0 erroneously accept context JWTs in lifecycle endpoints (such as installation) where only server-to-server JWTs should be accepted, permitting an attacker to send authenticated re-installation events to an app."
      }, {
        "lang" : "es",
        "value" : "Autenticación rota en Atlassian Connect Express (ACE) desde la versión 3.0.2 versiones anteriores a 6.6.0: Atlassian Connect Express es un paquete Node.js para construir aplicaciones de Atlassian Connect. La autenticación entre los productos de Atlassian y la aplicación Atlassian Connect Express se produce con un JWT de servidor a servidor o un JWT de contexto. Las versiones de Atlassian Connect Express desde la 3.0.2 versiones anteriores a 6.6.0 aceptan erróneamente JWTs de contexto en los puntos finales del ciclo de vida (como la instalación) cuando solo deberían aceptarse JWTs de servidor a servidor, lo que permite a un atacante enviar eventos de reinstalación autenticados a una aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:connect_express:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.2",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "AB2C8D0B-0934-4D8E-86D9-BCEB48094866"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-a%5B%E2%80%A6%5Dypass-of-app-qsh-verification-via-context-jwts/47072",
        "source" : "security@atlassian.com"
      }, {
        "url" : "https://confluence.atlassian.com/pages/viewpage.action?pageId=1051986099",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0004/",
        "source" : "security@atlassian.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-a%5B%E2%80%A6%5Dypass-of-app-qsh-verification-via-context-jwts/47072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://confluence.atlassian.com/pages/viewpage.action?pageId=1051986099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210604-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26074",
      "sourceIdentifier" : "security@atlassian.com",
      "published" : "2021-04-16T03:15:12.113",
      "lastModified" : "2025-02-12T21:15:10.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Broken Authentication in Atlassian Connect Spring Boot (ACSB) from version 1.1.0 before version 2.1.3: Atlassian Connect Spring Boot is a Java Spring Boot package for building Atlassian Connect apps. Authentication between Atlassian products and the Atlassian Connect Spring Boot app occurs with a server-to-server JWT or a context JWT. Atlassian Connect Spring Boot versions from version 1.1.0 before version 2.1.3 erroneously accept context JWTs in lifecycle endpoints (such as installation) where only server-to-server JWTs should be accepted, permitting an attacker to send authenticated re-installation events to an app."
      }, {
        "lang" : "es",
        "value" : "Autenticación rota en Atlassian Connect Spring Boot (ACSB) desde la versión 1.1.0 versiones anteriores a 2.1.3: Atlassian Connect Spring Boot es un paquete Java Spring Boot para crear aplicaciones de Atlassian Connect. La autenticación entre los productos de Atlassian y la aplicación Atlassian Connect Spring Boot se produce con un JWT de servidor a servidor o un JWT de contexto. Las versiones de Atlassian Connect Spring Boot desde la versión 1.1.0 versiones anteriores a 2.1.3 aceptan erróneamente JWTs de contexto en los puntos finales del ciclo de vida (como la instalación) cuando solo deberían aceptarse JWTs de servidor a servidor, lo que permite a un atacante enviar eventos de reinstalación autenticados a una aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:atlassian:connect_spring_boot:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "2.1.3",
            "matchCriteriaId" : "2AA2CBC2-F9F4-4F3C-8446-D995F1D8AE2E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-allows-bypass-of-app-qsh-verification-via-context-jwts/47072",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/pages/viewpage.action?pageId=1051986106",
        "source" : "security@atlassian.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.developer.atlassian.com/t/action-required-atlassian-connect-vulnerability-allows-bypass-of-app-qsh-verification-via-context-jwts/47072",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://confluence.atlassian.com/pages/viewpage.action?pageId=1051986106",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31414",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-16T04:15:12.263",
      "lastModified" : "2024-11-21T06:05:37.190",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial vscode-rpm-spec extension before 0.3.2 for Visual Studio Code allows remote code execution via a crafted workspace configuration."
      }, {
        "lang" : "es",
        "value" : "La extensión no oficial vscode-rpm-spec versiones anteriores a 0.3.2 para Visual Studio Code, permite una ejecución de código remota por medio de una configuración de espacio de trabajo diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm_spec_project:rpm_spec:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "0.3.2",
            "matchCriteriaId" : "7F59A15D-7CD3-4674-9DD9-5A6150F6B99A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/LaurentTreguier/vscode-rpm-spec/commit/e19fb8e29cb48cadfd3238371e060d4ffd3384f9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/36",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/LaurentTreguier/vscode-rpm-spec/commit/e19fb8e29cb48cadfd3238371e060d4ffd3384f9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22539",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2021-04-16T11:15:12.637",
      "lastModified" : "2024-11-21T05:50:18.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An attacker can place a crafted JSON config file into the project folder pointing to a custom executable. VScode-bazel allows the workspace path to lint *.bzl files to be set via this config file. As such the attacker is able to execute any executable on the system through vscode-bazel. We recommend upgrading to version 0.4.1 or above."
      }, {
        "lang" : "es",
        "value" : "Un atacante puede colocar un archivo de configuración JSON diseñado en la carpeta del proyecto que apunta a un ejecutable personalizado.&#xa0;VScode-bazel permite que la ruta del espacio de trabajo a los archivos lint * .bzl sean establecidos por medio de este archivo de configuración.&#xa0;Como tal, el atacante es capaz de ejecutar cualquier ejecutable en el sistema a través de vscode-bazel.&#xa0;Recomendamos actualizar a la versión 0.4.1 o por arriba"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-73"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:bazel:*:*:*:*:*:visual_studio:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "0.4.1",
            "matchCriteriaId" : "6AC4AFC4-B2BE-4CFA-A1FF-0D7203784325"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/bazelbuild/vscode-bazel-ghsa-2rcw-j8x4-hgcv/pull/1",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/bazelbuild/vscode-bazel/security/advisories/GHSA-2rcw-j8x4-hgcv",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/bazelbuild/vscode-bazel-ghsa-2rcw-j8x4-hgcv/pull/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/bazelbuild/vscode-bazel/security/advisories/GHSA-2rcw-j8x4-hgcv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20491",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-16T16:15:12.947",
      "lastModified" : "2024-11-21T05:46:39.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Server 7.1 and 8.1 is subject to a stack-based buffer overflow caused by improper bounds checking during the parsing of commands. By issuing such a command with an improper parameter, an authorized administrator could overflow a buffer and cause the server to crash. IBM X-Force ID: 197792."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Server versiones 7.1 y 8.1, está sujeto a un desbordamiento de búfer en la región stack de la memoria causado por una comprobación de límites inapropiada durante el análisis de los comandos.&#xa0;Al emitir un comando de este tipo con un parámetro inapropiado, un administrador autorizado podría desbordar un búfer y causar que el servidor se bloquee. IBM X-Force ID: 197792"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0.000",
            "versionEndExcluding" : "7.1.13",
            "matchCriteriaId" : "81C8CA99-86D7-4F45-BF4D-2657FF8AA7AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.000",
            "versionEndIncluding" : "8.1.10.100",
            "matchCriteriaId" : "7C2A3F7C-BCC1-4A3B-9741-59885B6F2BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect:8.1.11.000:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64431F7E-0964-4400-B73A-F75A8E849C39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/197792",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6442993",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/197792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6442993",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26830",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-16T18:15:13.403",
      "lastModified" : "2024-11-21T05:56:52.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module."
      }, {
        "lang" : "es",
        "value" : "Una inyección SQL en Tribalsystems Zenario CMS versión 8.8.52729, permite a atacantes remotos acceder a la base de datos o eliminar el plugin.&#xa0;Esto se logra por medio del campo de la entrada \"ID\" del archivo ajax.php en el módulo \"Pugin library - delete\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tribalsystems:zenario:8.8.52729:*:*:*:*:*:*:*",
            "matchCriteriaId" : "522C0CB6-2549-4106-9418-CE961E5FCC8A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TribalSystems/Zenario/releases/tag/8.8.53370",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TribalSystems/Zenario/releases/tag/8.8.53370",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29443",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-16T18:15:13.590",
      "lastModified" : "2024-11-21T06:01:06.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jose is an npm library providing a number of cryptographic operations. In vulnerable versions AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. A possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). All major release versions have had a patch released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `^1.28.1 || ^2.0.5 || >=3.11.4`. Users should upgrade their v1.x dependency to ^1.28.1, their v2.x dependency to ^2.0.5, and their v3.x dependency to ^3.11.4. Thanks to Jason from Microsoft Vulnerability Research (MSVR) for bringing this up and Eva Sarafianou (@esarafianou) for helping to score this advisory."
      }, {
        "lang" : "es",
        "value" : "jose es una biblioteca npm que proporciona una serie de operaciones criptográficas.&#xa0;En versiones vulnerables el algoritmo AES_CBC_HMAC_SHA2 (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512), el descifrado siempre ejecutaba tanto la verificación de etiquetas HMAC como el descifrado CBC, si cualquiera de los dos presentaba un fallo, \"JWEDecryptionFailed\" sería lanzado.&#xa0;Una posible diferencia observable en el tiempo cuando un error de padding podría ocurrir al descifrar el texto cifrado crea un padding oracle y un adversario podría ser capaz de hacer uso de ese oracle para descifrar datos sin conocer la clave de descifrado al emitir un promedio de 128*b llamadas padding oracle (donde b es el número de bytes en el bloque de texto cifrado).&#xa0;Todas las versiones de lanzamiento principales han recibido un parche que garantiza que la etiqueta HMAC se verifique antes de llevar a cabo el descifrado CBC.&#xa0;Las versiones fijas son ^1.28.1 || ^2.0.5 || superiores o iguales a 3.11.4.&#xa0;Los usuarios deben actualizar su dependencia versiones v1.x hasta ^1.28.1, su dependencia versiones v2.x hasta ^ 2.0.5 y su dependencia versiones v3.x hasta ^3.11.4.&#xa0;Gracias a Jason de Microsoft Vulnerability Research (MSVR) por mencionar este tema y a Eva Sarafianou (@esarafianou) por ayudar a calificar este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jose_project:jose:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.28.1",
            "matchCriteriaId" : "B93ABC92-DD84-439F-A9B2-848231CAB2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jose_project:jose:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.5",
            "matchCriteriaId" : "6038A5A5-0704-44EF-BD09-BEBC67910809"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jose_project:jose:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.11.4",
            "matchCriteriaId" : "3DD35FAA-86A6-4D32-92F7-99342CC196C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-58f5-hfqc-jgch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-58f5-hfqc-jgch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31347",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-16T18:15:13.827",
      "lastModified" : "2024-11-21T06:05:28.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (writing outside a memory region created by mmap)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la biblioteca libezxml.a en ezXML versión 0.8.6.&#xa0;La función ezxml_parse_str() lleva a cabo un manejo de la memoria incorrecto mientras analiza archivos XML diseñados (escribiendo fuera de una región de memoria creada por mmap)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-91"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D40D46-20EB-4287-8B80-9CF98AD4DE97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/27/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31348",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-16T18:15:13.887",
      "lastModified" : "2024-11-21T06:05:28.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_parse_str() performs incorrect memory handling while parsing crafted XML files (out-of-bounds read after a certain strcspn failure)."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la biblioteca libezxml.a en ezXML versión 0.8.6.&#xa0;La función ezxml_parse_str() lleva a cabo un manejo incorrecto de la memoria mientras analiza archivos XML diseñados (una lectura fuera de límites después de un determinado error strcspn)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D40D46-20EB-4287-8B80-9CF98AD4DE97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/27/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/27/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27394",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-16T20:15:12.387",
      "lastModified" : "2024-11-21T05:57:54.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions < V8.6.9), Mendix Applications using Mendix 9 (All versions < V9.0.5). Authenticated, non-administrative users could modify their privileges by manipulating the user role under certain circumstances, allowing them to gain administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Mendix Applications usando Mendix 7 (todas las versiones anteriores a V7.23.19), Mendix Applications usando Mendix 8 (todas las versiones anteriores a V8.17.0), Mendix Applications usando Mendix 8 (V8.12) (todas las versiones anteriores a V8. 12.5), Mendix Applications usando Mendix 8 (V8.6) (Todas las versiones anteriores a V8.6.9), Mendix Applications usando Mendix 9 (Todas las versiones anteriores a V9.0.5).&#xa0;Los usuarios no administrativos autenticados pueden modificar sus privilegios al manipular la función del usuario en determinadas circunstancias, permitiéndoles alcanzar privilegios administrativos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.2",
            "versionEndExcluding" : "7.23.19",
            "matchCriteriaId" : "46727C96-E577-40DC-9CB7-84B1F9FE2761"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.17.0",
            "matchCriteriaId" : "619470AA-8464-4830-8EEF-0F3A19136A3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.5",
            "matchCriteriaId" : "1454FE73-9896-48DF-92C7-7B64F0F200E6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.6.0",
            "versionEndExcluding" : "8.6.9",
            "matchCriteriaId" : "F0774932-F62C-413A-878C-A346609D5CBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mendix:mendix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.12.0",
            "versionEndExcluding" : "8.12.5",
            "matchCriteriaId" : "DA73E222-A316-4EA9-8C25-DAB0D63182A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-875726.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-875726.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29444",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-16T22:15:13.953",
      "lastModified" : "2024-11-21T06:01:06.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jose-browser-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`."
      }, {
        "lang" : "es",
        "value" : "jose-browser-runtime es un paquete npm que proporciona una serie de funciones criptográficas.&#xa0;En versiones anteriores a 3.11.4, el algoritmo de descifrado AES_CBC_HMAC_SHA2 (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) siempre ejecutaba tanto la comprobación de etiquetas HMAC como el descifrado CBC, si cometía un fallo \"JWEDecryptionFailed\" sería lanzado.&#xa0;Pero una posible diferencia observable en el tiempo cuando se produciría un error de relleno al descifrar el texto cifrado crea un padding oracle y un adversario podría ser capaz de hacer uso de ese oracle para descifrar datos sin conocer la clave de descifrado al emitir un promedio de 128*b llamadas al padding oracle (donde b es el número de bytes en el bloque de texto cifrado).&#xa0;Se lanzó un parche que garantiza que la etiqueta HMAC es comprobada antes de llevar a cabo el descifrado CBC.&#xa0;Las versiones corregidas son \"superiores o iguales a 3.11.4\".&#xa0;Los usuarios deben actualizar a \"^ 3.11.4\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jose-node-cjs-runtime_project:jose-node-cjs-runtime:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.11.4",
            "matchCriteriaId" : "03D23205-6974-4025-A286-1F56B7EE9620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-94hh-pjjg-rwmr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose-browser-runtime",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-94hh-pjjg-rwmr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose-browser-runtime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29445",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-16T22:15:14.060",
      "lastModified" : "2024-11-21T06:01:06.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jose-node-esm-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`."
      }, {
        "lang" : "es",
        "value" : "jose-node-esm-runtime es un paquete npm que proporciona una serie de funciones criptográficas.&#xa0;En versiones anteriores a 3.11.4, el algoritmo de descifrado AES_CBC_HMAC_SHA2 (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) siempre ejecutaba tanto la comprobación de etiquetas HMAC como el descifrado CBC, si cometía un fallo \"JWEDecryptionFailed\" sería lanzado.&#xa0;Pero una posible diferencia observable en el tiempo cuando se produciría un error de relleno al descifrar el texto cifrado crea un padding oracle y un adversario podría ser capaz de hacer uso de ese oracle para descifrar datos sin conocer la clave de descifrado emitiendo un promedio de 128*b llamadas al padding oracle (donde b es el número de bytes en el bloque de texto cifrado).&#xa0;Se lanzó un parche que garantiza que la etiqueta HMAC se verifique antes de llevar a cabo el descifrado CBC.&#xa0;Las versiones corregidas son \"superiores o iguales a 3.11.4\".&#xa0;Los usuarios deben actualizar a \"^ 3.11.4\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jose-node-cjs-runtime_project:jose-node-cjs-runtime:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.11.4",
            "matchCriteriaId" : "03D23205-6974-4025-A286-1F56B7EE9620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-4v4g-726h-xvfv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose-node-esm-runtime",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-4v4g-726h-xvfv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose-node-esm-runtime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29446",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-16T22:15:14.140",
      "lastModified" : "2024-11-21T06:01:06.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "jose-node-cjs-runtime is an npm package which provides a number of cryptographic functions. In versions prior to 3.11.4 the AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed `JWEDecryptionFailed` would be thrown. But a possibly observable difference in timing when padding error would occur while decrypting the ciphertext makes a padding oracle and an adversary might be able to make use of that oracle to decrypt data without knowing the decryption key by issuing on average 128*b calls to the padding oracle (where b is the number of bytes in the ciphertext block). A patch was released which ensures the HMAC tag is verified before performing CBC decryption. The fixed versions are `>=3.11.4`. Users should upgrade to `^3.11.4`."
      }, {
        "lang" : "es",
        "value" : "jose-node-cjs-runtime es un paquete npm que proporciona una serie de funciones criptográficas.&#xa0;En versiones anteriores a 3.11.4, el descifrado del algoritmo AES_CBC_HMAC_SHA2 (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) siempre ejecutaba tanto la comprobación de etiquetas HMAC como el descifrado CBC, si se presentaba un fallo \"JWEDecryptionFailed\" sería lanzado.&#xa0;Pero una posible diferencia observable en el tiempo cuando se produciría un error de padding al descifrar el texto cifrado crea un padding oracle y un adversario podría hacer uso de ese oracle para descifrar datos sin conocer la clave de descifrado emitiendo un promedio de 128*b llamadas al padding oracle (donde b es el número de bytes en el bloque de texto cifrado).&#xa0;Se lanzó un parche que garantiza que la etiqueta HMAC es comprobada antes de llevar a cabo el descifrado CBC.&#xa0;Las versiones corregidas son \"superiores o iguales a 3.11.4\".&#xa0;Los usuarios deben actualizar a \"^3.11.4\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jose-node-cjs-runtime_project:jose-node-cjs-runtime:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.11.4",
            "matchCriteriaId" : "03D23205-6974-4025-A286-1F56B7EE9620"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-rvcw-f68w-8h8h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose-node-cjs-runtime",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/panva/jose/security/advisories/GHSA-rvcw-f68w-8h8h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/jose-node-cjs-runtime",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29451",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-16T22:15:14.233",
      "lastModified" : "2024-11-21T06:01:07.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Portofino is an open source web development framework. Portofino before version 5.2.1 did not properly verify the signature of JSON Web Tokens. This allows forging a valid JWT. The issue will be patched in the upcoming 5.2.1 release."
      }, {
        "lang" : "es",
        "value" : "Portofino es un framework de desarrollo web de código abierto.&#xa0;Portofino versiones anteriores a 5.2.1, no comprobaba apropiadamente la firma de JSON Web Tokens.&#xa0;Esto permite falsificar un JWT válido.&#xa0;El problema será parcheado en la próxima versión 5.2.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manydesigns:portofino:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.2.1",
            "matchCriteriaId" : "D4F3540D-4427-4FCC-B9D6-90F318507E25"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ManyDesigns/Portofino/commit/8c754a0ad234555e813dcbf9e57d637f9f23d8fb",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mvnrepository.com/artifact/com.manydesigns/portofino",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ManyDesigns/Portofino/commit/8c754a0ad234555e813dcbf9e57d637f9f23d8fb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ManyDesigns/Portofino/security/advisories/GHSA-6g3c-2mh5-7q6x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mvnrepository.com/artifact/com.manydesigns/portofino",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29452",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-16T22:15:14.310",
      "lastModified" : "2024-11-21T06:01:07.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "a12n-server is an npm package which aims to provide a simple authentication system. A new HAL-Form was added to allow editing users in version 0.18.0. This feature should only have been accessible to admins. Unfortunately, privileges were incorrectly checked allowing any logged in user to make this change. Patched in v0.18.2."
      }, {
        "lang" : "es",
        "value" : "a12n-server es un paquete npm que presenta como objetivo proporcionar un sistema de autenticación simple.&#xa0;Se agregó un nuevo HAL-Form para permitir la edición de usuarios en versión 0.18.0.&#xa0;Esta función solo debería haber sido accesible para administradores.&#xa0;Lamentablemente, unos privilegios fueron comprobados incorrectamente, permitiendo a cualquier usuario que haya iniciado sesión realizar este cambio.&#xa0;Parcheado en la versión v0.18.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:curveballjs:a12n-server:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "0.18.0",
            "versionEndExcluding" : "0.18.2",
            "matchCriteriaId" : "7D971DD6-E98D-46FA-A919-D533FCF824CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/curveball/a12n-server/security/advisories/GHSA-8hw9-22v6-9jr9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40curveball/a12n-server",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/curveball/a12n-server/security/advisories/GHSA-8hw9-22v6-9jr9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40curveball/a12n-server",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3492",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2021-04-17T05:15:13.113",
      "lastModified" : "2024-11-21T06:21:40.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shiftfs, an out-of-tree stacking file system included in Ubuntu Linux kernels, did not properly handle faults occurring during copy_from_user() correctly. These could lead to either a double-free situation or memory not being freed at all. An attacker could use this to cause a denial of service (kernel memory exhaustion) or gain privileges via executing arbitrary code. AKA ZDI-CAN-13562."
      }, {
        "lang" : "es",
        "value" : "Shiftfs, un sistema de archivos de apilamiento fuera del árbol incluido en los kernels de Ubuntu Linux, no manejaba apropiadamente los fallos que ocurrían durante la función copy_from_user().&#xa0;Esto podría conllevar a una situación de doble liberación o a que la memoria no sea liberada del todo.&#xa0;Un atacante podría usar esto para causar una denegación de servicio (agotamiento de la memoria del kernel) u alcanzar privilegios por medio de la ejecución de código arbitrario.&#xa0;También se conoce como ZDI-CAN-13562"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        }, {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "18.04",
            "matchCriteriaId" : "90A80DE7-3EFA-464C-9D31-C46521FFBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "18.04.1",
            "versionEndExcluding" : "20.04",
            "matchCriteriaId" : "2027773B-26DA-408E-B71D-40D05690D9EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "20.10",
            "matchCriteriaId" : "ACAB2EE0-EC21-4669-840F-94F6C3028C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162614/Kernel-Live-Patch-Security-Notice-LSN-0077-1.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=25c891a949bf918b59cbc6e4932015ba4c35c333",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=8fee52ab9da87d82bc6de9ebb3480fff9b4d53e6",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-4917-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/16/2",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-422/",
        "source" : "security@ubuntu.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162614/Kernel-Live-Patch-Security-Notice-LSN-0077-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=25c891a949bf918b59cbc6e4932015ba4c35c333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://git.launchpad.net/~ubuntu-kernel/ubuntu/+source/linux/+git/focal/commit/?id=8fee52ab9da87d82bc6de9ebb3480fff9b4d53e6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-4917-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/16/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-422/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3493",
      "sourceIdentifier" : "security@ubuntu.com",
      "published" : "2021-04-17T05:15:14.630",
      "lastModified" : "2025-10-28T13:49:50.883",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried in the Ubuntu kernel to allow unprivileged overlay mounts, an attacker could use this to gain elevated privileges."
      }, {
        "lang" : "es",
        "value" : "La implementación de overlayfs en el kernel de Linux no comprobó apropiadamente con respecto a los espacios de nombre de los usuarios, la configuración de las capacidades de los archivos en un sistema de archivos subyacente.&#xa0;Debido a la combinación de los espacios de nombre de usuarios no privilegiados junto con un parche incluido en el kernel de Ubuntu para permitir montajes de superposición no privilegiados, un atacante podría usar esto para alcanzar privilegios elevados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@ubuntu.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-10-20",
      "cisaActionDue" : "2022-11-10",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Linux Kernel Privilege Escalation Vulnerability",
      "weaknesses" : [ {
        "source" : "security@ubuntu.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-270"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "18.04",
            "matchCriteriaId" : "90A80DE7-3EFA-464C-9D31-C46521FFBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "18.04.1",
            "versionEndExcluding" : "20.04",
            "matchCriteriaId" : "2027773B-26DA-408E-B71D-40D05690D9EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "20.10",
            "matchCriteriaId" : "ACAB2EE0-EC21-4669-840F-94F6C3028C64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162866/Ubuntu-OverlayFS-Local-Privilege-Escalation.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/165151/Ubuntu-Overlayfs-Local-Privilege-Escalation.html",
        "source" : "security@ubuntu.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-4917-1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/16/1",
        "source" : "security@ubuntu.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162434/Kernel-Live-Patch-Security-Notice-LSN-0076-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162866/Ubuntu-OverlayFS-Local-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Press/Media Coverage", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/165151/Ubuntu-Overlayfs-Local-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=7c03e2cda4a584cadc398e8f6641ca9988a39d52",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://ubuntu.com/security/notices/USN-4917-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/16/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-3493",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23374",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.060",
      "lastModified" : "2024-11-21T05:51:35.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package ps-visitor. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete ps-visitor.&#xa0;Si se proporciona una entrada de usuario controlada por el atacante para la función kill, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ps-visitor_project:ps-visitor:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "33B18D7F-F362-4C4A-B5D0-B591EF068FF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WisdomKwan/ps-visitor/blob/cdfc934a8e4af95aa0473f4b2a4bd091d09faf2f/index.js%23L404",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PSVISITOR-1078544",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WisdomKwan/ps-visitor/blob/cdfc934a8e4af95aa0473f4b2a4bd091d09faf2f/index.js%23L404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PSVISITOR-1078544",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23375",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.483",
      "lastModified" : "2024-11-21T05:51:36.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package psnode. If attacker-controlled user input is given to the kill function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete psnode.&#xa0;Si se proporciona una entrada de usuario controlada por el atacante para la función kill, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:psnode_project:psnode:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "5603B0B6-D176-48F3-8FA5-0E369BAB5888"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/nrako/psnode/blob/076f623689e4506d3647505daca13b3f482e0c31/lib/index.js%23L59",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PSNODE-1078543",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/nrako/psnode/blob/076f623689e4506d3647505daca13b3f482e0c31/lib/index.js%23L59",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PSNODE-1078543",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23376",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.543",
      "lastModified" : "2024-11-21T05:51:36.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package ffmpegdotjs. If attacker-controlled user input is given to the trimvideo function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete ffmpegdotjs.&#xa0;Si es proporcionada una entrada de usuario controlada por un atacante para la función trimvideo, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ffmpegdotjs_project:ffmpegdotjs:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "8A856781-65EF-4828-A9CD-D64DA7AE4807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TRomesh/ffmpegdotjs/blob/b7395daf0bdcb81218340427eb7073cdd28462af/index.js%23L219",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-FFMPEGDOTJS-1078542",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TRomesh/ffmpegdotjs/blob/b7395daf0bdcb81218340427eb7073cdd28462af/index.js%23L219",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-FFMPEGDOTJS-1078542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23377",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.637",
      "lastModified" : "2024-11-21T05:51:36.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package onion-oled-js. If attacker-controlled user input is given to the scroll function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete onion-oled-js.&#xa0;Si es proporcionada una entrada de usuario controlada por un atacante para la función scroll, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:onion-oled-js_project:onion-oled-js:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "DC78CBB8-B75F-4830-820D-4A585D45EC4B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/naddeoa/onion-oled-js/blob/8a523645d2cc29130f98de661b742893773d760d/src/oled-exp.js%23L91",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-ONIONOLEDJS-1078808",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/naddeoa/onion-oled-js/blob/8a523645d2cc29130f98de661b742893773d760d/src/oled-exp.js%23L91",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-ONIONOLEDJS-1078808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23378",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.717",
      "lastModified" : "2024-11-21T05:51:36.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package picotts. If attacker-controlled user input is given to the say function, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones de los paquetes picotts.&#xa0;Si es proporcionada una entrada de usuario controlada por un atacante para la función say, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:picotts_project:picotts:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "49F787C4-D6FB-4B6B-9C59-AAA55BD0E747"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/luisivan/node-picotts/blob/8c6b183b884890c8e9422f93036b374942398c8b/index.js%23L16",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PICOTTS-1078539",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/luisivan/node-picotts/blob/8c6b183b884890c8e9422f93036b374942398c8b/index.js%23L16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PICOTTS-1078539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23379",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.793",
      "lastModified" : "2024-11-21T05:51:36.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package portkiller. If (attacker-controlled) user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete portkiller.&#xa0;Si es proporcionada una entrada del usuario (controlada por un atacante), es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:portkiller_project:portkiller:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "20088297-3D18-4696-8032-BC789C44C2DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/indatawetrust/portkiller/blob/f1f1c5076d9c5d60e8dd3930e98d665d8191aa7a/index.js%23L10",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PORTKILLER-1078537",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/indatawetrust/portkiller/blob/f1f1c5076d9c5d60e8dd3930e98d665d8191aa7a/index.js%23L10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PORTKILLER-1078537",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23380",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:12.873",
      "lastModified" : "2024-11-21T05:51:36.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package roar-pidusage. If attacker-controlled user input is given to the stat function of this package on certain operating systems, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquete roar-pidusage.&#xa0;Si es proporcionada una entrada de usuario controlada por un atacante para la función stat de este paquete en determinados sistemas operativos, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:roar-pidusage_project:roar-pidusage:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "38773429-86BD-4CCD-B5E0-AEB27540E874"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Svjard/pidusage/blob/772cd2bd675ff7b1244b6fe3d7541692b1b9e42c/lib/stats.js%23L103",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-ROARPIDUSAGE-1078528",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Svjard/pidusage/blob/772cd2bd675ff7b1244b6fe3d7541692b1b9e42c/lib/stats.js%23L103",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-ROARPIDUSAGE-1078528",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23381",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-18T19:15:13.030",
      "lastModified" : "2024-11-21T05:51:36.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This affects all versions of package killing. If attacker-controlled user input is given, it is possible for an attacker to execute arbitrary commands. This is due to use of the child_process exec function without input sanitization."
      }, {
        "lang" : "es",
        "value" : "Esto afecta a todas las versiones del paquetes killing.&#xa0;Si es proporcionada una entrada de usuario controlada por un atacante, es posible para un atacante ejecutar comandos arbitrarios.&#xa0;Esto es debido al uso de la función exec child_process sin un saneamiento de la entrada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:killing_project:killing:*:*:*:*:*:node.js:*:*",
            "matchCriteriaId" : "C61B4AC2-6D55-4589-A764-64CB246EB2FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xudafeng/killing/blob/672ed164ccdd10c0a8fb93c5c6d2456f1dfab781/lib/killing.js%23L62",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLING-1078532",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xudafeng/killing/blob/672ed164ccdd10c0a8fb93c5c6d2456f1dfab781/lib/killing.js%23L62",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-KILLING-1078532",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T12:15:18.553",
      "lastModified" : "2024-11-21T06:01:02.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XMB is vulnerable to cross-site scripting (XSS) due to inadequate filtering of BBCode input. This bug affects all versions of XMB. All XMB installations must be updated to versions 1.9.12.03 or 1.9.11.16."
      }, {
        "lang" : "es",
        "value" : "XMB es vulnerable a un ataque de tipo cross-site scripting (XSS) debido a un filtrado inadecuado de la entrada de BBCode.&#xa0;Este bug afecta a todas las versiones de XMB.&#xa0;Todas las instalaciones de XMB deben ser actualizadas a las versiones 1.9.12.03 o 1.9.11.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmbforum2:xmb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.1",
            "versionEndExcluding" : "1.9.11.16",
            "matchCriteriaId" : "A5B563F5-9FB3-41A6-991F-606162F49915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php:php:5.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "8004A58C-C291-4489-A852-D3E07D82BD9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmbforum2:xmb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.11",
            "versionEndExcluding" : "1.9.11.16",
            "matchCriteriaId" : "74A29A96-1A14-45F5-96C7-CB9764F40089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmbforum2:xmb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.9.12",
            "versionEndExcluding" : "1.9.12.03",
            "matchCriteriaId" : "76480995-DE4A-4404-BDCD-2627230077E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php:php:7.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C4C35D-F8FE-429F-8F6E-9178EAB21772"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:php:php:8.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6CC80B03-CD93-4B0F-91DC-21BCF9BA42C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://forums.xmbforum2.com/viewthread.php?tid=777105",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.xmbforum2.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://docs.xmbforum2.com/index.php?title=Security_Issue_History",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://forums.xmbforum2.com/viewthread.php?tid=777105",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.xmbforum2.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21070",
      "sourceIdentifier" : "psirt@adobe.com",
      "published" : "2021-04-19T13:15:15.137",
      "lastModified" : "2024-11-21T05:47:30.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to the file system could leverage this vulnerability to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "La versión 2020.0.3 de Adobe Robohelp (y anteriores) se ve afectada por una vulnerabilidad en el elemento de ruta de búsqueda no controlada que podría conducir a una escalada de privilegios. Un atacante con permisos de administrador para escribir en el sistema de archivos podría aprovechar esta vulnerabilidad para escalar privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@adobe.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@adobe.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adobe:robohelp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2020.0.4",
            "matchCriteriaId" : "E6841D0C-6215-43CC-8DCF-348ECA02A486"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpx.adobe.com/security/products/robohelp/apsb21-20.html",
        "source" : "psirt@adobe.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://helpx.adobe.com/security/products/robohelp/apsb21-20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20989",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2021-04-19T14:15:11.570",
      "lastModified" : "2024-11-21T05:47:20.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device initiated remote port-forward channel can be used to connect to the web management interface. Knowledge of authorization credentials to the management interface is required to perform any further actions."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Fibaro Home Center versión 2 y Lite con versiones de firmware 4.600 y anteriores, inician conexiones SSH a la nube de Fibaro para proporcionar acceso remoto y capacidades de soporte remoto.&#xa0;Esta conexión puede ser interceptada usando un ataque de suplantación de DNS y puede ser usado un canal de reenvío de puerto remoto iniciado por el dispositivo para conectarse a la interfaz de administración web.&#xa0;Es requerido un conocimiento de unas credenciales de autorización para la interfaz de administración para llevar a cabo cualquier acción adicional"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.600",
            "matchCriteriaId" : "867FAF63-0352-4AC8-AB9D-1FDEC2E942D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021D17B-DD82-46D0-AE92-372649467F1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.600",
            "matchCriteriaId" : "A06A908C-D871-46DA-AC42-63FF1518A558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A19AFCC-B670-450C-8B64-7770C86B4692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "info@cert.vde.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20990",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2021-04-19T14:15:11.710",
      "lastModified" : "2024-11-21T05:47:20.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Fibaro Home Center versión 2 y Lite con versiones de firmware 4.600 y anteriores, un servicio de administración interno es accesible en el puerto 8000 y algunos endpoints de la API pueden ser accedidos sin autenticación para desencadenar un apagado, un reinicio o un reinicio en modo de recuperación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.600",
            "matchCriteriaId" : "867FAF63-0352-4AC8-AB9D-1FDEC2E942D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021D17B-DD82-46D0-AE92-372649467F1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.600",
            "matchCriteriaId" : "A06A908C-D871-46DA-AC42-63FF1518A558"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A19AFCC-B670-450C-8B64-7770C86B4692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "info@cert.vde.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20991",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2021-04-19T14:15:11.787",
      "lastModified" : "2024-11-21T05:47:20.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Fibaro Home Center versión 2 y Lite con versiones de firmware 4.540 y anteriores, un usuario autenticado puede ejecutar comandos como usuario root usando una vulnerabilidad de inyección de comandos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.540",
            "matchCriteriaId" : "5E54F03F-D990-48DD-8031-C009E4BE774B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021D17B-DD82-46D0-AE92-372649467F1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_lite_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.540",
            "matchCriteriaId" : "5A6A0A5C-DC0C-43B8-ACCD-8E2AB5530C79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A19AFCC-B670-450C-8B64-7770C86B4692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "info@cert.vde.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20992",
      "sourceIdentifier" : "info@cert.vde.com",
      "published" : "2021-04-19T14:15:11.883",
      "lastModified" : "2024-11-21T05:47:20.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords."
      }, {
        "lang" : "es",
        "value" : "En dispositivos Fibaro Home Center versión 2 y Lite en todas las versiones proporcionan una interfaz de administración basada en web sobre el protocolo HTTP sin cifrar.&#xa0;Una comunicación entre el usuario y el dispositivo puede ser escuchado a escondidas para secuestrar sesiones, tokens y contraseñas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "info@cert.vde.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "info@cert.vde.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_2_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF96D9BD-B851-40EE-B4A4-D0E46395A03F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8021D17B-DD82-46D0-AE92-372649467F1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fibaro:home_center_lite_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "078261FA-DE94-4400-8F29-16404DBCA057"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A19AFCC-B670-450C-8B64-7770C86B4692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "info@cert.vde.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "info@cert.vde.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21981",
      "sourceIdentifier" : "security@vmware.com",
      "published" : "2021-04-19T15:15:12.150",
      "lastModified" : "2025-08-13T12:52:10.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local guest user account to assign privileges higher than their own permission level."
      }, {
        "lang" : "es",
        "value" : "VMware NSX-T, contiene una vulnerabilidad de escalada de privilegios debido a un problema con la asignación de roles RBAC (control de acceso basado en roles).&#xa0;Una explotación con éxito de este problema puede permitir a atacantes con una cuenta de usuario invitado local asignar privilegios superiores a su propio nivel de permiso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:broadcom:vmware_nsx-t_data_center:3.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9921FFA6-3BD2-4ACE-BE8D-7DD240E3981B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0006.html",
        "source" : "security@vmware.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.vmware.com/security/advisories/VMSA-2021-0006.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27027",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2021-04-19T16:15:12.903",
      "lastModified" : "2024-11-21T05:57:12.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Out-Of-Bounds Read Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to code execution through maliciously crafted DLL files or information disclosure."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Lectura y Escritura Fuera de Límites en Autodesk FBX Review versión 1.5.0 y anteriores, puede conllevar a una ejecución de código remota a través de archivos DLL diseñados maliciosamente o una divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F59286B6-7D60-4BDC-8528-5D9446997E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-469/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-470/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-471/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-472/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-473/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-469/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-470/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-471/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-472/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-473/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27028",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2021-04-19T16:15:13.057",
      "lastModified" : "2024-11-21T05:57:12.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Memory Corruption Vulnerability in Autodesk FBX Review version 1.5.0 and prior may lead to remote code execution through maliciously crafted DLL files."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Corrupción de Memoria en Autodesk FBX Review versión 1.5.0 y anteriores, puede conllevar a una ejecución de código remota a través de archivos DLL diseñados maliciosamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F59286B6-7D60-4BDC-8528-5D9446997E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-465/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-467/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-465/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-467/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27029",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2021-04-19T16:15:13.120",
      "lastModified" : "2024-11-21T05:57:12.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The user may be tricked into opening a malicious FBX file which may exploit a Null Pointer Dereference vulnerability in FBX's Review version 1.5.0 and prior causing the application to crash leading to a denial of service."
      }, {
        "lang" : "es",
        "value" : "Un usuario puede ser engañado para que abra un archivo FBX malicioso que puede explotar una vulnerabilidad de desviación de puntero nulo en la versión de revisión de FBX 1.5.0 y anteriores, lo que provoca el bloqueo de la aplicación y una denegación de servicio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F59286B6-7D60-4BDC-8528-5D9446997E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-464/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-464/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27030",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2021-04-19T16:15:13.183",
      "lastModified" : "2024-11-21T05:57:12.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system."
      }, {
        "lang" : "es",
        "value" : "Un usuario puede ser engañado para abrir un archivo FBX malicioso que puede explotar una vulnerabilidad de Ejecución de Código Remota Salto de Directorio en Review de FBX, causando que se ejecute un código arbitrario en el sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F59286B6-7D60-4BDC-8528-5D9446997E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-1070/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-466/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-1070/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-466/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27031",
      "sourceIdentifier" : "psirt@autodesk.com",
      "published" : "2021-04-19T16:15:13.247",
      "lastModified" : "2024-11-21T05:57:12.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user may be tricked into opening a malicious FBX file which may exploit a use-after-free vulnerability in FBX's Review causing the application to reference a memory location controlled by an unauthorized third party, thereby running arbitrary code on the system."
      }, {
        "lang" : "es",
        "value" : "Un usuario puede ser engañado para abrir un archivo FBX malicioso que puede explotar una vulnerabilidad de uso de la memoria previamente liberada en Review de FBX, causando que la aplicación haga referencia a una ubicación de memoria controlada por un tercero no autorizado, ejecutando así un código arbitrario en el sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:autodesk:fbx_review:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.0",
            "matchCriteriaId" : "F59286B6-7D60-4BDC-8528-5D9446997E6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-1069/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-468/",
        "source" : "psirt@autodesk.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.autodesk.com/trust/security-advisories/adsk-sa-2021-0001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-1069/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-468/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20527",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-19T17:15:13.123",
      "lastModified" : "2024-11-21T05:46:43.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Resilient SOAR V38.0 could allow a privileged user to create create malicious scripts that could be executed as another user. IBM X-Force ID: 198759."
      }, {
        "lang" : "es",
        "value" : "IBM Resilient SOAR versión V38.0, podría permitir a un usuario privilegiado crear scripts maliciosos que podrían ser ejecutados como otro usuario.&#xa0;IBM X-Force ID: 198759"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:resilient:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "38.2.41",
            "matchCriteriaId" : "9847A279-960F-41D1-9C5F-A9311AB53FEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:resilient:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.0",
            "versionEndExcluding" : "39.0.6536",
            "matchCriteriaId" : "0B37A7BC-8595-4E1C-9A76-80A22CD789ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:resilient:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.1",
            "versionEndExcluding" : "39.1.46",
            "matchCriteriaId" : "7B527D30-D9B9-4341-877F-DF891F09D0DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:resilient:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "39.2.17",
            "versionEndExcluding" : "39.2.21",
            "matchCriteriaId" : "92D0E174-44B3-441D-B1AC-3D2550EADB41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:resilient:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "40.0.6554",
            "versionEndExcluding" : "40.0.6556",
            "matchCriteriaId" : "8BE2AE33-B49B-4C2A-87F1-FCDF4CAEC81A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:resilient:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "40.1.50",
            "versionEndExcluding" : "40.1.51",
            "matchCriteriaId" : "51A0B338-048D-4720-B0BC-9D987F8B2E79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198759",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6444747",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198759",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6444747",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29434",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-19T19:15:17.610",
      "lastModified" : "2024-11-21T06:01:05.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wagtail is a Django content management system. In affected versions of Wagtail, when saving the contents of a rich text field in the admin interface, Wagtail does not apply server-side checks to ensure that link URLs use a valid protocol. A malicious user with access to the admin interface could thus craft a POST request to publish content with `javascript:` URLs containing arbitrary code. The vulnerability is not exploitable by an ordinary site visitor without access to the Wagtail admin. See referenced GitHub advisory for additional details, including a workaround. Patched versions have been released as Wagtail 2.11.7 (for the LTS 2.11 branch) and Wagtail 2.12.4 (for the current 2.12 branch)."
      }, {
        "lang" : "es",
        "value" : "Wagtail es un sistema de gestión de contenido de Django.&#xa0;En las versiones afectadas de Wagtail, al guardar el contenido de un campo de texto enriquecido en la interfaz de administración, Wagtail no aplica comprobaciones del lado del servidor para garantizar a las URL de los enlaces usar un protocolo válido.&#xa0;Un usuario malicioso con acceso a la interfaz de administración podría entonces diseñar una petición POST para publicar contenido con URLs \"javascript:\" que contengan código arbitrario.&#xa0;La vulnerabilidad no es explotable por un visitante ordinario del sitio sin acceso al administrador de Wagtail.&#xa0;Véase el aviso de GitHub al que se hace referencia para obtener detalles adicionales, incluyendo una solución alternativa.&#xa0;Las versiones parcheadas ha sido lanzadas como Wagtail versión 2.11.7 (para la rama LTS 2.11) y Wagtail versión 2.12.4 (para la rama 2.12 actual)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "2.11.6",
            "matchCriteriaId" : "D49567BA-C5CC-43C3-AF42-EA0C310D579C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "2.11.0",
            "versionEndExcluding" : "2.11.7",
            "matchCriteriaId" : "12C5EC90-1517-407D-8FD2-48EC03048565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:torchbox:wagtail:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.12.0",
            "versionEndExcluding" : "2.12.4",
            "matchCriteriaId" : "4EB39BD7-9D15-4076-BB7B-41183023FA60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/wagtail/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/wagtail/wagtail/security/advisories/GHSA-wq5h-f9p5-q7fx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://pypi.org/project/wagtail/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29453",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-19T19:15:17.717",
      "lastModified" : "2024-11-21T06:01:07.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "matrix-media-repo is an open-source multi-domain media repository for Matrix. Versions 1.2.6 and earlier of matrix-media-repo do not properly handle malicious images which are crafted to be small in file size, but large in complexity. A malicious user could upload a relatively small image in terms of file size, using particular image formats, which expands to have extremely large dimensions during the process of thumbnailing. The server can be exhausted of memory in the process of trying to load the whole image into memory for thumbnailing, leading to denial of service. Version 1.2.7 has a fix for the vulnerability."
      }, {
        "lang" : "es",
        "value" : "matrix-media-repo es un repositorio de medios multidominio de código abierto para Matrix. Versiones 1.2.6 y anteriores de matrix-media-repo, no manejan apropiadamente imágenes maliciosas que son diseñadas para ser de tamaño pequeño pero de gran complejidad.&#xa0;Un usuario malicioso podría cargar una imagen relativamente pequeña en términos de tamaño de archivo, usando formatos de imagen particulares, que se expande para tener dimensiones extremadamente grandes durante el proceso de thumbnailing.&#xa0;El servidor puede ser agotado de la memoria en el proceso de intentar cargar la imagen completa en la memoria por un thumbnailing, conllevando a una denegación de servicio.&#xa0;Versión 1.2.7 contiene una corrección para la vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:matrix-media-repo_project:matrix-media-repo:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.7",
            "matchCriteriaId" : "9728E5AF-5C57-4D81-8A64-03AE9EE0327F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/turt2live/matrix-media-repo/releases/tag/v1.2.7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/turt2live/matrix-media-repo/security/advisories/GHSA-j889-h476-hh9h",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hub.docker.com/r/turt2live/matrix-media-repo/tags?page=1&ordering=last_updated",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/turt2live/matrix-media-repo/releases/tag/v1.2.7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/turt2live/matrix-media-repo/security/advisories/GHSA-j889-h476-hh9h",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://hub.docker.com/r/turt2live/matrix-media-repo/tags?page=1&ordering=last_updated",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29455",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-19T19:15:17.827",
      "lastModified" : "2024-11-21T06:01:08.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Grassroot Platform is an application to make it faster, cheaper and easier to persistently organize and mobilize people in low-income communities. Grassroot Platform before master deployment as of 2021-04-16 did not properly verify the signature of JSON Web Tokens when refreshing an existing JWT. This allows to forge a valid JWT. The problem has been patched in version 1.3.1 by deprecating the JWT refresh function, which was an overdue deprecation regardless (the \"refresh\" flow is no longer used)."
      }, {
        "lang" : "es",
        "value" : "Grassroot Platform es una aplicación que hace que sea más rápido, más barato y más fácil organizar y movilizar persistentemente a las personas en comunidades de bajos ingresos.&#xa0;Grassroot Platform versiones anteriores a la implementación maestra a partir del 16-04-2021, no comprobaba apropiadamente la firma de JSON Web Tokens al actualizar un JWT existente.&#xa0;Esto permite falsificar un JWT válido.&#xa0;El problema ha sido parcheado en versión 1.3.1, al desaprobar la función de actualización de JWT, que era una desaprobación vencida independientemente (el flujo de \"refresh\" ya no es usado)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-347"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grassroot:grassroot_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "945F532A-7668-4C8E-9599-240FCEC2862B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/grassrootza/grassroot-platform/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grassrootza/grassroot-platform/commit/a2e6e885f8183a066d938cf909fd813a7af7d67f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grassrootza/grassroot-platform/security/advisories/GHSA-f65w-6xw8-6734",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grassrootza/grassroot-platform/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grassrootza/grassroot-platform/commit/a2e6e885f8183a066d938cf909fd813a7af7d67f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/grassrootza/grassroot-platform/security/advisories/GHSA-f65w-6xw8-6734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29457",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-19T19:15:17.920",
      "lastModified" : "2024-11-21T06:01:08.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when _writing_ the metadata, which is a less frequently used Exiv2 operation than _reading_ the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una utilidad de línea de comandos y una biblioteca C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen.&#xa0;Se encontró un desbordamiento del búfer de pila en Exiv2 versiones v0.27.3 y anteriores.&#xa0;El desbordamiento de la pila es desencadenado cuando es usado Exiv2 para escribir metadatos en un archivo de imagen diseñado.&#xa0;Un atacante podría explotar potencialmente la vulnerabilidad para obtener una ejecución de código, si puede engañar a la víctima para que ejecute Exiv2 en un archivo de imagen diseñado.&#xa0;Note que este bug solo es desencadenado cuando _writing_ los metadatos, que es una operación Exiv2 que es usada con menos frecuencia que _reading_ los metadatos.&#xa0;Por ejemplo, para desencadenar el bug en la aplicación de línea de comandos Exiv2, debe agregar un argumento de línea de comando adicional como \"insert\".&#xa0;El bug es corregido en versión v0.27.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.27.4",
            "matchCriteriaId" : "0A049EBD-7A7E-458F-9ABD-F6626DDEABB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/issues/1529",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/1534",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-v74w-h496-cgqm",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4958",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/1529",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/1534",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-v74w-h496-cgqm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29458",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-19T19:15:18.017",
      "lastModified" : "2024-11-21T06:01:08.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una utilidad de línea de comandos y una biblioteca C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen.&#xa0;Se encontró una lectura fuera de límites en Exiv2 versiones v0.27.3 y anteriores.&#xa0;La lectura fuera de límites es desencadenada cuando Exiv2 es usado para escribir metadatos en un archivo de imagen diseñado.&#xa0;Un atacante podría explotar potencialmente la vulnerabilidad para causar una denegación de servicio al bloquear Exiv2, si puede engañar a la víctima para ejecutar Exiv2 en un archivo de imagen diseñado.&#xa0;Note que este bug solo es desencadenado al escribir los metadatos, que es una operación Exiv2 que es usada con menos frecuencia que la lectura de los metadatos.&#xa0;Por ejemplo, para desencadenar el bug en la aplicación de línea de comandos Exiv2, debe agregar un argumento de línea de comando adicional como insert.&#xa0;El bug es corregido en versión v0.27.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.27.4",
            "matchCriteriaId" : "0A049EBD-7A7E-458F-9ABD-F6626DDEABB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/issues/1530",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/1536",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-57jj-75fm-9rq5",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Exiv2/exiv2/issues/1530",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/1536",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-57jj-75fm-9rq5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/01/msg00004.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31254",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.077",
      "lastModified" : "2024-11-21T06:05:22.440",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the tenc_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file, related invalid IV sizes."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de búfer en la función tenc_box_read en MP4Box en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio o ejecutar código arbitrario por medio de un archivo diseñado, relacionado tamaños IV no válidos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/8986422c21fbd9a7bf6561cae65aae42077447e8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1703",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/8986422c21fbd9a7bf6561cae65aae42077447e8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31255",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.140",
      "lastModified" : "2024-11-21T06:05:22.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Buffer overflow in the abst_box_read function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer en la función abst_box_read en MP4Box en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio o ejecutar código arbitrario por medio de un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/758135e91e623d7dfe7f6aaad7aeb3f791b7a4e5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1733",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/758135e91e623d7dfe7f6aaad7aeb3f791b7a4e5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31256",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.203",
      "lastModified" : "2024-11-21T06:05:22.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file."
      }, {
        "lang" : "es",
        "value" : "Una pérdida de memoria en la función stbl_GetSampleInfos en MP4Box en GPAC versión 1.0.1, permite a atacantes leer la memoria por medio de un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/2da2f68bffd51d89b1d272d22aa8cc023c1c066e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1705",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/2da2f68bffd51d89b1d272d22aa8cc023c1c066e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31257",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.267",
      "lastModified" : "2024-11-21T06:05:22.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command."
      }, {
        "lang" : "es",
        "value" : "La función HintFile en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo diseñado en el comando MP4Box"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/87afe070cd6866df7fe80f11b26ef75161de85e0",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1734",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/87afe070cd6866df7fe80f11b26ef75161de85e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1734",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31258",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.327",
      "lastModified" : "2024-11-21T06:05:23.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command."
      }, {
        "lang" : "es",
        "value" : "La función gf_isom_set_extraction_slc en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo diseñado en el comando MP4Box"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/ebfa346eff05049718f7b80041093b4c5581c24e",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1706",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/ebfa346eff05049718f7b80041093b4c5581c24e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1706",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31259",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.373",
      "lastModified" : "2024-11-21T06:05:23.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command."
      }, {
        "lang" : "es",
        "value" : "La función gf_isom_cenc_get_default_info_internal en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo diseñado en el comando MP4Box"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/3b84ffcbacf144ce35650df958432f472b6483f8",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1735",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/3b84ffcbacf144ce35650df958432f472b6483f8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31260",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.437",
      "lastModified" : "2024-11-21T06:05:23.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command."
      }, {
        "lang" : "es",
        "value" : "La función MergeTrack en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo diseñado en el comando MP4Box"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/df8fffd839fe5ae9acd82d26fd48280a397411d9",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1736",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/df8fffd839fe5ae9acd82d26fd48280a397411d9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1736",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31261",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.517",
      "lastModified" : "2024-11-21T06:05:23.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command."
      }, {
        "lang" : "es",
        "value" : "La función gf_hinter_track_new en GPAC versión 1.0.1, permite a atacantes leer la memoria por medio de un archivo diseñado en el comando MP4Box"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1737",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1737",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31262",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T19:15:18.577",
      "lastModified" : "2024-11-21T06:05:23.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command."
      }, {
        "lang" : "es",
        "value" : "La función AV1_DuplicateConfig en GPAC versión 1.0.1, permite a atacantes causar una denegación de servicio (desreferencia del puntero NULL) por medio de un archivo diseñado en el comando MP4Box"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/b2eab95e07cb5819375a50358d4806a8813b6e50",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1738",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/b2eab95e07cb5819375a50358d4806a8813b6e50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1738",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29279",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.287",
      "lastModified" : "2024-11-21T06:00:55.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento de enteros en la función filter_core/filter_props.c:gf_props_assign_value en GPAC versión 1.0.1.&#xa0;En el cual, el arg const GF_PropertyValue *value,maybe value-)value.data.size es un número negativo.&#xa0;Como resultado, memcpy en gf_props_assign_value falló"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1718",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1718",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30014",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.363",
      "lastModified" : "2025-03-07T20:25:44.943",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento de enteros en el archivo media_tools/av_parsers.c en la función hevc_parse_slice_segment en GPAC versión 1.0.1, que resulta en un bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.9.0",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "D002A87F-B63B-4BD4-88AE-6CC56716D387"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/blob/v0.9.0-preview/src/media_tools/av_parsers.c#L6731",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1721",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1721",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30015",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.427",
      "lastModified" : "2024-11-21T06:03:13.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal."
      }, {
        "lang" : "es",
        "value" : "Se presenta una desreferencia del puntero null en la función filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal en GPAC versión 1.0.1.&#xa0;El pid proviene de la función av1dmx_parse_flush_sample, el ctx.opid puede ser NULL.&#xa0;El resultado es un bloqueo en la función gf_filter_pck_new_alloc_internal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ec",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1719",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1719",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30019",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.490",
      "lastModified" : "2024-11-21T06:03:13.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, resulting in size to be a negative number and a heap overflow in the memcpy."
      }, {
        "lang" : "es",
        "value" : "En la función adts_dmx_process en el archivo filters/reframe_adts.c en GPAC versión 1.0.1, un archivo diseñado puede hacer que ctx-)hdr.frame_size sea más pequeño que ctx-)hdr.hdr_size, resultando en un tamaño sea un número negativo y un desbordamiento de la pila en el memcpy"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/22774aa9e62f586319c8f107f5bae950fed900bc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1723",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/22774aa9e62f586319c8f107f5bae950fed900bc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.550",
      "lastModified" : "2024-11-21T06:03:14.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop."
      }, {
        "lang" : "es",
        "value" : "En la función gf_hevc_read_pps_bs_internal en el archivo media_tools/av_parsers.c en GPAC versión 1.0.1 se presenta un bucle, que con el archivo diseñado, pps-)num_tile_columns puede ser mayor que sizeof(pps-=column_width), el cual resulta en un desbordamiento de la pila en el bucle"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30022",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.647",
      "lastModified" : "2025-03-07T20:26:38.307",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash."
      }, {
        "lang" : "es",
        "value" : "Se presenta un desbordamiento de enteros en el archivo media_tools/av_parsers.c en la función gf_avc_read_pps_bs_internal en GPAC versión 1.0.1.&#xa0;pps_id puede ser un número negativo, por lo que no regresará.&#xa0;Sin embargo, avc-)pps solo tiene 255 unidades, por lo que se presenta un desbordamiento, el cual resulta en un bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.5.2",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "1EA72C5E-2E4C-4A00-B736-3994DA7C73C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/blob/v0.5.2/src/media_tools/av_parsers.c#L2344",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1720",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30199",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-19T20:15:14.707",
      "lastModified" : "2024-11-21T06:03:30.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called. The first arg pck may be null with a crafted mp4 file,which results in a crash."
      }, {
        "lang" : "es",
        "value" : "En el archivo filter/reframe_latm.c en GPAC versión 1.0.1, se presenta una desreferencia del puntero null, cuando la función gf_filter_pck_get_data es llamada.&#xa0;El primer pck arg puede ser nulo con un archivo mp4 diseñado, lo que resulta en un bloqueo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82DD2D40-0A05-48FD-940D-32B4D8B51AB3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/gpac/gpac/commit/b2db2f99b4c30f96e17b9a14537c776da6cb5dca",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1728",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/commit/b2db2f99b4c30f96e17b9a14537c776da6cb5dca",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/gpac/gpac/issues/1728",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3497",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-19T21:15:13.113",
      "lastModified" : "2026-03-17T15:52:33.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GStreamer before 1.18.4 might access already-freed memory in error code paths when demuxing certain malformed Matroska files."
      }, {
        "lang" : "es",
        "value" : "GStreamer versiones anteriores a 1.18.4, podría acceder a la memoria ya liberada en rutas de código de error al demultiplexar determinados archivos Matroska malformados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.10.0",
            "versionEndExcluding" : "1.18.4",
            "matchCriteriaId" : "0EE92BB4-DE02-4EAD-8C8F-5C4BA069AD9B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1945339",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/security/sa-2021-0002.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00027.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-31",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4900",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1945339",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/security/sa-2021-0002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3498",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-19T21:15:13.193",
      "lastModified" : "2026-03-17T15:52:33.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GStreamer before 1.18.4 might cause heap corruption when parsing certain malformed Matroska files."
      }, {
        "lang" : "es",
        "value" : "GStreamer versiones anteriores a 1.18.4, podría causar daños en la pila al analizar determinados archivos Matroska malformado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gstreamer:gstreamer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.18.4",
            "matchCriteriaId" : "E9CAB7B3-CE43-44C9-B53B-FFBA8D6E00A1"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162952/Gstreamer-Matroska-Demuxing-Use-After-Free.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1945342",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/security/sa-2021-0003.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-31",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4900",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162952/Gstreamer-Matroska-Demuxing-Use-After-Free.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1945342",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gstreamer.freedesktop.org/security/sa-2021-0003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4900",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3505",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-19T21:15:13.270",
      "lastModified" : "2024-11-21T06:21:42.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in libtpms in versions before 0.8.0. The TPM 2 implementation returns 2048 bit keys with ~1984 bit strength due to a bug in the TCG specification. The bug is in the key creation algorithm in RsaAdjustPrimeCandidate(), which is called before the prime number check. The highest threat from this vulnerability is to data confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en libtpms en versiones anteriores a 0.8.0.&#xa0;La implementación de TPM 2 devuelve claves de 2048 bits con una intensidad de bits de ~1984 debido a un error en la especificación TCG.&#xa0;El error está en el algoritmo de creación de claves en la función RsaAdjustPrimeCandidate(), que es llamado antes de la comprobación del número primo.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-331"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libtpms_project:libtpms:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.8.0",
            "matchCriteriaId" : "1A8A1473-AE41-46BD-98C5-1642BFBD6D47"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*",
            "matchCriteriaId" : "3AA08768-75AF-4791-B229-AE938C780959"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1950046",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stefanberger/libtpms/issues/183",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NUCZX4S53TUNTSGTCRDNOQZV2V2RI4RJ/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1950046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/stefanberger/libtpms/issues/183",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NUCZX4S53TUNTSGTCRDNOQZV2V2RI4RJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20208",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-19T22:15:12.873",
      "lastModified" : "2024-11-21T05:46:07.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en cifs-utils en versiones anteriores a la 6.13.&#xa0;Cuando un usuario monta un sistema de archivos CIFS krb5 desde un contenedor, puede usar las credenciales de Kerberos del host.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-266"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:cifs-utils:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0",
            "versionEndExcluding" : "6.13",
            "matchCriteriaId" : "96433803-22FA-41F5-8F44-73B1B0B270E7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921116",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=14651",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WJ3SVBHCSNQZAWSGLB6FBOCFU45FFG/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4BZSJXROEFHYATAAHHRR6P3HUSMPQB3/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1921116",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.samba.org/show_bug.cgi?id=14651",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2W4HSDIWXXNQBUW5ZS37RQMLJ7THK5AS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/66WJ3SVBHCSNQZAWSGLB6FBOCFU45FFG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Z4BZSJXROEFHYATAAHHRR6P3HUSMPQB3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27458",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-19T22:15:12.967",
      "lastModified" : "2024-11-21T05:58:01.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "If Ethernet communication of the JTEKT Corporation TOYOPUC product series’ (TOYOPUC-PC10 Series: PC10G-CPU TCC-6353: All versions, PC10GE TCC-6464: All versions, PC10P TCC-6372: All versions, PC10P-DP TCC-6726: All versions, PC10P-DP-IO TCC-6752: All versions, PC10B-P TCC-6373: All versions, PC10B TCC-1021: All versions, PC10B-E/C TCU-6521: All versions, PC10E TCC-4737: All versions; TOYOPUC-Plus Series: Plus CPU TCC-6740: All versions, Plus EX TCU-6741: All versions, Plus EX2 TCU-6858: All versions, Plus EFR TCU-6743: All versions, Plus EFR2 TCU-6859: All versions, Plus 2P-EFR TCU-6929: All versions, Plus BUS-EX TCU-6900: All versions; TOYOPUC-PC3J/PC2J Series: FL/ET-T-V2H THU-6289: All versions, 2PORT-EFR THU-6404: All versions) are left in an open state by an attacker, Ethernet communications cannot be established with other devices, depending on the settings of the link parameters."
      }, {
        "lang" : "es",
        "value" : "Si la comunicación Ethernet de la serie de productos TOYOPUC de JTEKT Corporation\" (Serie TOYOPUC-PC10: PC10G-CPU TCC-6353: Todas las versiones, PC10GE TCC-6464: Todas las versiones, PC10P TCC-6372: Todas las versiones, PC10P-DP TCC-6726: Todas las versiones, PC10P-DP-IO TCC-6752: Todas las versiones, PC10B-P TCC-6373: Todas las versiones, PC10B TCC-1021: Todas las versiones, PC10B-E/C TCU-6521: Todas las versiones, PC10E TCC-4737: Todas las versiones; Serie TOYOPUC-Plus: Plus CPU TCC-6740: Todas las versiones, Plus EX TCU-6741: Todas las versiones, Plus EX2 TCU-6858: Todas las versiones, Plus EFR TCU-6743: Todas las versiones, Plus EFR2 TCU-6859: Todas las versiones, Plus 2P-EFR TCU-6929: Todas las versiones, Plus BUS-EX TCU-6900: Todas las versiones; Serie TOYOPUC-PC3J/PC2J: FL/ET-T-V2H THU-6289: Todas las versiones, 2PORT-EFR THU-6404: Todas las versiones) son dejadas en estado abierto por un atacante, las comunicaciones Ethernet no pueden ser establecidas con otros dispositivos, dependiendo de la configuración de los parámetros del enlace"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10g-cpu_tcc-6353_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9167C38C-1CAC-434C-897A-156570A3565B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10g-cpu_tcc-6353:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F04AF876-5E55-4C88-838B-DD5DDD1552C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10ge_tcc-6464_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18110EA1-48A2-469C-BA38-7B485077CDB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10ge_tcc-6464:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87DF2EE4-5E67-44A6-9AB7-FB410969EDBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10p_tcc-6372_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA7665F-E04D-4473-AD1C-A21160CA4BA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10p_tcc-6372:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "672B6DD3-C648-407A-B6D8-19873AD06C44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10p-dp_tcc-6726_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "810E7F37-9912-4C48-A6B2-BBE4E0E6E2F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10p-dp_tcc-6726:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1EC7789-88A6-4243-A889-113B42A0BF39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10p-dp-io_tcc-6752_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E2B6488-BF16-44FC-BE16-95C63689CBF8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10p-dp-io_tcc-6752:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00B5D860-D3F8-4A19-8E4D-B2178D446D59"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10b-p_tcc-6373_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCF2EAF-4745-45A3-A3C3-6B3EEF5620EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10b-p_tcc-6373:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C51F492-AF58-4800-A2D1-2D20E92F59FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10b_tcc-1021_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462EB710-A7A3-4148-9FED-7CE236F12333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10b_tcc-1021:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6E44DDD-B13A-4947-9307-0210F0AC09D9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10b-e\\/c_tcu-6521_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2114183-BC9C-49A6-9E35-DCD91A10128A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10b-e\\/c_tcu-6521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CBF4EB3-AE31-4B8F-A38B-8F9229D23100"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:pc10e_tcc-4737_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A60F212-76AB-48F9-993B-6FC276048189"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:pc10e_tcc-4737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19D9485-3144-493D-8E55-CD364A3D6DEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_cpu_tcc-6740_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "082495FE-E743-4EB8-A0BE-B0E9D477661D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_cpu_tcc-6740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA42608E-EDD1-47D0-8A0A-8DCC2D0B31D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_ex_tcu-6741_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0E25B35-01B7-4651-A711-309D2EA2A171"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_ex_tcu-6741:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F85E68B-1322-42F1-A613-859587CAB8DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_ex2_tcu-6858_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E600BDD1-F2CF-4416-83F2-61F2C07CBB6A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_ex2_tcu-6858:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52CF1D33-06F9-43C5-AF3C-35989CC08496"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_efr_tcu-6743_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EDEA8DE-673D-44C1-8F8E-DB608BFA405E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_efr_tcu-6743:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79240BA9-626D-4D12-9EBD-60B341DAAC53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_efr2_tcu-6859_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417485FB-C4CC-4022-AFC8-EB85ED367D95"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_efr2_tcu-6859:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F157258-042F-4EF3-BC6B-B071F6172FF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_2p-efr_tcu-6929_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A893866-A87A-478A-8DB3-0A4C10B61AF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_2p-efr_tcu-6929:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA2A5FC-A3F1-4C9B-8EB3-9921A2408459"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:plus_bus-ex_tcu-6900_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A44F7BE-F48B-4D1E-A238-27F8AD57EE31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:plus_bus-ex_tcu-6900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C89F007-BB1F-43B3-9174-01178931484D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:fl\\/et-t-v2h_thu-6289_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "595A1BDC-573B-4FF4-815A-29B29BF7BDAA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:fl\\/et-t-v2h_thu-6289:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7A1542-C118-4CEC-996E-15439EB743E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:jtekt:2port-efr_thu-6404_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBB116F3-60A1-4C94-8F28-6E6B0FE6BB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:jtekt:2port-efr_thu-6404:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8A797CA-F658-41DA-B89B-45B9C19A92B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3506",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-19T22:15:13.110",
      "lastModified" : "2024-11-21T06:21:42.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds (OOB) memory access flaw was found in fs/f2fs/node.c in the f2fs module in the Linux kernel in versions before 5.12.0-rc4. A bounds check failure allows a local attacker to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de acceso a la memoria fuera de límites (OOB) en el archivo fs/f2fs/node.c en el módulo f2fs en el kernel de Linux en versiones anteriores a 5.12.0-rc4.&#xa0;Un fallo en la comprobación de límites permite a un atacante local conseguir acceso a la memoria fuera de límites, conllevando a un bloqueo del sistema o una fuga de información interna del kernel.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:C",
            "baseScore" : 5.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.12",
            "matchCriteriaId" : "40362FFA-6C99-41DB-AC04-5B835E7DE052"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:-:*:*:*:*:*:*",
            "matchCriteriaId" : "75EB504D-4A83-4C67-9C8D-FD9C6C8EB4CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc1:*:*:*:*:*:*",
            "matchCriteriaId" : "07875739-0CCB-4F48-9330-3D4B6A4064FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc2:*:*:*:*:*:*",
            "matchCriteriaId" : "DA09B732-04F8-452C-94CF-97644E78684D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:5.12:rc3:*:*:*:*:*:*",
            "matchCriteriaId" : "E5371152-7515-4908-BB7E-494805EA5DF2"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/08/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1944298",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0007/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg2520013.html",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/28/2",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/08/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1944298",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.mail-archive.com/linux-kernel%40vger.kernel.org/msg2520013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/03/28/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3035",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-04-20T04:15:12.340",
      "lastModified" : "2024-11-21T06:20:48.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious terraform file. This issue impacts Checkov 2.0 versions earlier than Checkov 2.0.26. Checkov 1.0 versions are not impacted."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de deserialización no segura en Bridgecrew Checkov de Prisma Cloud, permite una ejecución de código arbitrario cuando se procesa un archivo terraform malicioso.&#xa0;Este problema impacta a Checkov versiones 2.0 anteriores a Checkov versión 2.0.26. Checkov versiones 1.0 no están afectadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:bridgecrew_checkov:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.26",
            "matchCriteriaId" : "57047748-932C-4C5A-BAA7-36AA369957E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3035",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3035",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3036",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-04-20T04:15:12.683",
      "lastModified" : "2024-11-21T06:20:48.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where secrets in PAN-OS XML API requests are logged in cleartext to the web server logs when the API is used incorrectly. This vulnerability applies only to PAN-OS appliances that are configured to use the PAN-OS XML API and exists only when a client includes a duplicate API parameter in API requests. Logged information includes the cleartext username, password, and API key of the administrator making the PAN-OS XML API request."
      }, {
        "lang" : "es",
        "value" : "Se presenta una exposición de la información por medio de la vulnerabilidad del archivo de registro en el software PAN-OS de Palo Alto Networks, donde los secretos en las peticiones de la API XML de PAN-OS son registrados en texto sin cifrar en los registros del servidor web cuando la API son usados incorrectamente.&#xa0;Esta vulnerabilidad se aplica solo a dispositivos PAN-OS que están configurados para usar la API XML de PAN-OS y se presenta solo cuando un cliente incluye un parámetro de la API duplicado en peticiones de API.&#xa0;La información registrada incluye el nombre de usuario en texto sin cifrar, la contraseña y la clave API del administrador realizando la petición de API XML de PAN-OS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.19",
            "matchCriteriaId" : "186F919F-1EF1-4190-9852-2D64CF508E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.12",
            "matchCriteriaId" : "9DABB61F-8BFA-4476-9A59-E0DC68873022"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.6",
            "matchCriteriaId" : "304D130E-A016-447E-BB6B-06324A20DF3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.1",
            "matchCriteriaId" : "09926771-7377-487B-B660-809265E7D8A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3036",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3036",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3037",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-04-20T04:15:12.760",
      "lastModified" : "2024-11-21T06:20:48.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where the connection details for a scheduled configuration export are logged in system logs. Logged information includes the cleartext username, password, and IP address used to export the PAN-OS configuration to the destination server."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de exposición de información por medio de archivos de registro en el software PAN-OS de Palo Alto Networks, donde los detalles de conexión para una exportación de configuración programada son registrados en registros del sistema. La información registrada incluye el nombre de usuario en texto sin cifrar, la contraseña y la dirección IP usada para exportar la configuración de PAN-OS al servidor de destino"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-534"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndExcluding" : "8.1.19",
            "matchCriteriaId" : "186F919F-1EF1-4190-9852-2D64CF508E87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.13",
            "matchCriteriaId" : "591D2600-BA93-4E0A-8AB6-FB4E3E62B92A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.4",
            "matchCriteriaId" : "F307ABF3-27DB-4C76-A488-60E1F6A6D17F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3037",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3037",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3038",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-04-20T04:15:12.840",
      "lastModified" : "2024-11-21T06:20:48.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial-of-service (DoS) vulnerability in Palo Alto Networks GlobalProtect app on Windows systems allows a limited Windows user to send specifically-crafted input to the GlobalProtect app that results in a Windows blue screen of death (BSOD) error. This issue impacts: GlobalProtect app 5.1 versions earlier than GlobalProtect app 5.1.8; GlobalProtect app 5.2 versions earlier than GlobalProtect app 5.2.4."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de denegación de servicio (DoS) en la aplicación Palo Alto Networks GlobalProtect en sistemas Windows, permite a un usuario limitado de Windows enviar información específicamente diseñada a la aplicación GlobalProtect que resulta en un error de pantalla azul de finalización (BSOD) de Windows.&#xa0;Este problema afecta a: la aplicación GlobalProtect versiones 5.1 anteriores a la aplicación GlobalProtect versión 5.1.8;&#xa0;la aplicación GlobalProtect versiones 5.2 anteriores a la aplicación GlobalProtect versión 5.2.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-248"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.8",
            "matchCriteriaId" : "F9DF37EB-CA9A-43AF-9291-9DE99330E9AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "5.2.0",
            "versionEndExcluding" : "5.2.4",
            "matchCriteriaId" : "DD74EA32-59A1-41A3-9445-E886CA324C5A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3038",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.paloaltonetworks.com/CVE-2021-3038",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20023",
      "sourceIdentifier" : "PSIRT@sonicwall.com",
      "published" : "2021-04-20T12:15:12.587",
      "lastModified" : "2025-11-12T14:32:02.917",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host."
      }, {
        "lang" : "es",
        "value" : "SonicWall Email Security versión 10.0.9.x, contiene una vulnerabilidad que permite a un atacante autenticado posteriormente leer un archivo arbitrario en el host remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "SonicWall Email Security Path Traversal Vulnerability",
      "weaknesses" : [ {
        "source" : "PSIRT@sonicwall.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6173",
            "matchCriteriaId" : "5EA2AE41-BCD4-4F77-8883-D201C1AFD110"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_9000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "0A418BFA-C4E6-4473-9740-794107F86084"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_9000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2434930-79AB-4AA9-AAC8-B116F3CD5CC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_3300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "28AF18A3-3E72-400A-81A3-E0D32D550FC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF2B5A6-B62F-444E-BDB3-0084896CD83B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_4300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "738196AF-ECBE-4AC2-914E-1DCF74DFD6A9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A18DCCAF-A373-4550-805B-EF329643B068"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_8300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "4667576A-993F-4622-B7AC-AC62DD6EFDFA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_8300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC5803B4-57F1-4F0C-A459-F367F56AFE16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_5000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "848AD231-F47D-49E3-B10B-5247240191EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA9126B7-5C64-4692-954C-6EF71261862C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "9908D0F6-1D47-4C2B-B546-3B5614EB827F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A114E829-5FC6-4321-8D28-C63EC09F9099"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_5050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "AD7A6C11-2167-4294-97E9-C467EE9E1B78"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_5050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "271F06DD-8DAA-46EF-A803-659EA253CC63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:sonicwall:email_security_appliance_7050_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "B6220761-AC7E-42BD-A028-CC12EE9B3430"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:sonicwall:email_security_appliance_7050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "443B635B-6B08-479B-A635-26724B192BF0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:email_security_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6177",
            "matchCriteriaId" : "27799885-B16C-4B14-A780-54E7E20B6CB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonicwall:hosted_email_security:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.9.6173",
            "matchCriteriaId" : "DCFC13F9-2DE3-412F-8C8B-847C81811B11"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010",
        "source" : "PSIRT@sonicwall.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0010",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20023",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20453",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-20T12:15:12.853",
      "lastModified" : "2024-11-21T05:46:37.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196648."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versiones 8.0, 8.5 y 9.0, es vulnerable a un ataque de inyección de XML External Entity Injection (XXE) cuando se procesan datos XML.&#xa0;Un atacante remoto podría explotar esta vulnerabilidad para exponer información confidencial o consumir recursos de la memoria.&#xa0;IBM X-Force ID: 196648"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndExcluding" : "8.0.0.15",
            "matchCriteriaId" : "9D0A0374-A6AD-4FF2-B612-7D859937BDE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndExcluding" : "8.5.5.20",
            "matchCriteriaId" : "F5F12667-689A-40FB-92E7-CC59811FE71B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndExcluding" : "9.0.5.8",
            "matchCriteriaId" : "7FCDE8E2-F712-40CA-80BA-0E82FDD166D3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196648",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445171",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196648",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445171",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25679",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T12:15:13.120",
      "lastModified" : "2024-11-21T05:55:17.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO SE ASIGNÓ ** El software AdTran Personal Phone Manager es vulnerable a problemas de tipo cross-site scripting (XSS) almacenado y autenticado.&#xa0;Estos problemas impactan a versiones mínimas 10.8.1 y por debajo, pero también pueden potencialmente impactar a versiones posteriores, ya que no han sido previamente reveladas.&#xa0;Solo versión 10.8.1, pudo ser capaz de ser confirmada durante la investigación primaria.&#xa0;NOTA: Los dispositivos NetVanta 7060 y NetVanta 7100 afectados son considerados en Fin de Vida y, como tal, este problema no será parcheado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adtran:personal_phone_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "E272222C-80C0-4738-B876-AAC9CADB2EC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:adtran:netvanta_7060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFEB4F1-3C9B-479F-AAB8-7B585265485F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:adtran:netvanta_7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED7D983-AA17-429C-B55B-60591D34ADD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adtran.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162268/Adtran-Personal-Phone-Manager-10.8.1-Persistent-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://depthsecurity.com/blog/vulnerability-disclosure",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25679.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://adtran.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162268/Adtran-Personal-Phone-Manager-10.8.1-Persistent-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://depthsecurity.com/blog/vulnerability-disclosure",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25679.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25680",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T12:15:13.230",
      "lastModified" : "2024-11-21T05:55:17.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not previously been disclosed. Only version 10.8.1 was able to be confirmed during primary research. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO SE ASIGNÓ ** El software AdTran Personal Phone Manager es vulnerable a múltiples problemas de tipo cross-site scripting (XSS) reflejado.&#xa0;Estos problemas impactan a versiones mínimas 10.8.1 y anteriores, pero potencialmente impactan a versiones posteriores, ya que no han sido previamente reveladas.&#xa0;Solo versión 10.8.1 fue capaz de ser confirmada durante la investigación primaria.&#xa0;NOTA: Los dispositivos NetVanta 7060 y NetVanta 7100 afectados son considerados en Fin de Vida y, como tal, este problema no será parcheado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adtran:personal_phone_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "E272222C-80C0-4738-B876-AAC9CADB2EC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:adtran:netvanta_7060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFEB4F1-3C9B-479F-AAB8-7B585265485F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:adtran:netvanta_7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED7D983-AA17-429C-B55B-60591D34ADD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adtran.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162269/Adtran-Personal-Phone-Manager-10.8.1-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25680.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://adtran.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162269/Adtran-Personal-Phone-Manager-10.8.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25680.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25681",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T12:15:13.290",
      "lastModified" : "2024-11-21T05:55:17.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "unsupported-when-assigned" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary data over DNS. NOTE: The affected appliances NetVanta 7060 and NetVanta 7100 are considered End of Life and as such this issue will not be patched"
      }, {
        "lang" : "es",
        "value" : "** NO SOPORTADO CUANDO SE ASIGNÓ ** El software AdTran Personal Phone Manager versión 10.8.1, es vulnerable a un problema que permite la exfiltración de datos por medio de DNS.&#xa0;Esto podría permitir a servidores web expuestos de AdTran Personal Phone Manager ser usados como redirectores de DNS para canalizar datos arbitrarios por medio de DNS.&#xa0;NOTA: Los dispositivos NetVanta 7060 y NetVanta 7100 afectados son considerados en Fin de Vida y, como tal, este problema no será parcheado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adtran:personal_phone_manager:10.8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4CF09B1-B108-46A1-9F74-CB9C218CC242"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:adtran:netvanta_7060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFEB4F1-3C9B-479F-AAB8-7B585265485F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:adtran:netvanta_7100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED7D983-AA17-429C-B55B-60591D34ADD5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://adtran.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://adtran.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162280/Adtran-Personal-Phone-Manager-10.8.1-DNS-Exfiltration.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/3ndG4me/AdTran-Personal-Phone-Manager-Vulns/blob/main/CVE-2021-25681.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T13:15:12.493",
      "lastModified" : "2024-11-21T06:00:12.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "vscode-restructuredtext before 146.0.0 contains an incorrect access control vulnerability, where a crafted project folder could execute arbitrary binaries via crafted workspace configuration."
      }, {
        "lang" : "es",
        "value" : "vscode-restructuredtext versiones anteriores a 146.0.0, contiene una vulnerabilidad de control de acceso incorrecta, donde una carpeta de proyecto diseñada podría ejecutar binarios arbitrarios por medio de la configuración del workspace diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lextudio:restructuredtext:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "147.0.0",
            "matchCriteriaId" : "100AF67C-7600-4949-A2C4-0831260F7F01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vscode-restructuredtext/vscode-restructuredtext/commit/1dd3e878a5559e3dfe0e48f145c90418b208c5af",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vscode-restructuredtext/vscode-restructuredtext/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vscode-restructuredtext/vscode-restructuredtext/releases/tag/147.0.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/37",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vscode-restructuredtext/vscode-restructuredtext/commit/1dd3e878a5559e3dfe0e48f145c90418b208c5af",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vscode-restructuredtext/vscode-restructuredtext/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vscode-restructuredtext/vscode-restructuredtext/releases/tag/147.0.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/37",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1079",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-20T16:15:10.260",
      "lastModified" : "2024-11-21T05:43:33.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution, denial of service, or local privilege escalation. The attacker does not have control over the consequence of a modification nor would they be able to leak information as a direct result of the overwrite."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GeForce Experience, en todas las versiones anteriores a la 3.22, contiene una vulnerabilidad en los plugins GameStream en la que los archivos de registro se crean utilizando permisos de nivel NT/System, lo que puede conducir a la ejecución de código, la denegación de servicio o la escalada de privilegios local. El atacante no tiene control sobre la consecuencia de una modificación ni podría filtrar información como resultado directo de la sobreescritura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:geforce_experience:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.22",
            "matchCriteriaId" : "C8DB3F6E-CB0B-452F-A870-70C771D4471C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5184",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5184",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28156",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T16:15:10.407",
      "lastModified" : "2024-11-21T05:59:12.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Consul Enterprise version 1.8.0 up to 1.9.4 audit log can be bypassed by specifically crafted HTTP events. Fixed in 1.9.5, and 1.8.10."
      }, {
        "lang" : "es",
        "value" : "El registro de auditoría de HashiCorp Consul Enterprise versión 1.8.0 hasta 1.9.4 puede ser omitido por eventos HTTP específicamente diseñados.&#xa0;Corregido en versiones 1.9.5 y 1.8.10"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.8.0",
            "versionEndExcluding" : "1.8.10",
            "matchCriteriaId" : "4715B752-329E-4318-8023-BCC0C731AD66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:consul:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.9.0",
            "versionEndExcluding" : "1.9.5",
            "matchCriteriaId" : "51B56481-1DCE-4301-A1AD-FDF7A111431A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-09",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.hashicorp.com/blog/category/consul",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-08-consul-enterprise-audit-log-bypass-for-http-events/23369",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-09",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.hashicorp.com/blog/category/consul",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28492",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T16:15:10.453",
      "lastModified" : "2024-11-21T05:59:46.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unisys Stealth (core) 5.x before 5.0.048.0, 5.1.x before 5.1.017.0, and 6.x before 6.0.037.0 stores passwords in a recoverable format."
      }, {
        "lang" : "es",
        "value" : "Unisys Stealth (core) versiones 5.x anteriores a 5.0.048.0, versiones 5.1.x anteriores a 5.1.017.0 y versiones 6.x anteriores a 6.1.037.0, almacena Contraseñas en un Formato Recuperable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:stealth:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0",
            "versionEndExcluding" : "5.0.048.0",
            "matchCriteriaId" : "0FD3D223-1459-4EED-A8D2-36B024DE361C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:stealth:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndExcluding" : "5.1.017.0",
            "matchCriteriaId" : "D0E63A4E-6DB1-4BA3-BA1A-C86EBA00443F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:unisys:stealth:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0",
            "versionEndExcluding" : "6.0.037.0",
            "matchCriteriaId" : "4E67D697-6BDA-4DD9-8751-77B62B72F8E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=63",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Home.aspx",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Detail_Rpt.aspx?ID=63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://public.support.unisys.com/common/public/vulnerability/NVD_Home.aspx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29155",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T16:15:10.547",
      "lastModified" : "2024-11-21T06:00:47.837",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Linux kernel through 5.11.x. kernel/bpf/verifier.c performs undesirable out-of-bounds speculation on pointer arithmetic, leading to side-channel attacks that defeat Spectre mitigations and obtain sensitive information from kernel memory. Specifically, for sequences of pointer arithmetic operations, the pointer modification performed by the first operation is not correctly accounted for when restricting subsequent operations."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el kernel de Linux versiones hasta 5.11.x.&#xa0;En el archivo kernel/bpf/verifier.c lleva a cabo especulaciones indeseables fuera de límites en la aritmética de punteros, conllevando a ataques de canal lateral que anulan las mitigaciones de Spectre y consiguen información confidencial de la memoria del kernel.&#xa0;Específicamente, para secuencias de operaciones aritméticas de puntero, la modificación de puntero llevada a cabo por la primera operación no se contabiliza correctamente al restringir operaciones posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.11.16",
            "matchCriteriaId" : "771B94BF-4271-41B0-84CB-3BB143571BFD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073815b756c51ba9d8384d924c5d1c03ca3d1ae4",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=24c109bb1537c12c02aeed2d51a347b4d6a9b76e",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f55b2f2a1178856c19bbce2f71449926e731914",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9601148392520e2e134936e76788fc2a6371e7be",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b658bbb844e28f1862867f37e8ca11a8e2aa94a3",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f528819334881fd622fdadeddb3f7edaed8b7c9b",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.kernel.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/18/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=073815b756c51ba9d8384d924c5d1c03ca3d1ae4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=24c109bb1537c12c02aeed2d51a347b4d6a9b76e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=6f55b2f2a1178856c19bbce2f71449926e731914",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=7fedb63a8307dda0ec3b8969a3b233a1dd7ea8e0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=9601148392520e2e134936e76788fc2a6371e7be",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=a6aaece00a57fa6f22575364b3903dfbccf5345d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b658bbb844e28f1862867f37e8ca11a8e2aa94a3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=f528819334881fd622fdadeddb3f7edaed8b7c9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.kernel.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/18/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30496",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T16:15:10.590",
      "lastModified" : "2024-11-21T06:04:02.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g., in the Persian language) into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that \"this behavior can't be considered a vulnerability.\""
      }, {
        "lang" : "es",
        "value" : "** EN DISPUTA ** La aplicación Telegram versión 7.6.2 para iOS, permite a usuarios autenticados remoto causar una denegación de servicio (bloqueo de la aplicación) si la víctima pega un mensaje proporcionado por el atacante (por ejemplo, en el idioma Persian) en un canal o grupo.&#xa0;El bloqueo ocurre en la función MtProtoKitFramework. NOTA: la perspectiva del proveedor es que \"este comportamiento no puede considerarse una vulnerabilidad\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:telegram:telegram:7.6.2:*:*:*:*:iphone_os:*:*",
            "matchCriteriaId" : "69719CA8-ED11-463E-A7A8-68FA44F859ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/raminfp/bf64c2974ee6949787329749148a4b31",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://t.me/joinchat/bJ9cnUosVh03ZTI0",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/raminfp/bf64c2974ee6949787329749148a4b31",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://t.me/joinchat/bJ9cnUosVh03ZTI0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21526",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-20T17:15:11.537",
      "lastModified" : "2026-02-20T18:38:47.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS versiones 8.1.0 - 9.1.0, contiene una escalada de privilegios en el modo de cumplimiento de SmartLock que puede permitir a compadmin ejecutar comandos arbitrarios como root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0",
            "versionEndIncluding" : "9.1.0",
            "matchCriteriaId" : "F53FE0EF-63C2-4315-B234-BC2CB3E7FDE9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185202",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28827",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-04-20T19:15:09.537",
      "lastModified" : "2024-11-21T06:00:16.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Administrator - Enterprise Edition for z/Linux, TIBCO Runtime Agent, TIBCO Runtime Agent, TIBCO Runtime Agent for z/Linux, and TIBCO Runtime Agent for z/Linux contains an easily exploitable vulnerability that allows an unauthenticated attacker to social engineer a legitimate user with network access to execute a Stored XSS attack targeting the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1, TIBCO Runtime Agent: versions 5.10.2 and below, TIBCO Runtime Agent: versions 5.11.0 and 5.11.1, TIBCO Runtime Agent for z/Linux: versions 5.10.2 and below, and TIBCO Runtime Agent for z/Linux: versions 5.11.0 and 5.11.1."
      }, {
        "lang" : "es",
        "value" : "El componente GUI de Administración de TIBCO Administrator - Enterprise Edition., TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition para z/Linux, TIBCO Administrator - Enterprise Edition para z/Linux, TIBCO Runtime Agent, TIBCO Runtime Agent, TIBCO Runtime Agent para z/Linux y TIBCO Runtime Agent para z/Linux de TIBCO Inc, contiene una vulnerabilidad fácilmente explotable que permite a un atacante no autenticado hacer ingeniería social a un usuario legítimo con acceso a la red para ejecutar un ataque de tipo XSS Almacenado dirigido al sistema afectado.&#xa0;Un ataque con éxito que utilice esta vulnerabilidad requiere una interacción humana de una persona diferente del atacante. Las versiones afectadas son: TIBCO Administrator - Enterprise Edition: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition: versiones 5.11.0 y 5.11.1, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric: versiones 5.11.0 y 5.11.1, TIBCO Administrator - Enterprise Edition para z/Linux: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition para z/Linux: versiones 5.11.0 y 5.11.1, TIBCO Runtime Agent: versiones 5.10.2 y por debajo, TIBCO Runtime Agent: versiones 5.11.0 y 5.11.1, TIBCO Runtime Agent para z/Linux: versiones 5.10.2 y por debajo, y TIBCO Runtime Agent para z/Linux: versiones 5.11.0 y 5.11.1, de TIBCO Software Inc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "CCCCD52B-6905-41BD-83D9-A4B800E76BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "CF92E468-2FFA-4F3E-BC61-CFFC059627D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\\/linux:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "DA9D9C2C-1FCE-45E1-AB7A-9586C25A8969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C9291FEA-0386-42EF-94A6-20E599171D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:*",
            "matchCriteriaId" : "EF42B5B6-2CCD-4124-8DAB-252912F413A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\\/linux:*:*",
            "matchCriteriaId" : "A9D79741-41D8-44E7-9CD7-D3DEFE98CF57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CE3C501F-2CEB-4300-9430-E2AB43009E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:*",
            "matchCriteriaId" : "CC01905D-D082-4EDF-BF82-FB69ED80664A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\\/linux:*:*",
            "matchCriteriaId" : "CC640410-CCFC-4B10-AF30-157F60ABF751"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "71C3F347-702D-4D65-BDCC-7AC931C6736C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:z\\/linux:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "FCAFA333-6F13-48A0-8F08-4479AB3A9DDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:5.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC0EB030-30DA-47D4-B504-0D7C4BE71D26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:5.11.0:*:*:*:*:z\\/linux:*:*",
            "matchCriteriaId" : "4EA0CB29-1E8E-454A-9801-065543A1C772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:5.11.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEC7BD88-60FE-4855-9E2C-D45E09E10C5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:runtime_agent:5.11.1:*:*:*:*:z\\/linux:*:*",
            "matchCriteriaId" : "4D588876-1E36-44BE-BFAC-76E1EDC7D771"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28827",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28827",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28828",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-04-20T19:15:09.597",
      "lastModified" : "2024-11-21T06:00:16.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a SQL injection attack on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, and TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1."
      }, {
        "lang" : "es",
        "value" : "El componente GUI de Administración de TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition para z/Linux y TIBCO Administrator - Enterprise Edition para z/Linux de TIBCO Software Inc, contiene una vulnerabilidad fácilmente explotable que permite a un atacante poco privilegiado con acceso a la red ejecutar un ataque de inyección SQL en el sistema afectado.&#xa0;Las versiones afectadas son TIBCO Administrator - Enterprise Edition: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition: versiones 5.11.0 y 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric: versiones 5.11.0 y 5.11.1, TIBCO Administrator - Enterprise Edition para z/Linux: versiones 5.10.2 y por debajo, y TIBCO Administrator - Enterprise Edition para z/Linux: versiones 5.11.0 and 5.11.1, de TIBCO Software Inc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "CCCCD52B-6905-41BD-83D9-A4B800E76BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "CF92E468-2FFA-4F3E-BC61-CFFC059627D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\\/linux:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "DA9D9C2C-1FCE-45E1-AB7A-9586C25A8969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C9291FEA-0386-42EF-94A6-20E599171D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:*",
            "matchCriteriaId" : "EF42B5B6-2CCD-4124-8DAB-252912F413A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\\/linux:*:*",
            "matchCriteriaId" : "A9D79741-41D8-44E7-9CD7-D3DEFE98CF57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CE3C501F-2CEB-4300-9430-E2AB43009E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:*",
            "matchCriteriaId" : "CC01905D-D082-4EDF-BF82-FB69ED80664A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\\/linux:*:*",
            "matchCriteriaId" : "CC640410-CCFC-4B10-AF30-157F60ABF751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28828",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28829",
      "sourceIdentifier" : "security@tibco.com",
      "published" : "2021-04-20T19:15:09.633",
      "lastModified" : "2024-11-21T06:00:17.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Administration GUI component of TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition for z/Linux, and TIBCO Administrator - Enterprise Edition for z/Linux contains an easily exploitable vulnerability that allows a low privileged attacker with network access to execute a persistent CSV injection attack from the affected system. A successful attack using this vulnerability requires human interaction from a person other than the attacker. Affected releases are TIBCO Software Inc.'s TIBCO Administrator - Enterprise Edition: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.10.2 and below, TIBCO Administrator - Enterprise Edition Distribution for TIBCO Silver Fabric: versions 5.11.0 and 5.11.1, TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.10.2 and below, and TIBCO Administrator - Enterprise Edition for z/Linux: versions 5.11.0 and 5.11.1."
      }, {
        "lang" : "es",
        "value" : "El componente GUI de Administración de TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric, TIBCO Administrator - Enterprise Edition para z / Linux y TIBCO Administrator - Enterprise Edition para z/Linux, de TIBCO Software Inc, contiene una vulnerabilidad fácilmente explotable que permite a un atacante poco privilegiado con acceso a la red ejecutar un ataque de inyección CSV persistente desde el sistema afectado.&#xa0;Un ataque con éxito que utilice esta vulnerabilidad requiere una interacción humana de una persona diferente del atacante.&#xa0;Las versiones afectadas son TIBCO Administrator - Enterprise Edition: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition: versiones 5.11.0 y 5.11.1, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric: versiones 5.10.2 y por debajo, TIBCO Administrator - Enterprise Edition Distribution para TIBCO Silver Fabric: versiones 5.11.0 y 5.11.1, TIBCO Administrator - Enterprise Edition para z/Linux: versiones 5.10.2  y por debajo, y TIBCO Administrator - Enterprise Edition para z/Linux: versiones 5.11.0 y 5.11.1, de TIBCO Software Inc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@tibco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:*:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "CCCCD52B-6905-41BD-83D9-A4B800E76BAB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:silver_fabric:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "CF92E468-2FFA-4F3E-BC61-CFFC059627D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:*:*:*:*:enterprise:z\\/linux:*:*",
            "versionEndIncluding" : "5.10.2",
            "matchCriteriaId" : "DA9D9C2C-1FCE-45E1-AB7A-9586C25A8969"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C9291FEA-0386-42EF-94A6-20E599171D4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:silver_fabric:*:*",
            "matchCriteriaId" : "EF42B5B6-2CCD-4124-8DAB-252912F413A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.0:*:*:*:enterprise:z\\/linux:*:*",
            "matchCriteriaId" : "A9D79741-41D8-44E7-9CD7-D3DEFE98CF57"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CE3C501F-2CEB-4300-9430-E2AB43009E74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:silver_fabric:*:*",
            "matchCriteriaId" : "CC01905D-D082-4EDF-BF82-FB69ED80664A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tibco:administrator:5.11.1:*:*:*:enterprise:z\\/linux:*:*",
            "matchCriteriaId" : "CC640410-CCFC-4B10-AF30-157F60ABF751"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28829",
        "source" : "security@tibco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.tibco.com/services/support/advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tibco.com/support/advisories/2021/04/tibco-security-advisory-april-20-2021-tibco-administrator-2021-28829",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29459",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-20T19:15:09.670",
      "lastModified" : "2024-11-21T06:01:08.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. It is possible to persistently inject scripts in XWiki versions prior to 12.6.3 and 12.8. Unregistred users can fill simple text fields. Registered users can fill in their personal information and (if they have edit rights) fill the values of static lists using App Within Minutes. There is no easy workaround except upgrading XWiki. The vulnerability has been patched on XWiki 12.8 and 12.6.3."
      }, {
        "lang" : "es",
        "value" : "XWiki Platform es una plataforma wiki genérica que ofrece servicios en tiempo de ejecución para aplicaciones creadas sobre ella.&#xa0;Es posible inyectar scripts de forma persistente en XWiki versiones anteriores a 12.6.3 y 12.8.&#xa0;Unos usuarios no registrados pueden completar campos de texto simple.&#xa0;Los usuarios registrados pueden completar su información personal y (si presentan derechos de edición) completar los valores de las listas estáticas usando App Within Minutes.&#xa0;No se presenta una solución sencilla excepto actualizar XWiki.&#xa0;La vulnerabilidad ha sido parcheada en XWiki versiones 12.8 y 12.6.3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6.3",
            "matchCriteriaId" : "63E75D2E-DB11-432C-A4C9-DE3AECEC3ED7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xwiki:xwiki:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.6.4",
            "versionEndExcluding" : "12.8",
            "matchCriteriaId" : "3EC9936D-FBF4-4908-B89C-F90DD6E26D99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5c66-v29h-xjh8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-5c66-v29h-xjh8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30464",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-20T19:15:09.720",
      "lastModified" : "2024-11-21T06:03:58.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OMICRON StationGuard before 1.10 allows remote attackers to cause a denial of service (connectivity outage) via crafted tcp/20499 packets to the CTRL Ethernet port."
      }, {
        "lang" : "es",
        "value" : "OMICRON StationGuard versiones anteriores a 1.10, permite a atacantes remotos causar una denegación de servicio (interrupción de la conectividad) por medio de paquetes tcp/20499 diseñados al puerto Ethernet CTRL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:omicronenergy:stationguard:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10",
            "matchCriteriaId" : "D5563C08-AD8C-4339-BA05-EB3563709EBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.omicronenergy.com/download/file/e81f23250097e7d5e1071dfbdb7f16d2/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/en/support/product-security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/download/file/e81f23250097e7d5e1071dfbdb7f16d2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.omicronenergy.com/en/support/product-security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29461",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-20T20:15:08.270",
      "lastModified" : "2024-11-21T06:01:09.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the system resulting in remote code execution. This issue has been fixed in version 0.0.3. As a workaround, one may copy the code from `assets/CommandInjection.py` in the Discord Recon Server code repository and overwrite vulnerable code from one's own Discord Recon Server implementation with code that contains the patch."
      }, {
        "lang" : "es",
        "value" : "Discord Recon Server es un bot que permite hacer el proceso de reconocimiento desde el propio Discord. Una vulnerabilidad en Discord Recon Server anterior a la versión 0.0.3 podía ser explotada para leer archivos internos del sistema y escribir archivos en el sistema, lo que resultaba en la ejecución remota de código. Este problema se ha corregido en la versión 0.0.3. Como solución, se puede copiar el código de `assets/CommandInjection.py` en el repositorio de código de Discord Recon Server y sobrescribir el código vulnerable de la propia implementación de Discord Recon Server con el código que contiene el parche"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:demon1a:discord-recon:0.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B890F480-6D48-45AE-B874-24B8BC9FF5A1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-3m9v-v33c-g83x",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-3m9v-v33c-g83x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29462",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-20T21:15:08.493",
      "lastModified" : "2024-11-21T06:01:09.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Portable SDK for UPnP Devices is an SDK for development of UPnP device and control point applications. The server part of pupnp (libupnp) appears to be vulnerable to DNS rebinding attacks because it does not check the value of the `Host` header. This can be mitigated by using DNS revolvers which block DNS-rebinding attacks. The vulnerability is fixed in version 1.14.6 and later."
      }, {
        "lang" : "es",
        "value" : "El SDK Portátil para Dispositivos UPnP es un SDK para el desarrollo de aplicaciones de puntos de control y dispositivos UPnP.&#xa0;La parte del servidor de pupnp (libupnp) parece ser vulnerable a los ataques de reenlace de DNS porque no comprueba el valor del encabezado \"Host\".&#xa0;Esto puede ser mitigado al usar resolutores de DNS que bloquean los ataques DNS-rebinding.&#xa0;La vulnerabilidad se corrigió en versión 1.14.6 y posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pupnp_project:pupnp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.14.6",
            "matchCriteriaId" : "2AF559B8-B988-40BE-8BFA-91EB27B7BF6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/20/4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/20/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/pupnp/pupnp/security/advisories/GHSA-6hqq-w3jq-9fhg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28965",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-21T07:15:07.677",
      "lastModified" : "2024-11-21T06:00:27.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The REXML gem before 3.2.5 in Ruby before 2.6.7, 2.7.x before 2.7.3, and 3.x before 3.0.1 does not properly address XML round-trip issues. An incorrect document can be produced after parsing and serializing."
      }, {
        "lang" : "es",
        "value" : "El REXML gem versiones anteriores a 3.2.5 en Ruby versiones anteriores a 2.6.7, versiones 2.7.x anteriores a 2.7.3 y versiones 3.x anteriores a 3.0.1, no aborda apropiadamente los problemas round-trip de XML.&#xa0;Puede ser producido un documento incorrecto después de analizarlo y serializarlo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:rexml:*:*:*:*:*:ruby:*:*",
            "versionEndExcluding" : "3.2.5",
            "matchCriteriaId" : "F9707003-AB06-4BEB-AA2B-3D90BCDD5ED4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.6.7",
            "matchCriteriaId" : "1319FB03-146B-4D3E-AF94-6E6297022DAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.3",
            "matchCriteriaId" : "71E99C67-E4BC-46AC-9D2C-55454E6ACAB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ruby-lang:ruby:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.1",
            "matchCriteriaId" : "D2EA779B-7F5D-4E60-95BB-2D565591F673"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WTVFTLFVCSUE5CXHINJEUCKSHU4SWDMT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ruby-lang.org/en/news/2021/04/05/xml-round-trip-vulnerability-in-rexml-cve-2021-28965/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20454",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-21T12:15:08.257",
      "lastModified" : "2024-11-21T05:46:37.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 196649."
      }, {
        "lang" : "es",
        "value" : "IBM WebSphere Application Server versiones 7.0, 8.0, 8.5 y 9.0, es vulnerable a un ataque de tipo XML External Entity Injection (XXE) cuando se procesan datos XML.&#xa0;Un atacante remoto podría explotar esta vulnerabilidad para exponer información confidencial o consumir recursos de memoria.&#xa0;IBM X-Force ID: 196649"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "7.0.0.0",
            "versionEndIncluding" : "7.0.0.45",
            "matchCriteriaId" : "3246A896-3182-45AB-9E11-8698E1ED63B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "8.0.0.0",
            "versionEndIncluding" : "8.0.0.15",
            "matchCriteriaId" : "649C4DF7-510A-4C9B-A428-94DD59099E72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.5.0.0",
            "versionEndIncluding" : "8.5.5.19",
            "matchCriteriaId" : "F421D853-4015-4375-AD38-E2E95CA51676"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:websphere_application_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0.0",
            "versionEndIncluding" : "9.0.5.7",
            "matchCriteriaId" : "EFF7A009-A535-4991-BAF8-2F29E9E453B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196649",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445481",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445481",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20501",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-21T12:15:08.303",
      "lastModified" : "2024-11-21T05:46:40.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM i 7.1, 7.2, 7.3, and 7.4 SMTP allows a network attacker to send emails to non-existent local-domain recipients to the SMTP server, caused by using a non-default configuration. An attacker could exploit this vulnerability to consume unnecessary network bandwidth and disk space, and allow remote attackers to send spam email. IBM X-Force ID: 198056."
      }, {
        "lang" : "es",
        "value" : "IBM i versiones 7.1, 7.2, 7.3 y 7.4 SMTP, permite a un atacante de red enviar correos electrónicos a destinatarios de dominio local inexistentes en el servidor SMTP, debido al uso de una configuración no predeterminada.&#xa0;Un atacante podría explotar esta vulnerabilidad para consumir ancho de banda de red y espacio en disco innecesarios, y permitir a atacantes remotos enviar correo electrónico no deseado.&#xa0; IBM X-Force ID: 198056"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75F0F975-DD09-4851-A536-1B8484715FEE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD871157-2BB3-4641-B84E-3EA13D24D35A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A49E8C5-7967-42AE-A787-C533D24A63D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:ibm:i:7.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92D03306-B6C9-403E-99A2-CE9D8DC3B482"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198056",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445505",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198056",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445505",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21642",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-21T15:15:08.287",
      "lastModified" : "2024-11-21T05:48:45.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Config File Provider Plugin 3.7.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks."
      }, {
        "lang" : "es",
        "value" : "Jenkins Config File Provider Plugin versiones 3.7.0 y anteriores, no configuran su analizador XML para evitar ataques de tipo XML external entity (XXE)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "D9585A7C-580E-4D27-9986-4F5EA086D70C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21643",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-21T15:15:08.340",
      "lastModified" : "2024-11-21T05:48:45.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Config File Provider Plugin 3.7.0 and earlier does not correctly perform permission checks in several HTTP endpoints, allowing attackers with global Job/Configure permission to enumerate system-scoped credentials IDs of credentials stored in Jenkins."
      }, {
        "lang" : "es",
        "value" : "Jenkins Config File Provider Plugin versiones 3.7.0 y anteriores, no lleva a cabo apropiadamente unas comprobaciones de permisos en varios endpoints HTTP, lo que permite a atacantes con permiso global Job/Configure enumerar unas ID de credenciales del ámbito del sistema de las credenciales almacenadas en Jenkins"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "D9585A7C-580E-4D27-9986-4F5EA086D70C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21644",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-21T15:15:08.373",
      "lastModified" : "2024-11-21T05:48:45.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site request forgery (CSRF) vulnerability in Jenkins Config File Provider Plugin 3.7.0 and earlier allows attackers to delete configuration files corresponding to an attacker-specified ID."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site request forgery (CSRF) en Jenkins Config File Provider Plugin versiones 3.7.0 y anteriores, permite a atacantes eliminar los archivos de configuración correspondientes a un ID especificado por el atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "D9585A7C-580E-4D27-9986-4F5EA086D70C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2202",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21645",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-21T15:15:08.407",
      "lastModified" : "2024-11-21T05:48:45.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Config File Provider Plugin 3.7.0 and earlier does not perform permission checks in several HTTP endpoints, attackers with Overall/Read permission to enumerate configuration file IDs."
      }, {
        "lang" : "es",
        "value" : "Jenkins Config File Provider Plugin versiones 3.7.0 y anteriores, no lleva a cabo comprobaciones de permisos en varios endpoints HTTP, unos atacantes con permiso general y lectura para enumerar los ID de los archivos de configuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:config_file_provider:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "3.7.0",
            "matchCriteriaId" : "D9585A7C-580E-4D27-9986-4F5EA086D70C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2203",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2203",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21646",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-21T15:15:08.440",
      "lastModified" : "2024-11-21T05:48:45.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins Templating Engine Plugin 2.1 and earlier does not protect its pipeline configurations using Script Security Plugin, allowing attackers with Job/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM."
      }, {
        "lang" : "es",
        "value" : "Jenkins Templating Engine Plugin versiones 2.1 y anteriores, no protegen sus configuraciones de canalización usando Script Security Plugin, permitiendo a atacantes con permiso Trabajo y Configurar ejecutar código arbitrario en el contexto de la JVM del controlador Jenkins"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:templating_engine:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "2.1",
            "matchCriteriaId" : "CC9BAF16-0AB9-4DFF-AA8F-3023CFE5195A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2311",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2311",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21647",
      "sourceIdentifier" : "jenkinsci-cert@googlegroups.com",
      "published" : "2021-04-21T15:15:08.477",
      "lastModified" : "2024-11-21T05:48:45.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jenkins CloudBees CD Plugin 1.1.21 and earlier does not perform a permission check in an HTTP endpoint, allowing attackers with Item/Read permission to schedule builds of projects without having Item/Build permission."
      }, {
        "lang" : "es",
        "value" : "Jenkins CloudBees CD Plugin versiones 1.1.21 y anteriores, no llevan a cabo una comprobación de permisos en un endpoint HTTP, permitiendo a atacantes con permiso Item/Read programar compilaciones de proyectos sin tener permiso Item/Build"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jenkins:cloudbees_cd:*:*:*:*:*:jenkins:*:*",
            "versionEndIncluding" : "1.1.21",
            "matchCriteriaId" : "DFBBD4AC-E089-466A-B0E5-6C0BE782C039"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2309",
        "source" : "jenkinsci-cert@googlegroups.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2309",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30031",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-21T16:15:08.797",
      "lastModified" : "2023-11-07T03:32:58.080",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30139",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-21T16:15:08.830",
      "lastModified" : "2024-11-21T06:03:22.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Alpine Linux apk-tools before 2.12.5, the tarball parser allows a buffer overflow and crash."
      }, {
        "lang" : "es",
        "value" : "En Alpine Linux apk-tools versiones anteriores a 2.12.5, el analizador tarball permite un desbordamiento y bloqueo del búfer"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:alpinelinux:apk-tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.10.6",
            "matchCriteriaId" : "80239F55-44EC-45FC-806C-4BAB61F82CBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:alpinelinux:apk-tools:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.12.0",
            "versionEndExcluding" : "2.12.5",
            "matchCriteriaId" : "CABA7FED-CD75-44B1-9E85-CC663E10C55E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.alpinelinux.org/alpine/apk-tools/-/issues/10741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.alpinelinux.org/alpine/aports/-/issues/12606",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31327",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-21T16:15:08.863",
      "lastModified" : "2024-11-21T06:05:26.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS almacenado en Remote Clinic versión v2.0, en /medicines debido a un Campo de Nombre Medicine"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/14",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/14",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31329",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-21T16:15:08.893",
      "lastModified" : "2024-11-21T06:05:26.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) in Remote Clinic v2.0 via the \"Chat\" and \"Personal Address\" field on staff/register.php"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en Remote Clinic versión v2.0, por medio del campo \"Chat\" y \"Personal Address\" en el archivo staff/register.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:remoteclinic:remote_clinic:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E545F721-A065-4091-8405-9B92071E1A44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/16",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/remoteclinic/RemoteClinic/issues/16",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28167",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-04-21T18:15:08.793",
      "lastModified" : "2024-11-21T05:59:14.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Eclipse Openj9 to version 0.25.0, usage of the jdk.internal.reflect.ConstantPool API causes the JVM in some cases to pre-resolve certain constant pool entries. This allows a user to call static methods or access static members without running the class initialization method, and may allow a user to observe uninitialized values."
      }, {
        "lang" : "es",
        "value" : "En Eclipse Openj9 a versión 0.25.0, el uso de la API jdk.internal.reflect.ConstantPool causa a la JVM en algunos casos resolver previamente determinadas entradas de grupo constante.&#xa0;Esto permite a un usuario llamar a métodos estáticos o acceder a miembros estáticos sin ejecutar el método de inicialización de la clase, y puede permitir a un usuario observar valores no inicializados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:openj9:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.25.0",
            "matchCriteriaId" : "B189B400-5FB7-48D0-A0F7-47CAEE84ECC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse/openj9/issues/12016",
        "source" : "emo@eclipse.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://github.com/eclipse/openj9/issues/12016",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20240621-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29456",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-21T19:15:35.827",
      "lastModified" : "2024-11-21T06:01:08.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authelia is an open-source authentication and authorization server providing 2-factor authentication and single sign-on (SSO) for your applications via a web portal. In versions 4.27.4 and earlier, utilizing a HTTP query parameter an attacker is able to redirect users from the web application to any domain, including potentially malicious sites. This security issue does not directly impact the security of the web application itself. As a workaround, one can use a reverse proxy to strip the query parameter from the affected endpoint. There is a patch for version 4.28.0."
      }, {
        "lang" : "es",
        "value" : "Authelia es un servidor de autorización y autenticación de código abierto que proporciona autenticación de 2 factores e inicio de sesión único (SSO) para sus aplicaciones por medio de un portal web.&#xa0;En versiones 4.27.4 y anteriores, usando un parámetro de consulta HTTP, un atacante puede redireccionar a usuarios desde la aplicación web a cualquier dominio, incluyendo sitios potencialmente maliciosos.&#xa0;Este problema de seguridad no afecta directamente la seguridad de la aplicación web en sí.&#xa0;Como solución alternativa, se puede usar un proxy inverso para eliminar el parámetro query del endpoint afectado.&#xa0;Se presenta un parche para versión 4.28.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:authelia:authelia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.28.0",
            "matchCriteriaId" : "8CE1C08B-D5C4-41B8-9C55-E08A07AF7FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/authelia/authelia/security/advisories/GHSA-36f2-fcrx-fp4j",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/authelia/authelia/security/advisories/GHSA-36f2-fcrx-fp4j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31523",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-21T19:15:35.877",
      "lastModified" : "2024-11-21T06:05:51.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Debian xscreensaver 5.42+dfsg1-1 package for XScreenSaver has cap_net_raw enabled for the /usr/libexec/xscreensaver/sonar file, which allows local users to gain privileges because this is arguably incompatible with the design of the Mesa 3D Graphics library dependency."
      }, {
        "lang" : "es",
        "value" : "El paquete Debian xscreensaver versión 5.42+dfsg1-1 para XScreenSaver presenta la función cap_net_raw habilitado para el archivo /usr/libexec/xscreensaver/sonar, lo que permite a usuarios locales alcanzar privilegios porque podría decirse que esto es incompatible con el diseño de la dependencia de la biblioteca Mesa 3D Graphics"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xscreensaver_project:xscreensaver:5.42\\+dfsg1-1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C47371-5E1C-4036-96DE-381926EB96FF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/17/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/21/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/17/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21426",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-21T21:15:07.960",
      "lastModified" : "2024-11-21T05:48:20.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento-lts is a long-term support alternative to Magento Community Edition (CE). In magento-lts versions 19.4.12 and prior and 20.0.8 and prior, there is a vulnerability caused by the unsecured deserialization of an object. A patch in versions 19.4.13 and 20.0.9 was back ported from Zend Framework 3. The vulnerability was assigned CVE-2021-3007 in Zend Framework."
      }, {
        "lang" : "es",
        "value" : "Magento-lts es una alternativa de soporte a largo plazo a Magento Community Edition (CE).&#xa0;En magento-lts versiones 19.4.12 y anteriores y versiones 20.0.8 y anteriores, se presenta una vulnerabilidad causada por una deserialización no segura de un objeto.&#xa0;Un parche en versiones 19.4.13 y 20.0.9 fue actualizado desde Zend Framework 3. La vulnerabilidad fue asignada CVE-2021-3007 en Zend Framework"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "19.4.13",
            "matchCriteriaId" : "1A4C7D1B-4241-408B-BD8C-7B996FAC4D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.0.9",
            "matchCriteriaId" : "713655CF-09C7-4347-A8D1-4B226F1DE312"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-m496-x567-f98c",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-m496-x567-f98c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21427",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-21T21:15:08.007",
      "lastModified" : "2024-11-21T05:48:20.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Magento-lts is a long-term support alternative to Magento Community Edition (CE). A vulnerability in magento-lts versions before 19.4.13 and 20.0.9 potentially allows an administrator unauthorized access to restricted resources. This is a backport of CVE-2021-21024. The vulnerability is patched in versions 19.4.13 and 20.0.9."
      }, {
        "lang" : "es",
        "value" : "Magento-lts es una alternativa de soporte a largo plazo a Magento Community Edition (CE).&#xa0;Una vulnerabilidad en magento-lts versiones anteriores a 19.4.13 y 20.0.9, potencialmente permite a un administrador acceso no autorizado a recursos restringidos.&#xa0;Este es una puerta trasera de CVE-2021-21024.&#xa0;La vulnerabilidad está parcheada en versiones 19.4.13 y 20.0.9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionEndExcluding" : "19.4.13",
            "matchCriteriaId" : "1A4C7D1B-4241-408B-BD8C-7B996FAC4D0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmage:magento:*:*:*:*:lts:*:*:*",
            "versionStartIncluding" : "20.0.0",
            "versionEndExcluding" : "20.0.9",
            "matchCriteriaId" : "713655CF-09C7-4347-A8D1-4B226F1DE312"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-fvrf-9428-527m",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenMage/magento-lts/security/advisories/GHSA-fvrf-9428-527m",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1074",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-21T23:15:07.633",
      "lastModified" : "2024-11-21T05:43:32.727",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows installer contains a vulnerability where an attacker with local unprivileged system access may be able to replace an application resource with malicious files. This attack requires a user with system administration rights to execute the installer and requires the attacker to replace the files in a very short time window between file integrity validation and execution. Such an attack may lead to code execution, escalation of privileges, denial of service, and information disclosure."
      }, {
        "lang" : "es",
        "value" : "El instalador de NVIDIA GPU Display Driver for Windows contiene una vulnerabilidad por la que un atacante con acceso local no privilegiado al sistema puede ser capaz de reemplazar un recurso de la aplicación con archivos maliciosos. Este ataque requiere que un usuario con derechos de administración del sistema ejecute el instalador y que el atacante reemplace los archivos en un intervalo de tiempo muy corto entre la validación de la integridad del archivo y la ejecución. Este ataque puede llevar a la ejecución de código, escalada de privilegios, denegación de servicio y divulgación de información"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.65",
            "matchCriteriaId" : "9FE14B9C-CC39-47CF-9C33-5EAA716DDD79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1075",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-21T23:15:07.667",
      "lastModified" : "2024-11-21T05:43:32.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape where the program dereferences a pointer that contains a location for memory that is no longer valid, which may lead to code execution, denial of service, or escalation of privileges. Attacker does not have any control over the information and may conduct limited data modification."
      }, {
        "lang" : "es",
        "value" : "El controlador de pantalla de la GPU de NVIDIA para Windows, en todas sus versiones, contiene una vulnerabilidad en el manejador de la capa de modo del kernel (nvlddmkm.sys) para DxgkDdiEscape en la que el programa hace referencia a un puntero que contiene una ubicación para la memoria que ya no es válida, lo que puede conducir a la ejecución de código, la denegación de servicio o la escalada de privilegios. El atacante no tiene ningún control sobre la información y puede realizar una modificación limitada de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:C",
            "baseScore" : 5.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 7.8,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.33",
            "matchCriteriaId" : "22DC6378-9844-4247-8395-563EF075D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.96",
            "matchCriteriaId" : "3876CD3B-354A-4FE5-A528-A4B135F300C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "462.31",
            "matchCriteriaId" : "DF304158-67E3-4F9A-86D8-226626211F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "465",
            "versionEndExcluding" : "466.11",
            "matchCriteriaId" : "6F6BA69D-0332-4D95-867E-C03892F2091B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1076",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-21T23:15:07.700",
      "lastModified" : "2024-11-21T05:43:32.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux, all versions, contains a vulnerability in the kernel mode layer (nvlddmkm.sys or nvidia.ko) where improper access control may lead to denial of service, information disclosure, or data corruption."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows y Linux, todas las versiones, contiene Una vulnerabilidad en la capa del modo kernel (nvlddmkm.sys o nvidia.ko) donde un control de acceso inapropiado puede conllevar a una denegación de servicio, divulgación de información o corrupción de datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "390.143",
            "matchCriteriaId" : "3178296B-0354-4DC3-B8CB-D49D146C6063"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "418.197.02",
            "matchCriteriaId" : "ABD000D5-7DE6-42F7-857E-A90629738237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.33",
            "matchCriteriaId" : "22DC6378-9844-4247-8395-563EF075D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.119.03",
            "matchCriteriaId" : "69312265-BEBA-48BC-A771-5C31840BBA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.96",
            "matchCriteriaId" : "3876CD3B-354A-4FE5-A528-A4B135F300C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "460.73.01",
            "matchCriteriaId" : "F136B0BE-76D2-419F-8F57-F0FE28316B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "462.31",
            "matchCriteriaId" : "DF304158-67E3-4F9A-86D8-226626211F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "465",
            "versionEndExcluding" : "465.24.02",
            "matchCriteriaId" : "A3A8E0F4-A3DB-400C-A732-E71DCB09C35F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "465",
            "versionEndExcluding" : "466.11",
            "matchCriteriaId" : "6F6BA69D-0332-4D95-867E-C03892F2091B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/01/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1077",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-21T23:15:07.733",
      "lastModified" : "2024-11-21T05:43:33.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA GPU Display Driver for Windows and Linux, R450 and R460 driver branch, contains a vulnerability where the software uses a reference count to manage a resource that is incorrectly updated, which may lead to denial of service."
      }, {
        "lang" : "es",
        "value" : "NVIDIA GPU Display Driver para Windows y Linux, la rama del controlador R450 y R460, contiene Una vulnerabilidad en la que el software usa un recuento de referencia para administrar un recurso que se actualiza inapropiadamente, lo que puede llevar a la denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H",
            "baseScore" : 6.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-404"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "450.119.03",
            "matchCriteriaId" : "69312265-BEBA-48BC-A771-5C31840BBA76"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.96",
            "matchCriteriaId" : "3876CD3B-354A-4FE5-A528-A4B135F300C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "460.73.01",
            "matchCriteriaId" : "F136B0BE-76D2-419F-8F57-F0FE28316B1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "462.31",
            "matchCriteriaId" : "DF304158-67E3-4F9A-86D8-226626211F26"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1078",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-21T23:15:07.767",
      "lastModified" : "2024-11-21T05:43:33.233",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA Windows GPU Display Driver for Windows, all versions, contains a vulnerability in the kernel driver (nvlddmkm.sys) where a NULL pointer dereference may lead to system crash."
      }, {
        "lang" : "es",
        "value" : "NVIDIA Windows GPU Display Driver para Windows, todas las versiones, contiene Una vulnerabilidad en el controlador del kernel (nvlddmkm.sys) donde una desreferencia del puntero NULL puede conllevar a un bloqueo del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 4.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "390",
            "versionEndExcluding" : "392.65",
            "matchCriteriaId" : "9FE14B9C-CC39-47CF-9C33-5EAA716DDD79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "418",
            "versionEndExcluding" : "427.33",
            "matchCriteriaId" : "22DC6378-9844-4247-8395-563EF075D0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "450",
            "versionEndExcluding" : "452.96",
            "matchCriteriaId" : "3876CD3B-354A-4FE5-A528-A4B135F300C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "460",
            "versionEndExcluding" : "462.31",
            "matchCriteriaId" : "DF304158-67E3-4F9A-86D8-226626211F26"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:gpu_display_driver:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "465",
            "versionEndExcluding" : "466.11",
            "matchCriteriaId" : "6F6BA69D-0332-4D95-867E-C03892F2091B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29467",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-22T00:15:08.140",
      "lastModified" : "2024-11-21T06:01:10.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wrongthink is an encrypted peer-to-peer chat program. A user could check their fingerprint into the service and enter a script to run arbitrary JavaScript on the site. No workarounds exist, but a patch exists in version 2.4.1."
      }, {
        "lang" : "es",
        "value" : "Wrongthink es un programa de chat de igual a igual cifrado.&#xa0;Un usuario puede comprobar su huella digital en el servicio e ingresar un script para ejecutar JavaScript arbitrario en el sitio.&#xa0;No se presentan soluciones alternativas, pero se presenta un parche en la versión 2.4.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-80"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wrongthink_project:wrongthink:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.4.1",
            "matchCriteriaId" : "0B991D26-2D12-4A54-B256-80DAE7F0426D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/birb-digital/wrongthink/security/advisories/GHSA-529v-f2gf-62w9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/birb-digital/wrongthink/security/advisories/GHSA-529v-f2gf-62w9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29465",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-22T01:15:07.697",
      "lastModified" : "2024-11-21T06:01:10.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files on the system. As a workaround, bot maintainers can edit their `setting.py` file then add `<` and `>` into the `RCE` variable inside of it to fix the issue without an update. The vulnerability is patched in version 0.0.4."
      }, {
        "lang" : "es",
        "value" : "Discord-Recon es un bot para el servicio de chat Discord.&#xa0;Unas versiones de Discord-Recon versiones 0.0.3 y anteriores, contienen una vulnerabilidad en la que un atacante remoto puede sobrescribir cualquier archivo del sistema con los resultados del comando.&#xa0;Esto puede resultar en la ejecución de código remota  cuando el usuario sobrescribe archivos importantes en el sistema.&#xa0;Como solución alternativa, los encargados de mantenimiento de bots pueden editar su archivo \"setting.py\" y luego agregar\" (\"y\") \"en la variable\" RCE\" dentro de él para solucionar el problema sin una actualización.&#xa0;La vulnerabilidad está parcheada en la versión 0.0.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discord:discord-recon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.4",
            "matchCriteriaId" : "3C16FC61-4C51-4BF4-A49B-815084946EF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-6pp2-rpj3-jcjx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-6pp2-rpj3-jcjx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29466",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-22T01:15:07.740",
      "lastModified" : "2024-11-21T06:01:10.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file `app.py` and add `.replace('..', '')` into the `Path` variable inside of the `recon` function. The vulnerability is patched in version 0.0.4."
      }, {
        "lang" : "es",
        "value" : "Discord-Recon es un bot para el servicio de chat Discord.&#xa0;En versiones de Discord-Recon versiones 0.0.3 y anteriores, un atacante remoto puede leer archivos locales del servidor que pueden divulgar información importante.&#xa0;Como solución alternativa, un encargado de mantenimiento de bots puede ubicar el archivo \"app.py\" y agregar\" .replace (\"..\", '')\" en la variable \"Path\" dentro de la función \"recon\".&#xa0;La vulnerabilidad está parcheada en versión 0.0.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-24"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:discord:discord-recon:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.0.4",
            "matchCriteriaId" : "3C16FC61-4C51-4BF4-A49B-815084946EF6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-p2pw-8xwf-879g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DEMON1A/Discord-Recon/security/advisories/GHSA-p2pw-8xwf-879g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31545",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:07.937",
      "lastModified" : "2024-11-21T06:05:52.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The page_recent_contributors leaked the existence of certain deleted MediaWiki usernames, related to rev_deleted."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;El page_recent_contributors filtró la existencia de determinados nombres de usuario de MediaWiki eliminados, relacionados con rev_deleted"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I8d5ed9ca84282ee50832035af86123633fc88293",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T71367",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I8d5ed9ca84282ee50832035af86123633fc88293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T71367",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31546",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:07.970",
      "lastModified" : "2024-11-21T06:05:53.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly logged sensitive suppression deletions, which should not have been visible to users with access to view AbuseFilter log data."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;Registraba incorrectamente las supresiones confidenciales, que no deberían haber sido visibles para usuarios con acceso a visualizar los datos de registro de AbuseFilter"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I38a0a24fa32ca7a052b6940864a32b3856e84553",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T71617",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I38a0a24fa32ca7a052b6940864a32b3856e84553",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T71617",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31547",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.000",
      "lastModified" : "2024-11-21T06:05:53.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. Its AbuseFilterCheckMatch API reveals suppressed edits and usernames to unprivileged users through the iteration of crafted AbuseFilter rules."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;Su API AbuseFilterCheckMatch revela ediciones suprimidas y nombres de usuario a usuarios sin privilegios por medio de la iteración de reglas AbuseFilter diseñadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I3f7dbd8b873d411e37c8c3aac2339bf5ec36907d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I4900b1be73323599d74e3164447f81eded094d75",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T223654",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I3f7dbd8b873d411e37c8c3aac2339bf5ec36907d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I4900b1be73323599d74e3164447f81eded094d75",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T223654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31548",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.033",
      "lastModified" : "2024-11-21T06:05:53.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. A MediaWiki user who is partially blocked or was unsuccessfully blocked could bypass AbuseFilter and have their edits completed."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;Un usuario de MediaWiki que está parcialmente bloqueado o que ha sido bloqueado sin éxito podía omitir AbuseFilter y completar sus ediciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/Ifac795125927d584a31d95e1b4c4241eef860fa1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T272333",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Ifac795125927d584a31d95e1b4c4241eef860fa1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T272333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31549",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.067",
      "lastModified" : "2024-11-21T06:05:53.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. The Special:AbuseFilter/examine form allowed for the disclosure of suppressed MediaWiki usernames to unprivileged users."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;El formulario Special: AbuseFilter/Examinar permitía la divulgación de nombres de usuario de MediaWiki suprimidos a usuarios sin privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I6063c02fa261c4cc0e6dbbb2db4e111eb85912c2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I71a6d521bd12931ce60eec4d2dc35af19146000f",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T274152",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I6063c02fa261c4cc0e6dbbb2db4e111eb85912c2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I71a6d521bd12931ce60eec4d2dc35af19146000f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T274152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31550",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.097",
      "lastModified" : "2024-11-21T06:05:53.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the CommentBox extension for MediaWiki through 1.35.2. Via crafted configuration variables, a malicious actor could introduce XSS payloads into various layers."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión CommentBox para MediaWiki versiones hasta 1.35.2.&#xa0;por medio de variables de configuración diseñadas, un actor malicioso podría introducir cargas útiles XSS en varias capas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Commentbox/+/651934/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T270767",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/Commentbox/+/651934/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T270767",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31551",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.130",
      "lastModified" : "2024-11-21T06:05:53.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the PageForms extension for MediaWiki through 1.35.2. Crafted payloads for Token-related query parameters allowed for XSS on certain PageForms-managed MediaWiki pages."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión PageForms para MediaWiki versiones hasta 1.35.2.&#xa0;Las cargas útiles diseñadas para los parámetros query relacionados con el token permitieron un ataque de tipo XSS en determinadas páginas de MediaWiki administradas por PageForms"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I20b63bd38779d2ccbe2d86f9879df85ca3b685f6",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I5e0abbc2f80e6bda255b3b32a4df39a7fe7d3793",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Ibe68b070ee791cd0c8e7f50eb04ac4e066b1512c",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T259433",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I20b63bd38779d2ccbe2d86f9879df85ca3b685f6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I5e0abbc2f80e6bda255b3b32a4df39a7fe7d3793",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Ibe68b070ee791cd0c8e7f50eb04ac4e066b1512c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T259433",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31552",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.163",
      "lastModified" : "2024-11-21T06:05:53.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It incorrectly executed certain rules related to blocking accounts after account creation. Such rules would allow for user accounts to be created while blocking only the IP address used to create an account (and not the user account itself). Such rules could also be used by a nefarious, unprivileged user to catalog and enumerate any number of IP addresses related to these account creations."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;Ejecutó inapropiadamente determinadas reglas relacionadas con el bloqueo de cuentas después de la creación de la cuenta.&#xa0;Dichas reglas permitirían crear cuentas de usuario mientras se bloquea solo la dirección IP usada para crear una cuenta (y no la cuenta de usuario en sí).&#xa0;Estas reglas también podrían ser usadas por un usuario infame y sin privilegios para catalogar y enumerar cualquier número de direcciones IP relacionadas con estas creaciones de cuentas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I8bae477ad7e4d0190335363ac2decf28e4313da1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T152394",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I8bae477ad7e4d0190335363ac2decf28e4313da1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T152394",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31553",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.197",
      "lastModified" : "2024-11-21T06:05:54.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the CheckUser extension for MediaWiki through 1.35.2. MediaWiki usernames with trailing whitespace could be stored in the cu_log database table such that denial of service occurred for certain CheckUser extension pages and functionality. For example, the attacker could turn off Special:CheckUserLog and thus interfere with usage tracking."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión CheckUser para MediaWiki versiones hasta 1.35.2.&#xa0;Unos nombres de usuario de MediaWiki con espacios en blanco al final podrían ser almacenados en la tabla de la base de datos cu_log de manera que se produjera una denegación de servicio para determinadas páginas de extensión y funcionalidad CheckUser.&#xa0;Por ejemplo, el atacante podría desactivar Special: CheckUserLog y así interferir con el seguimiento del uso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/666963",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/666964",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667023",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667024",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667025",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667027",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T275669",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/666963",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/666964",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667025",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/c/mediawiki/extensions/CheckUser/+/667027",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T275669",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31554",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.230",
      "lastModified" : "2024-11-21T06:05:54.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the AbuseFilter extension for MediaWiki through 1.35.2. It improperly handled account blocks for certain automatically created MediaWiki user accounts, thus allowing nefarious users to remain unblocked."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión AbuseFilter para MediaWiki versiones hasta 1.35.2.&#xa0;Manejó inapropiadamente unos bloqueos de cuentas para determinadas cuentas de usuario de MediaWiki creadas automáticamente, lo que permitió a usuarios nefastos permanecieran desbloqueados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/Ie1f4333d5b1c9d17fb2236fe38a31de427a4cc48",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T272244",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/Ie1f4333d5b1c9d17fb2236fe38a31de427a4cc48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T272244",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31555",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T03:15:08.263",
      "lastModified" : "2024-11-21T06:05:54.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the Oauth extension for MediaWiki through 1.35.2. It did not validate the oarc_version (aka oauth_registered_consumer.oarc_version) parameter's length."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la extensión Oauth para MediaWiki versiones hasta 1.35.2.&#xa0;No comprobó la longitud del parámetro oarc_version (también se conoce como oauth_registered_consumer.oarc_version)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mediawiki:mediawiki:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.35.2",
            "matchCriteriaId" : "4067807D-769C-485F-A7E3-EE96885BDCE7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gerrit.wikimedia.org/r/q/I222c053b4b14ac1ad0f5b3a51565b1b9cd4c139d",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T277388",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gerrit.wikimedia.org/r/q/I222c053b4b14ac1ad0f5b3a51565b1b9cd4c139d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://phabricator.wikimedia.org/T277388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3287",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T13:15:07.970",
      "lastModified" : "2024-11-21T06:21:13.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine OpManager versiones anteriores a 12.5.329, permite una ejecución de código remota no autenticada debido a una omisión general en la clase de deserialización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.5",
            "matchCriteriaId" : "0026FC79-6554-4B68-89EB-D7A8422C7406"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0EB89D-E090-49D6-B851-B369B6B94EDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125000:*:*:*:*:*:*",
            "matchCriteriaId" : "94F878CC-E691-41E9-A90D-72EA25038963"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125002:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1EA156-BD95-4AAA-B688-0CD62CCDB60A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125100:*:*:*:*:*:*",
            "matchCriteriaId" : "8033E51C-D261-4A12-96CD-AE1F13BFD2AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125101:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE1E1E6-ED1C-443A-A576-AD47D65082B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125102:*:*:*:*:*:*",
            "matchCriteriaId" : "3E283214-CE6A-4CD6-9E9B-7BF09C37447D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125108:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF84A5E-C43B-4637-B725-1087D2057EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125110:*:*:*:*:*:*",
            "matchCriteriaId" : "25AEF257-E1C1-4DFD-9EC0-9B2AC3920CCD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125111:*:*:*:*:*:*",
            "matchCriteriaId" : "46E32091-F91D-4706-A4F9-DC658CF36A6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125112:*:*:*:*:*:*",
            "matchCriteriaId" : "AC7D1106-6708-4A84-A077-286376C72AB7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125113:*:*:*:*:*:*",
            "matchCriteriaId" : "071B3368-D7C2-4EE1-808F-1F4A3C3A4756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125114:*:*:*:*:*:*",
            "matchCriteriaId" : "4E9D5882-91D6-4E9D-AD8B-F3861D987826"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125116:*:*:*:*:*:*",
            "matchCriteriaId" : "17931D40-369C-430F-B5ED-FAF69FAA0E3F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125117:*:*:*:*:*:*",
            "matchCriteriaId" : "02B4D022-BC43-4041-BA2B-60A6D42AD150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125118:*:*:*:*:*:*",
            "matchCriteriaId" : "15FFD3F7-CB9F-4FB1-9F2C-CFDAE7E46FF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125120:*:*:*:*:*:*",
            "matchCriteriaId" : "5ED17849-BC14-4996-9DF9-7645B1E17374"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125121:*:*:*:*:*:*",
            "matchCriteriaId" : "D91F6CC5-EDBE-420F-8871-03B8D10254B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125123:*:*:*:*:*:*",
            "matchCriteriaId" : "E82C682C-9F61-45B7-B934-8D6DDBA792AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125124:*:*:*:*:*:*",
            "matchCriteriaId" : "2FC7728B-9FFC-4A8F-BE24-926B8C2823AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125125:*:*:*:*:*:*",
            "matchCriteriaId" : "78BE6CCE-706E-436B-A6E6-26E7D044B209"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125136:*:*:*:*:*:*",
            "matchCriteriaId" : "8BD54A67-C531-4642-90D4-C6E402D55AC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125137:*:*:*:*:*:*",
            "matchCriteriaId" : "9DF164BD-EF39-42E2-807D-F298D68A8D3D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125139:*:*:*:*:*:*",
            "matchCriteriaId" : "5D85766D-1BAC-4477-96D6-EA989D392128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125140:*:*:*:*:*:*",
            "matchCriteriaId" : "CE99520F-C8F3-46EA-9BBA-AAE2AB4AB8CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125143:*:*:*:*:*:*",
            "matchCriteriaId" : "16D8A8F6-8BC3-438D-BF8B-9E2B46ECBF36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125144:*:*:*:*:*:*",
            "matchCriteriaId" : "F3D18E27-EE06-4555-A675-1BAC7D3DD8E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125145:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEFDFF7-5538-4C53-922A-A5E71A0D643E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125156:*:*:*:*:*:*",
            "matchCriteriaId" : "02463016-7156-470F-8535-EF4C7E150546"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125157:*:*:*:*:*:*",
            "matchCriteriaId" : "8DEB616C-2DDC-4138-B6FC-8B2680D35485"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125158:*:*:*:*:*:*",
            "matchCriteriaId" : "D51E7B22-9293-4086-B143-2D279597A5CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125159:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4D8585-6109-45C0-94B4-667D11F0509F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125161:*:*:*:*:*:*",
            "matchCriteriaId" : "97CB62BA-09FA-446D-A8CF-958980B67F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125163:*:*:*:*:*:*",
            "matchCriteriaId" : "F871111C-4B61-4C50-ABDA-78D8D988DCD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125174:*:*:*:*:*:*",
            "matchCriteriaId" : "9950CFB9-FCDE-4696-97AF-251467270375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125175:*:*:*:*:*:*",
            "matchCriteriaId" : "B674CFD8-6AE7-420A-BD7A-DD7A068CA5D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125176:*:*:*:*:*:*",
            "matchCriteriaId" : "56BCA911-733C-4F8C-B3CD-22F3E6CA1F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125177:*:*:*:*:*:*",
            "matchCriteriaId" : "A1281E75-AC6D-4077-9207-7CA7E5BCB1CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125178:*:*:*:*:*:*",
            "matchCriteriaId" : "CC052CBA-2B37-4E84-978D-36185EE1A3A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125180:*:*:*:*:*:*",
            "matchCriteriaId" : "72CC7428-8DD0-45DB-8D80-C02CD9B6CB65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125181:*:*:*:*:*:*",
            "matchCriteriaId" : "0C1691B0-FA38-4A29-8D49-D99A675C122A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125192:*:*:*:*:*:*",
            "matchCriteriaId" : "194ACE61-101D-40C3-9377-12039533AB45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125193:*:*:*:*:*:*",
            "matchCriteriaId" : "86428D44-03BC-4528-ADB5-3AC05231759D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125194:*:*:*:*:*:*",
            "matchCriteriaId" : "B694D0FC-320A-44F9-9FFB-0706CDD3004C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125195:*:*:*:*:*:*",
            "matchCriteriaId" : "BE298317-10EE-4A34-B4D0-8D03B727A75B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125196:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A1B243-163D-461B-BEAB-81E6E2DB36EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125197:*:*:*:*:*:*",
            "matchCriteriaId" : "5E86C3A0-700E-4CB2-AFDC-F203C61D413C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125198:*:*:*:*:*:*",
            "matchCriteriaId" : "A550184D-13BD-4F2A-9DE5-AC66B496FFC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125201:*:*:*:*:*:*",
            "matchCriteriaId" : "538BCF38-69B6-4686-B1F1-82B10175CCBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125204:*:*:*:*:*:*",
            "matchCriteriaId" : "F29A6AE3-B864-4552-9BE9-074CB6935B07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125212:*:*:*:*:*:*",
            "matchCriteriaId" : "7CD2AB8D-F638-48E0-A5D6-1E969F9998B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125213:*:*:*:*:*:*",
            "matchCriteriaId" : "76528168-A54D-4398-B558-6DC27ACCBFBF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125214:*:*:*:*:*:*",
            "matchCriteriaId" : "6C1DCA3B-41B8-402B-B5E8-2C3494C36B77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125215:*:*:*:*:*:*",
            "matchCriteriaId" : "531A9E5C-9C45-4982-8ADE-5B41CE5F5B48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125216:*:*:*:*:*:*",
            "matchCriteriaId" : "FA70F031-A7EF-49F5-A1F6-C3DD33198D86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125228:*:*:*:*:*:*",
            "matchCriteriaId" : "5DF093BF-830B-4C9A-A4B2-41C7811E4EFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125229:*:*:*:*:*:*",
            "matchCriteriaId" : "AB64E7D3-D835-4F46-BD81-6B59CF7EB9F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125230:*:*:*:*:*:*",
            "matchCriteriaId" : "A2176672-0E34-4B46-9202-483F1D315836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125231:*:*:*:*:*:*",
            "matchCriteriaId" : "FBD2726E-4AAA-4E7D-A8E7-89DB875E7E6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125232:*:*:*:*:*:*",
            "matchCriteriaId" : "94AF723B-F1B7-44A8-B654-7C10881A6AF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125233:*:*:*:*:*:*",
            "matchCriteriaId" : "0C65E8BE-968F-4AB8-BD3F-A123C66E576A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125312:*:*:*:*:*:*",
            "matchCriteriaId" : "9A4C70B1-A902-4835-BFFC-692CA91C1317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125323:*:*:*:*:*:*",
            "matchCriteriaId" : "06FE113C-94B6-419B-8AA0-767EA74D11ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125324:*:*:*:*:*:*",
            "matchCriteriaId" : "C30413D5-7F5B-47EE-825E-CEEF69DAC5B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125326:*:*:*:*:*:*",
            "matchCriteriaId" : "57DA6C66-3235-4923-89D0-EF093FF4126F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_opmanager:12.5:build125328:*:*:*:*:*:*",
            "matchCriteriaId" : "82307372-C2CF-4E19-9D1D-7D33FCCE8F5B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125329",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164231/ManageEngine-OpManager-SumPDU-Java-Deserialization.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.manageengine.com/network-monitoring/help/read-me-complete.html#125329",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27736",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T14:15:09.123",
      "lastModified" : "2024-11-21T05:58:29.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "FusionAuth fusionauth-samlv2 before 0.5.4 allows XXE attacks via a forged AuthnRequest or LogoutRequest because parseFromBytes uses javax.xml.parsers.DocumentBuilderFactory unsafely."
      }, {
        "lang" : "es",
        "value" : "FusionAuth fusionauth-samlv2 versiones anteriores a 0.5.4, permite ataques de tipo XXE a través de un AuthnRequest o LogoutRequest falsificada porque parseFromBytes usa javax.xml.parsers.DocumentBuilderFactory de manera no segura"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fusionauth:saml_v2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.5.4",
            "matchCriteriaId" : "A04CA121-234A-4612-A093-99CCFC6F49D7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FusionAuth/fusionauth-samlv2/commit/c66fb689d50010662f705d5b585c6388ce555dbd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FusionAuth/fusionauth-samlv2/compare/0.5.3...0.5.4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Research/Advisories/2021-03_CSNC-2021-004_FusionAuth_SAML_Library_XML_External_Entity.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FusionAuth/fusionauth-samlv2/commit/c66fb689d50010662f705d5b585c6388ce555dbd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FusionAuth/fusionauth-samlv2/compare/0.5.3...0.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.compass-security.com/fileadmin/Research/Advisories/2021-03_CSNC-2021-004_FusionAuth_SAML_Library_XML_External_Entity.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22540",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2021-04-22T15:15:07.930",
      "lastModified" : "2024-11-21T05:50:18.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bad validation logic in the Dart SDK versions prior to 2.12.3 allow an attacker to use an XSS attack via DOM clobbering. The validation logic in dart:html for creating DOM nodes from text did not sanitize properly when it came across template tags."
      }, {
        "lang" : "es",
        "value" : "Una mala lógica de comprobación en el Dart SDK versiones anteriores a 2.12.3 permite a un atacante usar un ataque de tipo XSS por medio de DOM clobbering.&#xa0;La lógica de comprobación en dart: html para crear nodos DOM a partir de texto no se saneaban apropiadamente cuando se encontraba con etiquetas de plantilla"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dart:dart_software_development_kit:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.3",
            "matchCriteriaId" : "E9ECB219-E894-4499-9918-2199CA9532EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dart-lang/sdk/commit/ce5a1c2392debce967415d4c09359ff2555e3588",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dart-lang/sdk/security/advisories/GHSA-3rfv-4jvg-9522",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/dart-lang/sdk/commit/ce5a1c2392debce967415d4c09359ff2555e3588",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dart-lang/sdk/security/advisories/GHSA-3rfv-4jvg-9522",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27400",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T17:15:07.723",
      "lastModified" : "2024-11-21T05:57:55.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault and Vault Enterprise Cassandra integrations (storage backend and database secrets engine plugin) did not validate TLS certificates when connecting to Cassandra clusters. Fixed in 1.6.4 and 1.7.1"
      }, {
        "lang" : "es",
        "value" : "Las integraciones de HashiCorp Vault y Vault Enterprise Cassandra (backend de almacenamiento y plugin del motor de secretos de la base de datos) no comprobaban los certificados TLS al conectarse a los clústeres de Cassandra.&#xa0;Corregido en 1.6.4 y 1.7.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "27B3B966-91DB-43C2-BBDF-89B8B7705A5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "497EEAD2-3830-42CC-928A-3EAFC2CBE890"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "AD8B7C18-6F3A-4609-99FC-AEA2C3DA8A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "E8392A7C-4F72-4B67-BE17-A8DE721EA92E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-10-vault-s-cassandra-integrations-did-not-validate-tls-certificates/23463",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-10-vault-s-cassandra-integrations-did-not-validate-tls-certificates/23463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29653",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T17:15:07.753",
      "lastModified" : "2024-11-21T06:01:34.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Vault and Vault Enterprise 1.5.1 and newer, under certain circumstances, may exclude revoked but unexpired certificates from the CRL. Fixed in 1.5.8, 1.6.4, and 1.7.1."
      }, {
        "lang" : "es",
        "value" : "HashiCorp Vault y Vault Enterprise versiones 1.5.1 y posteriores, bajo determinadas circunstancias, pueden excluir certificados revocados pero no vencidos de la CRL.&#xa0;Corregido en versiones 1.5.8, 1.6.4 y 1.7.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.5.1",
            "versionEndExcluding" : "1.5.8",
            "matchCriteriaId" : "3E8C2B56-E342-46D5-8D79-37DD75D6D811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.5.1",
            "versionEndExcluding" : "1.5.8",
            "matchCriteriaId" : "08ED6BDB-15A0-458E-B3D1-4B69592CAC7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "F0038DAE-0651-4FB2-87F6-D3116B6E25B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.6.0",
            "versionEndExcluding" : "1.6.4",
            "matchCriteriaId" : "F5117009-915A-4869-A1F5-3BBA59D9E7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "AD8B7C18-6F3A-4609-99FC-AEA2C3DA8A63"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "1.7.0",
            "versionEndExcluding" : "1.7.1",
            "matchCriteriaId" : "E8392A7C-4F72-4B67-BE17-A8DE721EA92E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-09-vault-s-pki-engine-crl-may-exclude-revoked-but-unexpired-certificates-after-tidy/23461/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-09-vault-s-pki-engine-crl-may-exclude-revoked-but-unexpired-certificates-after-tidy/23461/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30476",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T17:15:07.780",
      "lastModified" : "2024-11-21T06:03:59.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp Terraform’s Vault Provider (terraform-provider-vault) did not correctly configure GCE-type bound labels for Vault’s GCP auth method. Fixed in 2.19.1."
      }, {
        "lang" : "es",
        "value" : "Vault Provider (terraform-provider-vault) de HashiCorp Terraform no configuró correctamente las etiquetas enlazadas de tipo GCE para el método de autenticación de GCP de Vault.&#xa0;Corregido en la versión 2.19.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:terraform_provider:*:*:*:*:*:vault:*:*",
            "versionEndExcluding" : "2.19.1",
            "matchCriteriaId" : "03E256CA-2275-4D22-A567-058EE431D9E8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-11-terraform-s-vault-provider-did-not-correctly-configure-bound-labels-for-gcp-auth/23464/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/terraform-provider-vault/issues/996",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-11-terraform-s-vault-provider-did-not-correctly-configure-bound-labels-for-gcp-auth/23464/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/terraform-provider-vault/issues/996",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23133",
      "sourceIdentifier" : "psirt@paloaltonetworks.com",
      "published" : "2021-04-22T18:15:08.123",
      "lastModified" : "2024-11-21T05:51:16.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_destroy_sock is called without sock_net(sk)->sctp.addr_wq_lock then an element is removed from the auto_asconf_splist list without any proper locking. This can be exploited by an attacker with network service privileges to escalate to root or from the context of an unprivileged user directly if a BPF_CGROUP_INET_SOCK_CREATE is attached which denies creation of some SCTP socket."
      }, {
        "lang" : "es",
        "value" : "Una condición de carrera en los sockets SCTP del kernel de Linux (el archivo net/sctp/socket.c) versiones anteriores a 5.12-rc8, puede conllevar a una escalada de privilegios del kernel desde el contexto de un servicio de red o un proceso no privilegiado.&#xa0;Si la función sctp_destroy_sock es llamado sin sock_net (sk) -) sctp.addr_wq_lock, un elemento es eliminado de la lista auto_asconf_splist sin ningún bloqueo apropiado.&#xa0;Esto puede ser explotado por un atacante con privilegios de servicio de red para escalar a root o desde el contexto de un usuario no privilegiado directamente si un  BPF_CGROUP_INET_SOCK_CREATE es adjuntado que niega la creación de algún socket SCTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@paloaltonetworks.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@paloaltonetworks.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.10",
            "versionEndExcluding" : "4.14.232",
            "matchCriteriaId" : "AA37000C-4A14-43C9-85B7-38769DC96041"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.15",
            "versionEndExcluding" : "4.19.189",
            "matchCriteriaId" : "DCCA659A-B6C8-4D6E-9598-364709A6D261"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.20",
            "versionEndExcluding" : "5.4.114",
            "matchCriteriaId" : "997A4C67-E4A2-4FCD-A826-F74DB7AD54CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5",
            "versionEndExcluding" : "5.10.32",
            "matchCriteriaId" : "7219CE54-2A13-423E-915D-1D30ADB4BE87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.11",
            "versionEndExcluding" : "5.11.16",
            "matchCriteriaId" : "73E1B19B-5CED-4857-9364-96E77B8A8EAC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire_\\&_hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6D700C5-F67F-4FFB-BE69-D524592A3D2E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "390BCCEF-BD91-426B-B89C-D9371A02FA9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:solidfire_baseboard_management_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090AA6F4-4404-4E26-82AB-C3A22636F276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/1",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/2",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/3",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/4",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b166a20b07382b8bc1dcee2a448715c9c2c81b5b",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/",
        "source" : "psirt@paloaltonetworks.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/",
        "source" : "psirt@paloaltonetworks.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/",
        "source" : "psirt@paloaltonetworks.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0008/",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/18/2",
        "source" : "psirt@paloaltonetworks.com",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=b166a20b07382b8bc1dcee2a448715c9c2c81b5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CUX2CA63453G34C6KYVBLJXJXEARZI2X/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAEQ3H6HKNO6KUCGRZVYSFSAGEUX23JL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XZASHZVCOFJ4VU2I3BN5W5EPHWJQ7QWX/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.openwall.com/lists/oss-security/2021/04/18/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27277",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-22T18:15:08.167",
      "lastModified" : "2024-11-21T05:57:44.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Orion Virtual Infrastructure Monitor 2020.2. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the OneTimeJobSchedulerEventsService WCF service. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-11955."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar los privilegios en las instalaciones afectadas de SolarWinds Orion Virtual Infrastructure Monitor versión 2020.2.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del servicio WCF OneTimeJobSchedulerEventsService.&#xa0;El problema resulta de una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede provocar la deserialización de datos que no son de confianza.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto de SYSTEM.&#xa0;Era ZDI-CAN-11955"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:orion_platform:2020.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4FD7611-A6BC-47DC-B27F-66E3467C19D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/Success_Center/SAM/Content/Release_Notes/SAM_2020-2-5_release_notes.htm#Fixed",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-373/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/Success_Center/SAM/Content/Release_Notes/SAM_2020-2-5_release_notes.htm#Fixed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-373/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27278",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-22T18:15:08.213",
      "lastModified" : "2024-11-21T05:57:44.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the current user on the host system. Was ZDI-CAN-12130."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.1.1-49141.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado destino para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema resulta de una falta de comprobación apropiada de una ruta suministrada por el usuario antes de usarla en operaciones de archivos.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código en el contexto del usuario actual en el sistema host.&#xa0;Era ZDI-CAN-12130"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.1.1:*:*:*:*:macos:*:*",
            "matchCriteriaId" : "784B3C44-8D35-48DD-A6D0-08186B743DC4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-412/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-412/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28168",
      "sourceIdentifier" : "emo@eclipse.org",
      "published" : "2021-04-22T18:15:08.250",
      "lastModified" : "2024-11-21T05:59:14.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which creates a file inside of the system temporary directory with the permissions: -rw-r--r--. Thus the contents of this file are viewable by all other users locally on the system. As such, if the contents written is security sensitive, it can be disclosed to other local users."
      }, {
        "lang" : "es",
        "value" : "Eclipse Jersey versiones 2.28 hasta 2.33 y Eclipse Jersey versiones 3.0.0 hasta 3.0.1, contienen una vulnerabilidad de divulgación de información local.&#xa0;Esto es debido al uso de la función File.createTempFile que crea un archivo dentro del directorio temporal del sistema con los permisos:-rw-r--r--.&#xa0;Por lo tanto, el contenido de este archivo es visible para todos los demás usuarios localmente en el sistema.&#xa0;Como tal, si el contenido escrito es sensible a la seguridad, puede ser revelado a otros usuarios locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "emo@eclipse.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "emo@eclipse.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        }, {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jersey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.28",
            "versionEndExcluding" : "2.34",
            "matchCriteriaId" : "950CB985-011C-484C-915C-7B994FEB40E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:eclipse:jersey:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.0.2",
            "matchCriteriaId" : "FE1BC821-0033-43A2-BFA3-6E01995F1611"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_policy:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4367D9B-BF81-47AD-A840-AC46317C774D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_unified_data_repository:1.15.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6EAA723-2A23-4151-930B-86ACF9CC1C0C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/eclipse-ee4j/jersey/pull/4712",
        "source" : "emo@eclipse.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse-ee4j/jersey/security/advisories/GHSA-c43q-5hpj-4crv",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r280438f7cb4b3b1c9dfda9d7b05fa2a5cfab68618c6afee8169ecdaa%40%3Ccommits.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r305fb82e5c005143c1e2ec986a19c0a44f42189ab2580344dc955359%40%3Cdev.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4066176a7352e021d7a81af460044bde8d57f40e98f8e4a31923af3a%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r42fef440487a04cf5e487a9707ef5119d2dd5b809919f25ef4296fc4%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r454f38e85db149869c5a92c993c402260a4f8599bf283f6cfaada972%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6dadc8fe82071aba841d673ffadf34728bff4357796b1990a66e3af1%40%3Ccommits.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r96658b899fcdbf04947257d201dc5a0abdbb5fb0a8f4ec0a6c15e70f%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2722171d569370a9e15147d9f3f6138ad9a188ee879c0156aa2d73a%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra3290fe51b4546fac195724c4187c4cb7fc5809bc596c2f7e97606f4%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra3d7cd37fc794981a885332af2f8df0d873753380ea19935d6d847fc%40%3Cdev.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafc3c4cee534f478cbf8acf91e48373e291a21151f030e8132662a7b%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc288874c330b3af9e29a1a114c5e0d24fff7a79eaa341f551535c8c0%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc6221670de35b819fe191e7d8f2d17bc000549bd554020cec644b71e%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd54b42edccc1b993853a9c4943a9b16db763f5e2febf6e64b7d0fe3c%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdff6939e6c8dd620e20b013d9a35f57d42b3cd19e1d0483d85dfa2fd%40%3Cjira.kafka.apache.org%3E",
        "source" : "emo@eclipse.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "emo@eclipse.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse-ee4j/jersey/pull/4712",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/eclipse-ee4j/jersey/security/advisories/GHSA-c43q-5hpj-4crv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r280438f7cb4b3b1c9dfda9d7b05fa2a5cfab68618c6afee8169ecdaa%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r305fb82e5c005143c1e2ec986a19c0a44f42189ab2580344dc955359%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4066176a7352e021d7a81af460044bde8d57f40e98f8e4a31923af3a%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r42fef440487a04cf5e487a9707ef5119d2dd5b809919f25ef4296fc4%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r454f38e85db149869c5a92c993c402260a4f8599bf283f6cfaada972%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r6dadc8fe82071aba841d673ffadf34728bff4357796b1990a66e3af1%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r96658b899fcdbf04947257d201dc5a0abdbb5fb0a8f4ec0a6c15e70f%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra2722171d569370a9e15147d9f3f6138ad9a188ee879c0156aa2d73a%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra3290fe51b4546fac195724c4187c4cb7fc5809bc596c2f7e97606f4%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra3d7cd37fc794981a885332af2f8df0d873753380ea19935d6d847fc%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rafc3c4cee534f478cbf8acf91e48373e291a21151f030e8132662a7b%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc288874c330b3af9e29a1a114c5e0d24fff7a79eaa341f551535c8c0%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc6221670de35b819fe191e7d8f2d17bc000549bd554020cec644b71e%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rd54b42edccc1b993853a9c4943a9b16db763f5e2febf6e64b7d0fe3c%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdff6939e6c8dd620e20b013d9a35f57d42b3cd19e1d0483d85dfa2fd%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30356",
      "sourceIdentifier" : "cve@checkpoint.com",
      "published" : "2021-04-22T18:15:08.480",
      "lastModified" : "2024-11-21T06:03:56.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to overwrite protected system files."
      }, {
        "lang" : "es",
        "value" : "Se reportó una vulnerabilidad de Denegación de Servicio en Check Point Identity Agent versiones anteriores a R81.018.0000, que podría permitir a usuarios poco privilegiados sobrescribir archivos protegidos del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@checkpoint.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:checkpoint:identity_agent:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "r81.018.0000",
            "matchCriteriaId" : "131908DA-33D7-43AF-8A1A-ABCA85954156"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://supportcontent.checkpoint.com/solutions?id=sk134312",
        "source" : "cve@checkpoint.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://supportcontent.checkpoint.com/solutions?id=sk134312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31571",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T18:15:08.520",
      "lastModified" : "2024-11-21T06:05:55.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation."
      }, {
        "lang" : "es",
        "value" : "El kernel en Amazon Web Services FreeRTOS versiones anteriores a 10.4.3, presenta un desbordamiento de enteros en el archivo queue.c para una creación de cola"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amazon:freertos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.3",
            "matchCriteriaId" : "6F5312AF-71BB-4289-BAB4-CE5931098CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/47338393f1f79558f6144213409f09f81d7c4837",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/47338393f1f79558f6144213409f09f81d7c4837",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31572",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-22T18:15:08.547",
      "lastModified" : "2024-11-21T06:05:55.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer.c for a stream buffer."
      }, {
        "lang" : "es",
        "value" : "El kernel en Amazon Web Services FreeRTOS versiones anteriores a 10.4.3, presenta un desbordamiento de enteros en el archivo stream_buffer.c para un búfer de flujo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amazon:freertos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.3",
            "matchCriteriaId" : "6F5312AF-71BB-4289-BAB4-CE5931098CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/d05b9c123f2bf9090bce386a244fc934ae44db5b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/d05b9c123f2bf9090bce386a244fc934ae44db5b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20590",
      "sourceIdentifier" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp",
      "published" : "2021-04-22T19:15:07.363",
      "lastModified" : "2024-11-21T05:46:50.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper authentication vulnerability in GOT2000 series GT27 model VNC server versions 01.39.010 and prior, GOT2000 series GT25 model VNC server versions 01.39.010 and prior, GOT2000 series GT21 model GT2107-WTBD VNC server versions 01.40.000 and prior, GOT2000 series GT21 model GT2107-WTSD VNC server versions 01.40.000 and prior, GOT SIMPLE series GS21 model GS2110-WTBD-N VNC server versions 01.40.000 and prior and GOT SIMPLE series GS21 model GS2107-WTBD-N VNC server versions 01.40.000 and prior allows a remote unauthenticated attacker to gain unauthorized access via specially crafted packets when the \"VNC server\" function is used."
      }, {
        "lang" : "es",
        "value" : "Vulnerabilidad de autenticación inadecuada en el servidor VNC de la serie GOT2000 modelo GT27 versiones 01.39.010 y anteriores, servidor VNC de la serie GOT2000 modelo GT25 versiones 01.39.010 y anteriores, servidor VNC de la serie GOT2000 modelo GT2107-WTBD versiones 01.40.000 y anteriores, servidor VNC de la serie GOT2000 modelo GT2107-WTSD versiones 01.40. 000 y anteriores, el servidor VNC de la serie GOT SIMPLE GS21 modelo GS2110-WTBD-N versiones 01.40.000 y anteriores y el servidor VNC de la serie GOT SIMPLE GS21 modelo GS2107-WTBD-N versiones 01.40.000 y anteriores permite a un atacante remoto no autenticado obtener acceso no autorizado a través de paquetes especialmente diseñados cuando se utiliza la función \"servidor VNC\"."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:got2000_gt27_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.39.010",
            "matchCriteriaId" : "22A5B6C7-8B78-4129-B86E-B7CF89F516C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:got2000_gt27:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498350D7-F7D7-478E-AD3A-3FE100434649"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:got2000_gt25_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.39.010",
            "matchCriteriaId" : "F7E4DB38-4E11-45AD-AD7D-83A4176AF2AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:got2000_gt25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED2A8FF7-2CFA-4604-A6DE-AE05F7BF1838"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:gt2107-wtbd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.40.000",
            "matchCriteriaId" : "ADEB8E65-0B88-4E32-BF2C-0A48DBE69A29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:gt2107-wtbd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8D058D-DDFB-45D4-BF67-52F47CA0634C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:gt2107-wtsd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.40.000",
            "matchCriteriaId" : "9D35B387-13E1-4A4B-85FE-1859328A2C1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:gt2107-wtsd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A4460D-F108-4DAE-AB65-1083C140F63C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:gs2110-wtbd-n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.40.000",
            "matchCriteriaId" : "1653C34C-63FD-4415-A3DE-31209CBBF934"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:gs2110-wtbd-n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA7AF60-7B6A-4ED7-AA1B-40C5097E4EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mitsubishielectric:gs2107-wtbd-n_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "01.40.000",
            "matchCriteriaId" : "5F2961DA-1947-4DC7-9A8B-05E8588BA2A6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mitsubishielectric:gs2107-wtbd-n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63EA140E-C23D-41FF-B4EF-686C2D42BD22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/vu/JVNVU97615777/index.html",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf",
        "source" : "Mitsubishielectric.Psirt@yd.MitsubishiElectric.co.jp"
      }, {
        "url" : "https://jvn.jp/vu/JVNVU97615777/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.mitsubishielectric.com/en/psirt/vulnerability/pdf/2021-001_en.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3496",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2021-04-22T19:15:07.450",
      "lastModified" : "2024-11-21T06:21:40.943",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap-based buffer overflow was found in jhead in version 3.06 in Get16u() in exif.c when processing a crafted file."
      }, {
        "lang" : "es",
        "value" : "Se encontró un desbordamiento de búfer en la región heap de la memoria en jhead en versión 3.06, en la función Get16u() en el archivo exif.c cuando se procesa un archivo diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jhead_project:jhead:3.06:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05C20ED-B09A-43EE-8D82-0524C33E0E60"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1949245",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matthias-Wandel/jhead/issues/33",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-17",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1949245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Matthias-Wandel/jhead/issues/33",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202210-17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0214",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.353",
      "lastModified" : "2024-11-21T05:42:13.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the distributed or centralized periodic packet management daemon (PPMD) of Juniper Networks Junos OS may cause receipt of a malformed packet to crash and restart the PPMD process, leading to network destabilization, service interruption, and a Denial of Service (DoS) condition. Continued receipt and processing of these malformed packets will repeatedly crash the PPMD process and sustain the Denial of Service (DoS) condition. Due to the nature of the specifically crafted packet, exploitation of this issue requires direct, adjacent connectivity to the vulnerable component. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S12, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S5, 19.2R3-S1; 19.3 versions prior to 19.3R2-S5, 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S2, 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el demonio de administración periódica de paquetes (PPMD) distribuido o centralizado de Juniper Networks Junos OS, puede causar que la recepción de un paquete malformado se bloquee y reinicie el proceso PPMD, conllevando a la desestabilización de la red, la interrupción del servicio y una condición de Denegación de Servicio (DoS) .&#xa0;La recepción y el procesamiento continuo de estos paquetes malformados bloquearán repetidamente el proceso PPMD ??y mantendrán la condición de Denegación de servicio (DoS).&#xa0;Debido a la naturaleza del paquete diseñado específicamente, la explotación de este problema requiere conectividad directa y adyacente al componente vulnerable.&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.&#xa0;4 anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S4;&#xa0;versiones19.2 anteriores a 19.2R1-S5, 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S2, 20.2R2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11117",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11117",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0216",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.397",
      "lastModified" : "2024-11-21T05:42:13.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks Junos OS running on the ACX5448 and ACX710 platforms may cause BFD sessions to flap when a high rate of transit ARP packets are received. This, in turn, may impact routing protocols and network stability, leading to a Denial of Service (DoS) condition. When a high rate of transit ARP packets are exceptioned to the CPU and BFD flaps, the following log messages may be seen: bfdd[15864]: BFDD_STATE_UP_TO_DOWN: BFD Session 192.168.14.3 (IFL 232) state Up -> Down LD/RD(17/19) Up time:11:38:17 Local diag: CtlExpire Remote diag: None Reason: Detect Timer Expiry. bfdd[15864]: BFDD_TRAP_SHOP_STATE_DOWN: local discriminator: 17, new state: down, interface: irb.998, peer addr: 192.168.14.3 rpd[15839]: RPD_ISIS_ADJDOWN: IS-IS lost L2 adjacency to peer on irb.998, reason: BFD Session Down bfdd[15864]: BFDD_TRAP_SHOP_STATE_UP: local discriminator: 17, new state: up, interface: irb.998, peer addr: 192.168.14.3 This issue only affects the ACX5448 Series and ACX710 Series routers. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS: 18.2 versions prior to 18.2R3-S8 on ACX5448; 18.3 versions prior to 18.3R3-S5 on ACX5448; 18.4 versions prior to 18.4R1-S6, 18.4R3-S7 on ACX5448; 19.1 versions prior to 19.1R3-S5 on ACX5448; 19.2 versions prior to 19.2R2, 19.2R3 on ACX5448; 19.3 versions prior to 19.3R3 on ACX5448; 19.4 versions prior to 19.4R3 on ACX5448; 20.1 versions prior to 20.1R2 on ACX5448; 20.2 versions prior to 20.2R2 on ACX5448 and ACX710."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks Junos OS que se ejecuta en las plataformas ACX5448 y ACX710, puede causar que las sesiones BFD se interrumpan cuando se reciben paquetes ARP de alta tasa de tránsito.&#xa0;Esto, a su vez, puede afectar los protocolos de enrutamiento y la estabilidad de la red, dando lugar a una condición de Denegación de Servicio (DoS).&#xa0;Cuando se exceptúa una alta tasa de tránsito de paquetes ARP a la CPU y los flaps BFD, se pueden visualizar los siguientes mensajes de registro: bfdd[15864]: BFDD_STATE_UP_TO_DOWN: BFD Session 192.168.14.3 (IFL 232) state Up -) Down LD/RD(17/19) Up time:11:38:17 Local diag: CtlExpire Remote diag: None Reason: Detect Timer Expiry. bfdd[15864]: BFDD_TRAP_SHOP_STATE_DOWN: local discriminator: 17, new state: down, interface: irb.998, peer addr: 192.168.14.3 rpd[15839]: RPD_ISIS_ADJDOWN: IS-IS lost L2 adjacency to peer on irb.998, reason: BFD Session Down bfdd[15864]: BFDD_TRAP_SHOP_STATE_UP: local discriminator: 17, new state: up, interface: irb.998, peer addr: 192.168.14.3. Este problema solo afecta a los enrutadores de las series ACX5448 y ACX710.&#xa0;Ningún otro producto o plataforma está afectado por esta vulnerabilidad.&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 18.2 anteriores a 18.2R3-S8 en la Serie ACX5448;&#xa0;versiones 18.3 anteriores a 18.3R3-S5 en la Serie ACX5448;&#xa0;versiones 18.4 anteriores a 18.4R1-S6, 18.4R3-S7 en la Serie ACX5448;&#xa0;versiones 19.1 anteriores a 19.1R3-S5 en la Serie ACX5448;&#xa0;versiones 19.2 anteriores a 19.2R2, 19.2R3 en la Serie ACX5448;&#xa0;versiones 19.3 anteriores a 19.3R3 en la Serie ACX5448;&#xa0;versiones 19.4 anteriores a 19.4R3 en la Serie ACX5448;&#xa0;versiones 20.1 anteriores a 20.1R2 en la Serie ACX5448;&#xa0;versiones 20.2 anteriores a 20.2R2 en la Serie ACX5448 y ACX710"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5448:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7B849-D1D4-46F3-B502-5D84C5E7C3B0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC3484A2-C7E4-43D1-9D47-08C531185C67"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "75F125DC-3A21-489F-B324-A586F5BA350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5448:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EB7B849-D1D4-46F3-B502-5D84C5E7C3B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11118",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0224",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.427",
      "lastModified" : "2024-11-21T05:42:14.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the handling of internal resources necessary to bring up a large number of Layer 2 broadband remote access subscriber (BRAS) nodes in Juniper Networks Junos OS can cause the Access Node Control Protocol daemon (ANCPD) to crash and restart, leading to a Denial of Service (DoS) condition. Continued processing of spoofed subscriber nodes will create a sustained Denial of Service (DoS) condition. When the number of subscribers attempting to connect exceeds the configured maximum-discovery-table-entries value, the subscriber fails to map to an internal neighbor entry, causing the ANCPD process to crash. This issue affects Juniper Networks Junos OS: All versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R2-S13; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R1-S8, 18.4R3-S8; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el manejo de los recursos internos necesarios para activar una gran cantidad de nodos de broadband remote access subscriber (BRAS) de Capa 2 en Juniper Networks Junos OS puede causar que el demonio Access Node Control Protocol se bloquee y reinicie, conllevando a una condición de Denegación de Servicio (DoS) sostenida.&#xa0;El procesamiento continuo de los nodos de suscriptores falsificados creará una condición sostenida de Denegación de Servicio (DoS).&#xa0;Cuando el número de suscriptores que intentan conectarse excede el valor de entradas de tabla de descubrimiento máximo configurado, el suscriptor no se asigna a una entrada de vecino interno, causando que el proceso ANCPD se bloquee.&#xa0;Este problema afecta a Juniper Networks Junos OS: todas las versiones anteriores a 17.3R3-S12;&#xa0;versiones 17.4 anteriores a 17.4R2-S13;&#xa0;versiones 18.1 anteriores a 18.1R3-S13;&#xa0;versiones 18.2 anteriores a 18.2R3-S8;&#xa0;versiones 18.3 anteriores a 18.3R3-S5;&#xa0;versiones 18.&#xa0;4 anteriores a 18.4R1-S8, 18.4R3-S8;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;19.2 versiones anteriores a 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2;&#xa0;versiones 20.3 anteriores a 20.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7BD5-4D13-4C20-B2C9-524F72B206F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "75F125DC-3A21-489F-B324-A586F5BA350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "14FC491D-8DA8-4E79-A9A6-3629E41C847A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11119",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0225",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.463",
      "lastModified" : "2024-11-21T05:42:14.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Check for Unusual or Exceptional Conditions in Juniper Networks Junos OS Evolved may cause the stateless firewall filter configuration which uses the action 'policer' in certain combinations with other options to not take effect. An administrator can use the following CLI command to see the failures with filter configuration: user@device> show log kfirewall-agent.log | match ERROR Jul 23 14:16:03 ERROR: filter not supported This issue affects Juniper Networks Junos OS Evolved: Versions 19.1R1-EVO and above prior to 20.3R1-S2-EVO, 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS."
      }, {
        "lang" : "es",
        "value" : "Una Comprobación Inapropiada de Condiciones Inusuales o Excepcionales en Juniper Networks Junos OS Evolved, puede causar que la configuración del filtro de firewall sin estado que usa la acción \"policer\" en determinadas combinaciones con otras opciones no surta efecto.&#xa0;Un administrador puede usar el siguiente comando CLI para visualizar los fallos con la configuración del filtro: user@device) show log kfirewall-agent.log | match ERROR Jul 23 14:16:03 ERROR: filter not supported. Este problema afecta a Juniper Networks Junos OS Evolved: Versiones 19.1R1-EVO y por encima, versiones anteriores a 20.3R1-S2-EVO, 20.3R2-EVO.&#xa0;Este problema no afecta al Juniper Networks Junos OS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3245C5-9EE1-490C-B7C7-5C02F155DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01A9BD92-5865-455D-9585-098DCFCC24DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "14C57D33-01BB-4190-B787-F5BDACE82AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6480A5C9-3280-40C5-BC08-509555F28363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBE159F-5D94-4C18-B922-331586BEA2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF37C911-1904-475A-86F7-F92F34A1A88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9CA997-2DDA-4808-B2AE-8804FEB798B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11120",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11120",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0226",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.497",
      "lastModified" : "2024-11-21T05:42:14.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos OS Evolved devices, receipt of a specific IPv6 packet may cause an established IPv6 BGP session to terminate, creating a Denial of Service (DoS) condition. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue does not affect IPv4 BGP sessions. This issue affects IBGP or EBGP peer sessions with IPv6. This issue affects: Juniper Networks Junos OS Evolved: 19.4 versions prior to 19.4R2-S3-EVO; 20.1 versions prior to 20.1R2-S3-EVO; 20.2 versions prior to 20.2R2-S1-EVO; 20.3 versions prior to 20.3R2-EVO. This issue does not affect Juniper Networks Junos OS releases."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos Junos OS Evolved de Juniper Networks, la recepción de un paquete IPv6 específico puede causar la finalización de una sesión BGP IPv6 establecida, creando una condición de Denegación de Servicio (DoS).&#xa0;La recepción y el procesamiento continuo de este paquete creará una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema no afecta a las sesiones de IPv4 BGP.&#xa0;Este problema afecta a las sesiones de peer IBGP o EBGP con IPv6.&#xa0;Este problema afecta a: Juniper Networks Junos OS Evolved: versiones 19.4 anteriores a 19.4R2-S3-EVO;&#xa0;versiones 20.1 anteriores a 20.1R2-S3-EVO;&#xa0;versiones 20.2 anteriores a 20.2R2-S1-EVO;&#xa0;versiones 20.3 anteriores a 20.3R2-EVO.&#xa0;Este problema no afecta versiones Juniper Networks Junos OS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBE159F-5D94-4C18-B922-331586BEA2CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EBFC9-ECBD-4362-82B2-04C02009E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0DF7C3A8-1279-4F38-9548-85AC7D6290FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "50D38F97-81B0-4952-A1E3-0A9AA4D34820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FF37C911-1904-475A-86F7-F92F34A1A88F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFFE53D-202D-4396-A470-0A09F3320375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0A9CA997-2DDA-4808-B2AE-8804FEB798B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11121",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0227",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.533",
      "lastModified" : "2024-11-21T05:42:15.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper restriction of operations within the bounds of a memory buffer vulnerability in Juniper Networks Junos OS J-Web on SRX Series devices allows an attacker to cause Denial of Service (DoS) by sending certain crafted HTTP packets. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. When this issue occurs, web-management, NTP daemon (ntpd) and Layer 2 Control Protocol process (L2CPD) daemons might crash. This issue affects Juniper Networks Junos OS on SRX Series: 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2-S1, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de restricción inapropiada de operaciones dentro de los límites de un búfer de memoria en Juniper Networks Junos OS J-Web en dispositivos de la serie SRX permite a un atacante causar una Denegación de Servicio (DoS) mediante el envío de determinados paquetes HTTP diseñados.&#xa0;La recepción y el procesamiento continuo de estos paquetes crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Cuando ocurre este problema, la administración web, el demonio NTP (ntpd) y el demonio del proceso Layer 2 Control Protocol (L2CPD) pueden bloquearse.&#xa0;Este problema afecta a Juniper Networks Junos OS en la serie SRX: versiones 17.3 anteriores a 17.3R3-S9;&#xa0;versiones 17.4 anteriores a 17.4R2-S11, 17.4R3-S2;&#xa0;versiones 18.2 anteriores a 18.2R3-S5;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S3;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S4;&#xa0;versiones 19.1 anteriores a 19.1R3-S2;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R3;&#xa0;versiones 19.3 anteriores a 19.3R3;&#xa0;versiones 19.&#xa0;4 anteriores a 19.4R2-S1, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R1-S2, 20.1R2;"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11122",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0228",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.567",
      "lastModified" : "2024-11-21T05:42:15.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper check for unusual or exceptional conditions vulnerability in Juniper Networks MX Series platforms with Trio-based MPC (Modular Port Concentrator) deployed in (Ethernet VPN) EVPN-(Virtual Extensible LAN) VXLAN configuration, may allow an attacker sending specific Layer 2 traffic to cause Distributed Denial of Service (DDoS) protection to trigger unexpectedly, resulting in traffic impact. Continued receipt and processing of this specific Layer 2 frames will sustain the Denial of Service (DoS) condition. An indication of compromise is to check DDOS LACP violations: user@device> show ddos-protection protocols statistics brief | match lacp This issue only affects the MX Series platforms with Trio-based MPC. No other products or platforms are affected. This issue affects: Juniper Networks Junos OS on MX Series: 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S8; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2;"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad comprobación inapropiada para condiciones inusuales o excepcionales en las plataformas Juniper Networks MX Series con MPC (Modular Port Concentrator) basado en Trio implementado en (Ethernet VPN) EVPN- (Virtual Extensible LAN) configuración VXLAN, puede permitir a un atacante enviar tráfico específico de Capa 2 para causar que la protección de Denegación de Servicio distribuida (DDoS) se active inesperadamente, resultando en un impacto en el tráfico.&#xa0;La recepción y el procesamiento continuo de estas tramas de Capa 2 específicas mantendrán la condición de Denegación de Servicio (DoS).&#xa0;Una indicación de compromiso es comprobar las violaciones de DDOS LACP: user@device&gt; show ddos-protection protocols statistics brief | match lacp. Este problema solo afecta a las plataformas de la serie MX con MPC basado en Trio.&#xa0;Ningún otro producto o plataforma está afectado.&#xa0;Este problema afecta a: Juniper Networks Junos OS en la Serie MX: versiones 15.1 anteriores a 15.&#xa0;1R7-S9;&#xa0;versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S8;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.2 anteriores a 19.2R1-S6;&#xa0;versiones 19.3 anteriores a 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S2;&#xa0;versiones 20.1 anteriores a 20.1R2, 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2-S1, 20.2R3;&#xa0;versiones 20.3 anteriores a 20.3R1-S1, 20.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11123",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11123",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0229",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.607",
      "lastModified" : "2024-11-21T05:42:15.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An uncontrolled resource consumption vulnerability in Message Queue Telemetry Transport (MQTT) server of Juniper Networks Junos OS allows an attacker to cause MQTT server to crash and restart leading to a Denial of Service (DoS) by sending a stream of specific packets. A Juniper Extension Toolkit (JET) application designed with a listening port uses the Message Queue Telemetry Transport (MQTT) protocol to connect to a mosquitto broker that is running on Junos OS to subscribe for events. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 16.1R1 and later versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 16.1R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de consumo de recursos no controlado en el servidor Message Queue Telemetry Transport (MQTT) de Juniper Networks Junos OS, permite a un atacante causar que el servidor MQTT se bloquee y se reinicie conllevando a una Denegación de Servicio (DoS) mediante el envío de un flujo de paquetes específicos.&#xa0;Una aplicación Juniper Extension Toolkit (JET) diseñada con un puerto de escucha utiliza el protocolo Message Queue Telemetry Transport (MQTT) para conectarse a un broker mosquitto que se ejecuta en Junos OS para suscribirse a eventos.&#xa0;La recepción y el procesamiento continuo de este paquete crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 16.1R1 y posteriores anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R2-S13, 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;18.&#xa0;4 versiones anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;&#xa0;19.1 versiones anteriores a 19.1R3-S5;&#xa0;versiones 19.2  anteriores a 19.2R1-S6, 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S2;&#xa0;versiones 20.1 anteriores a 20.1R2-S1, 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2-S2, 20.2R3;&#xa0;versiones 20.3 anteriores a 20.3R1-S1, 20.3R2.&#xa0;Este problema no afecta a Juniper Networks Junos OS versiones anteriores a 16.1R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "684A7156-DCB0-499E-B7F9-21F5F1598A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "8008342F-4BF3-49D8-B516-C08AAF9E469E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84DD80BF-BF7E-447B-AA74-00B3D8036E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A72B62-E3B7-42FA-980F-75BDF15236FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "57B89EEB-222D-46AA-BC8F-4EE7E17BA7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE613D-1317-4D2E-8A61-980CD5DEAED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB2D63C-C966-42CA-85A9-09820D00A2D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7231C6-1CC4-4E7A-A317-5315246D2540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E079B-4E8F-4DAC-85C7-ECC888EBD306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "35F7D583-44F3-41F0-829F-8C17DFCD4464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11BD757A-99BC-44E8-A95B-2CDDA638E469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "1733E9C1-05FF-4D84-8AE3-315A61288D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11124",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0230",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.640",
      "lastModified" : "2024-11-21T05:42:15.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks SRX Series devices with link aggregation (lag) configured, executing any operation that fetches Aggregated Ethernet (AE) interface statistics, including but not limited to SNMP GET requests, causes a slow kernel memory leak. If all the available memory is consumed, the traffic will be impacted and a reboot might be required. The following log can be seen if this issue happens. /kernel: rt_pfe_veto: Memory over consumed. Op 1 err 12, rtsm_id 0:-1, msg type 72 /kernel: rt_pfe_veto: free kmem_map memory = (20770816) curproc = kmd An administrator can use the following CLI command to monitor the status of memory consumption (ifstat bucket): user@device > show system virtual-memory no-forwarding | match ifstat Type InUse MemUse HighUse Limit Requests Limit Limit Size(s) ifstat 2588977 162708K - 19633958 <<<< user@device > show system virtual-memory no-forwarding | match ifstat Type InUse MemUse HighUse Limit Requests Limit Limit Size(s) ifstat 3021629 189749K - 22914415 <<<< This issue affects Juniper Networks Junos OS on SRX Series: 17.1 versions 17.1R3 and above prior to 17.3R3-S11; 17.4 versions prior to 17.4R3-S5; 18.2 versions prior to 18.2R3-S7, 18.2R3-S8; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R1-S2, 20.3R2. This issue does not affect Juniper Networks Junos OS prior to 17.1R3."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos de la serie SRX de Juniper Networks con agregación de enlaces (lag) configurada, la ejecución de cualquier operación que recupere las estadísticas de la interfaz de Ethernet agregada (AE), incluidas, entre otras, las solicitudes GET de SNMP, provoca una fuga de memoria lenta del núcleo. Si se consume toda la memoria disponible, el tráfico se verá afectado y podría ser necesario un reinicio. El siguiente registro se puede ver si este problema ocurre. /kernel: rt_pfe_veto: Memoria sobre consumida. Op 1 err 12, rtsm_id 0:-1, msg type 72 /kernel: rt_pfe_veto: free kmem_map memory = (20770816) curproc = kmd Un administrador puede utilizar el siguiente comando CLI para monitorizar el estado del consumo de memoria (ifstat bucket): user@device &gt; show system virtual-memory no-forwarding | match ifstat Type InUse MemUse HighUse Limit Requests Limit Size(s) ifstat 2588977 162708K - 19633958 &lt;&lt;&lt;&lt; user@device &gt; show system virtual-memory no-forwarding | match ifstat Type InUse MemUse HighUse Limit Requests Limit Size(s) ifstat 3021629 189749K - 22914415 &lt;&lt;&lt;&lt; Este problema afecta a Juniper Networks Junos OS en la serie SRX: 17.1 versiones 17.1R3 y superiores anteriores a 17.3R3-S11; 17.4 versiones anteriores a 17.4R3-S5; 18.2 versiones anteriores a 18.2R3-S7, 18.2R3-S8; 18.3 versiones anteriores a 18.3R3-S4; 18.4 versiones anteriores a 18.4R2-S7, 18.4R3-S6; 19.1 versiones anteriores a 19. 1R3-S4; 19.2 versiones anteriores a 19.2R1-S6; 19.3 versiones anteriores a 19.3R3-S1; 19.4 versiones anteriores a 19.4R3-S1; 20.1 versiones anteriores a 20.1R2, 20.1R3; 20.2 versiones anteriores a 20.2R2-S2, 20.2R3; 20.3 versiones anteriores a 20.3R1-S2, 20.3R2. Este problema no afecta al sistema operativo Junos de Juniper Networks anterior a la versión 17.1R3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8C108419-A74F-4B19-AD47-7A87B76DE18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "AC844E23-54CE-4F6F-8B69-A84DA0109B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "561C1113-3D59-4DD9-ADA7-3C9ECC4632EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "78C6D8A0-92D3-4FD3-BCC1-CC7C87B76317"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "927EAB8B-EC3B-4B12-85B9-5517EBA49A30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD647C15-A686-4C8F-A766-BC29404C0FED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45AB1622-1AED-4CD7-98F1-67779CDFC321"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89276D88-3B8D-4168-A2CD-0920297485F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx240h2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E020556B-693F-4963-BA43-3164AB50FA49"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "746C3882-2A5B-4215-B259-EB1FD60C513D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDE64EC0-7E42-43AF-A8FA-1A233BD3E3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A03463-6B1D-4DBA-9E89-CAD5E899B98B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52F0B735-8C49-4B08-950A-296C9CDE43CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8AA424D4-4DBF-4E8C-96B8-E37741B5403E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11125",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11125",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0231",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.673",
      "lastModified" : "2024-11-21T05:42:15.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Salto de Ruta en las series SRX y vSRX de Juniper Networks, puede permitir a un usuario J-web autenticado leer archivos confidenciales del sistema.&#xa0;Este problema afecta a Juniper Networks Junos OS en las series SRX y vSRX: versiones 19.3 anteriores a 19.3R2-S6, 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3;&#xa0;20.1 versiones anteriores a 20.1R1-S4, 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R1-S3, 20.2R2;&#xa0;Este problema no afecta a Juniper Networks Junos OS versiones anteriores a 19.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:juniper:vsrx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F68E75-E6C6-4DB4-AE0E-C5637ECE7C88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11126",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11126",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0232",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.707",
      "lastModified" : "2024-11-21T05:42:15.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An authentication bypass vulnerability in the Juniper Networks Paragon Active Assurance Control Center may allow an attacker with specific information about the deployment to mimic an already registered Test Agent and access its configuration including associated inventory details. If the issue occurs, the affected Test Agent will not be able to connect to the Control Center. This issue affects Juniper Networks Paragon Active Assurance Control Center All versions prior to 2.35.6; 2.36 versions prior to 2.36.2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de omisión de autenticación en Juniper Networks Paragon Active Assurance Control Center, puede permitir a un atacante con información específica sobre la implementación imitar a un Agente de Prueba ya registrado y acceder a su configuración, incluidos los detalles del inventario asociado.&#xa0;Si ocurre el problema, el Agente de Prueba afectado no será capaz de conectarse al Control Center.&#xa0;Este problema afecta a Juniper Networks Paragon Active Assurance Control Center. Todas las versiones anteriores a 2.35.6;&#xa0;2.36 versiones anteriores a 2.36.2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:paragon_active_assurance_control_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.35.6",
            "matchCriteriaId" : "D151D393-E7C6-4BCF-9FEE-DEF6797B6959"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:paragon_active_assurance_control_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.36",
            "versionEndExcluding" : "2.36.2",
            "matchCriteriaId" : "885315E0-A6C2-452D-AB55-A2C43D8A7BE5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11127",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPCV3KRDI5PLLLKADFVIOHACQJLZMLI/",
        "source" : "sirt@juniper.net"
      }, {
        "url" : "https://kb.juniper.net/JSA11127",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TNPCV3KRDI5PLLLKADFVIOHACQJLZMLI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0233",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.740",
      "lastModified" : "2024-11-21T05:42:15.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by sending a high rate of specific packets to the device, resulting in a Forwarding Engine Board (FFEB) crash. Continued receipt of these packets will sustain the Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS on ACX500 Series, ACX4000 Series: 17.4 versions prior to 17.4R3-S2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Juniper Networks Junos OS en las Series ACX500, ACX4000, puede permitir a un atacante causar una Denegación de Servicio (DoS) mediante el envío de una alta tasa de paquetes específicos hacia el dispositivo, resultando en un bloqueo de Forwarding Engine Board (FFEB).&#xa0;La recepción continua de estos paquetes mantendrá la condición de Denegación de Servicio (DoS).&#xa0;Este problema afecta a Juniper Networks Junos OS en ACX500 Series, ACX4000 Series: versiones 17.4 anteriores a 17.4R3-S2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        }, {
          "lang" : "en",
          "value" : "CWE-794"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx4000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E2CDA9-2379-482C-B509-D527AFE2C7D5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36729286-5080-47E8-A961-976BF64F5A93"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11128",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0234",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.777",
      "lastModified" : "2024-11-21T05:42:16.040",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an improper Initialization vulnerability on Juniper Networks Junos OS QFX5100-96S devices with QFX 5e Series image installed, ddos-protection configuration changes will not take effect beyond the default DDoS (Distributed Denial of Service) settings when configured from the CLI. The DDoS protection (jddosd) daemon allows the device to continue to function while protecting the packet forwarding engine (PFE) during the DDoS attack. When this issue occurs, the default DDoS settings within the PFE apply, as CPU bound packets will be throttled and dropped in the PFE when the limits are exceeded. To check if the device has this issue, the administrator can execute the following command to monitor the status of DDoS protection: user@device> show ddos-protection protocols error: the ddos-protection subsystem is not running This issue affects only QFX5100-96S devices. No other products or platforms are affected by this issue. This issue affects: Juniper Networks Junos OS on QFX5100-96S: 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R3, 19.1R3-S4; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2;"
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad de Inicialización Inapropiada en los dispositivos Juniper Networks Junos OS QFX5100-96S con la imagen instalada de la serie QFX 5e, los cambios en la configuración de protección de ddos ??no tendrán efecto más allá de la configuración predeterminada de DDoS (Denegación de Servicio distribuida) cuando se configure desde la CLI.&#xa0;El demonio de protección DDoS (jddosd) permite que el dispositivo continúe funcionando mientras protege el packet forwarding engine (PFE) durante el ataque DDoS.&#xa0;Cuando se produce este problema, se aplica la configuración DDoS predeterminada dentro del PFE, ya que los paquetes vinculados a la CPU se limitarán y se eliminarán en el PFE cuando se superen los límites.&#xa0;Para comprobar si el dispositivo tiene este problema, el administrador puede ejecutar el siguiente comando para monitorear el estado de la protección DDoS: user@device) show ddos-protection protocols error: the ddos-protection subsystem is not running. Este problema solo afecta a los dispositivos QFX5100-96S.&#xa0;Ningún otro producto o plataforma está afectado por este problema.&#xa0;Este problema afecta: Juniper Networks Junos OS en la Serie QFX5100-96S: versiones 17.3 anteriores a 17.3R3-S10; versiones 17.4 anteriores a 17.4R3-S4; versiones 18.1 anteriores a 18.1R3-S10; versiones 18.2 anteriores a 18.2R3-S3; versiones 18.3 anteriores a 18.3R3-S2; versiones 18.4 anteriores 18.4R2-S4, 18.4R3-S1; versiones 19.1 anteriores a 19.1R3, 19.1R3-S4; versiones 19.2 anteriores a 19.2R2; versiones 19.3 anteriores a 19.3R3; versiones 19.4 anteriores a 19.4R2;"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-665"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "92292C23-DC38-42F1-97C1-8416BBB60FA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "ADCE4EA8-DDBA-4766-BB81-E4DA29723723"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100-96s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BD0F680-ED30-48F3-A5D9-988D510CFC0D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11129",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11129",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0235",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.810",
      "lastModified" : "2024-11-21T05:42:16.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, vSRX Series devices using tenant services on Juniper Networks Junos OS, due to incorrect permission scheme assigned to tenant system administrators, a tenant system administrator may inadvertently send their network traffic to one or more tenants while concurrently modifying the overall device system traffic management, affecting all tenants and the service provider. Further, a tenant may inadvertently receive traffic from another tenant. This issue affects: Juniper Networks Junos OS 18.3 version 18.3R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2; 18.4 version 18.4R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 19.1 versions 19.1R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 19.3 versions prior to 19.3R3-S2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 20.1 versions prior to 20.1R2, 20.1R3 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3 vSRX Series; 20.2 versions prior to 20.2R2-S1, 20.2R3 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3 vSRX Series; 20.3 versions prior to 20.3R1-S2, 20.3R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3 vSRX Series; 20.4 versions prior to 20.4R1, 20.4R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3 vSRX Series. This issue does not affect Juniper Networks Junos OS versions prior to 18.3R1."
      }, {
        "lang" : "es",
        "value" : "En las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con dispositivos de las Series SPC2/SPC3, vSRX, que utilizan servicios de inquilino en Juniper Networks Junos OS, debido a un esquema de permisos incorrecto asignado a los administradores del sistema inquilino, un administrador del sistema inquilino puede enviar inadvertidamente su tráfico de red a uno o más inquilinos al mismo tiempo que se modifica la gestión general del tráfico del sistema del dispositivo, lo que afecta a todos los inquilinos y al proveedor de servicios.&#xa0;Además, un inquilino puede recibir inadvertidamente tráfico de otro inquilino.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 18.3, 18.3R1 y posteriores en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2;&#xa0;versiones 18.4, 18.4R1 y posteriores en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3;&#xa0;versiones 19.1,19.1R1 y versiones posteriores en las Series SRX1500, SRX4100, SRX4200, SRX4600,&#xa0;SRX5000 con SPC2/SPC3;&#xa0;versiones 19.2 anteriores a 19.2R1-S6, 19.2R3-S2 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2 / SPC3;&#xa0;versiones 19.3 anteriores a 19.3R3-S2 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000, con SPC2/SPC3;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S2 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3;&#xa0;versiones 20.1 anteriores a 20.1R2, 20.1R3 ??en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3 vSRX;&#xa0;versiones 20.2 anteriores a 20.2R2-S1, 20.2R3 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3; Series vSRX;&#xa0;versiones 20.3 anteriores a 20.3R1-S2, 20.3R2 en Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3 Series vSRX;&#xa0;versiones 20.4 anteriores a 20.4R1, 20.4R2 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series con SPC2/SPC3 Series vSRX . Este problema no afecta a Juniper Networks Junos OS versiones anteriores a 18.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABA347C-3EF3-4F75-B4D1-54590A57C2BC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11130",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11130",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0236",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.843",
      "lastModified" : "2024-11-21T05:42:16.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to an improper check for unusual or exceptional conditions in Juniper Networks Junos OS and Junos OS Evolved the Routing Protocol Daemon (RPD) service, upon receipt of a specific matching BGP packet meeting a specific term in the flowspec configuration, crashes and restarts causing a Denial of Service (DoS). Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects only Multiprotocol BGP (MP-BGP) VPNv6 FlowSpec deployments. This issue affects: Juniper Networks Junos OS: 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2. Juniper Networks Junos OS Evolved: All versions after 18.4R1-EVO prior to 20.3R2-EVO. This issue does not affect: Juniper Networks Junos OS versions prior to 18.4R1. Juniper Networks Junos OS Evolved versions prior to 18.4R1-EVO."
      }, {
        "lang" : "es",
        "value" : "Debido a una comprobación inapropiada de condiciones inusuales o excepcionales en Juniper Networks Junos OS y  Junos OS Evolved, el Routing Protocol Daemon (RPD), al recibir un paquete BGP específico que coincide con un término específico en la configuración de flowpec, se bloquea y se reinicia causando una Denegación de Servicio (DoS).&#xa0;La recepción y el procesamiento continuo de este paquete crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema afecta solo a las implementaciones Multiprotocol BGP (MP-BGP) VPNv6 FlowSpec.&#xa0;Este problema afecta a: Juniper Networks Junos OS: versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S4;&#xa0;versiones 19.2  anteriores a 19.2R1-S6, 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2, 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2, 20.2R3;&#xa0;versiones 20.&#xa0;3 anteriores a 20.3R1-S1, 20.3R2.&#xa0;Juniper Networks Junos OS Evolved: todas las versiones posteriores a 18.4R1-EVO anteriores a 20.3R2-EVO.&#xa0;Este problema no afecta a: Juniper Networks Junos OS versiones anteriores a 18.4R1.&#xa0;Juniper Networks Junos OS Evolved versiones anteriores a 18.4R1-EVO"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3245C5-9EE1-490C-B7C7-5C02F155DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01A9BD92-5865-455D-9585-098DCFCC24DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "14C57D33-01BB-4190-B787-F5BDACE82AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6480A5C9-3280-40C5-BC08-509555F28363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11131",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0237",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.877",
      "lastModified" : "2024-11-21T05:42:16.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series deployed as a Virtual Chassis with a specific Layer 2 circuit configuration, Packet Forwarding Engine manager (FXPC) process may crash and restart upon receipt of specific layer 2 frames. Continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on EX4300-MP Series, EX4600 Series, EX4650 Series, QFX5K Series 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4, 17.4R3-S5; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S2, 20.3R2;"
      }, {
        "lang" : "es",
        "value" : "En Juniper Networks Serie EX4300-MP, Serie EX4600, Serie EX4650, Serie QFX5K implementadas como un Virtual Chassis con una configuración de circuito de capa 2 específica, el proceso del Packet Forwarding Engine manager (FXPC) puede bloquearse y reiniciarse al recibir tramas de capa 2 específicas.&#xa0;La recepción y el procesamiento continuo de este paquete crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema afecta a: Juniper Networks Junos OS en las versiones Serie EX4300-MP, Serie EX4600, Serie EX4650, Serie QFX5K versiones 15.1 anteriores a 15.1R7-S9;&#xa0;versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R2-S13, 17.4R3-S4, 17.4R3-S5;&#xa0;versiones 18.2 anteriores a 18.2R3-S8;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S7, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.2 anteriores a 19.2R1-S6, 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2, 20.2R3;&#xa0;versiones 20.3 anteriores a 20.3R1-S2, 20.3R2;"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300-mp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9EECCB3-37B3-4146-8F8C-4BBFF84499E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11132",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11132",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0238",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.910",
      "lastModified" : "2024-11-21T05:42:16.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "When a MX Series is configured as a Broadband Network Gateway (BNG) based on Layer 2 Tunneling Protocol (L2TP), executing certain CLI command may cause the system to run out of disk space, excessive disk usage may cause other complications. An administrator can use the following CLI command to monitor the available disk space: user@device> show system storage Filesystem Size Used Avail Capacity Mounted on /dev/gpt/junos 19G 18G 147M 99% /.mount <<<<< running out of space tmpfs 21G 16K 21G 0% /.mount/tmp tmpfs 5.3G 1.7M 5.3G 0% /.mount/mfs This issue affects Juniper Networks Junos OS on MX Series: 17.3R1 and later versions prior to 17.4R3-S5, 18.1 versions prior to 18.1R3-S13, 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S2; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R2-S3, 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R1-S1, 20.4R2; This issue does not affect Juniper Networks Junos OS versions prior to 17.3R1."
      }, {
        "lang" : "es",
        "value" : "Cuando una Serie MX se configura como Broadband Network Gateway (BNG) basada en el protocolo Layer 2 Tunneling Protocol (L2TP), la ejecución de determinados comandos de la CLI puede hacer que el sistema se quede sin espacio en el disco, el uso excesivo del disco puede causar otras complicaciones.&#xa0;Un administrador puede usar el siguiente comando CLI para monitorear el espacio disponible en disco: user@device&gt; show system storage Filesystem Size Used Avail Capacity Mounted on /dev/gpt/junos 19G 18G 147M 99% /.mount &lt;&lt;&lt;&lt;&lt; running out of space tmpfs 21G 16K 21G 0% /.mount/tmp tmpfs 5.3G 1.7M 5.3G 0% /.mount/mfs. Este problema afecta a Juniper Networks Junos OS en la serie MX: 17.3R1 y posteriores,  versiones anteriores a 17.4R3-S5, versiones 18.1 anteriores a 18.1R3-S13, versiones 18.2 anteriores a 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;19.&#xa0;2 versiones anteriores a 19.2R1-S6, 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S2;&#xa0;19.4 versiones anteriores a 19.4R2-S4, 19.4R3-S2;&#xa0;versiones 20.1 anteriores a 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2-S3, 20.2R3;&#xa0;versiones 20.3 anteriores a 20.3R2;&#xa0;versiones 20.4 anteriores a 20.4R1-S1, 20.4R2;&#xa0;Este problema no afecta a Juniper Networks Junos OS versiones anteriores a 17.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11133",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11133",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0239",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.943",
      "lastModified" : "2024-11-21T05:42:16.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Juniper Networks Junos OS Evolved, receipt of a stream of specific genuine Layer 2 frames may cause the Advanced Forwarding Toolkit (AFT) manager process (Evo-aftmand), responsible for handling Route, Class-of-Service (CoS), Firewall operations within the packet forwarding engine (PFE) to crash and restart, leading to a Denial of Service (DoS) condition. By continuously sending this specific stream of genuine Layer 2 frames, an attacker can repeatedly crash the PFE, causing a sustained Denial of Service (DoS). This issue affects Juniper Networks Junos OS Evolved: All versions prior to 20.4R1-EVO. This issue does not affect Junos OS versions."
      }, {
        "lang" : "es",
        "value" : "En Juniper Networks, Junos OS Evolved, la recepción de un flujo de tramas de capa 2 genuinas específicas puede causar que el proceso de gestión Advanced Forwarding Toolkit (AFT) (Evo-aftmand), responsable de gestionar las operaciones de ruta, clase de servicio (CoS) y cortafuegos. dentro del packet forwarding engine (PFE) para bloquearse y reiniciarse, conllevando a una condición de Denegación de Servicio (DoS).&#xa0;Al enviar continuamente este flujo específico de tramas genuinas de Capa 2, Un atacante puede ser capaz de bloquear repetidamente el PFE, provocando una Denegación de Servicio (DoS) sostenida.&#xa0;Este problema afecta a Juniper Networks Junos OS Evolved: todas las versiones anteriores a 20.4R1-EVO.&#xa0;Este problema no afecta a Junos OS versiones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-754"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11134",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11134",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0240",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:08.977",
      "lastModified" : "2024-11-21T05:42:17.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, the Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash if a malformed DHCPv6 packet is received, resulting in a restart of the daemon. The daemon automatically restarts without intervention, but continued receipt and processing of this packet will create a sustained Denial of Service (DoS) condition. This issue only affects DHCPv6. DHCPv4 is not affected by this issue. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S12; 17.4 versions prior to 17.4R3-S5; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R1-S8, 18.4R3-S7; 19.1 versions prior to 19.1R3-S5; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S2; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R2-S3, 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2."
      }, {
        "lang" : "es",
        "value" : "En las plataformas Juniper Networks Junos OS configuradas como servidor local DHCPv6 o DHCPv6 Relay Agent, el proceso Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) puede presentar un bloqueo si un paquete DHCPv6 malformado se recibe, resultando en un reinicio del demonio.&#xa0;El demonio se reinicia automáticamente sin intervención, pero la recepción y el procesamiento continuo de este paquete crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema solo afecta a DHCPv6.&#xa0;DHCPv4 no está afectado por este problema.&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 17.3 anteriores a 17.3R3-S12;&#xa0;versiones 17.4 anteriores a 17.4R3-S5;&#xa0;versiones 18.1 anteriores a 18.1R3-S13;&#xa0;18.2 versiones anteriores a 18.2R3-S8;&#xa0;versiones 18.3 anteriores a 18.3R3-S5;&#xa0;18.4 versiones anteriores a 18.4R1-S8, 18.4R3-S7;&#xa0;19.1 versiones anteriores a 19.1R3-S5;&#xa0;19.2 versiones anteriores a 19.2R3-S2;&#xa0;19.&#xa0;3 versiones anteriores a 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R3-S2;&#xa0;20.1 versiones anteriores a 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2-S3, 20.2R3;&#xa0;20.3 versiones anteriores a 20.3R2;&#xa0;versiones 20.4 anteriores a 20.4R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.9,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 5.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7BD5-4D13-4C20-B2C9-524F72B206F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "75F125DC-3A21-489F-B324-A586F5BA350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11168",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0241",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.023",
      "lastModified" : "2024-11-21T05:42:17.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks Junos OS platforms configured as DHCPv6 local server or DHCPv6 Relay Agent, Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD) process might crash with a core dump if a specific DHCPv6 packet is received, resulting in a restart of the daemon. The daemon automatically restarts without intervention, but continued receipt and processing of these specific packets will repeatedly crash the JDHCPD process and sustain the Denial of Service (DoS) condition. This issue only affects DHCPv6. DHCPv4 is not affected by this issue. This issue affects: Juniper Networks Junos OS 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1, 19.3R3-S2; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2, 20.2R3; 20.3 versions prior to 20.3R1-S2, 20.3R2."
      }, {
        "lang" : "es",
        "value" : "En las plataformas Juniper Networks Junos OS configuradas como servidor local DHCPv6 o Agente de Retransmisión DHCPv6, el proceso Juniper Networks Dynamic Host Configuration Protocol Daemon (JDHCPD), puede bloquearse con un volcado del núcleo si se recibe un paquete DHCPv6 específico, resultando en un reinicio del demonio.&#xa0;El demonio se reinicia automáticamente sin intervención, pero la recepción y el procesamiento continuo de estos paquetes específicos bloqueará repetidamente el proceso JDHCPD y mantendrá la condición de Denegación de Servicio (DoS).&#xa0;Este problema solo afecta a DHCPv6.&#xa0;DHCPv4 no está afectado por este problema.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R3-S1, 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2, 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2, 20.2R3;&#xa0;versiones 20.3 anteriores a 20.3R1-S2, 20.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7BD5-4D13-4C20-B2C9-524F72B206F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "75F125DC-3A21-489F-B324-A586F5BA350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "69E2DF80-63D8-48DD-BC73-C406B7AA3C7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11168",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0242",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.057",
      "lastModified" : "2024-11-21T05:42:17.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability due to the improper handling of direct memory access (DMA) buffers on EX4300 switches on Juniper Networks Junos OS allows an attacker sending specific unicast frames to trigger a Denial of Service (DoS) condition by exhausting DMA buffers, causing the FPC to crash and the device to restart. The DMA buffer leak is seen when receiving these specific, valid unicast frames on an interface without Layer 2 Protocol Tunneling (L2PT) or dot1x configured. Interfaces with either L2PT or dot1x configured are not vulnerable to this issue. When this issue occurs, DMA buffer usage keeps increasing and the following error log messages may be observed: Apr 14 14:29:34.360 /kernel: pid 64476 (pfex_junos), uid 0: exited on signal 11 (core dumped) Apr 14 14:29:33.790 init: pfe-manager (PID 64476) terminated by signal number 11. Core dumped! The DMA buffers on the FPC can be monitored by the executing vty command 'show heap': ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 4a46000 268435456 238230496 30204960 11 Kernel 1 18a46000 67108864 17618536 49490328 73 Bcm_sdk 2 23737000 117440512 18414552 99025960 84 DMA buf <<<<< keeps increasing 3 2a737000 16777216 16777216 0 0 DMA desc This issue affects Juniper Networks Junos OS on the EX4300: 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S3, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1, 20.3R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad debido al manejo inapropiado de los búferes de direct memory access (DMA) en los switches EX4300 de Juniper Networks Junos OS, permite a un atacante que envía tramas de unidifusión específicas activar una condición de Denegación de Servicio (DoS) agotando los búferes DMA, causando que el FPC se bloquee y se reinicie el dispositivo.&#xa0;La fuga de búfer DMA es vista cuando se reciben estas tramas de unidifusión válidas específicas en una interfaz sin Layer 2 Protocol Tunneling (L2PT) o dot1x configurado.&#xa0;Las interfaces con L2PT o dot1x configuradas no son vulnerables a este problema.&#xa0;Cuando ocurre este problema, el uso del búfer DMA sigue aumentando y se pueden observar los siguientes mensajes de registro de error:  Apr 14 14:29:34.360 /kernel: pid 64476 (pfex_junos), uid 0: exited on signal 11 (core dumped) Apr 14 14:29:33.790 init: pfe-manager (PID 64476) terminated by signal number 11. Core dumped! The DMA buffers on the FPC can be monitored by the executing vty command 'show heap': ID Base Total(b) Free(b) Used(b) % Name -- ---------- ----------- ----------- ----------- --- ----------- 0 4a46000 268435456 238230496 30204960 11 Kernel 1 18a46000 67108864 17618536 49490328 73 Bcm_sdk 2 23737000 117440512 18414552 99025960 84 DMA buf ((((( keeps increasing 3 2a737000 16777216 16777216 0 0 DMA desc. Este problema afecta a Juniper Networks Junos OS en laSerie EX4300: versiones 17.3 anteriores a S11;&#xa0;versiones 17.4 anteriores a 17.4R2-S13, 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S4;&#xa0;versiones 19.2  anteriores a 19.2R1-S6, 19.2R3-S2;&#xa0;19.&#xa0;3 versiones anteriores a 19.3R3-S2;&#xa0;19.4 versiones anteriores a 19.4R2-S3, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2-S1, 20.2R3;&#xa0;Versiones 20.3 anteriores a 20.3R1-S1, 20.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        }, {
          "lang" : "en",
          "value" : "CWE-241"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11135",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11135",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0243",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.093",
      "lastModified" : "2024-11-21T05:42:17.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper Handling of Unexpected Data in the firewall policer of Juniper Networks Junos OS on EX4300 switches allows matching traffic to exceed set policer limits, possibly leading to a limited Denial of Service (DoS) condition. When the firewall policer discard action fails on a Layer 2 port, it will allow traffic to pass even though it exceeds set policer limits. Traffic will not get discarded, and will be forwarded even though a policer discard action is configured. When the issue occurs, traffic is not discarded as desired, which can be observed by comparing the Input bytes with the Output bytes using the following command: user@junos> monitor interface traffic Interface Link Input bytes (bps) Output bytes (bps) ge-0/0/0 Up 37425422 (82616) 37425354 (82616) <<<< egress ge-0/0/1 Up 37425898 (82616) 37425354 (82616) <<<< ingress The expected output, with input and output counters differing, is shown below: Interface Link Input bytes (bps) Output bytes (bps) ge-0/0/0 Up 342420570 (54600) 342422760 (54600) <<<< egress ge-0/0/1 Up 517672120 (84000) 342420570 (54600) <<<< ingress This issue only affects IPv4 policing. IPv6 traffic and firewall policing actions are not affected by this issue. This issue affects Juniper Networks Junos OS on the EX4300: All versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R3-S3; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Un manejo inapropiado de Datos Inesperados en el firewall policer de Juniper Networks Junos OS, en los switches EX4300, permite que el tráfico coincidente exceda los límites establecidos de policer, posiblemente conllevando a una condición limitada de Denegación de Servicio (DoS).&#xa0;Cuando la acción de descarte de firewall policer presenta un fallo en un puerto de Capa 2, permitirá que pase el tráfico aunque exceda los límites establecidos de policer.&#xa0;El tráfico no será descartado y será reenviado aunque una acción de descarte policer sea configurada.&#xa0;Cuando ocurre el problema, el tráfico no se descarta como se desea, lo cual se puede observar comparando los bytes de entrada con los bytes de salida usando el siguiente comando: user@junos) monitor interface traffic Interface Link Input bytes (bps) Output bytes (bps) ge-0/0/0 Up 37425422 (82616) 37425354 (82616) (((( egress ge-0/0/1 Up 37425898 (82616) 37425354 (82616) (((( ingress The expected output, with input and output counters differing, is shown below: Interface Link Input bytes (bps) Output bytes (bps) ge-0/0/0 Up 342420570 (54600) 342422760 (54600) (((( egress ge-0/0/1 Up 517672120 (84000) 342420570 (54600) (((( ingress. Este problema solo afecta a la generación de polítcaIPv4.&#xa0;El tráfico IPv6 y las acciones de generación de política del firewall no está afectadas por este problema.&#xa0;Este problema afecta a Juniper Networks Junos OS en la Serie EX4300: todas las versiones anteriores a 17.3R3-S10;&#xa0;versiones 17.4 anteriores a 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R3-S3;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-241"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11136",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0244",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.127",
      "lastModified" : "2024-11-21T05:42:18.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A signal handler race condition exists in the Layer 2 Address Learning Daemon (L2ALD) of Juniper Networks Junos OS due to the absence of a specific protection mechanism to avoid a race condition which may allow an attacker to bypass the storm-control feature on devices. This issue is a corner case and only occurs during specific actions taken by an administrator of a device under certain specifics actions which triggers the event. The event occurs less frequently on devices which are not configured with Virtual Chassis configurations, and more frequently on devices configured in Virtual Chassis configurations. This issue is not specific to any particular Junos OS platform. An Indicator of Compromise (IoC) may be seen by reviewing log files for the following error message seen by executing the following show statement: show log messages | grep storm Result to look for: /kernel: GENCFG: op 58 (Storm Control Blob) failed; err 1 (Unknown) This issue affects: Juniper Networks Junos OS: 14.1X53 versions prior to 14.1X53-D49 on EX Series; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D191, 15.1X49-D200 on SRX Series; 16.1 versions prior to 16.1R7-S7; 16.2 versions prior to 16.2R2-S11, 16.2R3; 17.1 versions prior to 17.1R2-S11, 17.1R3; 17.2 versions prior to 17.2R2-S8, 17.2R3-S3; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S5; 18.2 versions prior to 18.2R2-S6, 18.2R3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R2; 19.1 versions prior to 19.1R1-S4, 19.1R2."
      }, {
        "lang" : "es",
        "value" : "Se presenta una condición de carrera del manejador de señales en Layer 2 Address Learning Daemon (L2ALD) de Juniper Networks Junos OS, debido a la ausencia de un mecanismo de protección específico para evitar una condición de carrera que puede permitir a un atacante omitir la funcionalidad storm-control en los dispositivos. Este problema es un corner case y solo ocurre durante acciones específicas tomadas por un administrador de un dispositivo bajo determinadas acciones específicas que desencadenan el evento. El evento ocurre con menos frecuencia en dispositivos que no están configurados con ajustes de Virtual Chassis y con más frecuencia en dispositivos configurados en configuraciones Virtual Chassis. Este problema no es específico de ninguna plataforma de Junos OS en particular. n Indicador de Compromiso (IoC)  puede ser visualizado al revisar los archivos de registro para visualizarr el siguiente mensaje de error: show log messages | grep storm Result to look for: /kernel: GENCFG: op 58 (Storm Control Blob) failed; err 1 (Unknown). Este problema afecta a: Juniper Networks Junos OS: versiones 14.1X53 anteriores a 14.1X53-D49 en la serie EX; versiones 15.1 anteriores a 15.1R7-S6; versiones 15.1X49 anteriores a 15.1X49-D191, 15.1X49-D200 en la serie SRX; versiones 16.1 anteriores a 16.1R7-S7; versiones 16.2 anteriores a 16.2R2-S11, 16.2R3; versiones 17.1 anteriores a 17.1R2-S11, 17.1R3; versiones 17.2 anteriores a 17.2R2-S8, 17.2R3-S3; versiones 17.3 anteriores a 17.3R2-S5, 17.3R3-S7; versiones 17.4 anteriores a 17.4R2-S9, 17.4R3; versiones 18.1 anteriores a 18.1R3-S5; versiones 18.2 anteriores a 18.2R2-S6, 18.2R3; versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S3, 18.3R3; versiones 18.4 anteriores a 18.4R1-S5, 18.4R2; versiones 19.1 anteriores a 19.1R1-S4, 19.1R2. err 1 (Desconocido) Este problema afecta a: Juniper Networks Junos OS: versiones 14.1X53 anteriores a 14.1X53-D49 en la serie EX; versiones 15.1 anteriores a 15.1R7-S6; Versiones de 15.1X49 anteriores a 15.1X49-D191, 15.1X49-D200 en la serie SRX; versiones 16.1 anteriores a 16.1R7-S7; versiones 16.2 anteriores a 16.2R2-S11, 16.2R3; versiones 17.1 anteriores a 17.1R2-S11, 17.1R3; versiones 17.2 anteriores a 17.2R2-S8, 17.2R3-S3; versiones 17.3 anteriores a 17.3R2-S5, 17.3R3-S7; versiones 17.4 anteriores a 17.4R2-S9, 17.4R3; versiones 18.1 anteriores a 18.1R3-S5; versiones 18.2 anteriores a 18.2R2-S6, 18.2R3; versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S3, 18.3R3; versiones 18.4 anteriores a 18.4R1-S5, 18.4R2; versiones 19.1 anteriores a 19.1R1-S4, 19.1R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "75ECF775-461C-4076-A5C2-1F8B7B2F4732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0F3845-0966-469E-B6C6-8FA372208733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d38:*:*:*:*:*:*",
            "matchCriteriaId" : "321F9E68-E55C-4EF0-B6CC-1D7BDA3966A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d44:*:*:*:*:*:*",
            "matchCriteriaId" : "81BEA7EA-FF95-425B-9245-21927E1F30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d46:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3CB6CF-A22B-43F8-8E92-6268BBF7E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "E77B6650-6316-41D1-9EA3-4429DD972628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "E03E379C-BC08-4FB7-9C01-41F75DFD281F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C3597-C53B-4F4B-9EA7-126DA036C86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B43F6CB-0595-4957-8B3B-ADD4EA84D8C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1E61-07A1-40B0-B616-F1A6E06D11C4"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "43522D77-C47C-40F7-B84F-927AB84556F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "8008342F-4BF3-49D8-B516-C08AAF9E469E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84DD80BF-BF7E-447B-AA74-00B3D8036E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A72B62-E3B7-42FA-980F-75BDF15236FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "57B89EEB-222D-46AA-BC8F-4EE7E17BA7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE613D-1317-4D2E-8A61-980CD5DEAED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB2D63C-C966-42CA-85A9-09820D00A2D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7231C6-1CC4-4E7A-A317-5315246D2540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E079B-4E8F-4DAC-85C7-ECC888EBD306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "35F7D583-44F3-41F0-829F-8C17DFCD4464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*",
            "matchCriteriaId" : "40D42ACF-860C-4B47-8E25-7DEC30FB8064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11137",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11137",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0245",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.157",
      "lastModified" : "2024-11-21T05:42:18.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Use of Hard-coded Credentials vulnerability in Juniper Networks Junos OS on Junos Fusion satellite devices allows an attacker who is local to the device to elevate their privileges and take control of the device. This issue affects: Juniper Networks Junos OS Junos Fusion Satellite Devices. 16.1 versions prior to 16.1R7-S7; 17.1 versions prior to 17.1R2-S12, 17.1R3-S2; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10; 17.4 version 17.4R3 and later versions; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S4, 18.3R3-S2; 18.4 versions prior to 18.4R1-S6, 18.4R2-S4, 18.4R3-S1; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S5, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2; 20.1 versions prior to 20.1R1-S1, 20.1R2. This issue does not affected Junos OS releases prior to 16.1R1 or all 19.2R3 and 19.4R3 release versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Uso de Credenciales Embebidas en Juniper Networks Junos OS en dispositivos satelitales Junos Fusion, permite a un atacante que es local al dispositivo elevar sus privilegios y tomar el control del dispositivo.&#xa0;Este problema afecta a: Juniper Networks Junos OS Junos Fusion Satellite Devices versiones 16.1 anteriores a 16.1R7-S7;&#xa0;versiones 17.1 anteriores a 17.1R2-S12, 17.1R3-S2;&#xa0;versiones 17.2 anteriores a 17.2R3-S4;&#xa0;versiones 17.3 anteriores a 17.3R3-S8;&#xa0;versiones 17.4 anteriores a 17.4R2-S10;&#xa0;versiones 17.4, 17.4R3 y versiones posteriores;&#xa0;versiones 18.1 anteriores a 18.1R3-S10;&#xa0;versiones 18.2 anteriores a 18.2R2-S7, 18.2R3-S3;&#xa0;versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S4, 18.3R3-S2;&#xa0;versiones 18.4 anteriores a 18.4R1-S6, 18.4R2-S4, 18.4R3-S1;&#xa0; versiones 19.1anteriores a 19.1R1-S5, 19.1R2-S1, 19.1R3;&#xa0;19.2 versiones anteriores a 19.2R1-S4, 19.2R2;&#xa0;versiones 19.3 anteriores a 19.3R2-S5, 19.3R3;&#xa0;versiones 19.&#xa0;4 anteriores a 19.4R1-S1, 19.4R2;&#xa0;versiones 20.1 anteriores a 20.1R1-S1, 20.1R2.&#xa0;Este problema no afectó a Junos OS versiones anteriores a 16.1R1 o todas las versiones de lanzamiento 19.2R3 y 19.4R3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "43522D77-C47C-40F7-B84F-927AB84556F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "1733E9C1-05FF-4D84-8AE3-315A61288D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11138",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11138",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0246",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.190",
      "lastModified" : "2024-11-21T05:42:18.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3, devices using tenant services on Juniper Networks Junos OS, due to incorrect default permissions assigned to tenant system administrators a tenant system administrator may inadvertently send their network traffic to one or more tenants while concurrently modifying the overall device system traffic management, affecting all tenants and the service provider. Further, a tenant may inadvertently receive traffic from another tenant. This issue affects: Juniper Networks Junos OS 18.3 version 18.3R1 and later versions on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2; 18.3 versions prior to 18.3R3 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2; 18.4 versions prior to 18.4R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3; 19.1 versions prior to 19.1R2 on SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 Series with SPC2/SPC3. This issue does not affect: Juniper Networks Junos OS versions prior to 18.3R1."
      }, {
        "lang" : "es",
        "value" : "En las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3, dispositivos que usan servicios de inquilino en Juniper Networks Junos OS, debido a permisos predeterminados incorrectos asignados a administradores de sistemas de inquilino, un administrador de sistemas de inquilino puede enviar inadvertidamente su tráfico de red a uno o más inquilino al mismo tiempo que modifica la gestión general del tráfico del sistema del dispositivo, afectando a todos los inquilinos y al proveedor de servicios.&#xa0;Además, un inquilino puede recibir inadvertidamente tráfico de otro inquilino.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 18.3 18.3R1 y posteriores en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2;&#xa0;versiones 18.3 anteriores a 18.3R3 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2;&#xa0;versiones 18.4 anteriores a 18.4R2 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2 / SPC3;&#xa0;versiones 19.&#xa0;1 anteriores a 19.1R2 en las Series SRX1500, SRX4100, SRX4200, SRX4600, SRX5000 con SPC2/SPC3.&#xa0;Este problema no afecta a: Juniper Networks Junos OS versiones anteriores a 18.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 5.3
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11139",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0247",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.223",
      "lastModified" : "2024-11-21T05:42:18.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Race Condition (Concurrent Execution using Shared Resource with Improper Synchronization) vulnerability in the firewall process (dfwd) of Juniper Networks Junos OS allows an attacker to bypass the firewall rule sets applied to the input loopback filter on any interfaces of a device. This issue is detectable by reviewing the PFE firewall rules, as well as the firewall counters and seeing if they are incrementing or not. For example: show firewall Filter: __default_bpdu_filter__ Filter: FILTER-INET-01 Counters: Name Bytes Packets output-match-inet 0 0 <<<<<< missing firewall packet count This issue affects: Juniper Networks Junos OS 14.1X53 versions prior to 14.1X53-D53 on QFX Series; 14.1 versions 14.1R1 and later versions prior to 15.1 versions prior to 15.1R7-S6 on QFX Series, PTX Series; 15.1X53 versions prior to 15.1X53-D593 on QFX Series; 16.1 versions prior to 16.1R7-S7 on QFX Series, PTX Series; 16.2 versions prior to 16.2R2-S11, 16.2R3 on QFX Series, PTX Series; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2 on QFX Series, PTX Series; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3 on QFX Series, PTX Series; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7 on QFX Series, PTX Series; 17.4 versions prior to 17.4R2-S9, 17.4R3 on QFX Series, PTX Series; 18.1 versions prior to 18.1R3-S9 on QFX Series, PTX Series; 18.2 versions prior to 18.2R2-S6, 18.2R3-S3 on QFX Series, PTX Series; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1 on QFX Series, PTX Series; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R2-S7, 18.4R3 on QFX Series, PTX Series; 19.1 versions prior to 19.1R1-S4, 19.1R2-S1, 19.1R3 on QFX Series, PTX Series; 19.2 versions prior to 19.2R1-S3, 19.2R2 on QFX Series, PTX Series."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Condición de Carrera (Ejecución Concurrente usando Recursos Compartidos con Sincronización Inapropiada) en el proceso de firewall (dfwd) de Juniper Networks Junos OS, permite a un atacante omitir los conjuntos de reglas de firewall aplicados al filtro de bucle de entrada en cualquier interfaz de un dispositivo.&#xa0;Este problema es detectable al revisar las reglas de firewall de PFE, así como los contadores de firewall y visualizar si aumentan o no.&#xa0;Por ejemplo: show firewall Filter: __default_bpdu_filter__ Filter: FILTER-INET-01 Counters: Name Bytes Packets output-match-inet 0 0 (((((( missing firewall packet count. Este problema afecta a: Juniper Networks Junos OS versiones 14.1X53 anteriores a 14.1X53-D53 en la serie QFX;&#xa0;versiones 14.1, 14.1R1 y versiones posteriores anteriores a versiones 15.1 anteriores a 15.1R7-S6 en la serie QFX, serie PTX;&#xa0;versiones 15.1X53 anteriores a 15.&#xa0;1X53-D593 en la serie QFX;&#xa0;versiones 16.1 anteriores a 16.1R7-S7 en la serie QFX, serie PTX;&#xa0;versiones 16.2 anteriores a 16.2R2-S11, 16.2R3 en la serie QFX, serie PTX;&#xa0;versiones 17.1 anteriores a 17.1R2-S11, 17.1R3-S2 en la serie QFX, serie PTX;&#xa0;versiones 17.2 anteriores a 17.2R1-S9, 17.2R3-S3 en la serie QFX, serie PTX;&#xa0;versiones 17.3 anteriores a 17.3R2-S5, 17.3R3-S7 en la serie QFX, serie PTX;&#xa0;versiones 17.4 anteriores a 17.4R2-S9, 17.4R3 en la serie QFX, serie PTX;&#xa0;versiones 18.1 anteriores a 18.1R3-S9 en la serie QFX, serie PTX;&#xa0;versiones 18.2 anteriores a 18.2R2-S6, 18.2R3-S3 en la serie QFX, serie PTX;&#xa0;versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S3, 18.3R3-S1 en la serie QFX, serie PTX;&#xa0;versiones 18.4 anteriores a 18.4R1-S5, 18.4R2-S3, 18.4R2-S7, 18.4R3 en la serie QFX, serie PTX;&#xa0;versiones 19.1 anteriores a 19.1R1-S4, 19.1R2-S1, 19.1R3 en la serie QFX, serie PTX;&#xa0;versiones 19.2 anteriores a 19.2R1-S3, 19.2R2 en Serie QFX, Serie PTX"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEF5DD8-B0B2-4ED2-B38F-CE870485AB8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "09771B8F-8B2A-4E8B-B4D3-80677697FCF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "55E2F909-E1CC-45AA-ABA9-58178B751808"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d16:*:*:*:*:*:*",
            "matchCriteriaId" : "E1AA12C5-4520-4F79-80BE-66112F7AFC2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "75ECF775-461C-4076-A5C2-1F8B7B2F4732"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "807C8110-5CC2-45F0-B094-BBF9C0B63BDD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d26:*:*:*:*:*:*",
            "matchCriteriaId" : "547E5737-D385-49B9-A69F-A3B185A34116"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d27:*:*:*:*:*:*",
            "matchCriteriaId" : "2ED257ED-A56B-48A6-8568-65F36FFFC753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "74500FC7-EE82-4AA8-9A5F-15DE4835E337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0F3845-0966-469E-B6C6-8FA372208733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "AAE14AE1-6756-4831-A8D5-A6D07DB24AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d38:*:*:*:*:*:*",
            "matchCriteriaId" : "321F9E68-E55C-4EF0-B6CC-1D7BDA3966A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "A545D686-25FD-47CD-838A-CF69FB707253"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d42:*:*:*:*:*:*",
            "matchCriteriaId" : "39427B97-EB80-46BE-A5D0-90CCEC1DD207"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d43:*:*:*:*:*:*",
            "matchCriteriaId" : "131CBAB6-8222-4CDC-AEC8-8AD1AD507C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d44:*:*:*:*:*:*",
            "matchCriteriaId" : "81BEA7EA-FF95-425B-9245-21927E1F30C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "EB013C0D-893D-4A71-AF86-B63DB4464784"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d46:*:*:*:*:*:*",
            "matchCriteriaId" : "9A3CB6CF-A22B-43F8-8E92-6268BBF7E644"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "E77B6650-6316-41D1-9EA3-4429DD972628"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "E03E379C-BC08-4FB7-9C01-41F75DFD281F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d49:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3F3C41-2677-4F6C-81DE-A9DD2CE27E8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "A47ABEA1-BEA0-44E9-B75B-B311CF7E88F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "6019BEF8-BEF4-463E-8E0C-149492BBD0E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1x53:d52:*:*:*:*:*:*",
            "matchCriteriaId" : "B4D4FAA9-982D-4442-AAFA-89FBA6A1EB22"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:-:*:*:*:*:*:*",
            "matchCriteriaId" : "C9511DD0-D910-4C29-B0E3-8F9D0531F09C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "6E87C765-8D68-404A-AC71-3F22A7260E8C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "1E3B807C-196D-42B8-9042-7582A1366772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d21:*:*:*:*:*:*",
            "matchCriteriaId" : "83FEEE8F-9279-46F2-BAF9-A60537020C61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD36C0D-0F44-4349-968D-4CD60F281D84"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d230:*:*:*:*:*:*",
            "matchCriteriaId" : "3E364FE2-5FB1-4E14-8DF5-CA21F4BFBBC5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d231:*:*:*:*:*:*",
            "matchCriteriaId" : "7F22C4C2-20E0-428F-A9BF-37E8BD63A9E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d232:*:*:*:*:*:*",
            "matchCriteriaId" : "71334963-7BF1-49DB-84E6-D6F2A927458B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d233:*:*:*:*:*:*",
            "matchCriteriaId" : "E773AA7F-AB97-488A-B73D-682FB5553B31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d234:*:*:*:*:*:*",
            "matchCriteriaId" : "E9196882-FE7B-489A-81AC-55355864DA93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d235:*:*:*:*:*:*",
            "matchCriteriaId" : "93CCFF32-D589-4E84-9A08-D667B14B0B73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d236:*:*:*:*:*:*",
            "matchCriteriaId" : "F218BBE0-8F18-4A8E-8C95-8249B6776958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d237:*:*:*:*:*:*",
            "matchCriteriaId" : "E56F9D8C-27AA-43EC-9043-7A480265CE75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "1DD0B95A-7C9F-4A18-9CD8-BA344DEFC9D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "1F294E43-73FA-4EF3-90F2-EE29C56D6573"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d31:*:*:*:*:*:*",
            "matchCriteriaId" : "6F3ED4F6-483F-41DC-BBCF-3605641ACAD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d32:*:*:*:*:*:*",
            "matchCriteriaId" : "EDDE1048-BFEA-4A3E-8270-27C538A68837"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d33:*:*:*:*:*:*",
            "matchCriteriaId" : "CC517CD0-FF35-498F-AD33-683B43CA3829"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d34:*:*:*:*:*:*",
            "matchCriteriaId" : "53F7E1C5-BFA9-426C-9F95-3EA5DB458C7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B5ED13-F998-447C-8FEA-047FE9FE2F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "65F3CD2A-D5E1-4EFF-9013-6D81B396F765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d47:*:*:*:*:*:*",
            "matchCriteriaId" : "4C2A9C1A-AEE4-4CD6-91D7-D0E9F2717512"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d470:*:*:*:*:*:*",
            "matchCriteriaId" : "AE20A296-0B0D-47B6-8F63-3B664D0F549C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d471:*:*:*:*:*:*",
            "matchCriteriaId" : "ABA63850-E536-4E2E-BFDD-7BDBB965BDB2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d48:*:*:*:*:*:*",
            "matchCriteriaId" : "1749B778-0E36-4539-8668-89F4460F251F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d490:*:*:*:*:*:*",
            "matchCriteriaId" : "5582D0E6-292E-487B-9DAC-143D5D1C0D54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d495:*:*:*:*:*:*",
            "matchCriteriaId" : "723FD85C-C763-4017-B6BF-0CA707997D2A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "D58997E6-96B4-4930-A29D-B49D06DFA9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB887FD-D3FB-439F-9A89-CC367A74DB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d52:*:*:*:*:*:*",
            "matchCriteriaId" : "BDA46912-D173-49C5-A0A1-64BD0889D3A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEE4EE4-18D9-4FA9-9A02-917240B851AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d56:*:*:*:*:*:*",
            "matchCriteriaId" : "3978B35D-5745-47BC-A56F-A0678AB0F3E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d57:*:*:*:*:*:*",
            "matchCriteriaId" : "188FED65-8A81-4BB0-B10B-8CA17B4F71CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d58:*:*:*:*:*:*",
            "matchCriteriaId" : "9F03E847-748B-43BD-B6C1-BFDECE99BC3C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d59:*:*:*:*:*:*",
            "matchCriteriaId" : "92E31AF0-83EB-4570-A6DE-4308BE0D3A43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d590:*:*:*:*:*:*",
            "matchCriteriaId" : "F06DA47B-1BAB-477F-BB99-09D6A9DC0CE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d591:*:*:*:*:*:*",
            "matchCriteriaId" : "471A2E3E-135B-485B-9315-C41EE80A7AC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d592:*:*:*:*:*:*",
            "matchCriteriaId" : "BC3E3DEC-1432-4C1A-9B83-1C54A394C417"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "962CCED8-E321-4878-9BE6-0DC33778559A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d61:*:*:*:*:*:*",
            "matchCriteriaId" : "2B08B97A-5D4D-405B-A1C4-9E327E4EED35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d62:*:*:*:*:*:*",
            "matchCriteriaId" : "738C1061-E8B8-4924-AFE9-5E59F22CA4A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d63:*:*:*:*:*:*",
            "matchCriteriaId" : "9071DC8C-D0AA-448E-82BF-7C801199193F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d64:*:*:*:*:*:*",
            "matchCriteriaId" : "395CC50B-9042-4B12-9A1C-A8D5D571DC25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "F0396190-54A5-4F11-8530-B5EC7BCBC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d66:*:*:*:*:*:*",
            "matchCriteriaId" : "E56CF063-0CB3-4BD6-978B-B9D7C0C8C4AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d67:*:*:*:*:*:*",
            "matchCriteriaId" : "60D515B2-9747-465B-8854-887C6FDA8743"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d68:*:*:*:*:*:*",
            "matchCriteriaId" : "6EEBB60C-E607-4262-9C8B-7B7E2D011B28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d69:*:*:*:*:*:*",
            "matchCriteriaId" : "7DEF14A2-388F-413F-BBB4-39548BDF1E7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x53:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "88BAA95F-7CA2-46A0-8F60-588941AF3E44"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "09571E75-0EA2-4775-B1AB-CB0A0998F6D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "9C778627-820A-48F5-9680-0205D6DB5EB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "FA7F03DC-73A2-4760-B386-2A57E9C97E65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "0CA10003-D52B-4110-9D7A-F50895E6BA17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "1B2D843A-8ADE-4888-8960-B48394DEA1D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE66516-A06D-4C0F-8346-DFC8865C8FE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBDFC9E-7753-42A8-A5C8-4D40D219F93A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "25E5D543-D779-482D-AA8A-6E77C1949FBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "BF0B8539-31FF-4AE9-91D6-47E6305D9EDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r8-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "73406DE9-08FD-49A0-A56E-D2FFC478EB58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "8A76DAC5-AEC4-47E8-9876-71EE5BAD73E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7887DC05-BEBE-4D7C-8F7A-C1A70237EE4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r:*:*:*:*:*:*",
            "matchCriteriaId" : "9DDB4E0A-364C-4CC7-9E87-81BED027E106"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "79149AA0-17D1-4522-894F-C025F7A30FD7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "30726286-7CB1-4E5D-AE44-2B4D84795900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "33BE028F-2961-414A-9D42-C4861566C2DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "E85AB30C-03FC-44DB-A8AA-B916A905CA66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "D01CA25F-E1E1-4831-8561-D3B0300BF4A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "A117A0D6-6356-49DF-8B21-F6D47C6B8E94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "8C31AA11-FA95-4927-9E48-D46BBE4945B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "58BD3996-C235-4B3F-8BC8-69817A4B35C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "A6C0C9D6-7C78-40CA-984B-46F4223E5DB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F13F9A9D-2804-4704-BC6A-1399E88B91A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:14.2:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "469B95AC-E779-43D2-A24F-B9CB6D5DB9B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "43522D77-C47C-40F7-B84F-927AB84556F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "8008342F-4BF3-49D8-B516-C08AAF9E469E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84DD80BF-BF7E-447B-AA74-00B3D8036E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A72B62-E3B7-42FA-980F-75BDF15236FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "57B89EEB-222D-46AA-BC8F-4EE7E17BA7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE613D-1317-4D2E-8A61-980CD5DEAED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB2D63C-C966-42CA-85A9-09820D00A2D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7231C6-1CC4-4E7A-A317-5315246D2540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E079B-4E8F-4DAC-85C7-ECC888EBD306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "35F7D583-44F3-41F0-829F-8C17DFCD4464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6DF99D-E438-4943-BC32-F2821E72AE0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C188428C-0558-44FB-845C-E885DE9A0733"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B22AC2-B794-4F12-9EB3-9AA6E4B19831"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD05415-9F94-4EB8-805A-C9C0FFA9D0DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C432E543-37F5-4CA0-B239-2B97C6A16907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A64A26-4606-4D33-8958-5A3B7FFC4CDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1879799F-18B2-4958-AA90-FD19348C889F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516476F9-7D4C-494F-99AA-750F4467CD15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654140A0-FEC0-4DB4-83BF-ECCB000DFA4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11140",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11140",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0248",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.257",
      "lastModified" : "2024-11-21T05:42:18.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This issue is not applicable to NFX NextGen Software. On NFX Series devices the use of Hard-coded Credentials in Juniper Networks Junos OS allows an attacker to take over any instance of an NFX deployment. This issue is only exploitable through administrative interfaces. This issue affects: Juniper Networks Junos OS versions prior to 19.1R1 on NFX Series. No other platforms besides NFX Series devices are affected."
      }, {
        "lang" : "es",
        "value" : "Este problema no es aplicable al Software NFX NextGen.&#xa0;En los dispositivos de la Serie NFX, el uso de credenciales Embebidas en Juniper Networks Junos OS, permite a un atacante tomar el control de cualquier instancia de una implementación de NFX.&#xa0;Este problema solo es explotable por medio de interfaces administrativas.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones anteriores a 19.1R1 en la serie NFX.&#xa0;No están afectadas otras plataformas además de los dispositivos de la serie NFX"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.1",
            "matchCriteriaId" : "E46B49AE-2783-4962-9919-A0E1DDFCE4C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AE81FA-B0F3-4F0B-A2D1-2BB590345058"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB56048-A486-4A46-B438-CC3084BD9CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11141",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11141",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0249",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.293",
      "lastModified" : "2024-11-21T05:42:18.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On SRX Series devices configured with UTM services a buffer overflow vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS may allow an attacker to arbitrarily execute code or commands on the target to take over or otherwise impact the device by sending crafted packets to or through the device. This issue affects: Juniper Networks Junos OS on SRX Series: 15.1X49 versions prior to 15.1X49-D190; 17.4 versions prior to 17.4R2-S9; 17.4R3 and later versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3-S1; 18.3 versions prior to 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2. An indicator of compromise can be the following text in the UTM log: RT_UTM: AV_FILE_NOT_SCANNED_PASSED_MT:"
      }, {
        "lang" : "es",
        "value" : "En los dispositivos de la Serie SRX configurados con servicios UTM, una vulnerabilidad de desbordamiento de búfer en el Packet Forwarding Engine (PFE) de Juniper Networks Junos OS, puede permitir a un atacante ejecutar código o comandos arbitrarios en el objetivo para tomar el control o afectar el dispositivo mediante el envío de paquetes diseñados hacia por medio del dispositivo.&#xa0;Este problema afecta a: Juniper Networks Junos OS en la serie SRX: versiones 15.1X49 anteriores a 15.1X49-D190;&#xa0;versiones 17.4 anteriores a 17.4R2-S9;&#xa0;versiones 17.4R3 y posteriores anteriores a 18.1R3-S9;&#xa0;versiones 18.2 anteriores a 18.2R3-S1;&#xa0;versiones 18.3 anteriores a 18.3R2-S3, 18.3R3;&#xa0;versiones 18.4 anteriores a 18.4R2-S3, 18.4R3;&#xa0;versiones 19.1 anteriores a 19.1R1-S4, 19.1R2;&#xa0;versiones 19.2 anteriores a 19.2R1-S1, 19.2R2.&#xa0;Un indicador de compromiso puede ser el siguiente texto en el registro de UTM: RT_UTM: AV_FILE_NOT_SCANNED_PASSED_MT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*",
            "matchCriteriaId" : "40D42ACF-860C-4B47-8E25-7DEC30FB8064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11142",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11142",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0250",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.327",
      "lastModified" : "2024-11-21T05:42:18.927",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In segment routing traffic engineering (SRTE) environments where the BGP Monitoring Protocol (BMP) feature is enable, a vulnerability in the Routing Protocol Daemon (RPD) process of Juniper Networks Junos OS allows an attacker to send a specific crafted BGP update message causing the RPD service to core, creating a Denial of Service (DoS) Condition. Continued receipt and processing of this update message will create a sustained Denial of Service (DoS) condition. This issue affects IPv4 and IPv6 environments. This issue affects: Juniper Networks Junos OS 17.4 versions 17.4R1 and above prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R2-S6, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3; 18.4 versions prior to 18.4R1-S5, 18.4R2-S3, 18.4R3; 19.1 versions prior to 19.1R1-S4, 19.1R2; 19.2 versions prior to 19.2R1-S3, 19.2R2, This issue does not affect Junos OS releases prior to 17.4R1. This issue affects: Juniper Networks Junos OS Evolved 19.2-EVO versions prior to 19.2R2-EVO."
      }, {
        "lang" : "es",
        "value" : "En entornos segment routing traffic engineering (SRTE) donde la función BGP Monitoring Protocol (BMP) está habilitada, una vulnerabilidad en el proceso Routing Protocol Daemon (RPD) de Juniper Networks Junos OS, permite a un atacante enviar un mensaje de actualización de BGP específico que causa el Servicio RPD hacia el núcleo, creando una Condición de Denegación de Servicio (DoS).&#xa0;La recepción y el procesamiento continuo de este mensaje de actualización crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema afecta a los entornos IPv4 e IPv6.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 17.4, 17.4R1 y superiores, versiones anteriores a 17.4R2-S6, 17.4R3;&#xa0;versiones 18.1 anteriores a 18.1R3-S7;&#xa0;versiones 18.2 anteriores a 18.2R2-S6, 18.2R3-S3;&#xa0;versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S3, 18.3R3;&#xa0;versiones 18.4 anteriores a 18.4R1-S5, 18.4R2-S3, 18.4R3;&#xa0;versiones 19.1 anteriores a 19.1R1-S4, 19.1R2;&#xa0;versiones 19.&#xa0;2 anteriores a 19.2R1-S3, 19.2R2. Este problema no afecta Junos OS versiones anteriores a 17.4R1.&#xa0;Este problema afecta a: Juniper Networks Junos OS Evolved versiones 19.2-EVO anteriores a 19.2R2-EVO"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11143",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0251",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.357",
      "lastModified" : "2024-11-21T05:42:19.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A NULL Pointer Dereference vulnerability in the Captive Portal Content Delivery (CPCD) services daemon (cpcd) of Juniper Networks Junos OS on MX Series with MS-PIC, MS-SPC3, MS-MIC or MS-MPC allows an attacker to send malformed HTTP packets to the device thereby causing a Denial of Service (DoS), crashing the Multiservices PIC Management Daemon (mspmand) process thereby denying users the ability to login, while concurrently impacting other mspmand services and traffic through the device. Continued receipt and processing of these malformed packets will create a sustained Denial of Service (DoS) condition. While the Services PIC is restarting, all PIC services will be bypassed until the Services PIC completes its boot process. An attacker sending these malformed HTTP packets to the device who is not part of the Captive Portal experience is not able to exploit this issue. This issue is not applicable to MX RE-based CPCD platforms. This issue affects: Juniper Networks Junos OS on MX Series 17.3 version 17.3R1 and later versions prior to 17.4 versions 17.4R2-S9, 17.4R3-S2; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R3-S3; 18.3 versions prior to 18.3R3-S1; 18.4 versions prior to 18.4R3; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3. This issue does not affect: Juniper Networks Junos OS versions prior to 17.3R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Desreferencia del Puntero NULL en el demonio de servicios (cpcd) Captive Portal Content Delivery (CPCD) de Juniper Networks Junos OS, en la serie MX con MS-PIC, MS-SPC3, MS-MIC o MS-MPC, permite a un atacante enviar paquetes HTTP malformados hacia el dispositivo causando así una Denegación de Servicio (DoS), bloqueando el proceso Multiservices PIC Management Daemon (mspmand) y negando así a los usuarios la capacidad de iniciar sesión, mientras que al mismo tiempo impacta otros servicios mspmand y el tráfico por medio del dispositivo.&#xa0;La recepción y el procesamiento continuo de estos paquetes malformados crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Mientras el PIC de servicios se reinicia, todos los servicios de PIC se omitirán hasta que el PIC de servicios complete su proceso de inicio.&#xa0;Un atacante que envía estos paquetes HTTP malformado al dispositivo que no forma parte de la experiencia del Portal Cautivo no es capaz de explotar este problema.&#xa0;Este problema no es aplicable a las plataformas CPCD basadas en MX RE.&#xa0;Este problema afecta a: Juniper Networks Junos OS en MX Series versiones 17.3, 17.3R1 y versiones posteriores anteriores a 17.4 17.4R2-S9, 17.4R3-S2;&#xa0;versiones 18.1 anteriores a 18.1R3-S9;&#xa0;versiones 18.2 anteriores a 18.2R3-S3;&#xa0;versiones 18.3 anteriores a 18.3R3-S1;&#xa0;versiones 18.4 anteriores a 18.4R3;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3;&#xa0;versiones 19.2 anteriores a 19.2R2;&#xa0;versiones 19.3 anteriores a 19.3R3.&#xa0;Este problema no afecta a: Juniper Networks Junos OS versiones anteriores a 17.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11144",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11144",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0252",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.390",
      "lastModified" : "2024-11-21T05:42:19.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NFX Series devices using Juniper Networks Junos OS are susceptible to a local code execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon (JDMD) process. This issue affects Juniper Networks Junos OS on NFX Series: 18.1 version 18.1R1 and later versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R1-S3, 19.1R2; 19.2 versions prior to 19.2R1-S5, 19.2R2. This issue does not affect: Juniper Networks Junos OS versions prior to 18.1R1. This issue does not affect the JDMD as used by Junos Node Slicing such as External Servers use in conjunction with Junos Node Slicing and In-Chassis Junos Node Slicing on MX480, MX960, MX2008, MX2010, MX2020."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos de la Serie NFX que utilizan Juniper Networks Junos OS son susceptibles a una vulnerabilidad de ejecución de código local, permitiendo a un atacante elevar sus privilegios mediante el proceso Junos Device Management Daemon (JDMD).&#xa0;Este problema afecta a Junos de Juniper Networks OS en la serie NFX: versiones 18.1, 18.1R1 y versiones posteriores anteriores a 18.2R3-S5;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S3;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S4;&#xa0;versiones 19.1 anteriores a 19.1R1-S3, 19.1R2;&#xa0;Versiones 19.2 anteriores a 19.2R1-S5, 19.2R2.&#xa0;Este problema no afecta a: Juniper Networks Junos OS versiones anteriores a 18.1R1.&#xa0;Este problema no afecta el JDMD utilizado por Junos Node Slicing, como el uso de servidores externos junto con Junos Node Slicing y Junos Node Slicing en el chasis en MX480, MX960, MX2008, MX2010, MX2020"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AE81FA-B0F3-4F0B-A2D1-2BB590345058"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB56048-A486-4A46-B438-CC3084BD9CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-gr7j-26pv-5v57",
        "source" : "sirt@juniper.net",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11145",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-gr7j-26pv-5v57",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11145",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0253",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.427",
      "lastModified" : "2024-11-21T05:42:19.377",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NFX Series devices using Juniper Networks Junos OS are susceptible to a local command execution vulnerability thereby allowing an attacker to elevate their privileges via the Junos Device Management Daemon (JDMD) process. This issue affects Juniper Networks Junos OS on NFX Series 17.2 version 17.2R1 and later versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S5, 18.4R3-S5; 19.1 versions prior to 19.1R1-S3; 19.2 version 19.1R2 and later versions prior to 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2-S2. 19.4 versions 19.4R3 and above. This issue does not affect Juniper Networks Junos OS versions prior to 17.2R1. This issue does not affect the JDMD as used by Junos Node Slicing such as External Servers use in conjunction with Junos Node Slicing and In-Chassis Junos Node Slicing on MX480, MX960, MX2008, MX2010, MX2020."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos de la serie NFX que utilizan Juniper Networks Junos OS son susceptibles a una vulnerabilidad de ejecución de comandos locales, permitiendo a un atacante elevar sus privilegios por medio del proceso Junos Device Management Daemon (JDMD).&#xa0;Este problema afecta a Juniper Networks Junos OS en NFX Series versiones 17.2, 17.2R1 y posteriores, versiones anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S5;&#xa0;versiones 19.1 anteriores a 19.1R1-S3;&#xa0;versiones 19.2 19.1R2 y posteriores, versiones anteriores a 19.2R3;&#xa0;versiones 19.3 anteriores a 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R2-S2.&#xa0;versiones 19.4 19.4R3 y superiores.&#xa0;Este problema no afecta a Junos de Juniper Networks OS versiones anteriores a 17.2R1.&#xa0;Este problema no afecta el JDMD utilizado por Junos Node Slicing, como el uso de servidores externos junto con Junos Node Slicing y Junos Node Slicing en el chasis en MX480, MX960, MX2008, MX2010, MX2020"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "616A983A-5849-43BB-BD89-E5E2E95A7705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7BD5-4D13-4C20-B2C9-524F72B206F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9AE81FA-B0F3-4F0B-A2D1-2BB590345058"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EB08A27-7777-4538-ADC4-9D2F89963C13"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:nfx350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CB56048-A486-4A46-B438-CC3084BD9CB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-vrf9-cjcp-rwcr",
        "source" : "sirt@juniper.net",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11146",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/orangecertcc/security-research/security/advisories/GHSA-vrf9-cjcp-rwcr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11146",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0254",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.460",
      "lastModified" : "2024-11-21T05:42:19.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A buffer size validation vulnerability in the overlayd service of Juniper Networks Junos OS may allow an unauthenticated remote attacker to send specially crafted packets to the device, triggering a partial Denial of Service (DoS) condition, or leading to remote code execution (RCE). Continued receipt and processing of these packets will sustain the partial DoS. The overlayd daemon handles Overlay OAM packets, such as ping and traceroute, sent to the overlay. The service runs as root by default and listens for UDP connections on port 4789. This issue results from improper buffer size validation, which can lead to a buffer overflow. Unauthenticated attackers can send specially crafted packets to trigger this vulnerability, resulting in possible remote code execution. overlayd runs by default in MX Series, ACX Series, and QFX Series platforms. The SRX Series does not support VXLAN and is therefore not vulnerable to this issue. Other platforms are also vulnerable if a Virtual Extensible LAN (VXLAN) overlay network is configured. This issue affects Juniper Networks Junos OS: 15.1 versions prior to 15.1R7-S9; 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R2-S13, 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R2-S8, 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R1-S8, 18.4R2-S7, 18.4R3-S7; 19.1 versions prior to 19.1R2-S2, 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R2, 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de comprobación del tamaño del búfer en el servicio overlayd de Juniper Networks Junos OS, puede permitir a un atacante remoto no autenticado enviar paquetes especialmente diseñados hacia el dispositivo, desencadenando una condición de Denegación de Servicio (DoS) parcial o conllevando a una Ejecución de Código Remota (RCE).&#xa0;La recepción y el procesamiento continuo de estos paquetes mantendrán el DoS parcial.&#xa0;El demonio overlayd maneja paquetes Overlay OAM, tal y como ping y traceroute, enviados a overlayd.&#xa0;El servicio se ejecuta como root por defecto y escucha las conexiones UDP en el puerto 4789. Este problema resulta de una comprobación inapropiada del tamaño del búfer, lo que puede conllevar a un desbordamiento del búfer.&#xa0;Los atacantes no autenticados pueden enviar paquetes especialmente diseñados para activar esta vulnerabilidad, resultando en una posible Ejecución de Código Remota.&#xa0;La overlayd se ejecuta por defecto en las plataformas de las series MX, ACX y QFX.&#xa0;La serie SRX no es compatible con VXLAN y, por lo tanto, no es vulnerable a este problema.&#xa0;Otras plataformas son también vulnerables si una red overlay de Virtual Extensible LAN (VXLAN) es configurada.&#xa0;Este problema afecta a Junos de Juniper Networks OS: versiones 15.1 anteriores a 15.1R7-S9;&#xa0;versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R2-S13, 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R2-S8, 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S7, 18.4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S4;&#xa0;versiones 19.2  anteriores a 19.2R1-S6, 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2-S1, 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2, 20.2R2-S1, 20.2R3;&#xa0;versiones 20.3 anteriores a 20.3R1-S1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-131"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11147",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0255",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.493",
      "lastModified" : "2024-11-21T05:42:19.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesystem as root. ethtraceroute is shipped with setuid permissions enabled and is owned by the root user, allowing local users to run ethtraceroute with root privileges. This issue affects Juniper Networks Junos OS: 15.1X49 versions prior to 15.1X49-D240; 17.3 versions prior to 17.3R3-S11, 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S7; 19.1 versions prior to 19.1R1-S6, 19.1R2-S2, 19.1R3-S4; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2, 20.1R3; 20.2 versions prior to 20.2R2-S1, 20.2R3; 20.3 versions prior to 20.3R1-S1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de escalada de privilegios local en ethtraceroute de Juniper Networks Junos OS, puede permitir a un usuario autenticado localmente con acceso de shell escalar privilegios y escribir en el sistema de archivos local como root.&#xa0;ethtraceroute es enviado con los permisos setuid habilitados y es propiedad del usuario root, permitiendo a usuarios locales locales ejecutar ethtraceroute con privilegios de root.&#xa0;Este problema afecta a Junos de Juniper Networks OS: versiones 15.1X49 anteriores a 15.1X49-D240;&#xa0;Versiones 17.3 anteriores a 17.3R3-S11, versiones 17.4 anteriores a 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R2-S7;&#xa0;versiones 19.1 anteriores a 19.1R1-S6, 19.1R2-S2, 19.1R3-S4;&#xa0;versiones 19.3 anteriores a 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2, 20.1R3;&#xa0;versiones 20.2 anteriores a 20.2R2-S1, 20.2R3"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7BD5-4D13-4C20-B2C9-524F72B206F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11175",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0256",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.527",
      "lastModified" : "2024-11-21T05:42:19.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A sensitive information disclosure vulnerability in the mosquitto message broker of Juniper Networks Junos OS may allow a locally authenticated user with shell access the ability to read portions of sensitive files, such as the master.passwd file. Since mosquitto is shipped with setuid permissions enabled and is owned by the root user, this vulnerability may allow a local privileged user the ability to run mosquitto with root privileges and access sensitive information stored on the local filesystem. This issue affects Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S12, 17.4 versions prior to 17.4R3-S4; 18.1 versions prior to 18.1R3-S12; 18.3 versions prior to 18.3R3-S4; 19.1 versions prior to 19.1R3-S4; 19.3 versions prior to 19.3R3-S1, 19.3R3-S2; 19.4 versions prior to 19.4R2-S3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2, 20.2R3."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de divulgación de información confidencial en el broker de mensajes mosquitto de Juniper Networks Junos OS, puede permitir a un usuario autenticado localmente con acceso de shell la habilidad de leer partes de archivos confidenciales, tal y como el archivo master.passwd.&#xa0;Desde que mosquitto es enviado con permisos setuid habilitados y es propiedad del usuario root, esta vulnerabilidad puede permitir a un usuario privilegiado local la habilidad ejecutar mosquitto con privilegios de root y acceder a información confidencial almacenada en el sistema de archivos local.&#xa0;Este problema afecta a Junos de Juniper Networks OS: versiones 17.3 anteriores a 17.3R3-S12, versiones 17.4 anteriores a 17.4R3-S4;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.3 anteriores a 19.3R3-S1, 19.3R3-S2;&#xa0;19.4 versiones anteriores a 19.4R2-S3;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;20.2 versiones anteriores a la 20"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-250"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "DE0C7BD5-4D13-4C20-B2C9-524F72B206F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "CC1EE8D6-8963-49D8-84C7-C9406B04D9EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11175",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11175",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0257",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.563",
      "lastModified" : "2024-11-21T05:42:20.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On Juniper Networks MX Series and EX9200 Series platforms with Trio-based MPCs (Modular Port Concentrators) where Integrated Routing and Bridging (IRB) interfaces are configured and mapped to a VPLS instance or a Bridge-Domain, certain Layer 2 network events at Customer Edge (CE) devices may cause memory leaks in the MPC of Provider Edge (PE) devices which can cause an out of memory condition and MPC restart. When this issue occurs, there will be temporary traffic interruption until the MPC is restored. An administrator can use the following CLI command to monitor the status of memory usage level of the MPC: user@device> show system resource-monitor fpc FPC Resource Usage Summary Free Heap Mem Watermark : 20 % Free NH Mem Watermark : 20 % Free Filter Mem Watermark : 20 % * - Watermark reached Slot # % Heap Free RTT Average RTT 1 87 PFE # % ENCAP mem Free % NH mem Free % FW mem Free 0 NA 88 99 1 NA 89 99 When the issue is occurring, the value of “% NH mem Free” will go down until the MPC restarts. This issue affects MX Series and EX9200 Series with Trio-based PFEs (Packet Forwarding Engines), including MX-MPC1-3D, MX-MPC1E-3D, MX-MPC2-3D, MX-MPC2E-3D, MPC-3D-16XGE, and CHAS-MXxx Series MPCs. No other products or platforms are affected by this issue. This issue affects Juniper Networks Junos OS on MX Series, EX9200 Series: 17.3 versions prior to 17.3R3-S10; 17.4 versions prior to 17.4R3-S3; 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.2 versions prior to 19.2R3-S2; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.2 versions prior to 20.2R1-S3, 20.2R2; 20.3 versions prior to 20.3R1-S1,, 20.3R2. This issue does not affect Juniper Networks Junos OS: 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R3-S2; 18.1; 18.2 versions prior to 18.2R3-S4; 18.3 versions prior to 18.3R3-S2; 18.4 versions prior to 18.4R3-S1; 19.1; 19.2 versions prior to 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R2."
      }, {
        "lang" : "es",
        "value" : "En las plataformas de la serie MX y EX9200 de Juniper Networks con MPC (Modular Port Concentrators) basados ??en Trio, donde las interfaces de Enrutamiento y Bridge-Domain (IRB) son configuradas y asignadas a una instancia de VPLS o un Bridge-Domain, determinados eventos de red de Capa 2 en dispositivos Customer Edge (CE) pueden causar pérdidas de memoria en el MPC de los dispositivos Provider Edge (PE) que pueden causar una condición de memoria insuficiente y el reinicio del MPC.&#xa0;Cuando este problema ocurre, habrá una interrupción temporal del tráfico hasta el MPC se restaure.&#xa0;Un administrador puede usar el siguiente comando CLI para monitorear el estado del nivel de uso de memoria del MPC: user@device&gt; show system resource-monitor fpc FPC Resource Usage Summary Free Heap Mem Watermark : 20 % Free NH Mem Watermark : 20 % Free Filter Mem Watermark : 20 % * - Watermark reached Slot # % Heap Free RTT Average RTT 1 87 PFE # % ENCAP mem Free % NH mem Free % FW mem Free 0 NA 88 99 1 NA 89 99 When the issue is occurring, the value of “% NH mem Free” will go down until the MPC restarts. This issue affects MX Series and EX9200 Series with Trio-based PFEs (Packet Forwarding Engines), including MX-MPC1-3D, MX-MPC1E-3D, MX-MPC2-3D, MX-MPC2E-3D, MPC-3D-16XGE, and CHAS-MXxx Series MPCs.&#xa0;Ningún otro producto o plataforma está afectado por este problema.&#xa0;Este problema afecta a Junos de Juniper Networks OS en la serie MX, serie EX9200: versiones 17.3 anteriores a 17.3R3-S10;&#xa0;versiones 17.4 anteriores a 17.4R3-S3;&#xa0;versiones 18.2 anteriores a 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S6;&#xa0;versiones 19.2 anteriores a 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3;&#xa0;versiones 20.&#xa0;2 anteriores a 20.2R1-S3, 20.2R2;&#xa0;versiones 20.3 anteriores a 20.3R1-S1 ,, 20.3R2.&#xa0;Este problema no afecta al sistema operativo Junos de Juniper Networks: versiones 17.3 anteriores a 17.3R3-S8;&#xa0;versiones 17.4 anteriores a 17.4R3-S2;&#xa0;versiones 18,1;&#xa0;versiones 18.2 anteriores a 18.2R3-S4;&#xa0;versiones 18.3 anteriores a 18.3R3-S2;&#xa0;versiones 18.4 anteriores a 18.4R3-S1;&#xa0;versiones 19,1;&#xa0;versiones 19.2 anteriores a 19.2R2;&#xa0;versiones 19.3 anteriores a 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11148",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0258",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.597",
      "lastModified" : "2024-11-21T05:42:20.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the forwarding of transit TCPv6 packets received on the Ethernet management interface of Juniper Networks Junos OS allows an attacker to trigger a kernel panic, leading to a Denial of Service (DoS). Continued receipt and processing of these transit packets will create a sustained Denial of Service (DoS) condition. This issue only occurs when TCPv6 packets are routed through the management interface. Other transit traffic, and traffic destined to the management interface, are unaffected by this vulnerability. This issue was introduced as part of a TCP Parallelization feature added in Junos OS 17.2, and affects systems with concurrent network stack enabled. This feature is enabled by default, but can be disabled (see WORKAROUND section below). This issue affects Juniper Networks Junos OS: 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S11, 17.4R3-S2; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R2-S2, 19.1R3; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2. This issue does not affect Juniper Networks Junos OS versions prior to 17.2R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el reenvío de paquetes TCPv6 de tránsito recibidos en la interfaz de administración Ethernet de Juniper Networks Junos OS, permite a un atacante desencadenar un pánico en el kernel, conllevando a una Denegación de Servicio (DoS).&#xa0;La recepción y el procesamiento continuo de estos paquetes de tránsito crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema solo ocurre cuando los paquetes TCPv6 se enrutan por medio de la interfaz de administración.&#xa0;El resto del tráfico de tránsito y el tráfico destinado a la interfaz de administración no están afectados por esta vulnerabilidad.&#xa0;Este problema se introdujo como parte de una funcionalidad TCP Parallelization agregada en Junos OS versión 17.2 y afecta a los sistemas con la pila de red concurrente habilitada.&#xa0;Esta funcionalidad está habilitada por defecto pero puede ser desahbilitada (consulte la sección WORKAROUND a continuación).&#xa0;Este problema afecta a Junos de Juniper Networks OS: versiones 17.2 anteriores a 17.2R3-S4;&#xa0;versiones 17.&#xa0;3 anteriores a 17.3R3-S9;&#xa0;versiones 17.4 anteriores a 17.4R2-S11, 17.4R3-S2;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S5;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S3;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S4;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R2;&#xa0;versiones 19.3 anteriores a 19.3R2-S4, 19.3R3;&#xa0;Versiones 19.4 anteriores a 19.4R1-S3, 19.4R2.&#xa0;Este problema no afecta a Junos de Juniper Networks OS versiones anteriores a 17.2R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11149",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11149",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0259",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.630",
      "lastModified" : "2024-11-21T05:42:20.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Due to a vulnerability in DDoS protection in Juniper Networks Junos OS and Junos OS Evolved on QFX5K Series switches in a VXLAN configuration, instability might be experienced in the underlay network as a consequence of exceeding the default ddos-protection aggregate threshold. If an attacker on a client device on the overlay network sends a high volume of specific, legitimate traffic in the overlay network, due to an improperly detected DDoS violation, the leaf might not process certain L2 traffic, sent by spines in the underlay network. Continued receipt and processing of the high volume traffic will sustain the Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on QFX5K Series: 17.3 versions prior to 17.3R3-S11; 17.4 versions prior to 17.4R3-S5; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R2-S8, 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R1-S8, 18.4R2-S6, 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R1-S6, 19.2R3-S2; 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S2, 20.3R2. Juniper Networks Junos OS Evolved on QFX5220: All versions prior to 20.3R2-EVO."
      }, {
        "lang" : "es",
        "value" : "Debido a una vulnerabilidad en la protección DDoS en Juniper Networks Junos OS y Junos OS Evolved en switches de la serie QFX5K en una configuración VXLAN, una inestabilidad puede ser experimentada en la red subyacente como consecuencia de exceder el umbral agregado predeterminado ddos-protection.&#xa0;Si un atacante en un dispositivo cliente en la red superpuesta envía un gran volumen de tráfico legítimo específico en la red superpuesta, debido a una violación de DDoS detectada inapropiadamente, es posible que la hoja no procese determinado tráfico L2, enviado por espinas en la red subyacente.&#xa0;La recepción y el procesamiento continuo del tráfico de alto volumen mantendrá la condición de Denegación de Servicio (DoS).&#xa0;Este problema afecta a: Juniper Networks Junos OS en la serie QFX5K: versiones 17.3 anteriores a 17.3R3-S11;&#xa0;versiones 17.4 anteriores a 17.4R3-S5;&#xa0;versiones 18.1 anteriores a 18.1R3-S13;&#xa0;versiones 18.2 anteriores a 18.2R2-S8,&#xa0;18,2R3-S8;&#xa0;versiones 18.3 anteriores a 18.3R3-S5;&#xa0;versiones 18.4 anteriores a 18.4R1-S8, 18.4R2-S6, 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.2  anteriores a 19.2R1-S6, 19.2R3-S2;&#xa0;versiones 19.3 anteriores a 19.3R3-S2;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2;&#xa0;versiones 20.3 anteriores a 20.3R1-S2, 20.3R2.&#xa0;Juniper Networks Junos OS Evolved en QFX5220: todas las versiones anteriores a 20.3R2-EVO"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "75F125DC-3A21-489F-B324-A586F5BA350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7FCBFF57-83A1-4C1C-A38D-7DAB48BCA2EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F09D3262-394A-43D1-A4ED-8887FCB20F87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "70FF3DD4-14CB-435D-8529-0480EB853F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E974B4BC-64C5-4BB6-AF31-D46AF3763416"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79A8847B-4F98-4949-8639-5CD2B411D10F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "09EBDE4B-764F-4DF1-844A-BB8A52CD53EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB58A6E9-FFCF-4331-AC3B-45C37BD1943E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC5478F-A047-4F6D-BB11-0077A74C0174"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D877320D-1997-4B66-B11B-864020C755E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E72627C-4793-4F22-B769-A3FFB77E7DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3245C5-9EE1-490C-B7C7-5C02F155DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01A9BD92-5865-455D-9585-098DCFCC24DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "14C57D33-01BB-4190-B787-F5BDACE82AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6480A5C9-3280-40C5-BC08-509555F28363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EBFC9-ECBD-4362-82B2-04C02009E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFFE53D-202D-4396-A470-0A09F3320375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx5220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D193BEBD-9436-468D-B89E-D5720603451D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11150",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11150",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0260",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.667",
      "lastModified" : "2024-11-21T05:42:20.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authorization vulnerability in the Simple Network Management Protocol daemon (snmpd) service of Juniper Networks Junos OS leads an unauthenticated attacker being able to perform SNMP read actions, an Exposure of System Data to an Unauthorized Control Sphere, or write actions to OIDs that support write operations, against the device without authentication. This issue affects: Juniper Networks Junos OS: 17.2 version 17.2R1 and later versions; 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R2-S12, 17.4R3-S5; 18.1 versions prior to 18.1R3-S13; 18.2 versions prior to 18.2R3-S8; 18.3 versions prior to 18.3R3-S5; 18.4 versions prior to 18.4R1-S8, 18.4R2-S5, 18.4R3; 19.1 versions prior to 19.1R2; 19.2 versions prior to 19.2R1-S6, 19.2R2; 19.3 versions prior to 19.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 17.2R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de autorización inapropiada en el servicio de demonio Simple Network Management Protocol (snmpd) de Juniper Networks Junos OS, hace a un atacante no autenticado pueda realizar acciones de lectura SNMP, una Exposición de Datos del Sistema a una Esfera de Control No Autorizada o acciones de escritura en OID compatibles operaciones de escritura, contra el dispositivo sin autenticación.&#xa0;Este problema afecta a: Juniper Networks Junos OS: 17.2 versión 17.2R1 y versiones posteriores;&#xa0;17.3 versiones anteriores a 17.3R3-S9;&#xa0;17.4 versiones anteriores a 17.4R2-S12, 17.4R3-S5;&#xa0;versiones 18.1 anteriores a 18.1R3-S13;&#xa0;18.2 versiones anteriores a 18.2R3-S8;&#xa0;versiones 18.3 anteriores a 18.3R3-S5;&#xa0;18.4 versiones anteriores a 18.4R1-S8, 18.4R2-S5, 18.4R3;&#xa0;19.1 versiones anteriores a 19.1R2;&#xa0;19.2 versiones anteriores a 19.2R1-S6, 19.2R2;&#xa0;19.3 versiones anteriores a 19.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        }, {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "64CF2868-993A-48C8-8FBA-892507BBBF21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D2D5D460-EC5C-46BF-8017-CB87B45C69BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "46F9BD74-D57A-4689-81AB-D53DEBABBD5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F2DEF924-0165-41B5-8A9D-A75596433CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "75F125DC-3A21-489F-B324-A586F5BA350A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0B372356-D146-420B-95C3-381D0383B595"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11151",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11151",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0261",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.703",
      "lastModified" : "2024-11-21T05:42:20.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Captive Portal allows an unauthenticated attacker to cause an extended Denial of Service (DoS) for these services by sending a high number of specific requests. This issue affects: Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S17 on EX Series; 12.3X48 versions prior to 12.3X48-D105 on SRX Series; 15.1 versions prior to 15.1R7-S8; 15.1X49 versions prior to 15.1X49-D230 on SRX Series; 16.1 versions prior to 16.1R7-S8; 17.4 versions prior to 17.4R2-S12, 17.4R3-S3; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R3; 19.3 versions prior to 19.3R2-S4, 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R1-S3, 20.1R2; 20.2 versions prior to 20.2R1-S1, 20.2R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el servicio HTTP/HTTPS utilizado por -Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through con Web-Redirect, y Captive Portal, permite a un atacante no autenticado causar una Denegación de Servicio extendida (DoS) para estos servicios mediante el envío de un gran número de peticiones específicas.&#xa0;Este problema afecta a: Juniper Networks Junos OS versiones 12.3 anteriores a 12.3R12-S17 en la serie EX;&#xa0;Versiones de 12.3X48 anteriores a 12.3X48-D105 en la serie SRX;&#xa0;versiones 15.1 anteriores a 15.1R7-S8;&#xa0;Versiones de 15.1X49 anteriores a 15.1X49-D230 en la serie SRX;&#xa0;versiones 16.1 anteriores a 16.1R7-S8;&#xa0;versiones 17.4 anteriores a 17.4R2-S12, 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S3;&#xa0;versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S4;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S2;&#xa0;versiones 19.&#xa0;2 anteriores a 19.2R1-S5, 19.2R3;&#xa0;versiones 19.3 anteriores a 19.3R2-S4, 19.3R3;&#xa0;versiones 19.4  anteriores a 19.4R1-S3, 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R1-S3, 20.1R2;&#xa0;Versiones 20.2 anteriores a 20.2R1-S1, 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        }, {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C33DE7-4947-41D1-8DDF-DC7C9541414E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12D5D63-479D-4B27-8179-3B8985DB51F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4D8EE5-E93F-4F50-9D31-CD5A69531962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "B63EF1C6-C859-4EFA-81BE-1E5AD3364B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "B786F950-0E07-4ADC-B988-917994FE99CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2F703D05-C7A4-4EBF-A2FB-8AFE8E13DCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s13:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE640C-9ED9-4976-9083-DEEBDDAA5516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s14:*:*:*:*:*:*",
            "matchCriteriaId" : "9813A1FF-9AB3-46C0-BD65-5462E2942FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s15:*:*:*:*:*:*",
            "matchCriteriaId" : "564E4FA2-671F-4762-979F-4B8C93275412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s16:*:*:*:*:*:*",
            "matchCriteriaId" : "93C75780-930E-4263-9418-44682237EA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "99C8DC55-60AF-44D0-86C1-1F90C5DB0235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D23CEC9A-BF5F-489C-8CA7-1946238E20D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0010CCA3-6A76-4C18-82C4-BF44FECA4B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4D353E7F-F773-4502-B4EE-E73BA2DE1BF6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C3597-C53B-4F4B-9EA7-126DA036C86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B43F6CB-0595-4957-8B3B-ADD4EA84D8C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1E61-07A1-40B0-B616-F1A6E06D11C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FED64-8725-4978-9EBF-E3CD8EF338E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "40FCCE73-C94E-4A0B-B056-8D323C64B425"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "64A0CCD4-91BA-440E-A14C-48E67D1F03A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "6B65EF51-ED97-4973-94C4-8F66C553F190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE7C08A-2A4B-4A84-AD95-A890913E2EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "44C61900-680C-4C74-8B96-ACC93FE9465E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:*",
            "matchCriteriaId" : "6A793CCD-397E-45DA-9349-D01C69AB96D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C38637-ABE0-419A-A053-CBE076766551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87EF0D-E609-4D4A-B228-CEF05C753E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4484081E-E2E9-4858-8960-144D820CF7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d85:*:*:*:*:*:*",
            "matchCriteriaId" : "4D12F342-3A79-4F94-BFD0-F1A0942CFFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "90070E86-9400-4D5F-977D-8900904952A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d95:*:*:*:*:*:*",
            "matchCriteriaId" : "E068F519-48E6-4000-B8CA-078F885B6BF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*",
            "matchCriteriaId" : "40D42ACF-860C-4B47-8E25-7DEC30FB8064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d200:*:*:*:*:*:*",
            "matchCriteriaId" : "A70F0055-74B8-41F3-BB43-6CBF3F231674"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d210:*:*:*:*:*:*",
            "matchCriteriaId" : "8B7D617C-E88E-4981-91E1-0FAB5029E4B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "43522D77-C47C-40F7-B84F-927AB84556F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "684A7156-DCB0-499E-B7F9-21F5F1598A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "E3AC83F1-2BCF-4159-9719-EB15ADD7663B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11152",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11152",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0262",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.737",
      "lastModified" : "2024-11-21T05:42:20.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Through routine static code analysis of the Juniper Networks Junos OS software codebase, the Secure Development Life Cycle team identified a Use After Free vulnerability in PFE packet processing on the QFX10002-60C switching platform. Exploitation of this vulnerability may allow a logically adjacent attacker to trigger a Denial of Service (DoS). Continued exploitation of this vulnerability will sustain the Denial of Service (DoS) condition. This issue only affects QFX10002-60C devices. No other product or platform is vulnerable to this issue. This issue affects Juniper Networks Junos OS on QFX10002-60C: 19.1 version 19.1R3-S1 and later versions; 19.1 versions prior to 19.1R3-S3; 19.2 version 19.2R2 and later versions; 19.2 versions prior to 19.2R3-S1; 20.2 versions prior to 20.2R1-S2. This issue does not affect Juniper Networks Junos OS: versions prior to 19.1R3; 19.2 versions prior to 19.2R2; any version of 19.3; version 20.2R2 and later releases."
      }, {
        "lang" : "es",
        "value" : "A través del análisis de código estático de rutina de la base de código del software de Juniper Networks Junos OS, el equipo Secure Development Life Cycle identificó una vulnerabilidad Uso de la Memoria Previamente Liberada en el procesamiento de paquetes PFE en la plataforma de switching QFX10002-60C.&#xa0;La explotación de esta vulnerabilidad puede permitir a un atacante lógicamente adyacente activar una Denegación de Servicio (DoS).&#xa0;Una explotación continua de esta vulnerabilidad mantendrá la condición de Denegación de Servicio (DoS).&#xa0;Este problema solo afecta a los dispositivos QFX10002-60C.&#xa0;Ningún otro producto o plataforma es vulnerable a este problema.&#xa0;Este problema afecta a Juniper Networks Junos OS en QFX10002-60C: versiones 19.1 19.1R3-S1 y versiones posteriores;&#xa0;versiones 19.1 anteriores a 19.1R3-S3;&#xa0;versiones 19.2, 19.2R2 y versiones posteriores;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 20.2 anteriores a 20.2R1-S2.&#xa0;Este problema no afecta al sistema operativo Junos de Juniper Networks:&#xa0;versiones anteriores a 19.1R3;&#xa0;versiones 19.2 anteriores a 19.2R2;&#xa0;cualquier versión de 19.3;&#xa0;versión 20.2R2 y versiones posteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11153",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11153",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0263",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.773",
      "lastModified" : "2024-11-21T05:42:20.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Data Processing vulnerability in the Multi-Service process (multi-svcs) on the FPC of Juniper Networks Junos OS on the PTX Series routers may lead to the process becoming unresponsive, ultimately affecting traffic forwarding, allowing an attacker to cause a Denial of Service (DoS) condition . The Multi-Service Process running on the FPC is responsible for handling sampling-related operations when a J-Flow configuration is activated. This can occur during periods of heavy route churn, causing the Multi-Service Process to stop processing updates, without consuming any further updates from kernel. This back pressure towards the kernel affects further dynamic updates from other processes in the system, including RPD, causing a KRT-STUCK condition and traffic forwarding issues. An administrator can monitor the following command to check if there is the KRT queue is stuck: user@device > show krt state ... Number of async queue entries: 65007 <--- this value keep on increasing. The following logs/alarms will be observed when this condition exists: user@junos> show chassis alarms 2 alarms currently active Alarm time Class Description 2020-10-11 04:33:45 PDT Minor Potential slow peers are: MSP(FPC1-PIC0) MSP(FPC3-PIC0) MSP(FPC4-PIC0) Logs: Oct 11 04:33:44.672 2020 test /kernel: rts_peer_cp_recv_timeout : Bit set for msp8 as it is stuck Oct 11 04:35:56.000 2020 test-lab fpc4 user.err gldfpc-multi-svcs.elf: Error in parsing composite nexthop Oct 11 04:35:56.000 2020 test-lab fpc4 user.err gldfpc-multi-svcs.elf: composite nexthop parsing error Oct 11 04:43:05 2020 test /kernel: rt_pfe_veto: Possible slowest client is msp38. States processed - 65865741. States to be processed - 0 Oct 11 04:55:55 2020 test /kernel: rt_pfe_veto: Memory usage of M_RTNEXTHOP type = (0) Max size possible for M_RTNEXTHOP type = (8311787520) Current delayed unref = (60000), Current unique delayed unref = (10896), Max delayed unref on this platform = (40000) Current delayed weight unref = (71426) Max delayed weight unref on this platform= (400000) curproc = rpd Oct 11 04:56:00 2020 test /kernel: rt_pfe_veto: Too many delayed route/nexthop unrefs. Op 2 err 55, rtsm_id 5:-1, msg type 2 This issue only affects PTX Series devices. No other products or platforms are affected by this vulnerability. This issue affects Juniper Networks Junos OS on PTX Series: 18.2 versions prior to 18.2R3-S7; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R2-S8, 18.4R3-S7; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3-S1; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2; 20.3 versions prior to 20.3R1-S2, 20.3R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.2R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Procesamiento de Datos en el proceso Multi-Service (multi-svcs) en el FPC de Juniper Networks Junos OS, en los enrutadores de la serie PTX puede conllevar a que el proceso deje de responder, afectando últimamente el reenvío de tráfico, permitiendo a un atacante causar una condición de Denegación de Servicio. (DoS).&#xa0;El proceso Multi-Service que se ejecuta en el FPC es responsable de manejar las operaciones relacionadas con el muestreo cuando se activa una configuración de J-Flow.&#xa0;Esto puede ocurrir durante períodos de alta rotación de rutas, causando que el Proceso Multi-Service deje de procesar actualizaciones, sin consumir más actualizaciones del kernel.&#xa0;Esta contrapresión hacia el kernel afecta las actualizaciones dinámicas adicionales de otros procesos en el sistema, incluido RPD, causando una condición de KRT-STUCK y problemas de reenvío de tráfico.&#xa0;Un administrador puede monitorear el siguiente comando para comprobar si hay un queue la KRT atascada:user@device ) show krt state ... Number of async queue entries: 65007 (---  este valor sigue aumentando.&#xa0;Los siguientes registros / alarmas serán observados cuando exista esta condición: user@junos) show chassis alarms 2 alarms currently active Alarm time Class Description 2020-10-11 04:33:45 PDT Minor Potential slow peers are: MSP(FPC1-PIC0) MSP(FPC3-PIC0) MSP(FPC4-PIC0) Logs: Oct 11 04:33:44.672 2020 test /kernel: rts_peer_cp_recv_timeout : Bit set for msp8 as it is stuck Oct 11 04:35:56.000 2020 test-lab fpc4 user.err gldfpc-multi-svcs.elf: Error in parsing composite nexthop Oct 11 04:35:56.000 2020 test-lab fpc4 user.err gldfpc-multi-svcs.elf: composite nexthop parsing error Oct 11 04:43:05 2020 test /kernel: rt_pfe_veto: Possible slowest client is msp38. States processed - 65865741. States to be processed - 0 Oct 11 04:55:55 2020 test /kernel: rt_pfe_veto: Memory usage of M_RTNEXTHOP type = (0) Max size possible for M_RTNEXTHOP type = (8311787520) Current delayed unref = (60000), Current unique delayed unref = (10896), Max delayed unref on this platform = (40000) Current delayed weight unref = (71426) Max delayed weight unref on this platform= (400000) curproc = rpd Oct 11 04:56:00 2020 test /kernel: rt_pfe_veto: Too many delayed route/nexthop unrefs. Op 2 err 55, rtsm_id 5:-1, msg type 2. Este problema solo afecta a los dispositivos de la serie PTX.&#xa0;Ningún otro producto o plataforma está afectado por esta vulnerabilidad.&#xa0;Este problema afecta a Junos de Juniper Networks OS en la serie PTX: versiones 18.2 anteriores a 18.2R3-S7;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 versiones anteriores a 18.4R2-S8, 18.&#xa0;4R3-S7;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S4, 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2;&#xa0;Versiones 20.3 anteriores a 20.3R1-S2, 20.3R2.&#xa0;Este problema no afecta a Junos de Juniper Networks OS versiones anteriores a 18.2R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-19"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "3E4F0A1E-B15E-44C3-A55D-8AC016915451"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "541535BD-20DC-4489-91A7-F6CBC6802352"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "2C1601BB-CAB7-4C92-8416-1824BB85D820"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6DF99D-E438-4943-BC32-F2821E72AE0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C188428C-0558-44FB-845C-E885DE9A0733"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B22AC2-B794-4F12-9EB3-9AA6E4B19831"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD05415-9F94-4EB8-805A-C9C0FFA9D0DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C432E543-37F5-4CA0-B239-2B97C6A16907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A64A26-4606-4D33-8958-5A3B7FFC4CDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1879799F-18B2-4958-AA90-FD19348C889F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516476F9-7D4C-494F-99AA-750F4467CD15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654140A0-FEC0-4DB4-83BF-ECCB000DFA4D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11154",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/example/flowmonitoring-active-sampling-instance-example.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11154",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/example/flowmonitoring-active-sampling-instance-example.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0264",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.810",
      "lastModified" : "2024-11-21T05:42:21.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the processing of traffic matching a firewall filter containing a syslog action in Juniper Networks Junos OS on MX Series with MPC10/MPC11 cards installed, PTX10003 and PTX10008 Series devices, will cause the line card to crash and restart, creating a Denial of Service (DoS). Continued receipt and processing of packets matching the firewall filter can create a sustained Denial of Service (DoS) condition. When traffic hits the firewall filter, configured on lo0 or any physical interface on the line card, containing a term with a syslog action (e.g. 'term <name> then syslog'), the affected line card will crash and restart, impacting traffic processing through the ports of the line card. This issue only affects MX Series routers with MPC10 or MPC11 line cards, and PTX10003 or PTX10008 Series packet transport routers. No other platforms or models of line cards are affected by this issue. Note: This issue has also been identified and described in technical service bulletin TSB17931 (login required). This issue affects: Juniper Networks Junos OS on MX Series: 19.3 versions prior to 19.3R3-S2; 19.4 versions prior to 19.4R3-S2; 20.1 versions prior to 20.1R3; 20.2 versions prior to 20.2R2-S2, 20.2R3; 20.3 versions prior to 20.3R3; 20.4 versions prior to 20.4R2. Juniper Networks Junos OS Evolved on PTX10003, PTX10008: All versions prior to 20.4R2-EVO. This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento del tráfico que coincide con un filtro de firewall que contiene una acción de syslog en Juniper Networks Junos OS en la Serie MX con tarjetas MPC10/MPC11 instaladas, dispositivos de la Serie PTX10003 y PTX10008, causará que la tarjeta de línea se bloquee y se reinicie, creando una Denegación de Servicio (DoS). La recepción y el procesamiento continuo de paquetes que coinciden con el filtro de firewall puede crear una condición sostenida de Denegación de Servicio (DoS). Cuando el tráfico llega al filtro de firewall, configurado en lo0 o cualquier interfaz física en la tarjeta de línea, que contiene un término con una acción de syslog (por ejemplo \"term  then syslog\"), la tarjeta de línea afectada se bloqueará y reiniciará, lo que afectará el procesamiento del tráfico por medio de los puertos de la tarjeta de línea. Este problema solo afecta a los enrutadores de la serie MX con tarjetas de línea MPC10 o MPC11 y a los enrutadores de transporte de paquetes de las series PTX10003 o PTX10008. Este problema no afecta a otras plataformas o modelos de tarjetas de línea. Nota: Este problema también se ha identificado y descrito en el boletín de servicio técnico TSB17931 (es necesario iniciar sesión). Este problema afecta a: Juniper Networks Junos OS en la serie MX: versiones 19.3 anteriores a 19.3R3-S2; versiones 19.4 anteriores a 19.4R3-S2; 20.1 versiones anteriores a 20.1R3; versiones 20.2 anteriores a 20.2R2-S2, 20.2R3; versiones 20.3 anteriores a 20.3R3; versiones 20.4 anteriores a 20.4R2. Juniper Networks Junos OS Evolved en PTX10003, PTX10008: Todas las versiones anteriores a 20.4R2-EVO. Este problema no afecta a Juniper Networks Junos OS versiones anteriores a 19.3R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-703"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46CB928-78B5-4D60-B747-9A0988C7060D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D9789FF8-D55C-4AF9-A250-E543A0EB826F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "05D8427C-CDDE-4B2F-9CB8-41B9137660E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52699E2B-450A-431C-81E3-DC4483C8B4F2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D97AF6F8-3D50-4D35-BCB1-54E3BEC69B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5627740-42E3-4FB1-B8B9-0B768AFFA1EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx104:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F72C850A-0530-4DB7-A553-7E19F82122B5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FE2089C-F341-4DC1-B76D-633BC699306D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FEF33EB-B2E0-42EF-A1BB-D41021B6D08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27175D9A-CA2C-4218-8042-835E25DFCA43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00C7FC57-8ACF-45AA-A227-7E3B350FD24F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2754C2DF-DF6E-4109-9463-38B4E0465B77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx40:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C982A2FF-A1F9-4830-BAB6-77CFCE1F093F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B557965-0040-4048-B56C-F564FF28635B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx80:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB875EBD-A3CD-4466-B2A3-39D47FF94592"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7E72627C-4793-4F22-B769-A3FFB77E7DE1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "2C3245C5-9EE1-490C-B7C7-5C02F155DDD8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "01A9BD92-5865-455D-9585-098DCFCC24DD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "914D6984-1820-483B-AEB9-2C5257B5E900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "14C57D33-01BB-4190-B787-F5BDACE82AFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "6480A5C9-3280-40C5-BC08-509555F28363"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2D3C2D74-AF22-4BED-A0C5-089B5507D275"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "F64FBB4B-7CBF-499B-A523-804857DEFAFA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "A38EBFC9-ECBD-4362-82B2-04C02009E85C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA8D4D2-D49D-4F91-95E2-2A0E8599338A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DDFFE53D-202D-4396-A470-0A09F3320375"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4AFB91E3-CAAC-429F-A869-DDD40FB0F84D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "423843B3-B2BE-427B-B625-4E3146D26390"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C8866D-162F-4C9B-8167-2FBA25410368"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD05415-9F94-4EB8-805A-C9C0FFA9D0DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A64A26-4606-4D33-8958-5A3B7FFC4CDB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11155",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/TSB17931",
        "source" : "sirt@juniper.net",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/TSB17931",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0265",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.843",
      "lastModified" : "2024-11-21T05:42:21.320",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An unvalidated REST API in the AppFormix Agent of Juniper Networks AppFormix allows an unauthenticated remote attacker to execute commands as root on the host running the AppFormix Agent, when certain preconditions are performed by the attacker, thus granting the attacker full control over the environment. This issue affects: Juniper Networks AppFormix 3 versions prior to 3.1.22, 3.2.14, 3.3.0."
      }, {
        "lang" : "es",
        "value" : "Una API REST no comprobada en AppFormix Agent de Juniper Networks AppFormix, permite a un atacante remoto no autenticado ejecutar comandos como root en el host que ejecuta AppFormix Agent, cuando determinadas condiciones previas son llevadas a cabo por el atacante, lo que le otorga al atacante control total sobre el entorno.&#xa0;Este problema afecta a: Juniper Networks AppFormix versiones 3 anteriores a 3.1.22, 3.2.14, 3.3.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:appformix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.1.22",
            "matchCriteriaId" : "B5F34E62-DBBD-4795-A80B-2D08AA8F5AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:juniper:appformix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndExcluding" : "3.2.14",
            "matchCriteriaId" : "AF1AF84C-C7F2-437D-9F01-357DE30863CE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11156",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0266",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.877",
      "lastModified" : "2024-11-21T05:42:21.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The use of multiple hard-coded cryptographic keys in cSRX Series software in Juniper Networks Junos OS allows an attacker to take control of any instance of a cSRX deployment through device management services. This issue affects: Juniper Networks Junos OS on cSRX Series: All versions prior to 20.2R3; 20.3 versions prior to 20.3R2; 20.4 versions prior to 20.4R2."
      }, {
        "lang" : "es",
        "value" : "El uso de múltiples claves criptográficas embebidas en el software de la serie cSRX en Juniper Networks Junos OS, permite a un atacante tomar el control de cualquier instancia de una implementación de cSRX a través de servicios de administración de dispositivos.&#xa0;Este problema afecta a: Juniper Networks Junos OS en la serie cSRX: todas las versiones anteriores a 20.2R3;&#xa0;20.3 versiones anteriores a 20.3R2;&#xa0;versiones 20.4 anteriores a 20.4R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "20DDC6B7-BFC4-4F0B-8E68-442C23765BF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "037BA01C-3F5C-4503-A633-71765E9EF774"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:csrx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11D4A86D-BDB4-4A01-96FE-7E023C58074B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11157",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0267",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.910",
      "lastModified" : "2024-11-21T05:42:21.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Input Validation vulnerability in the active-lease query portion in JDHCPD's DHCP Relay Agent of Juniper Networks Junos OS allows an attacker to cause a Denial of Service (DoS) by sending a crafted DHCP packet to the device thereby crashing the jdhcpd DHCP service. This is typically configured for Broadband Subscriber Sessions. Continued receipt and processing of this crafted packet will create a sustained Denial of Service (DoS) condition. This issue affects Juniper Networks Junos OS: 19.4 versions prior to 19.4R3-S1; 20.1 versions prior to 20.1R2-S1, 20.1R3; 20.2 versions prior to 20.2R3; 20.3 versions prior to 20.3R2. This issue does not affect Junos OS Evolved."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Comprobación de Entrada Inapropiada en una porción de consulta active-lease en DHCP Relay Agent de JDHCPD de Juniper Networks Junos OS, permite a un atacante causar una Denegación de Servicio (DoS) mediante el envío de un paquete DHCP diseñado hacia el dispositivo, lo que bloquea el servicio DHCP jdhcpd.&#xa0;Por lo general, se configura para Broadband Subscriber Sessions.&#xa0;La recepción y el procesamiento continuo de este paquete diseñado creará una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema afecta a Juniper Networks Junos OS: versiones 19.4 anteriores a 19.4R3-S1;&#xa0;versiones 20.1 anteriores a 20.1R2-S1, 20.1R3;&#xa0;20.2 versiones anteriores a 20.2R3;&#xa0;20.3 versiones anteriores a 20.3R2.&#xa0;Este problema no afecta a Junos OS Evolved"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "758275F3-9457-45A2-8F57-65DCD659FC1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DC8E7547-6649-436D-BC45-184417680C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "3332262F-81DA-4D78-99C9-514CADA46611"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "B46B63A2-1518-4A29-940C-F05624C9658D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8E0D4959-3865-42A7-98CD-1103EBD84528"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3A58292B-814C-49E7-8D6D-BE26EFB9ADDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5C9BC697-C7C9-447D-9EBD-E9711462583E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B80433B-57B1-49EF-B1A1-83781D6102E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11158",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/ref/statement/active-leasequery-edit-forwarding-options.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/us/en/software/junos/subscriber-mgmt-sessions/topics/ref/statement/active-leasequery-edit-forwarding-options.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0268",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.943",
      "lastModified" : "2024-11-21T05:42:21.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') weakness in J-web of Juniper Networks Junos OS leads to buffer overflows, segment faults, or other impacts, which allows an attacker to modify the integrity of the device and exfiltration information from the device without authentication. The weakness can be exploited to facilitate cross-site scripting (XSS), cookie manipulation (modifying session cookies, stealing cookies) and more. This weakness can also be exploited by directing a user to a seemingly legitimate link from the affected site. The attacker requires no special access or permissions to the device to carry out such attacks. This issue affects: Juniper Networks Junos OS: 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R2-S4, 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S3; 19.1 versions prior to 19.1R2-S2, 19.1R3-S2; 19.2 versions prior to 19.2R1-S5, 19.2R2; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R1-S3, 19.4R2, 19.4R3; 20.1 versions prior to 20.1R1-S2, 20.1R2. This issue does not affect Juniper Networks Junos OS versions prior to 18.1R1."
      }, {
        "lang" : "es",
        "value" : "Una Neutralización Inapropiada de las Secuencias CRLF en una debilidad de los Encabezados HTTP (''HTTP Response Splitting\") en J-web del Sistema Operativo Juniper Networks Junos conlleva a unos desbordamientos de búfer, fallos de segmento u otros impactos, permitiendo a un atacante modificar la integridad del dispositivo y información de exfiltración del dispositivo sin autenticación.&#xa0;La debilidad puede ser explotada para facilitar el ataque de tipo cross-site scripting (XSS), la manipulación de cookies (modificación de cookies de sesión, robo de cookies) y más.&#xa0;Esta debilidad también puede ser explotada al direccionar a un usuario hacia un enlace aparentemente legítimo del sitio afectado.&#xa0;El atacante no requiere acceso o permisos especiales al dispositivo para llevar a cabo tales ataques.&#xa0;Este problema afecta a: Juniper Networks Junos OS: versiones 18.1 anteriores a 18.1R3-S11;&#xa0;versiones 18.2 anteriores a 18.2R3-S5;&#xa0;versiones 18.3 anteriores a 18.3R2-S4, 18.3R3-S3;&#xa0;versiones 18.&#xa0;4 anteriores a 18.4R2-S5, 18.4R3-S3;&#xa0;versiones 19.1 anteriores a 19.1R2-S2, 19.1R3-S2;&#xa0;versiones 19.2 anteriores a 19.2R1-S5, 19.2R2;&#xa0;versiones 19.3 anteriores a 19.3R3;&#xa0;versiones 19.4 anteriores a 19.4R1-S3, 19.4R2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R1-S2, 20.1R2.&#xa0;Este problema no afecta a las versiones de Juniper Networks Junos OS versiones anteriores a 18.1R1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.3
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 9.3,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-113"
        }, {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11159",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11159",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0269",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:09.980",
      "lastModified" : "2024-11-21T05:42:21.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The improper handling of client-side parameters in J-Web of Juniper Networks Junos OS allows an attacker to perform a number of different malicious actions against a target device when a user is authenticated to J-Web. An attacker may be able to supersede existing parameters, including hardcoded parameters within the HTTP/S session, access and exploit variables, bypass web application firewall rules or input validation mechanisms, and otherwise alter and modify J-Web's normal behavior. An attacker may be able to transition victims to malicious web services, or exfiltrate sensitive information from otherwise secure web forms. This issue affects: Juniper Networks Junos OS: All versions prior to 17.4R3-S3; 18.1 versions prior to 18.1R3-S12; 18.2 versions prior to 18.2R3-S6; 18.3 versions prior to 18.3R3-S4; 18.4 versions prior to 18.4R3-S6; 19.1 versions prior to 19.1R3-S4; 19.2 versions prior to 19.2R3-S1; 19.3 versions prior to 19.3R3-S1; 19.4 versions prior to 19.4R2-S2, 19.4R3; 20.1 versions prior to 20.1R2; 20.2 versions prior to 20.2R2."
      }, {
        "lang" : "es",
        "value" : "El manejo inapropiado de los parámetros client-side en J-Web de Juniper Networks Junos OS, permite a un atacante llevar a cabo una serie de diferentes acciones maliciosas contra un dispositivo objetivo cuando un usuario está autenticado en J-Web.&#xa0;Un atacante puede ser capaz de reemplazar los parámetros existentes, incluyendo los parámetros embebidos dentro de la sesión HTTP/S, las variables de acceso y explotación, la omisión de las reglas de firewall de aplicaciones web o los mecanismos de comprobación de entrada, y de otro modo alterar y modificar el comportamiento normal de J-Web.&#xa0;Un atacante puede ser capaz de transferir a las víctimas a servicios web maliciosos o exfiltrar información confidencial de formularios web que de otro modo serían seguros.&#xa0;Este problema afecta a: Juniper Networks Junos OS: todas las versiones anteriores a 17.4R3-S3;&#xa0;versiones 18.1 anteriores a 18.1R3-S12;&#xa0;versiones 18.2 anteriores a 18.2R3-S6;&#xa0;versiones 18.3 anteriores a 18.3R3-S4;&#xa0;versiones 18.4 anteriores a 18.4R3-S6;&#xa0;versiones 19.1 anteriores a 19.1R3-S4;&#xa0;versiones 19.2 anteriores a 19.2R3-S1;&#xa0;versiones 19.3 anteriores a 19.3R3-S1;&#xa0;versiones 19.4 anteriores a 19.4R2-S2, 19.4R3;&#xa0;versiones 20.1 anteriores a 20.1R2;&#xa0;versiones 20.2 anteriores a 20.2R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 4.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-233"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "11A24AA6-5378-4EEA-82D5-66A5F1110698"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "2433F883-8545-421E-9CB7-AF36A578E930"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C9CAAF7C-9876-473A-BE83-16EA8F00E8C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BB8263A9-5D63-46A2-9C98-B3980910B612"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "28F7740D-C636-4FA3-8479-E5E039041DA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "81F6DEA3-F07E-4FD0-87CB-4E8C0B768706"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "93098975-4A06-4A72-8DF0-F2C5E1AF2F77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E1F3AEE4-CEB8-4CAA-A48A-1B4647FFFCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "512FB3D1-BA5B-4F73-BDB2-49D6889F5473"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B9295AF3-A883-47C3-BAF8-3D82F719733E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "CD07B7E2-F5C2-4610-9133-FDA9E66DFF4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "D3C23AEB-34DE-44FB-8D64-E69D6E8B7401"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18DB9401-5A51-4BB3-AC2F-58F58F1C788C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "06F53DA5-59AE-403C-9B1E-41CE267D8BB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11160",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11160",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0270",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:10.017",
      "lastModified" : "2024-11-21T05:42:22.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "On PTX Series and QFX10k Series devices with the \"inline-jflow\" feature enabled, a use after free weakness in the Packet Forwarding Engine (PFE) microkernel architecture of Juniper Networks Junos OS may allow an attacker to cause a Denial of Service (DoS) condition whereby one or more Flexible PIC Concentrators (FPCs) may restart. As this is a race condition situation this issue become more likely to be hit when network instability occurs, such as but not limited to BGP/IGP reconvergences, and/or further likely to occur when more active \"traffic flows\" are occurring through the device. When this issue occurs, it will cause one or more FPCs to restart unexpectedly. During FPC restarts core files will be generated. While the core file is generated traffic will be disrupted. Sustained receipt of large traffic flows and reconvergence-like situations may sustain the Denial of Service (DoS) situation. This issue affects: Juniper Networks Junos OS: 18.1 version 18.1R2 and later versions prior to 18.1R3-S10 on PTX Series, QFX10K Series."
      }, {
        "lang" : "es",
        "value" : "En los dispositivos de la serie PTX y la serie QFX10k con la funcionalidad \"inline-jflow\" habilitada, un uso de la memoria previamente liberada  en la arquitectura de microkernel de Packet Forwarding Engine (PFE) de Juniper Networks, puede permitir a un atacante causar una Denegación de Servicio (DoS) condición por la cual uno o más Flexible PIC Concentrators (FPCs) pueden reiniciarse. Como se trata de una situación de condición de carrera, es más probable que ocurra este problema cuando se produce una inestabilidad de la red, como, entre otros, las reconvergencias de BGP/IGP, y/o es más probable que ocurra cuando se produzcan \"traffic flows\" más activos por medio del dispositivo. Cuando este problema ocurre, causará uno o más FPC se reiniciarán inesperadamente. Durante los reinicios de FPC, se generarán archivos core. Mientras se genera el archivo principal, el tráfico estará interrumpido. La recepción sostenida de grandes flujos de tráfico y situaciones similares a la reconvergencia pueden sustentar la situación de Denegación de Servicio (DoS). Este problema afecta a: Juniper Networks Junos OS: versiones 18.1 18.1R2 y posteriores versiones anteriores a 18.1R3-S10 en la serie PTX, serie QFX10K"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        }, {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6DF99D-E438-4943-BC32-F2821E72AE0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10001-36mr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C188428C-0558-44FB-845C-E885DE9A0733"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82B22AC2-B794-4F12-9EB3-9AA6E4B19831"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BD05415-9F94-4EB8-805A-C9C0FFA9D0DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C432E543-37F5-4CA0-B239-2B97C6A16907"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A64A26-4606-4D33-8958-5A3B7FFC4CDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1879799F-18B2-4958-AA90-FD19348C889F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "516476F9-7D4C-494F-99AA-750F4467CD15"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ptx5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "654140A0-FEC0-4DB4-83BF-ECCB000DFA4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1401145-D8EC-4DB9-9CDE-9DE6C0D000C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11161",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/inline-flow-monitoring-ptx.html",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/inline-flow-monitoring-ptx.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0271",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:10.053",
      "lastModified" : "2024-11-21T05:42:22.177",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Double Free vulnerability in the software forwarding interface daemon (sfid) process of Juniper Networks Junos OS allows an adjacently-connected attacker to cause a Denial of Service (DoS) by sending a crafted ARP packet to the device. Continued receipt and processing of the crafted ARP packets will create a sustained Denial of Service (DoS) condition. This issue affects: Juniper Networks Junos OS on EX2200-C Series, EX3200 Series, EX3300 Series, EX4200 Series, EX4500 Series, EX4550 Series, EX6210 Series, EX8208 Series, EX8216 Series. 12.3 versions prior to 12.3R12-S17; 15.1 versions prior to 15.1R7-S8. This issue only affects the listed Marvell-chipset based EX Series devices. No other products or platforms are affected."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Doble Liberación en el proceso software forwarding interface daemon (sfid) de Juniper Networks Junos OS, permite a un atacante conectado de forma adyacente causar una Denegación de Servicio (DoS) mediante el envío de un paquete ARP diseñado hacia el dispositivo.&#xa0;La recepción y el procesamiento continuo de los paquetes ARP diseñados crearán una condición sostenida de Denegación de Servicio (DoS).&#xa0;Este problema afecta a: Juniper Networks Junos OS en Serie EX2200-C, Serie EX3200, Serie EX3300, Serie EX4200, Serie EX4500, Serie EX4550, Serie EX6210, Serie EX8208, Serie EX8216.&#xa0;versiones 12.3 anteriores a 12.3R12-S17;&#xa0;versiones 15.1 anteriores a 15.1R7-S8.&#xa0;Este problema solo afecta a los dispositivos de la serie EX basados ??en chipset Marvell enumerados.&#xa0;Ningún otro producto o plataforma está afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C33DE7-4947-41D1-8DDF-DC7C9541414E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12D5D63-479D-4B27-8179-3B8985DB51F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4D8EE5-E93F-4F50-9D31-CD5A69531962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "B63EF1C6-C859-4EFA-81BE-1E5AD3364B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "B786F950-0E07-4ADC-B988-917994FE99CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2F703D05-C7A4-4EBF-A2FB-8AFE8E13DCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s13:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE640C-9ED9-4976-9083-DEEBDDAA5516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s14:*:*:*:*:*:*",
            "matchCriteriaId" : "9813A1FF-9AB3-46C0-BD65-5462E2942FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s15:*:*:*:*:*:*",
            "matchCriteriaId" : "564E4FA2-671F-4762-979F-4B8C93275412"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s16:*:*:*:*:*:*",
            "matchCriteriaId" : "93C75780-930E-4263-9418-44682237EA19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "99C8DC55-60AF-44D0-86C1-1F90C5DB0235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D23CEC9A-BF5F-489C-8CA7-1946238E20D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0010CCA3-6A76-4C18-82C4-BF44FECA4B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4D353E7F-F773-4502-B4EE-E73BA2DE1BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2200-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7BD5636-93D5-4C06-964F-00055DF6B2B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C7A20FC-A19F-4881-A0E8-C440E9FE60D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC326549-217D-4194-8310-AB398D6FF3F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53269C69-3D1E-4F05-8EF6-81743D7A699E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDEE8AE4-B393-442C-AD68-4AC43E76A8F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E98077-92AF-4E3E-96F0-2E6F9D6343D9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex6210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71FF88C7-89CB-4E04-BADA-AD64F8060C6C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72E67A5A-0DFF-42D9-81A7-570E9BCA463D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex8216:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51C5371-51E9-40AE-8619-BC1267DD1D08"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11162",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11162",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0272",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:10.087",
      "lastModified" : "2024-11-21T05:42:22.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A kernel memory leak in QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 devices Flexible PIC Concentrators (FPCs) on Juniper Networks Junos OS allows an attacker to send genuine packets destined to the device to cause a Denial of Service (DoS) to the device. On QFX10002-32Q, QFX10002-60C, QFX10002-72Q devices the device will crash and restart. On QFX10008, QFX10016 devices, depending on the number of FPCs involved in an attack, one more more FPCs may crash and traffic through the device may be degraded in other ways, until the attack traffic stops. A reboot is required to restore service and clear the kernel memory. Continued receipt and processing of these genuine packets will create a sustained Denial of Service (DoS) condition. On QFX10008, QFX10016 devices, an indicator of compromise may be the existence of DCPFE core files. You can also monitor PFE memory utilization for incremental growth: user@qfx-RE:0% cprod -A fpc0 -c \"show heap 0\" | grep -i ke 0 3788a1b0 3221225048 2417120656 804104392 24 Kernel user@qfx-RE:0% cprod -A fpc0 -c \"show heap 0\" | grep -i ke 0 3788a1b0 3221225048 2332332200 888892848 27 Kernel This issue affects: Juniper Networks Junos OS on QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: 16.1 versions 16.1R1 and above prior to 17.3 versions prior to 17.3R3-S9; 17.4 versions prior to 17.4R3-S2; 18.1 versions prior to 18.1R3-S11; 18.2 versions prior to 18.2R3-S5; 18.3 versions prior to 18.3R3-S3; 18.4 versions prior to 18.4R2-S5, 18.4R3-S4; 19.1 versions prior to 19.1R3-S2; 19.2 versions prior to 19.2R3; 19.3 versions prior to 19.3R3; 19.4 versions prior to 19.4R3; 20.1 versions prior to 20.1R2. This issue does not affect releases prior to Junos OS 16.1R1. This issue does not affect EX Series devices. This issue does not affect Junos OS Evolved."
      }, {
        "lang" : "es",
        "value" : "Una fuga de memoria del kernel en dispositivos Concentradores PIC Flexibles (FPC) QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016 en Juniper Networks Junos OS, permite a un atacante enviar paquetes genuinos destinados al dispositivo para causar una Denegación de Servicio ( DoS) al dispositivo. En los dispositivos QFX10002-32Q, QFX10002-60C, QFX10002-72Q, el dispositivo se bloqueará y se reiniciará. En los dispositivos QFX10008, QFX10016, dependiendo del número de FPC involucrados en un ataque, un FPC más puede bloquearse y el tráfico por medio del dispositivo puede degradarse de otras formas, hasta que el tráfico del ataque se detenga. Es requerido un reinicio para restaurar el servicio y borrar la memoria del kernel. La recepción y el procesamiento continuo de estos paquetes genuinos crearán una condición sostenida de Denegación de Servicio (DoS). En los dispositivos QFX10008, QFX10016, un indicador de compromiso puede ser la existencia de archivos core DCPFE. También puede monitorear la utilización de la memoria PFE para el crecimiento incremental user@qfx-RE:0% cprod -A fpc0 -c \"show heap 0\" | grep -i ke 0 3788a1b0 3221225048 2417120656 804104392 24 Kernel user@qfx-RE:0% cprod -A fpc0 -c \"show heap 0\" | grep -i ke 0 3788a1b0 3221225048 2332332200 888892848 27 Kernel.  Este problema afecta a: Juniper Networks Junos OS en QFX10002-32Q, QFX10002-60C, QFX10002-72Q, QFX10008, QFX10016: versiones 16.1 16.1R1 y anteriores a 17.3R3 -S9; versiones 17.4 anteriores a 17.4R3-S2; versiones 18.1 anteriores a 18.1R3-S11; versiones 18.2 anteriores a 18.2R3-S5; versiones 18.3 anteriores a 18.3R3-S3; versiones 18.4 anteriores a 18.4R2-S5, 18.4R3-S4; versiones 19.1 anteriores a 19.1R3-S2; versiones 19.2 anteriores a 19.2R3; versiones 19.3 anteriores a 19.3R3; versiones  19.4 anteriores a 19.4R3; versiones 20.1 anteriores a 20.1R2. Este problema no afecta a las versiones anteriores a Junos OS 16.1R1. Este problema no afecta a los dispositivos de la serie EX. Este problema no afecta a Junos OS Evolved"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "684A7156-DCB0-499E-B7F9-21F5F1598A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "15BCB54A-C563-4694-8DAF-E2EF3E55F4DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "8008342F-4BF3-49D8-B516-C08AAF9E469E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84DD80BF-BF7E-447B-AA74-00B3D8036E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A72B62-E3B7-42FA-980F-75BDF15236FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "57B89EEB-222D-46AA-BC8F-4EE7E17BA7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE613D-1317-4D2E-8A61-980CD5DEAED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB2D63C-C966-42CA-85A9-09820D00A2D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7231C6-1CC4-4E7A-A317-5315246D2540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E079B-4E8F-4DAC-85C7-ECC888EBD306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "35F7D583-44F3-41F0-829F-8C17DFCD4464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11BD757A-99BC-44E8-A95B-2CDDA638E469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "1733E9C1-05FF-4D84-8AE3-315A61288D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8C108419-A74F-4B19-AD47-7A87B76DE18A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "616A983A-5849-43BB-BD89-E5E2E95A7705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "130E4A30-A19D-4D1E-B91C-575E8F43EA87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "341417EE-71C2-465C-96CA-65B2B5B63FF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "A701A73D-A795-47DD-8EB5-55D1CDF67A49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "68EBE6E9-5E3B-44A1-992F-D6B656706268"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "0CD17956-8E8C-489D-927A-5709C05EA705"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "80E2AD65-3DAC-4618-AB73-C43EDCDC7A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "B783A510-A694-4BF0-8995-F05507F75A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A0BC4766-4BA4-4B02-A654-5C527EA66E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "75902119-60D0-49F8-8E01-666E0F75935A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "064A7052-4EF5-4BFB-88FF-8122AEECB6A7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "08C58CCB-3BAA-4400-B371-556DF46DE69C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C8CF858F-84BB-4AEA-B829-FCF22C326160"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "5405F361-AB96-4477-AA0D-49B874324B39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "E45E5421-2F6F-4AF9-8EB1-431A804FC649"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "725D8C27-E4F8-4394-B4EC-B49B6D3C2709"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8233C3AB-470E-4D13-9BFD-C9E90918FD0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "5F7A233A-D4F6-46FA-92E9-2ACE13E4A6A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7C71D2FA-B1A4-4004-807F-7B3BB347DF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9E78E854-DDD3-4D1A-97AB-AEA70B9B811F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "B83FB539-BD7C-4BEE-9022-098F73902F38"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "7659AC36-A5EA-468A-9793-C1EC914D36F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E0E018E1-568E-40F2-ADA5-F71509811879"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96A8EA-FFE3-4D8F-9266-21899149D634"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12A75C6-2D00-4202-B861-00FF71585FA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4DCFA774-96EF-4018-82CF-95C807025C24"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76022948-4B07-43CB-824C-44E1AB3537CB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "25446F60-5CB9-4923-BCE8-609AE3CFDFBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A23E5CEA-EFF5-4641-BC47-BA2D0859F0EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "8328FDE6-9707-4142-B905-3B07C0E28E35"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "41CD982F-E6F2-4951-9F96-A76C142DF08E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "19FDC05F-5582-4F7E-B628-E58A3C0E7F2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "401306D1-E9CE-49C6-8DC9-0E8747B9DC2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:20.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "615EAF48-AD53-4CC2-B233-5EA5C0F72CB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-32q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17E59530-3262-4BDC-915C-0B8D2EED7784"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-60c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "626CA614-72D4-4A8B-9C38-275C7A7F8D85"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10002-72q:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0FF30F4-3D10-4AD6-9643-5826A11C7629"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1453E42A-77B3-4922-8EC3-1A5668C39550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:qfx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26408465-BD6A-4416-B98E-691A5F651080"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11163",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/KB32854",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11163",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/KB32854",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0273",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:10.123",
      "lastModified" : "2024-11-21T05:42:22.493",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An always-incorrect control flow implementation in the implicit filter terms of Juniper Networks Junos OS and Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 devices with affected Trio line cards allows an attacker to exploit an interdependency in the PFE UCODE microcode of the Trio chipset with various line cards to cause packets destined to the devices interfaces to cause a Denial of Service (DoS) condition by looping the packet with an unreachable exit condition ('Infinite Loop'). To break this loop once it begins one side of the affected LT interfaces will need to be disabled. Once disabled, the condition will clear and the disabled LT interface can be reenabled. Continued receipt and processing of these packets will create a sustained Denial of Service (DoS) condition. This issue only affects LT-LT interfaces. Any other interfaces are not affected by this issue. This issue affects the following cards: MPCE Type 3 3D MPC4E 3D 32XGE MPC4E 3D 2CGE+8XGE EX9200 32x10G SFP EX9200-2C-8XS FPC Type 5-3D FPC Type 5-LSR EX9200 4x40G QSFP An Indicator of Compromise (IoC) can be seen by examining the traffic of the LT-LT interfaces for excessive traffic using the following command: monitor interface traffic Before loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3759900268942 (1456 bps) [0] <---------- LT interface utilization is low Output bytes: 3759900344309 (1456 bps) [0] <---------- LT interface utilization is low After loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3765160313129 (2158268368 bps) [5260044187] <---------- LT interface utilization is very high Output bytes: 3765160399522 (2158266440 bps) [5260055213] <---------- LT interface utilization is very high This issue affects: Juniper Networks Junos OS on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960. Versions 15.1F6, 16.1R1, and later versions prior to 16.1R7-S8; 17.1 versions prior to 17.1R2-S12; 17.2 versions prior to 17.2R3-S4; 17.3 versions prior to 17.3R3-S8; 17.4 versions prior to 17.4R2-S10, 17.4R3-S2; 18.1 versions prior to 18.1R3-S10; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R3-S2; 18.4 versions prior to 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; 19.1 versions prior to 19.1R1-S5, 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S4, 19.2R2; 19.3 versions prior to 19.3R2-S3, 19.3R3; 19.4 versions prior to 19.4R1-S1, 19.4R2. This issue does not affect the MX10001. This issue does not affect Juniper Networks Junos OS versions prior to 15.1F6, 16.1R1. Juniper Networks Junos OS Evolved on ACX5800, EX9200 Series, MX10000 Series, MX240, MX480, MX960 19.4 versions prior to 19.4R2-EVO. This issue does not affect the MX10001."
      }, {
        "lang" : "es",
        "value" : "Una implementación de flujo de control always-incorrect en los términos de filtro implícitos de Junos OS y Junos OS Evolved de Juniper Networks en dispositivos ACX5800, Serie EX9200, Serie MX10000, MX240, MX480, MX960 con tarjetas de línea Trio afectadas permite a un atacante explotar una interdependencia en el microcódigo PFE UCODE del chipset Trio con varias tarjetas de línea para causar que los paquetes destinados a las interfaces de los dispositivos provoquen una condición de Denegación de Servicio (DoS) al hacer un bucle del paquete con una condición de salida inalcanzable (“Infinite Loop”). Para romper este bucle una vez que comience, será necesario deshabilitar un lado de las interfaces LT afectadas. Una vez desactivado, la condición desaparecerá y la interfaz LT desactivada puede ser reactivada. La recepción y el procesamiento continuo de estos paquetes crearán una condición sostenida de Denegación de Servicio (DoS). Este problema solo afecta a las interfaces LT-LT. Cualquier otra interfaz no está afectada por este problema. Este problema afecta a las siguientes tarjetas: MPCE Tipo 3 3D MPC4E 3D 32XGE MPC4E 3D 2CGE + 8XGE EX9200 32x10G SFP EX9200-2C-8XS FPC Tipo 5-3D FPC Tipo 5-LSR EX9200 4x40G QSFP, se puede visualizar un Indicador de Compromiso (IoC) examinando el tráfico de las interfaces LT-LT en busca de tráfico excesivo mediante el siguiente comando: monitor interface traffic Before loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3759900268942 (1456 bps) [0] (---------- LT interface utilization is low Output bytes: 3759900344309 (1456 bps) [0] (---------- LT interface utilization is low After loop impact: Interface: lt-2/0/0, Enabled, Link is Up Encapsulation: Logical-tunnel, Speed: 100000mbps Traffic statistics: Current delta Input bytes: 3765160313129 (2158268368 bps) [5260044187] (---------- LT interface utilization is very high Output bytes: 3765160399522 (2158266440 bps) [5260055213] (---------- LT interface utilization is very high. Este problema afecta a: Juniper Networks Junos OS en ACX5800, Serie EX9200, Serie MX10000, MX240, MX480, MX960. Versiones 15.1F6, 16.1R1, y posteriores, versiones  anteriores a 16.1R7-S8; versiones 17.1 anteriores a 17.1R2-S12; versiones  17.2 anteriores a 17.2R3-S4; versiones  17.3 anteriores a 17.3R3-S8; versiones 17.4 anteriores a 17.4R2-S10, 17.4R3-S2; versiones 18.1 anteriores a 18.1R3-S10; versiones 18.2 anteriores a 18.2R2-S7, 18.2R3-S3; versiones  18.3 anteriores a 18.3R1-S7, 18.3R3-S2; versiones  18.4 anteriores a 18.4R1-S7, 18.4R2-S4, 18.4R3-S2; versiones  19.1 anteriores a 19.1R1-S5, 19.1R2-S1, 19.1R3; versiones  19.2 anteriores a 19.2R1-S4, 19.2R2; versiones  19.3 anteriores a 19.3R2-S3, 19.3R3; versiones  19.4 anteriores a 19.4R1-S1, 19.4R2. Este problema no afecta a la Serie MX10001. Este problema no afecta a Juniper Networks Junos OS versiones anteriores a 15.1F6, 16.1R1. Juniper Networks Junos OS Evolved en ACX5800, Serie EX9200, Serie MX10000, MX240, MX480, MX960 versiones 19.4 anteriores a 19.4R2-EVO. Este problema no afecta a la Serie MX10001"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-670"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D61247C5-C611-47CE-89BA-AB3958A975B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "CA9DB8A3-2E5F-4969-9D42-25363489A133"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "04830AA8-7432-46F1-BD93-7339E2B756E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57342DBF-5D18-42C7-B69C-C603E2C4D5AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "684A7156-DCB0-499E-B7F9-21F5F1598A04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "1733E9C1-05FF-4D84-8AE3-315A61288D9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7939BCE6-D4E8-4366-B954-32D77F21A35D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BA8D32E4-1892-46DC-9782-5466A14E18D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:-:*:*:*:*:*",
            "matchCriteriaId" : "D1CAEBD2-2E46-44B5-B1D1-1DDBD450FD27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C703CA-9309-413A-9CD7-585277ADD32D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "63B00B4F-3E65-4CB2-807D-43908B570AE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "8732E25A-9073-4C7B-9E89-C02368728EB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "09255363-BF79-4FC3-AADD-5FAD0902174F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "4E2E933A-852F-4257-860D-09638EE0D2F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "35299B02-DC75-458D-B86D-8A0DB95B06AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "9BAC3EF2-3339-4E3C-9C6D-E854EBBDEF9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2D1FB957-54C8-428E-BC8D-2802D7F6895F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A0C26E59-874A-4D87-9E7F-E366F4D65ED1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1BD93674-9375-493E-BD6C-8AD41CC75DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "34E28FD9-1089-42F7-8586-876DBEC965DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B7E72C49-1849-4A6F-81BC-D03F06D47D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "736B7A9F-E237-45AF-A6D6-84412475F481"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "62E63730-F697-4FE6-936B-FD9B4F22EAE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "33F08A33-EF80-4D86-9A9A-9DF147B9B6D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AF24ACBD-5F84-47B2-BFF3-E9A56666269C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3935A586-41BD-4FA5-9596-DED6F0864777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "DC743EE4-8833-452A-94DB-655BF139F883"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "83447F3F-79A3-41DF-8FD1-31DCFCBE40A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos_os_evolved:19.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "1699821F-FBC6-4EB9-94E5-96AF1E4E4FDE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:acx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D0730C3-5846-43E9-A9BD-8AEED356A959"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6F0EA2F-BF7E-45D0-B2B4-8A7B67A9475A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx10016:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C39DA74D-F5C7-4C11-857D-50631A110644"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4A26704-A6A4-4C4F-9E12-A0A0259491EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "104858BD-D31D-40E0-8524-2EC311F10EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:mx960:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5E08E1E-0FE4-4294-9497-BBFFECA2A220"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11164",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-0275",
      "sourceIdentifier" : "sirt@juniper.net",
      "published" : "2021-04-22T20:15:10.160",
      "lastModified" : "2024-11-21T05:42:22.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site Scripting (XSS) vulnerability in J-Web on Juniper Networks Junos OS allows an attacker to target another user's session thereby gaining access to the users session. The other user session must be active for the attack to succeed. Once successful, the attacker has the same privileges as the user. If the user has root privileges, the attacker may be able to gain full control of the device. This issue affects: Juniper Networks Junos OS: 12.3 versions prior to 12.3R12-S15 on EX Series; 12.3X48 versions prior to 12.3X48-D95 on SRX Series; 15.1 versions prior to 15.1R7-S6 on EX Series; 15.1X49 versions prior to 15.1X49-D200 on SRX Series; 16.1 versions prior to 16.1R7-S7; 16.2 versions prior to 16.2R2-S11, 16.2R3; 17.1 versions prior to 17.1R2-S11, 17.1R3-S2; 17.2 versions prior to 17.2R3-S3; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7; 17.4 versions prior to 17.4R2-S9, 17.4R3; 18.1 versions prior to 18.1R3-S9; 18.2 versions prior to 18.2R2-S7, 18.2R3-S3; 18.3 versions prior to 18.3R1-S7, 18.3R2-S3, 18.3R3-S1; 18.4 versions prior to 18.4R1-S6, 18.4R2-S4, 18.4R3; 19.1 versions prior to 19.1R2-S1, 19.1R3; 19.2 versions prior to 19.2R1-S3, 19.2R2; 19.3 versions prior to 19.3R2."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site Scripting (XSS) en J-Web en Juniper Networks Junos OS, permite a un atacante apuntar a la sesión de otro usuario, consiguiendo así acceso a la sesión de los usuarios.&#xa0;La otra sesión de usuario debe estar activa para que el ataque tenga éxito.&#xa0;Una vez que se tiene éxito, el atacante tiene los mismos privilegios que el usuario.&#xa0;Si el usuario tiene privilegios de root, el atacante puede ser capaz de conseguir el control total del dispositivo.&#xa0;Este problema afecta a: Juniper Networks Junos OS: versiones 12.3 anteriores a 12.3R12-S15 en la Serie EX;&#xa0;versiones 12.3X48 anteriores a 12.3X48-D95 en la Serie SRX;&#xa0; versiones 15.1anteriores a 15.1R7-S6 en la Serie EX;&#xa0;versiones 15.1X49 anteriores a 15.1X49-D200 en la Serie SRX;&#xa0;versiones 16.1 anteriores a 16.1R7-S7;&#xa0;versiones 16.2 anteriores a 16.2R2-S11, 16.2R3;&#xa0;versiones 17.1 anteriores a 17.1R2-S11, 17.1R3-S2;&#xa0;versiones 17.2 anteriores a 17.2R3-S3;&#xa0;versiones 17.3 anteriores a 17.3R2-S5, 17.3R3-S7;&#xa0; versiones 17.4 anteriores a 17.4R2-S9, 17.4R3;&#xa0; versiones 18.1 anteriores a 18.1R3-S9;&#xa0;versiones 18.2 anteriores a 18.2R2-S7, 18.2R3-S3;&#xa0;versiones 18.3 anteriores a 18.3R1-S7, 18.3R2-S3, 18.3R3-S1;&#xa0;versiones 18.4 anteriores a 18.4R1-S6, 18.4R2-S4, 18.4R3;&#xa0;versiones 19.1 anteriores a 19.1R2-S1, 19.1R3;&#xa0;versiones 19.2 anteriores a 19.2R1-S3, 19.2R2;&#xa0;versiones 19.3 anteriores a 19.3R2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "sirt@juniper.net",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "sirt@juniper.net",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "223C12D0-61A0-4C12-8AFC-A0CB64759A31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "371A7DF8-3F4B-439D-8990-D1BC6F0C25C5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10:*:*:*:*:*:*",
            "matchCriteriaId" : "661B4C1E-DB85-4EB0-B26F-F6496CEF0AA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C33DE7-4947-41D1-8DDF-DC7C9541414E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r10-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C12D5D63-479D-4B27-8179-3B8985DB51F0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r11:*:*:*:*:*:*",
            "matchCriteriaId" : "F0DD051A-E486-4A9D-A978-A5A980AAF237"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12:*:*:*:*:*:*",
            "matchCriteriaId" : "D4ED9ACC-B6BA-4128-8934-759BB9EC904F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4D8EE5-E93F-4F50-9D31-CD5A69531962"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "B63EF1C6-C859-4EFA-81BE-1E5AD3364B25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "B786F950-0E07-4ADC-B988-917994FE99CF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2F703D05-C7A4-4EBF-A2FB-8AFE8E13DCDF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s13:*:*:*:*:*:*",
            "matchCriteriaId" : "BACE640C-9ED9-4976-9083-DEEBDDAA5516"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s14:*:*:*:*:*:*",
            "matchCriteriaId" : "9813A1FF-9AB3-46C0-BD65-5462E2942FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "99C8DC55-60AF-44D0-86C1-1F90C5DB0235"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D23CEC9A-BF5F-489C-8CA7-1946238E20D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "0010CCA3-6A76-4C18-82C4-BF44FECA4B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3:r12-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4D353E7F-F773-4502-B4EE-E73BA2DE1BF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "285CD1E5-C6D3-470A-8556-653AFF74D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:a1:*:*:*:*:*:*",
            "matchCriteriaId" : "83AB8877-3DC0-4B8C-B864-1BF18C368337"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f:*:*:*:*:*:*",
            "matchCriteriaId" : "D80CABB3-9A32-4FBC-AB8E-435BA85CFA70"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f1:*:*:*:*:*:*",
            "matchCriteriaId" : "C56F5C48-BA48-4EE1-88BE-782B3CFB3B90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56E6C3-BBB6-4853-91D9-99C7676D0CD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "AC196685-3B0C-4754-AE6A-6BE456CC6B52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "F0146AA9-C513-4871-A62A-52C9F40EB958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A18672EF-E33D-4ACE-BB0A-561812F502C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CEF0E75F-831E-40B8-926D-B2E92A84E31B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f3:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0ECBD8-3D66-49DA-A557-5695159F0C06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f4:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAA2998-A0D6-4818-9E7C-25E8099403E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5:*:*:*:*:*:*",
            "matchCriteriaId" : "2D4ADFC5-D4B8-4A68-95D8-8ADF92C1CFE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f5-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "BFF0C559-EC2F-4FEE-B012-E9127A68FD4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6:*:*:*:*:*:*",
            "matchCriteriaId" : "71D211B9-B2FE-4324-AAEE-8825D5238E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD3A11C-4CAA-4DDB-AD20-6C7EFA368CCB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9134BF-7289-4503-A9C5-977C4CDCD108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "2698D906-6D9D-429C-9ECC-46FF2334C637"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6126279A-8509-4CA1-BFB3-E76F701F5031"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "CA0D028E-0B07-4CB2-863A-527806B9917C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "846582E4-05A0-4AD9-B78B-1707A09DAA74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "E43A39D8-3BD4-41CD-A8A3-2BFF8D340BCF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "DECD665D-2CA4-4CB2-B77D-9230B102B339"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "85B83ED7-EE50-4F06-A386-B0A4FC7263DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "64F1FD18-AAD2-48DD-8F23-55D65D34FCE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f6-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "B02FED8D-A554-4039-9F0A-C7EEFC640317"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:f7:*:*:*:*:*:*",
            "matchCriteriaId" : "BD332D86-5DA7-49A4-98C3-E4D946832DC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "6BFFAC38-5D41-4BDB-B9D4-579F104A61BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D3EA8F-4D30-4383-AF2F-0FB6D822D0F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E6CD065-EC06-4846-BD2A-D3CA7866070F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "C7620D01-1A6B-490F-857E-0D803E0AEE56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "4A1545CE-279F-4EE2-8913-8F3B2FAFE7F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "03B09A78-9DEA-43A7-8DD6-56D94869DAEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "18B1A6D6-EB40-461A-87B0-FD777019E1BF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F8CD62D3-0894-426E-80A8-CEBCBD49810F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "08FC0245-A4FF-42C0-A236-8569301E351A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "A68E7711-C7B9-4578-AB7B-863F088A38BA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "E0501706-CB27-42B6-916B-B0009EC333C7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "41E43503-A694-406E-B95A-689E4167A4FD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r5-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A464B371-1B8B-4563-8728-969825896115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "120EA9E3-788B-4CFD-A74F-17111FFD0131"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4C2FBB-FEA0-4B98-8568-705FFFFFBB06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "B2506FCC-4B0F-4FEF-A44E-0C704B6217F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "9D9F2F31-B378-40FE-B012-000A225B76F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "D014FF7B-BBEA-4F80-BE0E-4C70E4585A1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "C8257676-7AA7-4B39-A8F8-685843D0685B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "31001EA8-2C65-4D3D-AEC7-F298692E8752"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "33A3ECF9-AA4D-41F9-8441-1EB5F1DB882E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "989D1170-C430-4117-8E3B-46D8B459DF49"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB2FD851-BBB6-4D29-B933-1070564E0B50"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "5229750A-8555-4A4F-AD6C-82400BE81E1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C5646AB3-407E-4745-8B16-4B58A8961D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B3302CB-457F-4BD2-B80B-F70FB4C4542E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex2300-c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "979C3597-C53B-4F4B-9EA7-126DA036C86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DAF5E7-E610-4D74-8573-41C16D642837"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53269C69-3D1E-4F05-8EF6-81743D7A699E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E594D6DC-87F6-40D2-8268-ED6021462168"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B43F6CB-0595-4957-8B3B-ADD4EA84D8C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1BB20B5-EA30-4E8E-9055-2E629648436A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B425BB1-3C78-42B1-A6C1-216E514191F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D08A8D94-134A-41E7-8396-70D8B0735E9C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:ex9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1CCB1E61-07A1-40B0-B616-F1A6E06D11C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:-:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1FED64-8725-4978-9EBF-E3CD8EF338E4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "4B7066A4-CD05-4E1A-89E8-71B4CB92CFF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "A4AC2E1E-74FB-4DA3-8292-B2079F83FF54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "5FF83BD0-3B28-481E-8C8F-09ECDA493DA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6E296274-AFC1-4F56-A4B3-827C2E0BC9D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "3C82799B-BD25-4359-9E3D-4D7CA7367525"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "094485FF-960C-4533-A2AF-6C4D420D260D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "F8BE3661-1DE5-4F57-9384-68C1B34F6812"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "B45E8A14-E7F4-41EB-9BFA-7A19E35D11FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C694C6-C58C-4513-91E8-6CC22A2386E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d51:*:*:*:*:*:*",
            "matchCriteriaId" : "64A0CCD4-91BA-440E-A14C-48E67D1F03A1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "6B65EF51-ED97-4973-94C4-8F66C553F190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "9EE7C08A-2A4B-4A84-AD95-A890913E2EE3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "44C61900-680C-4C74-8B96-ACC93FE9465E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d66:*:*:*:*:*:*",
            "matchCriteriaId" : "6A793CCD-397E-45DA-9349-D01C69AB96D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "B6C38637-ABE0-419A-A053-CBE076766551"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "1F87EF0D-E609-4D4A-B228-CEF05C753E68"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4484081E-E2E9-4858-8960-144D820CF7D4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d85:*:*:*:*:*:*",
            "matchCriteriaId" : "4D12F342-3A79-4F94-BFD0-F1A0942CFFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:12.3x48:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "90070E86-9400-4D5F-977D-8900904952A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27A6BF09-ABBF-4126-ADD6-B174937F8554"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d10:*:*:*:*:*:*",
            "matchCriteriaId" : "D90D8985-34EF-44CC-A9A7-CB0FD22676F2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d100:*:*:*:*:*:*",
            "matchCriteriaId" : "856A5668-FA4F-44E9-A3F0-BE4979F631E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d110:*:*:*:*:*:*",
            "matchCriteriaId" : "F3B2DA4D-5E5D-4E09-BE4D-5B3371703D8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d120:*:*:*:*:*:*",
            "matchCriteriaId" : "FA2459ED-DFA5-4701-AF92-C2928C3BD64D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d130:*:*:*:*:*:*",
            "matchCriteriaId" : "8830C4BC-2B3D-4CCF-A37E-79C2D46159BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d131:*:*:*:*:*:*",
            "matchCriteriaId" : "40D42ACF-860C-4B47-8E25-7DEC30FB8064"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d140:*:*:*:*:*:*",
            "matchCriteriaId" : "C808E08F-1992-43DD-A106-E920DC784831"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d15:*:*:*:*:*:*",
            "matchCriteriaId" : "C8C94365-988C-4A14-8E49-846152FDC666"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d150:*:*:*:*:*:*",
            "matchCriteriaId" : "E288F54B-AEA3-412F-85A4-EBDFE74DB84F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d160:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC05C-1C4B-4F35-A286-52D20DFD6212"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d170:*:*:*:*:*:*",
            "matchCriteriaId" : "080422D3-B508-4049-B558-4B04BF2E8AB4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d180:*:*:*:*:*:*",
            "matchCriteriaId" : "2FAFD8F8-CBD2-45CA-BD3C-875C8FA1D778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d190:*:*:*:*:*:*",
            "matchCriteriaId" : "C68F093D-3205-43A5-BA06-85AC7BEEFD94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d20:*:*:*:*:*:*",
            "matchCriteriaId" : "18468579-0195-4DDE-BAA5-4BE4068F3A69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d25:*:*:*:*:*:*",
            "matchCriteriaId" : "6825F6BA-B48F-4E02-938F-6B297E21BA07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d30:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5FAA97-171F-4DB9-B78E-6E1A5F34336A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d35:*:*:*:*:*:*",
            "matchCriteriaId" : "870244F3-1C05-4F10-A205-5189BB860F46"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d40:*:*:*:*:*:*",
            "matchCriteriaId" : "235EE40B-AA15-4F39-8087-A051F4F70995"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d45:*:*:*:*:*:*",
            "matchCriteriaId" : "17330544-3AFC-463E-A146-2840A8AE17D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d50:*:*:*:*:*:*",
            "matchCriteriaId" : "8ABA301F-7866-42A5-8391-E07BEAFF06FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d55:*:*:*:*:*:*",
            "matchCriteriaId" : "884E4A85-ED42-4391-9FDD-9052F957743A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d60:*:*:*:*:*:*",
            "matchCriteriaId" : "1901864B-688B-4352-A587-4B96B4E49FB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d65:*:*:*:*:*:*",
            "matchCriteriaId" : "78F53FBF-C6D8-4AE5-87EC-9D9F88DCEFB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d70:*:*:*:*:*:*",
            "matchCriteriaId" : "1B6670FB-9F5A-469B-97F2-074C28572065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d75:*:*:*:*:*:*",
            "matchCriteriaId" : "71198992-83AA-4E28-BA7D-A3C1897B5E2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d80:*:*:*:*:*:*",
            "matchCriteriaId" : "4323D874-C317-4D76-8E2D-C82376D84CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:15.1x49:d90:*:*:*:*:*:*",
            "matchCriteriaId" : "F56067DA-EBA9-481A-B60B-52148584EFBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CEBF85C-736A-4E7D-956A-3E8210D4F70B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB5AB24B-2B43-43DD-AE10-F758B4B19F2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80F9DC32-5ADF-4430-B1A6-357D0B29DB78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B82D4C4-7A65-409A-926F-33C054DCBFBA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE535749-F4CE-4FFA-B23D-BF09C92481E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2305DA9D-E6BA-48F4-80CF-9E2DE7661B2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA8999C-8AE4-416F-BA2A-B1A21F33B4D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCC5F6F5-4347-49D3-909A-27A3A96D36C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56BA6B86-D3F4-4496-AE46-AC513C6560FA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDDC897-747F-44DD-9599-7266F9B5B7B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62FC145A-D477-4C86-89E7-F70F52773801"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68CA098D-CBE4-4E62-9EC0-43E1B6098710"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:juniper:srx5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66F474D4-79B6-4525-983C-9A9011BD958B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "258A380C-1EA0-407D-B7E3-4A2E8820119C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r:*:*:*:*:*:*",
            "matchCriteriaId" : "43522D77-C47C-40F7-B84F-927AB84556F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "BBE35BDC-7739-4854-8BB8-E8600603DE9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2DC47132-9EEA-4518-8F86-5CD231FBFB61"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CD5A30CE-9498-4007-8E66-FD0CC6CF1836"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "07CD1E7C-24EA-46B7-964C-C78FF64AFAE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "8A457C57-4A36-433D-9473-5ABC091DF316"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "F2E0A48F-C85B-4973-A054-28A888EA5ECF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "6D3E38C1-808C-4BD3-993D-F30855F5390F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s12:*:*:*:*:*:*",
            "matchCriteriaId" : "C2AF9C4B-23E6-485D-A115-2B728E929C6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD11073-DC27-41F8-A6A2-7E22A062D14E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "2A78389E-868C-422D-9AA3-8A672DF6C2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "85BFC22F-A6B3-4306-A28B-5D78FFA6402D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "99276E50-825C-4BB4-8496-1F81BDA21655"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "22B700C1-C690-4C7D-A5AE-45BBB550D52F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r4-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "50DDDE48-3F73-440F-82ED-BD9D62A407B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "72194CB7-FFDC-4897-9D6E-EA3459DDDEB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r5-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "C88635DB-09B1-4DA1-8FC3-2F7A7E42819C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "92F35C19-5AD2-4F98-8313-2E880714DF3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5A9D31-ED7D-4390-B46D-7E46089DB932"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3BE0AD25-767F-4719-9BE4-C8BDF78A6C4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "19684897-77CE-4E50-B9D2-25E6114E66A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r6-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "90B94472-0E32-48AD-A690-AABB2C53CA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "6B4A4960-0241-4BF4-8857-8B7BE33466B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C2DC367C-7F0B-4775-9BE9-464B28543D4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "863744A8-8759-4646-9E39-72D511DE4A10"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "732A499C-9FAC-4307-B090-8971970B3EF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "9D3848D1-936D-44BB-B951-E4296F113641"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.1:r7-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "D32C90F2-ACFC-4E0C-BB11-967706019E13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "9677CE18-B955-432F-BA2B-AAE3D0CA0F16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "3661BC68-6F32-447F-8D20-FD73FBBED9C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "8008342F-4BF3-49D8-B516-C08AAF9E469E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5B6097D4-3856-4696-9A26-5B6C0FD9AD6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84DD80BF-BF7E-447B-AA74-00B3D8036E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A72B62-E3B7-42FA-980F-75BDF15236FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "57B89EEB-222D-46AA-BC8F-4EE7E17BA7B6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "ECAE613D-1317-4D2E-8A61-980CD5DEAED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "BAB2D63C-C966-42CA-85A9-09820D00A2D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5A7231C6-1CC4-4E7A-A317-5315246D2540"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "B14E079B-4E8F-4DAC-85C7-ECC888EBD306"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:16.2:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "35F7D583-44F3-41F0-829F-8C17DFCD4464"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CC9B5CDE-3A50-4CD3-962A-FA0989939F37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "7572C187-4D58-4E0D-A605-B2B13EFF5C6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE6E051-2F2F-4862-9001-5DA83C4BCF75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "E34A149E-C2ED-4D86-A105-0A2775654AE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4E0D42C4-9B4D-44F9-BC84-E7994404598B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7A70CD-3A5E-4F01-8469-E5CD406BB04F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "DE2C20D8-3C73-4B87-BA41-DBFBCA5FBA58"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "54D887B4-D2F4-4537-8298-B98D01396F12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "1C1B5AE6-A323-4744-BCA1-25E46D2D27BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "0AB39E2F-0D67-4FA6-84B8-36684E971002"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "A32C3702-48DE-47CF-B0D1-3A629676AD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "B9695B3E-FCDA-4DF0-B714-8B4F87AA647D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "36214C23-82C8-4A3E-9FF8-04F85FF8B2B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r2-s9:*:*:*:*:*:*",
            "matchCriteriaId" : "F3778643-1684-4549-A764-A1909C14B4B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "FA99E0A9-8C98-49A8-A248-A53E3B723A90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "76105563-4DA1-4A0E-A627-C44BA93F1862"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "BCEE8D9C-6D64-4A9B-A74A-57A0BF4086C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "E889BF9C-BDDF-4A6A-97BB-00A097EF6D91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8BCF0612-AF16-4925-8E42-77734513F923"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "595987A6-D8CE-41ED-B51C-EF9CD3B47AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "7B5A2205-C40B-4746-9A23-1973433FF065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CFA3526C-FF53-4823-B6AC-0BA91BFB532D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "AA92B7F8-705B-410F-BDA3-7C28FF51967F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9990301C-9D79-4372-8EC6-71A209B0C0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "9689695F-53EB-4B35-9072-750E7282B011"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r1-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "4F7CE683-5647-455B-936C-DF0D973A180A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "7D45F2C3-20FF-4A91-A440-E109B3CCE7C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s11:*:*:*:*:*:*",
            "matchCriteriaId" : "BA433E05-83F8-410D-AEB3-3A02BAB0BE0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "95473197-2553-4252-B5E5-CAF904C2EA6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "B87ECEAD-FD18-4252-8D46-F281DD4125AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "C6788EE2-B0DA-470E-B72E-E8D5CCFB5259"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "11E055AC-5626-4EBB-8611-17BB1E8AEF15"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD8A8E1-201B-4E4E-8F69-23856E56AF60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "897850A3-2A27-483C-8266-E4547F1A4341"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A283D32F-1CAF-4A5A-83E1-585F2801771F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "38A40E03-F915-4888-87B0-5950F75F097D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "C52E355B-DA7D-4FDE-B2D7-A3C3C9C99918"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "267A3603-BC18-442E-803A-4CAEB6493433"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "69FC46D4-39E2-4E2F-A1D3-1001769A7115"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "32F83E8B-A816-4F26-95F8-F0DA7F3DF426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "2C433359-BC8B-4E69-BE74-A31EB148083A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "BCA2976C-C84B-40D9-A806-588629BFFB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A2C7B980-033E-40AC-98C9-B252733B0F43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "25C7C3D0-A203-4979-8375-A610ADD48E9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "565AE6D8-28A9-4A62-A886-5BAB954695D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s10:*:*:*:*:*:*",
            "matchCriteriaId" : "E32BE8B3-C5D9-43D1-B425-28D58EA74DD4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C366F93-BB30-4144-99AE-40B676977834"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "488BB10A-1360-42E5-A68D-23D51B332850"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "64988F0A-E02C-455B-99C9-4059C896416F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "DC2ACA85-FA89-40F0-A2AD-778E1CB02A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.3:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9F431D3D-5D55-45A9-98E8-00CB1D4C0196"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A00CA6FB-8F28-4171-B510-8DBA351E80C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "988D317A-0646-491F-9B97-853E8E208276"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "605F1AD7-5B09-44F0-9017-15AB3EEE559C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "CEDDCD30-2255-4FA9-B3E2-9E88AB6F8D80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "DF3F9F86-166F-45E4-92B7-3DD3B06199F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "4E4EB6B0-8DB2-4199-96E4-30195D49F756"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "204FC7B5-9CF2-4AC2-9B8D-DA48CAEA6496"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D8A8E33-473A-4A40-A7B7-47086BB9012A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r1-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "F0F65DCA-34B9-4CE8-91C9-426AAAEB4097"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "0E0CE79A-157D-47DE-BE65-936BC12470EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "05060C06-18C1-40E8-AE01-385B036CC9AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0C752783-4843-407B-AF33-0E1D36FCAAF8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "006EE425-A146-4E10-B050-7E754BB8402A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "2B482BCC-1F0C-47AA-B63B-1B39CEF7B2C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "A636F9F2-2DA7-4A27-AD80-FD1B34DFCA94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "4EC7D216-D8F3-4ABD-97C9-4C9FB6DF64FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "5E327643-D8D8-4EFA-9F38-BA862A919501"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:17.4:r2-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "1BC6CE1C-9DD8-429E-BDC2-251D8C8674E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFDD907-5305-4602-8A9C-685AA112C342"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B0A756E2-C320-405A-B24F-7C5022649E5A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "2EF6F4C1-6A7E-474F-89BC-7A3C50FD8CAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "84F5BCBA-404B-4BC9-B363-CE6D231B0D6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "18A4CA3E-DA61-49CC-8476-3A476CCB2B83"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "A7380B3E-09F5-4497-86C6-11EF56BD89F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "658841A9-BEC9-433E-81D0-47DE82887C4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD05209-1274-4F8A-9FA2-A1A8DFCC5755"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "C97683B3-A07B-428F-9535-C49B55305679"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A14CE132-C56B-43D8-A248-AB6A2D1A7B6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "73978DD8-BD92-4872-8F35-AF2B9BCA1ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "678F57D1-2595-4AF3-BB87-AF2E1FE3CBB9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "7988CE92-71D2-4EEC-B596-4A60E2C1136A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s7:*:*:*:*:*:*",
            "matchCriteriaId" : "330D176F-8DAD-440C-A623-44FA233FAB01"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.1:r3-s8:*:*:*:*:*:*",
            "matchCriteriaId" : "8CC5EAB8-1364-4325-9F01-BE7CC479C29D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "A8B5BD93-3C11-45D5-ACF0-7C4C01106C8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "167EEC4F-729E-47C2-B0F8-E8108CE3E985"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1:-:*:*:*:*:*",
            "matchCriteriaId" : "90BF177D-A895-4D05-B674-B27420A5DC6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "0070B31B-59DC-46E9-93E0-1E8BF3560BFC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "A893CCE5-96B8-44A1-ABEF-6AB9B527B2FB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "42203801-E2E7-4DCF-ABBB-D23A91B2A9FF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "238EC996-8E8C-4332-916F-09E54E6EBB9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "5F711936-33A1-47FC-A6A0-A63088915815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "21B7820C-01D2-401C-9E6D-C83994FD5961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2FBD29-2CAC-41B4-9336-671373EF4A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EEFCDA90-67E2-4AEF-800C-1D29A9121B8F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "74B99981-840F-4DAD-976A-5DAEFE9FB93D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "BDD3ADB9-35FF-41D3-92BD-98D6D4826B03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r2-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "341F2459-8335-40E9-A2B3-BE804D319F95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "B670F988-78F2-4BC6-B7FC-E34C280F67DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "2F9451C7-6466-4AC9-9A7F-90A2817AED6C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.2:r3-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "871CA952-C5EC-4A25-8EF0-C2EC484F7DE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "1BB9C2BB-D20B-41E9-B75F-7FAD9ECCDB99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5342C3DC-D640-47AB-BD76-3444852988A2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "8AB8585E-EDC6-4400-BEE3-3A6A7C922C90"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "A2ABC574-B3FC-4025-B50D-7F9EEB28C806"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "6F6EAFC3-C3AC-4361-8530-39FCF89702F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "92FB1BF6-8852-45D8-817C-36CDBE730801"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "6B363298-315C-4FD5-9417-C5B82883A224"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r1-s6:*:*:*:*:*:*",
            "matchCriteriaId" : "EB08FF7B-01F5-4A19-858E-E2CD19D61A62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A3FBD3-5399-42A9-9BD9-E3C981CBD6DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "4EBD361C-8B4D-43EF-8B82-9FE165D8206E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7539C4-6208-43EB-9A0B-4852D0CE0FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.3:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB29C9B-9729-43EB-AF98-AF44038DA711"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "74CA9010-D3DE-487B-B46F-589A48AB0F0A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "A38F224C-8E9B-44F3-9D4F-6C9F04F57927"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "853F146A-9A0F-49B6-AFD2-9907434212F1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "8F73B88B-E66C-4ACD-B38D-9365FB230ABA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "EE1F82EC-3222-4158-8923-59CDA1909A9C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "8FE95D15-B5E5-4E74-9464-C72D8B646A6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "C012CD07-706A-4E1C-B399-C55AEF5C8309"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D59D7A31-128B-4034-862B-8EF3CE3EE949"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "0C5E097B-B79E-4E6A-9291-C8CB9674FED5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "819FA3ED-F934-4B20-BC0E-D638ACCB7787"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:18.4:r2-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7D773A-4988-4D7C-A105-1885EBE14426"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "768C0EB7-8456-4BF4-8598-3401A54D21DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "5332B70A-F6B0-4C3B-90E2-5CBFB3326126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "81439FE8-5405-45C2-BC04-9823D2009A77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "E506138D-043E-485D-B485-94A2AB75F8E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s3:*:*:*:*:*:*",
            "matchCriteriaId" : "0EF3C901-3599-463F-BEFB-8858768DC195"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s4:*:*:*:*:*:*",
            "matchCriteriaId" : "CD806778-A995-4A9B-9C05-F4D7B1CB1F7D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r1-s5:*:*:*:*:*:*",
            "matchCriteriaId" : "02B42BE8-1EF2-47F7-9F10-DE486A017EED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "DCAB79C9-6639-4ED0-BEC9-E7C8229DF977"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0E7545CE-6300-4E81-B5AF-2BE150C1B190"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4CA3060F-1800-4A06-A453-FB8CE4B65312"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "9A5B337A-727C-4767-AD7B-E0F7F99EB46F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.2:r1-s2:*:*:*:*:*:*",
            "matchCriteriaId" : "16FDE60B-7A99-4683-BC14-530B5B005F8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "59006503-B2CA-4F79-AC13-7C5615A74CE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "B8110DA9-54B1-43CF-AACB-76EABE0C9EF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:juniper:junos:19.3:r1-s1:*:*:*:*:*:*",
            "matchCriteriaId" : "11B5CC5A-1959-4113-BFCF-E4BA63D918C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.juniper.net/JSA11166",
        "source" : "sirt@juniper.net",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.juniper.net/JSA11166",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24232",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.633",
      "lastModified" : "2024-11-21T05:52:39.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced Booking Calendar WordPress plugin before 1.6.8 does not sanitise the license error message when output in the settings page, leading to an authenticated reflected Cross-Site Scripting issue"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Advanced Booking Calendar versiones anteriores a 1.6.8, no sanea el mensaje de error de licencia cuando se muestra en la página de configuración, conllevando un problema de tipo Cross-Site Scripting reflejado y autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:elbtide:advanced_booking_calendar:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.6.8",
            "matchCriteriaId" : "E4500A60-790E-4CED-B948-1C95D6CF0D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/f06629b5-8b15-48eb-a7a7-78b693e06b71",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f06629b5-8b15-48eb-a7a7-78b693e06b71",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24233",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.663",
      "lastModified" : "2024-11-21T05:52:39.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Cooked Pro WordPress plugin before 1.7.5.6 was affected by unauthenticated reflected Cross-Site Scripting issues, due to improper sanitisation of user input while being output back in pages as an arbitrary attribute."
      }, {
        "lang" : "es",
        "value" : "El plugin Cooked Pro WordPress versiones anteriores a 1.7.5.6 estuvo afectado por problemas de tipo Cross-Site Scripting reflejado no autenticado, debido a un saneamiento inapropiado de la entrada del usuario mientras se devuelve a las páginas como un atributo arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boxystudio:cooked:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "1.7.5.6",
            "matchCriteriaId" : "DD43595B-BC46-4EE8-A299-8050653D83D8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ed620de5-1ad2-4480-b08b-719480472bc0",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.getastra.com/blog/911/reflected-xss-found-in-cooked-pro-recipe-plugin-for-wordpress/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jinsonvarghese.com/reflected-xss-vulnerability-found-in-cooked-pro-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ed620de5-1ad2-4480-b08b-719480472bc0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.getastra.com/blog/911/reflected-xss-found-in-cooked-pro-recipe-plugin-for-wordpress/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jinsonvarghese.com/reflected-xss-vulnerability-found-in-cooked-pro-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24234",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.697",
      "lastModified" : "2024-11-21T05:52:39.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Search Forms page of the Ivory Search WordPress lugin before 4.6.1 did not properly sanitise the tab parameter before output it in the page, leading to a reflected Cross-Site Scripting issue when opening a malicious crafted link as a high privilege user. Knowledge of a form id is required to conduct the attack."
      }, {
        "lang" : "es",
        "value" : "La página Search Forms del lugin Ivory Search WordPress versiones anteriores a 4.6.1, no saneaba apropiadamente el parámetro tab antes de mostrarlo en la página, conllevando a un problema de tipo Cross-Site Scripting reflejado cuando se abre un enlace diseñados malicioso como un usuario con privilegios elevados.&#xa0;Es requerido un conocimiento del id de formulario para conllevar el ataque"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivorysearch:ivory_search:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.6.1",
            "matchCriteriaId" : "471EF802-95CF-4D67-BE76-21FE41A0E756"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ecc620be-8e29-4860-9d32-86b5814a3835",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.getastra.com/blog/911/plugin-exploit/reflected-xss-vulnerability-in-ivory-search-wp-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jinsonvarghese.com/reflected-xss-vulnerability-found-in-ivory-search-plugin/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ecc620be-8e29-4860-9d32-86b5814a3835",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.getastra.com/blog/911/plugin-exploit/reflected-xss-vulnerability-in-ivory-search-wp-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.jinsonvarghese.com/reflected-xss-vulnerability-found-in-ivory-search-plugin/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24235",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.730",
      "lastModified" : "2024-11-21T05:52:39.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue."
      }, {
        "lang" : "es",
        "value" : "El tema Goto de WordPress versiones anteriores a 2.0, no sanea las palabras clave y el parámetro GET start_date en su página Tour List, conllevando a un problema de tipo Cross-Site Scripting reflejado no autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:boostifythemes:goto:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0",
            "matchCriteriaId" : "C793B576-BECF-4259-A8C5-BA9246F5B88B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-Goto-WordPress-Theme-v1.9.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/eece90aa-582b-4c49-8b7c-14027f9df139",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-Goto-WordPress-Theme-v1.9.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wpscan.com/vulnerability/eece90aa-582b-4c49-8b7c-14027f9df139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24237",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.763",
      "lastModified" : "2024-11-21T05:52:39.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not properly sanitise the keyword_search, search_radius. _bedrooms and _bathrooms GET parameters before outputting them in its properties page, leading to an unauthenticated reflected Cross-Site Scripting issue."
      }, {
        "lang" : "es",
        "value" : "El plugin Realteo WordPress versiones anteriores a 1.2.4, usado por Findeo Theme, no saneaba apropiadamente los parámetros GET  keyword_search, search_radius. _bedrooms y _bathrooms antes de generarlos en su página de propiedades, conllevando a un problema de tipo Cross-Site Scripting reflejado no autenticado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purethemes:findeo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "156BF978-930B-4D4E-8F98-11D87C6EB2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purethemes:realteo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "8682C4CD-462D-4C38-BCAC-A463C9FA5E14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-79%5D-Findeo-WordPress-Theme-v1.3.0.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-79%5D-Realteo-WordPress-Plugin-v1.2.3.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/087b27c4-289e-410f-af74-828a608a4e1e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.docs.purethemes.net/findeo/knowledge-base/changelog-findeo/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-79%5D-Findeo-WordPress-Theme-v1.3.0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-79%5D-Realteo-WordPress-Plugin-v1.2.3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wpscan.com/vulnerability/087b27c4-289e-410f-af74-828a608a4e1e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.docs.purethemes.net/findeo/knowledge-base/changelog-findeo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24238",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.797",
      "lastModified" : "2024-11-21T05:52:39.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not ensure that the requested property to be deleted belong to the user making the request, allowing any authenticated users to delete arbitrary properties by tampering with the property_id parameter."
      }, {
        "lang" : "es",
        "value" : "El plugin Realteo WordPress versiones anteriores a 1.2.4, usado por Findeo Theme, no garantizaba que la propiedad solicitada a eliminar perteneciera al usuario que realizaba la petición, lo que permitía a cualquier usuario autenticado eliminar propiedades arbitrarias alterando el parámetro property_id"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purethemes:findeo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.1",
            "matchCriteriaId" : "156BF978-930B-4D4E-8F98-11D87C6EB2AF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purethemes:realteo:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.4",
            "matchCriteriaId" : "8682C4CD-462D-4C38-BCAC-A463C9FA5E14"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-284%5D-Findeo-WordPress-Theme-v1.3.0.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-284%5D-Realteo-WordPress-Plugin-v1.2.3.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/b8434eb2-f522-484f-9227-5f581e7f48a5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.docs.purethemes.net/findeo/knowledge-base/changelog-findeo/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-284%5D-Findeo-WordPress-Theme-v1.3.0.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-03-20%5D-%5BWordPress%5D-%5BCWE-284%5D-Realteo-WordPress-Plugin-v1.2.3.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wpscan.com/vulnerability/b8434eb2-f522-484f-9227-5f581e7f48a5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.docs.purethemes.net/findeo/knowledge-base/changelog-findeo/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24239",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.830",
      "lastModified" : "2024-11-21T05:52:39.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue."
      }, {
        "lang" : "es",
        "value" : "Los Formularios Pie Register - User Registration.&#xa0;El plugin Invitation based registrations, Custom Login, Payments WordPress versiones anteriores a 3.7.0.1 no sanean el parámetro GET invitaion_code al generarlo en la página del código de activación, conllevando un problema de tipo Cross-Site Scripting"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:genetechsolutions:pie_register:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.7.0.1",
            "matchCriteriaId" : "DD863736-F918-47F5-9687-79722307B851"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://plugins.trac.wordpress.org/changeset/2507536/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f1b67f40-642f-451e-a67a-b7487918ee34",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://plugins.trac.wordpress.org/changeset/2507536/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/f1b67f40-642f-451e-a67a-b7487918ee34",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24240",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.863",
      "lastModified" : "2024-11-21T05:52:40.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Hours Pro WordPress plugin through 5.5.0 allows a remote attacker to upload arbitrary files using its manual update functionality, leading to an unauthenticated remote code execution vulnerability."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Business Hours Pro versiones  hasta 5.5.0, permite a un atacante remoto cargar archivos arbitrarios usando su funcionalidad manual update, conllevando a una vulnerabilidad de ejecución de código remota no autenticada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aivahthemes:business_hours_pro:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "5.5.0",
            "matchCriteriaId" : "C64558A0-BCB8-45B9-BC23-8876BA1444E4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/business-hours-pro-wordpress-plugin/9414879",
        "source" : "contact@wpscan.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/10528cb2-12a1-43f7-9b7d-d75d18fdf5bb",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://codecanyon.net/item/business-hours-pro-wordpress-plugin/9414879",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/10528cb2-12a1-43f7-9b7d-d75d18fdf5bb",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24241",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.893",
      "lastModified" : "2024-11-21T05:52:40.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Advanced Custom Fields Pro versiones anteriores a 5.9.1, no escapaba apropiadamente de la URL de actualización generada cuando la generaba en un atributo, conllevando un problema de tipo Cross-Site Scripting reflejado en la página de configuración de actualización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advancedcustomfields:advanced_custom_fields:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "5.9.1",
            "matchCriteriaId" : "333641CF-86B0-446B-B9DB-D34FEC9E7994"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jdordonezn/Reflected-XSS-in-WordPress-for-ACF-PRO-before-5.9.1-plugin/issues/1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d1e9c995-37bd-4952-b88e-945e02e3c83f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.advancedcustomfields.com/blog/acf-5-9-1-release/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/jdordonezn/Reflected-XSS-in-WordPress-for-ACF-PRO-before-5.9.1-plugin/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d1e9c995-37bd-4952-b88e-945e02e3c83f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.advancedcustomfields.com/blog/acf-5-9-1-release/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24242",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-04-22T21:15:09.927",
      "lastModified" : "2024-11-21T05:52:40.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously constructed sub_page parameter of the plugin's Tools, allowing high privilege users to include any local php file"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Tutor LMS - eLearning and online course solution versiones anteriores a 1.8.8 está afectado por una vulnerabilidad de inclusión de archivos locales por medio del parámetro sub_page construido maliciosamente de las herramientas del plugin, permitiendo a usuarios con altos privilegios incluir cualquier archivo php local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 3.8,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themeum:tutor_lms:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.8",
            "matchCriteriaId" : "50887858-D50A-44CD-A4A9-758F8C439568"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/20f3e63a-31d8-49a0-b4ef-209749feff5c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/20f3e63a-31d8-49a0-b4ef-209749feff5c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25663",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:09.957",
      "lastModified" : "2025-03-11T10:15:13.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes IPv6 headers does not check the lengths of extension header options, allowing attackers to put this function into an infinite loop with crafted length values."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Capital VSTAR (Versiones que incluyen la pila IPv6 afectada), Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2017.02.4), Nucleus ReadyStart V4 (Todas las versiones anteriores a V4.1.0), Nucleus Source Code (Versiones que incluyen la pila IPv6 afectada). La función que procesa las cabeceras de IPv6 no comprueba las longitudes de las opciones de las cabeceras de extensión, lo que permite a los atacantes poner esta función en un bucle infinito con valores de longitud manipulados"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:capital_vstar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBF34F7-F37A-4FD1-957E-B2E5DEE7A778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A987CFB-4A41-4F82-8C7F-31DE8F0650DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "7A5FA7B8-2F94-4762-ADBF-71C0F37231AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.02.4",
            "matchCriteriaId" : "F768DEFE-CE6F-4210-B728-9C4CA2AF03FE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-248289.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-248289.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25664",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:09.990",
      "lastModified" : "2025-03-11T10:15:13.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (All versions including affected IPv6 stack). The function that processes the Hop-by-Hop extension header in IPv6 packets and its options lacks any checks against the length field of the header, allowing attackers to put the function into an infinite loop by supplying arbitrary length values."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Capital VSTAR (Versiones que incluyen la pila IPv6 afectada), Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2017.02.4), Nucleus ReadyStart V4 (Todas las versiones anteriores a V4.1.0), Nucleus Source Code (Versiones que incluyen la pila IPv6 afectada). La función que procesa la cabecera de extensión Hop-by-Hop en los paquetes IPv6 y sus opciones carece de cualquier comprobación contra el campo de longitud de la cabecera, lo que permite a los atacantes poner la función en un bucle infinito suministrando valores de longitud arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV40" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "4.0",
            "vectorString" : "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
            "baseScore" : 8.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "attackRequirements" : "NONE",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "vulnConfidentialityImpact" : "NONE",
            "vulnIntegrityImpact" : "NONE",
            "vulnAvailabilityImpact" : "HIGH",
            "subConfidentialityImpact" : "NONE",
            "subIntegrityImpact" : "NONE",
            "subAvailabilityImpact" : "NONE",
            "exploitMaturity" : "NOT_DEFINED",
            "confidentialityRequirement" : "NOT_DEFINED",
            "integrityRequirement" : "NOT_DEFINED",
            "availabilityRequirement" : "NOT_DEFINED",
            "modifiedAttackVector" : "NOT_DEFINED",
            "modifiedAttackComplexity" : "NOT_DEFINED",
            "modifiedAttackRequirements" : "NOT_DEFINED",
            "modifiedPrivilegesRequired" : "NOT_DEFINED",
            "modifiedUserInteraction" : "NOT_DEFINED",
            "modifiedVulnConfidentialityImpact" : "NOT_DEFINED",
            "modifiedVulnIntegrityImpact" : "NOT_DEFINED",
            "modifiedVulnAvailabilityImpact" : "NOT_DEFINED",
            "modifiedSubConfidentialityImpact" : "NOT_DEFINED",
            "modifiedSubIntegrityImpact" : "NOT_DEFINED",
            "modifiedSubAvailabilityImpact" : "NOT_DEFINED",
            "Safety" : "NOT_DEFINED",
            "Automatable" : "NOT_DEFINED",
            "Recovery" : "NOT_DEFINED",
            "valueDensity" : "NOT_DEFINED",
            "vulnerabilityResponseEffort" : "NOT_DEFINED",
            "providerUrgency" : "NOT_DEFINED"
          }
        } ],
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:capital_vstar:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EEBF34F7-F37A-4FD1-957E-B2E5DEE7A778"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_net:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCA7385D-A947-4A5B-B0B8-6D6225466EDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.02.4",
            "matchCriteriaId" : "C2F36C9F-E4F4-4678-B82D-361F4818B66C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "B35FDE44-BE25-431D-B2EE-195ACC5A606C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-248289.html",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/html/ssa-248289.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-248289.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25668",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.110",
      "lastModified" : "2024-11-21T05:55:15.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT (All versions < 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions < 5.5.1), SCALANCE X204 IRT PRO (All versions < 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < 5.5.1), SCALANCE XF202-2P IRT (All versions < 5.5.1), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204 IRT (All versions < 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < 5.5.1), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the webserver may result in write out of bounds in heap. An attacker might leverage this to cause denial-of-service on the device and potentially remotely execute code."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en SCALANCE X200-4P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X201-3P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X201-3P IRT PRO (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X202-2 IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X202-2P IRT (Incluyendo las variantes SIPLUS) (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X202-2P IRT PRO (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X204 IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X204 IRT PRO (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X204-2 (Incluyendo las variantes SIPLUS) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2FM (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2LD (Incluyendo las variantes SIPLUS) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2LD TS (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2TS (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X206-1 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X206-1LD (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X208 (Incluyendo las variantes SIPLUS) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X208PRO (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X212-2 (Incluyendo las variantes SIPLUS) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X212-2LD (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X216 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X224 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF201-3P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF202-2P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF204 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF204 IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF204-2 (Incluyendo las variantes SIPLUS) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF204-2BA IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF206-1 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF208 (Todas las versiones anteriores a la versión V5.2.5).  Un procesamiento incorrecto de las peticiones POST en el servidor web puede resultar en una escritura fuera de límites en la pila. Un atacante puede aprovechar esto para causar una denegación de servicio en el dispositivo y potencialmente ejecutar código remotamente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "ADFA817F-7237-458A-8BCB-95551360E22A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9CBC72-92D9-4B3A-884F-33124C457016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "47627D33-BE10-42EC-AD9A-7E3FE4ECF6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3268CF75-6DAB-416A-B19B-2A8F95C268CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "9328F7AC-5842-4525-9B30-7C8617063941"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492E8AC1-338B-4AC3-90C7-1FADCD4528C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "20883AFA-C61C-40DC-A343-3CDEA9B1B0AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577D1E21-717C-4508-AE91-0BC490C89F85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "AA284180-566E-45D5-B3B6-4617B89FF4B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4726901-34BF-4F70-80A6-71648A4A29FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "8A15A02F-7C41-4495-AD4E-11201FE5771F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31F0E-389B-4925-88DE-726F2F0D2A23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "40FCE8E4-B527-4B2D-AC98-C6649EAB4EC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF096BA-A6F4-46B3-9B9B-7FCEE7E6A6C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "ACE1A821-8F0A-4B96-AC8A-B219215014B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CE5A4-3EB1-4E93-BEB7-520E08DA6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "54201E08-15E3-4C93-9A0D-DC376B7C8D88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCBC784-8EA0-4C6C-B504-DFC164028E4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "75220631-DD7D-4E86-8405-F98340FFE27C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE27611-53E7-4162-8630-5BC334B02E37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "3032A499-DFD5-4FEA-8AC6-E661781387AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDEBD6B-6BE4-4FAD-A4E6-BE762595434D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "A493C49A-8BF9-43E5-98D5-55E5390A36A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FFC1E9-4326-4F41-A86A-C52AB6A9A674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "E2C9747F-BEC3-486E-B553-3339F8B54C3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5BB0F2-DD4C-4AB4-9B8F-B2501B239080"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "0C8D68AC-8F30-4919-ADB3-A6018458602B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFF7FB7-774B-45ED-8400-951230DF0511"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "2BC1450A-92ED-451F-9890-4E18CA974485"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B574E2-F7BA-496B-887C-D25F386AA5E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x208pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "768320F0-10F5-4B36-AEB6-9DEEA43A30E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x208pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C60CF-4089-4993-A2CB-B7FBDAF81D62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "31B8367C-5EAC-49F4-83B8-C7E3BD373092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E716A4E-50A9-4C52-8DA9-098F7506F4B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "55F50ABF-3E9A-4435-BAA4-7D11A2047D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08CDEE3-43EB-475E-8571-6E12824714FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "BC643617-D0B7-4379-8ADB-2C2BACA4B165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C4BAB5-E161-4B59-8A8C-369C7852A66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "F0189DF6-DA80-49FE-B09F-0C07D892518E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2203895-BC4E-4B2F-9110-C2CD88A121F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "A73DE9A4-A86D-44BB-828F-F358D0E8102C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41614C70-97B4-44C8-A441-530A413A26F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "CA653B06-6B43-422B-9E51-4B29438841B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6751FB7D-C72C-4321-B535-5880FE696FC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "8CD13707-1164-415E-9083-7946D151F1FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1AE867-67B4-4871-BF56-88017533A737"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "3FB90745-6B95-43A9-8211-DE32D1000827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DDF1EB-80E7-491F-A197-1B220E35CDF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "3A09FF2D-F369-47B5-AEE4-A862BEDD9851"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69285324-4C0B-4BDC-B60D-F653679DD52D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "D634EE1A-2EB5-46FF-9E38-12DA3CDD3136"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E6AFAA-B903-47BB-B0F3-7650B039C0FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "CFCDC84E-0695-409A-844B-D24024CC33F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B40D2EB-5C69-47FA-801B-DC48407D418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "A1DB6C03-71BF-4359-834B-384E78910E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898613B2-4A9D-44B9-A3FC-4347A2AD7CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "2560F9B6-D121-4B82-A96F-81A0A4869616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB62730-E759-455A-A308-F9DB084B35B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25669",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.143",
      "lastModified" : "2024-11-21T05:55:15.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT (All versions < 5.5.1), SCALANCE X201-3P IRT PRO (All versions < 5.5.1), SCALANCE X202-2 IRT (All versions < 5.5.1), SCALANCE X202-2P IRT (incl. SIPLUS NET variant) (All versions < 5.5.1), SCALANCE X202-2P IRT PRO (All versions < 5.5.1), SCALANCE X204 IRT (All versions < 5.5.1), SCALANCE X204 IRT PRO (All versions < 5.5.1), SCALANCE X204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2FM (All versions < V5.2.5), SCALANCE X204-2LD (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X204-2LD TS (All versions < V5.2.5), SCALANCE X204-2TS (All versions < V5.2.5), SCALANCE X206-1 (All versions < V5.2.5), SCALANCE X206-1LD (All versions < V5.2.5), SCALANCE X208 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X208PRO (All versions < V5.2.5), SCALANCE X212-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE X212-2LD (All versions < V5.2.5), SCALANCE X216 (All versions < V5.2.5), SCALANCE X224 (All versions < V5.2.5), SCALANCE XF201-3P IRT (All versions < 5.5.1), SCALANCE XF202-2P IRT (All versions < 5.5.1), SCALANCE XF204 (All versions < V5.2.5), SCALANCE XF204 IRT (All versions < 5.5.1), SCALANCE XF204-2 (incl. SIPLUS NET variant) (All versions < V5.2.5), SCALANCE XF204-2BA IRT (All versions < 5.5.1), SCALANCE XF206-1 (All versions < V5.2.5), SCALANCE XF208 (All versions < V5.2.5). Incorrect processing of POST requests in the web server may write out of bounds in stack. An attacker might leverage this to denial-of-service of the device or remote code execution."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en SCALANCE X200-4P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X201-3P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X201-3P IRT PRO (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X202-2 IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X202-2P IRT (Incluyendo las variantes SIPLUS NET) (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X202-2P IRT PRO (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X204 IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X204 IRT PRO (Todas las versiones anteriores a la versión 5.5.1), SCALANCE X204-2 (Incluyendo las variantes SIPLUS NET) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2FM (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2LD (Incluyendo las variantes SIPLUS NET) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2LD TS (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X204-2TS (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X206-1 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X206-1LD (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X208 (Incluyendo las variantes SIPLUS NET) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X208PRO (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X212-2 (Incluyendo las variantes SIPLUS NET) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X212-2LD (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X216 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE X224 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF201-3P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF202-2P IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF204 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF204 IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF204-2 (Incluyendo las variantes SIPLUS NET) (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF204-2BA IRT (Todas las versiones anteriores a la versión 5.5.1), SCALANCE XF206-1 (Todas las versiones anteriores a la versión V5.2.5), SCALANCE XF208 (Todas las versiones anteriores a la versión V5.2.5). El procesamiento inapropiado de las peticiones POST en el servidor web puede escribir fuera de límites en la pila.&#xa0;Un atacante podría aprovechar esto para una Denegación de Servicio del dispositivo o una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x200-4p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "ADFA817F-7237-458A-8BCB-95551360E22A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x200-4p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9CBC72-92D9-4B3A-884F-33124C457016"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "47627D33-BE10-42EC-AD9A-7E3FE4ECF6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3268CF75-6DAB-416A-B19B-2A8F95C268CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x201-3p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "9328F7AC-5842-4525-9B30-7C8617063941"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x201-3p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "492E8AC1-338B-4AC3-90C7-1FADCD4528C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "20883AFA-C61C-40DC-A343-3CDEA9B1B0AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577D1E21-717C-4508-AE91-0BC490C89F85"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "AA284180-566E-45D5-B3B6-4617B89FF4B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4726901-34BF-4F70-80A6-71648A4A29FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "8A15A02F-7C41-4495-AD4E-11201FE5771F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BC31F0E-389B-4925-88DE-726F2F0D2A23"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204_irt_pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "40FCE8E4-B527-4B2D-AC98-C6649EAB4EC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204_irt_pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF096BA-A6F4-46B3-9B9B-7FCEE7E6A6C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "ACE1A821-8F0A-4B96-AC8A-B219215014B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E38CE5A4-3EB1-4E93-BEB7-520E08DA6720"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2fm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "54201E08-15E3-4C93-9A0D-DC376B7C8D88"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2fm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FCBC784-8EA0-4C6C-B504-DFC164028E4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ld_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "75220631-DD7D-4E86-8405-F98340FFE27C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BE27611-53E7-4162-8630-5BC334B02E37"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ld_ts_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "3032A499-DFD5-4FEA-8AC6-E661781387AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ld_ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FDEBD6B-6BE4-4FAD-A4E6-BE762595434D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x204-2ts_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "A493C49A-8BF9-43E5-98D5-55E5390A36A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x204-2ts:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5FFC1E9-4326-4F41-A86A-C52AB6A9A674"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x206-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "E2C9747F-BEC3-486E-B553-3339F8B54C3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x206-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A5BB0F2-DD4C-4AB4-9B8F-B2501B239080"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x206-1ld_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "0C8D68AC-8F30-4919-ADB3-A6018458602B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x206-1ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFF7FB7-774B-45ED-8400-951230DF0511"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x208_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "2BC1450A-92ED-451F-9890-4E18CA974485"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3B574E2-F7BA-496B-887C-D25F386AA5E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x208pro_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "768320F0-10F5-4B36-AEB6-9DEEA43A30E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x208pro:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF2C60CF-4089-4993-A2CB-B7FBDAF81D62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x212-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "31B8367C-5EAC-49F4-83B8-C7E3BD373092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x212-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E716A4E-50A9-4C52-8DA9-098F7506F4B5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x212-2ld_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "55F50ABF-3E9A-4435-BAA4-7D11A2047D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x212-2ld:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C08CDEE3-43EB-475E-8571-6E12824714FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x216_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "BC643617-D0B7-4379-8ADB-2C2BACA4B165"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x216:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0C4BAB5-E161-4B59-8A8C-369C7852A66E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x224_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "F0189DF6-DA80-49FE-B09F-0C07D892518E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x224:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2203895-BC4E-4B2F-9110-C2CD88A121F2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf201-3p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "A73DE9A4-A86D-44BB-828F-F358D0E8102C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf201-3p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41614C70-97B4-44C8-A441-530A413A26F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "CA653B06-6B43-422B-9E51-4B29438841B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6751FB7D-C72C-4321-B535-5880FE696FC3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "8CD13707-1164-415E-9083-7946D151F1FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F1AE867-67B4-4871-BF56-88017533A737"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "3FB90745-6B95-43A9-8211-DE32D1000827"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DDF1EB-80E7-491F-A197-1B220E35CDF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "3A09FF2D-F369-47B5-AEE4-A862BEDD9851"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69285324-4C0B-4BDC-B60D-F653679DD52D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf204-2ba_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "D634EE1A-2EB5-46FF-9E38-12DA3CDD3136"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf204-2ba_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99E6AFAA-B903-47BB-B0F3-7650B039C0FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf206-1_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "CFCDC84E-0695-409A-844B-D24024CC33F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf206-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2B40D2EB-5C69-47FA-801B-DC48407D418C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_xf208_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.2.5",
            "matchCriteriaId" : "A1DB6C03-71BF-4359-834B-384E78910E64"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_xf208:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898613B2-4A9D-44B9-A3FC-4347A2AD7CAB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:scalance_x202-2p_irt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.5.1",
            "matchCriteriaId" : "2560F9B6-D121-4B82-A96F-81A0A4869616"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:scalance_x202-2p_irt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB62730-E759-455A-A308-F9DB084B35B5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-187092.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25670",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.173",
      "lastModified" : "2024-11-21T05:55:15.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Tecnomatix RobotExpert (All versions < V16.1). Affected applications lack proper validation of user-supplied data when parsing CELL files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12608)"
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Tecnomatix RobotExpert (Todas las versiones anteriores a V16.1).&#xa0;Las aplicaciones afectadas carecen de la comprobación apropiada de los datos proporcionados por el usuario cuando se analizan archivos CELL.&#xa0;Esto podría resultar en una escritura fuera de límites más allá del final de una estructura asignada.&#xa0;Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;(ZDI ? CAN ? 12608)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:tecnomatix_robotexpert:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.1",
            "matchCriteriaId" : "FB3A01A8-1229-4E9B-8442-F0CF952C9706"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-163226.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25677",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.207",
      "lastModified" : "2024-11-21T05:55:16.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2017.02.3), Nucleus ReadyStart V3 (All versions < V2017.02.4), Nucleus ReadyStart V4 (All versions < V4.1.0), Nucleus Source Code (Versions including affected DNS modules), SIMOTICS CONNECT 400 (All versions < V0.5.0.0), SIMOTICS CONNECT 400 (All versions >= V0.5.0.0 < V1.0.0.0), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS client does not properly randomize DNS transaction IDs. That could allow an attacker to poison the DNS cache or spoof DNS resolving."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a la versión V2017.02.3), Nucleus ReadyStart V4 (Todas las versiones anteriores a la versión V4.1.0), Nucleus Source Code (Versiones que incluyen los módulos DNS afectados), SIMOTICS CONNECT 400 (Todas las versiones anteriores a la versión V0.5.0.0), SIMOTICS CONNECT 400 (Todas las versiones posteriores o iguales a la versión V0.5.0.0 anteriores a la versión V1.0.0). El cliente DNS no aleatoriza correctamente los ID de las transacciones DNS. Esto podría permitir a un atacante envenenar la caché DNS o falsificar la resolución DNS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "productcert@siemens.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:siemens:simotics_connect_400_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.5.0.0",
            "matchCriteriaId" : "374052C8-5A98-4404-B029-72D2404A7036"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:siemens:simotics_connect_400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48BFF9EF-D1C1-4107-8D1E-51315C03FFF0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A987CFB-4A41-4F82-8C7F-31DE8F0650DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2017.02.4",
            "matchCriteriaId" : "C2F36C9F-E4F4-4678-B82D-361F4818B66C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart_v4:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.0",
            "matchCriteriaId" : "B35FDE44-BE25-431D-B2EE-195ACC5A606C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf",
        "source" : "productcert@siemens.com"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-180579.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-669158.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-705111.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25678",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.237",
      "lastModified" : "2024-11-21T05:55:16.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing PAR files. This could result in an out of bounds write past the end of an allocated structure. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-12529)"
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Solid Edge SE2020 (Todas las versiones anteriores a SE2020MP13), Solid Edge SE2020 (Todas las versiones anteriores a SE2020MP14), Solid Edge SE2021 (Todas las versiones anteriores a SE2021MP4). Las aplicaciones afectadas carecen de la validación adecuada de los datos suministrados por el usuario al analizar los archivos PAR. Esto podría resultar en una escritura fuera de los límites más allá del final de una estructura asignada. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. (ZDI-CAN-12529)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2020:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "se2020mp14",
            "matchCriteriaId" : "51169AD3-D007-46D6-8C22-7FF6700D2B4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2021:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "se2021mp4",
            "matchCriteriaId" : "32D6D06B-6222-4687-91A5-F292205A992B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-611/",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-611/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27382",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.303",
      "lastModified" : "2024-11-21T05:57:52.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Solid Edge SE2020 (All versions < SE2020MP13), Solid Edge SE2020 (All versions < SE2020MP14), Solid Edge SE2021 (All Versions < SE2021MP4). Affected applications lack proper validation of user-supplied data when parsing of PAR files. This could result in a stack based buffer overflow. An attacker could leverage this vulnerability to execute code in the context of the current process. (ZDI-CAN-13040)"
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Solid Edge SE2020 (Todas las versiones anteriores a SE2020MP13), Solid Edge SE2020 (Todas las versiones anteriores a SE2020MP14), Solid Edge SE2021 (Todas las versiones anteriores a SE2021MP4). Las aplicaciones afectadas carecen de la validación adecuada de los datos suministrados por el usuario al analizar los archivos PAR. Esto podría dar lugar a un desbordamiento del búfer basado en la pila. Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual. (ZDI-CAN-13040)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2020:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "se2020mp13",
            "matchCriteriaId" : "FF72CFDF-0F35-434F-9BBC-181B6CD98086"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:solid_edge_se2021:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "se2021mp14",
            "matchCriteriaId" : "48EE7B47-BED5-4D33-8D1F-913267DDBA12"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-612/",
        "source" : "productcert@siemens.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-574442.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-612/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27389",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.333",
      "lastModified" : "2024-11-21T05:57:53.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Opcenter Quality (All versions < V12.2), QMS Automotive (All versions < V12.30). A private sign key is shipped with the product without adequate protection."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Opcenter Quality (Todas las versiones anteriores a V12.2), QMS Automotive (Todas las versiones anteriores a V12.30).&#xa0;Una clave de señal privada es enviada con el producto sin la protección adecuada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:opcenter_quality:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "8374434A-5309-4C0D-A768-386CFD1E7523"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:qms_automotive:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.30",
            "matchCriteriaId" : "C1103918-45CF-4B0A-B386-8E0B7D0A273E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-788287.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-788287.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27392",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.363",
      "lastModified" : "2024-11-21T05:57:54.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2). Affected Open Network Bridges store user credentials for the authentication between ONVIF clients and ONVIF server using a hard-coded key. The encrypted credentials can be retrieved via the MIP SDK. This could allow an authenticated remote attacker to retrieve and decrypt all credentials stored on the ONVIF server."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Siveillance Video Open Network Bridge (2020 R3), Siveillance Video Open Network Bridge (2020 R2), Siveillance Video Open Network Bridge (2020 R1), Siveillance Video Open Network Bridge (2019 R3), Siveillance Video Open Network Bridge (2019 R2), Siveillance Video Open Network Bridge (2019 R1), Siveillance Video Open Network Bridge (2018 R3), Siveillance Video Open Network Bridge (2018 R2).&#xa0;Los puentes de red abiertos afectados almacenan las credenciales de usuario para la autenticación entre los clientes ONVIF y el servidor ONVIF usando una clave embebida.&#xa0;Las credenciales cifradas pueden ser recuperadas por medio del MIP SDK.&#xa0;Esto podría permitir a un atacante remoto autenticado recuperar y descifrar todas las credenciales almacenadas en el servidor ONVIF"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-321"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2018:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "AC2636FC-7417-44A5-871C-EAABC66C3938"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2018:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "49CB17B2-6591-41B4-8A21-A75E91B6191C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2019:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "23505544-DAC7-4C1F-97E4-02E13E1E3C41"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2019:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A23006-E5B5-4164-9230-1E4DEF33577E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2019:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "9519AB27-BAF0-4837-B4E8-56814D00BB8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2020:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "FEBEEC11-F400-46F5-B285-1247735F97EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2020:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "C80F5250-CBA7-40DB-BFB6-B74007715EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:siveillance_video_open_network_bridge:2020:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "F53DC222-1181-4573-9ED1-9750D35E65A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-853866.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-853866.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27393",
      "sourceIdentifier" : "productcert@siemens.com",
      "published" : "2021-04-22T21:15:10.393",
      "lastModified" : "2024-11-21T05:57:54.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability has been identified in Nucleus NET (All versions), Nucleus ReadyStart V3 (All versions < V2013.08), Nucleus Source Code (Versions including affected DNS modules). The DNS client does not properly randomize UDP port numbers of DNS requests. That could allow an attacker to poison the DNS cache or spoof DNS resolving."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad en Nucleus NET (Todas las versiones), Nucleus ReadyStart V3 (Todas las versiones anteriores a V2013.08), Nucleus Source Code (Versiones que incluyen los módulos DNS afectados). El cliente DNS no aleatoriza correctamente los números de puerto UDP de las peticiones DNS. Esto podría permitir a un atacante envenenar la caché DNS o falsificar la resolución DNS."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "productcert@siemens.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_net:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A987CFB-4A41-4F82-8C7F-31DE8F0650DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_readystart_v3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2013.08",
            "matchCriteriaId" : "68638787-E37D-483F-8E83-51C9A52ECC8D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:nucleus_source_code:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A38C64-612A-4BC5-83D5-D3FA1C90E0F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf",
        "source" : "productcert@siemens.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-201384.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22199",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-22T22:15:11.957",
      "lastModified" : "2024-11-21T05:49:41.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting with 12.9. GitLab was vulnerable to a stored XSS if scoped labels were used."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de la 12.9.&#xa0;GitLab era vulnerable a un ataque de tipo XSS almacenado si etiquetas de ámbito eran usadas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "12.9",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "6ABF2889-D7A6-44EE-8543-BECB01C213B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "12.9",
            "versionEndExcluding" : "13.8.7",
            "matchCriteriaId" : "1F6A83E5-F5A5-4719-8166-A69C28166746"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "92D30002-B702-42A1-A168-2F81BB39C293"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.5",
            "matchCriteriaId" : "DE6524B2-FF9C-48DA-8850-7A4FAE2C4DBC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3FEE2C2F-791C-4C56-A069-663D85CE5448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.1",
            "matchCriteriaId" : "3D4F2787-E776-4615-B8F9-486AFA754440"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22199.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/291004",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1050189",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22199.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/291004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1050189",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28648",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-04-22T22:15:12.287",
      "lastModified" : "2024-11-21T06:00:01.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection that could lead to full local privilege escalation within the application. Please note that an attacker must first obtain the ability to execute low-privileged code on the target system to exploit this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Trend Micro Antivirus para Mac 2020 versiones v10.5 y 2021 v11 (Consumidor) es susceptible a una vulnerabilidad de escalada de privilegios de control de acceso inapropiado que podría permitir a un atacante establecer una conexión que podría conllevar a una escalada de privilegios local completa dentro de la aplicación.&#xa0;Tome en cuenta que un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo para explotar esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "10.5.2088",
            "matchCriteriaId" : "DEABD1B5-2F99-4ABA-9481-F0E771DC8C77"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:antivirus:*:*:*:*:*:macos:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.0.2062",
            "matchCriteriaId" : "A456301B-2306-43C1-B00D-F0E0A4260CF7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10293",
        "source" : "security@trendmicro.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-420/",
        "source" : "security@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-420/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2008",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.313",
      "lastModified" : "2024-11-21T06:02:10.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected are 11.1.1.9 and 12.2.1.3 Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager for Fusion Middleware accessible data as well as unauthorized read access to a subset of Enterprise Manager for Fusion Middleware accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Enterprise Manager for Fusion Middleware. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Enterprise Manager for Fusion Middleware de Oracle Enterprise Manager (componente: FMW Control Plugin).&#xa0;Las versiones compatibles que están afectadas son 11.1.1.9 y 12.2.1.3 La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Enterprise Manager for Fusion Middleware.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Enterprise Manager for Fusion Middleware, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Enterprise Manager for Fusion Middleware y capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Enterprise Manager for Fusion Middleware.&#xa0;CVSS 3.1 Puntuación Base 7.3 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:11.1.1.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CD95A88-AED1-42E5-A868-DB374DFF00AD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:12.2.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C51C69-EC36-4863-997E-B18027A22C4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2053",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.343",
      "lastModified" : "2024-11-21T06:02:16.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: UI Framework). The supported version that is affected is 13.4.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Enterprise Manager Base Platform. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Enterprise Manager Base Platform, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Enterprise Manager Base Platform accessible data as well as unauthorized read access to a subset of Enterprise Manager Base Platform accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Enterprise Manager Base Platform de Oracle Enterprise Manager (componente: UI Framework).&#xa0;La versión compatible que está afectada es 13.4.0.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Enterprise Manager Base Platform.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad se encuentra en Enterprise Manager Base Platform, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Enterprise Manager Base Platform, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Enterprise Manager Base Platform.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D26F3E23-F1A9-45E7-9E5F-0C0A24EE3783"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.stmcyber.com/vulns/cve-2021-2053/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.stmcyber.com/vulns/cve-2021-2053/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2134",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.373",
      "lastModified" : "2024-11-21T06:02:27.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager (component: FMW Control Plugin). The supported version that is affected is 12.2.1.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Enterprise Manager for Fusion Middleware. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Enterprise Manager for Fusion Middleware. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Enterprise Manager for Fusion Middleware de Oracle Enterprise Manager (componente: FMW Control Plugin).&#xa0;La versión compatible que está afectada es 12.2.1.4.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Enterprise Manager for Fusion Middleware.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de Enterprise Manager for Fusion Middleware.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_manager:12.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B5A00E6-A445-4D64-BE8C-74953E567CC6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2135",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.400",
      "lastModified" : "2024-11-21T06:02:27.280",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Coherence Container). Las versiones compatibles que están afectadas son 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de T3, IIOP comprometer a Oracle WebLogic Server. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server. CVSS 3.1 Puntuación Base 9.8 (Impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2136",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.437",
      "lastModified" : "2024-11-21T06:02:27.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core).&#xa0;Las versiones compatibles que están afectadas son 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de IIOP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2140",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.467",
      "lastModified" : "2024-11-21T06:02:27.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Rules Framework). Supported versions that are affected are 8.0.6-8.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Financial Services Analytical Applications Infrastructure de Oracle Financial Services Applications (componente: Rules Framework).&#xa0;Las versiones compatibles que están afectadas son 8.0.6-8.1.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Financial Services Analytical Applications Infrastructure.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, mientras la vulnerabilidad se encuentra en Oracle Financial Services Analytical Applications Infrastructure, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada,&#xa0;insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Financial Services Analytical Applications Infrastructure, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Financial Services Analytical Applications Infrastructure.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.6",
            "versionEndIncluding" : "8.1.0",
            "matchCriteriaId" : "021014B2-DC51-481C-BCFE-5857EFBDEDDA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2141",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.500",
      "lastModified" : "2024-11-21T06:02:27.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to exploit vulnerability allows high privileged attacker with network access via Oracle Net to compromise Oracle FLEXCUBE Direct Banking. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Direct Banking accessible data. CVSS 3.1 Base Score 2.0 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle FLEXCUBE Direct Banking de Oracle Financial Services Applications (componente: Pre-Login).&#xa0;Las versiones compatibles que están afectadas son 12.0.2 y 12.0.3.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante con altos privilegios con acceso a la red por medio de Oracle Net comprometer a Oracle FLEXCUBE Direct Banking.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle FLEXCUBE Direct Banking.&#xa0;CVSS 3.1 Puntuación Base 2.0 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 2.0,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC13CF11-2880-41FA-9534-7874904FDD82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:flexcube_direct_banking:12.0.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA84D97F-A400-4D39-B60A-63F3407E2B68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2142",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.530",
      "lastModified" : "2024-11-21T06:02:28.097",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle WebLogic Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data as well as unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Console).&#xa0;La versión compatible que está afectada es 10.3.6.0.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle WebLogic Server, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle WebLogic Server, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2144",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.560",
      "lastModified" : "2024-11-21T06:02:28.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 5.7.29 and prior and 8.0.19 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in takeover of MySQL Server. CVSS 3.1 Base Score 7.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Parser).&#xa0;Las versiones compatibles que están afectadas son 5.7.29 y anteriores y 8.0.19 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 7.2 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.29",
            "matchCriteriaId" : "0B17ED99-F2C6-4637-A116-8FAF48AD0263"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.19",
            "matchCriteriaId" : "84C8821E-87C5-4A4A-87E5-B6EF780F7A15"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.5.0",
            "versionEndExcluding" : "5.5.66",
            "matchCriteriaId" : "966DE621-0387-4AED-AC5F-67D87391AAA2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndExcluding" : "10.1.42",
            "matchCriteriaId" : "628D866F-1D66-4BF2-8001-BF42F438FEC1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.28",
            "matchCriteriaId" : "49E6F2D5-E092-4F55-BEE1-AD8CC38000DA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.19",
            "matchCriteriaId" : "0D11C130-B79D-47F8-A060-6F1CB2BB5AA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.9",
            "matchCriteriaId" : "62502587-0EA8-4118-A02C-E55B8C51C5FC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2145",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.590",
      "lastModified" : "2024-11-21T06:02:28.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Aunque la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-455/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-455/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2146",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.620",
      "lastModified" : "2024-11-21T06:02:28.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Options).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "192395E3-46B1-4646-ABED-ADBD5F247938"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2147",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.650",
      "lastModified" : "2024-11-21T06:02:28.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Installation). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 1.8 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle ZFS Storage Appliance Kit de Oracle Systems (componente: Installation).&#xa0;La versión compatible que está afectada es la 8.8.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle ZFS Storage Appliance Kit comprometer a Oracle ZFS Storage Appliance Kit.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle ZFS Storage Appliance Kit.&#xa0;CVSS 3.1 Puntuación Base 1.8 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 1.8,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 1.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2149",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.680",
      "lastModified" : "2024-11-21T06:02:28.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle ZFS Storage Appliance Kit product of Oracle Systems (component: Core). The supported version that is affected is 8.8. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle ZFS Storage Appliance Kit executes to compromise Oracle ZFS Storage Appliance Kit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle ZFS Storage Appliance Kit accessible data. CVSS 3.1 Base Score 2.5 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle ZFS Storage Appliance Kit de Oracle Systems (componente: Core).&#xa0;La versión compatible que está afectada es la 8.8.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante poco privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle ZFS Storage Appliance Kit comprometer a Oracle ZFS Storage Appliance Kit.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle ZFS Storage Appliance Kit.&#xa0;CVSS 3.1 Puntuación Base 2.5 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:zfs_storage_appliance:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18096778-19E1-434F-BD96-A9FBF11A8C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2150",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.710",
      "lastModified" : "2024-11-21T06:02:28.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2151",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.740",
      "lastModified" : "2024-11-21T06:02:29.083",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Security). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Security).&#xa0;Las versiones compatibles que están afectadas son 8.56, 8.57 y 8.58.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a PeopleSoft Enterprise PeopleTools.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de PeopleSoft Enterprise PeopleTools, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools y en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de PeopleSoft Enterprise PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 6.7 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D3C1C60-4EC9-4385-A938-EE5A3BBB57BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "305C03B6-BCE3-4E52-AE07-D0B9AE52055B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "622B4524-C6BA-4089-A1CF-353C87006FF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2152",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.770",
      "lastModified" : "2024-11-21T06:02:29.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 4.0 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Analytics Web General).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Business Intelligence Enterprise Edition.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada,&#xa0;insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 4.0 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:11.1.1.9.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "523CD57C-43D4-4C79-BA00-A9A65C6588E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2153",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.800",
      "lastModified" : "2024-11-21T06:02:29.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Internet Expenses product of Oracle E-Business Suite (component: Mobile Expenses). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Internet Expenses. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Internet Expenses accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Internet Expenses de Oracle E-Business Suite (componente: Mobile Expenses).&#xa0;Las versiones compatibles que están afectadas son 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Internet Expenses.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Internet Expenses.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:internet_expenses:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "17C53E13-0390-46A6-94A9-B6CC6888107B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2154",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.830",
      "lastModified" : "2024-11-21T06:02:29.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.38",
            "matchCriteriaId" : "75B97905-B321-492C-9118-FE0CCB27D8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.29",
            "matchCriteriaId" : "B245FD81-5F97-4583-B733-924191F975C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.19",
            "matchCriteriaId" : "CAA619E7-8990-4B0C-A823-42B8352C0663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.10",
            "matchCriteriaId" : "6038BB84-2756-4A42-ACE9-6AC4D6622EC9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPA3CTGXPVWKHMCQDVURK4ETH7GE34KK/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAU7KW36A6TQGKG3RUITYSVUFIHBY3OT/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEF5CRATUGQZUSQU63MHQIDZPOLHW2VE/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPA3CTGXPVWKHMCQDVURK4ETH7GE34KK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAU7KW36A6TQGKG3RUITYSVUFIHBY3OT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEF5CRATUGQZUSQU63MHQIDZPOLHW2VE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2155",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.857",
      "lastModified" : "2024-11-21T06:02:29.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle One-to-One Fulfillment. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle One-to-One Fulfillment accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle One-to-One Fulfillment de Oracle E-Business Suite (componente: Documents).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle One-to-One Fulfillment.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle One-to-One Fulfillment.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "1B5EFA7C-3EB6-4979-B987-F95C4B92C74A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:one-to-one_fulfillment:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1167A8B4-2D67-441A-BF7D-7AC4268EE306"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2156",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.887",
      "lastModified" : "2024-11-21T06:02:29.793",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Customers Online product of Oracle E-Business Suite (component: Customer Tab). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Customers Online. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Customers Online accessible data as well as unauthorized access to critical data or complete access to all Oracle Customers Online accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Customers Online de Oracle E-Business Suite (componente: Customer Tab).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Customers Online.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles en Oracle Customers Online, así como en un acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Customers Online.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customers_online:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "38345F3D-9288-4C13-BF65-C95E4592A997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:customers_online:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8F64C3-B029-47B8-83D5-79F3CEE965DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2157",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.917",
      "lastModified" : "2024-11-21T06:02:29.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: TopLink Integration). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: TopLink Integration).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2158",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.947",
      "lastModified" : "2024-11-21T06:02:30.090",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hyperion Financial Management product of Oracle Hyperion (component: Task Automation). The supported version that is affected is 11.1.2.4. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Hyperion Financial Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Hyperion Financial Management accessible data as well as unauthorized read access to a subset of Hyperion Financial Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Hyperion Financial Management. CVSS 3.1 Base Score 3.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Hyperion Financial Management de Oracle Hyperion (componente: Task Automation).&#xa0;La versión compatible que está afectada es la 11.1.2.4.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Hyperion Financial Management.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar acceso a algunos de los datos accesibles de Hyperion Financial Management, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Hyperion Financial Management y capacidad no autorizada para causar una denegación de servicio parcial (DOS parcial) de Hyperion Financial Management.&#xa0;CVSS 3.1 Puntuación Base 3.9 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:U/C:L/I:L/A:L",
            "baseScore" : 3.9,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_financial_management:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49706536-CE9B-4713-8460-CC961B50C341"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2159",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:12.977",
      "lastModified" : "2024-11-21T06:02:30.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise CS Campus Community product of Oracle PeopleSoft (component: Frameworks). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise CS Campus Community. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of PeopleSoft Enterprise CS Campus Community accessible data. CVSS 3.1 Base Score 3.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto PeopleSoft Enterprise CS Campus Community de Oracle PeopleSoft (componente: Frameworks).&#xa0;La versión compatible que está afectada es la 9.2.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a PeopleSoft Enterprise CS Campus Community.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise CS Campus Community.&#xa0;CVSS 3.1 Puntuación Base 3.5 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N",
            "baseScore" : 3.5,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_campus_software_campus_community:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "495F356A-9DE0-4870-9328-048453C1703E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2160",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.007",
      "lastModified" : "2024-11-21T06:02:30.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.30 and prior and 8.0.17 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 5.7.30 y anteriores y 8.0.17 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.30",
            "matchCriteriaId" : "E1A68EF8-15AA-42A7-9734-6F9470EB35CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.17",
            "matchCriteriaId" : "AD2DF6EE-B589-44FE-ADCD-847DA1B5F83C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2161",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.037",
      "lastModified" : "2024-11-21T06:02:30.543",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. It can also be exploited by supplying untrusted data to APIs in the specified Component. CVSS 3.1 Base Score 5.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Libraries).&#xa0;Las versiones compatibles que están afectadas son Java SE: 7u291, 8u281, 11.0.10, 16;&#xa0;Java SE integrado: 8u281;&#xa0;Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 y 21.0.0.2.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso a la red por medio de múltiples protocolos comprometer a Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition.&#xa0;Nota: Esta vulnerabilidad se aplica a las implementaciones de Java que cargan y ejecutan código que no es confiable (p. Ej.,&#xa0;código que proviene de Internet) y confía en el sandbox de Java para la seguridad.&#xa0;También puede ser explotado proporcionando datos no confiables a las API en el Componente especificado.&#xa0;CVSS 3.1 Puntuación Base 5.9 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7644D5-EEA1-4FA8-8F5E-9C476DACF956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3484EAC9-2F68-4952-8F0B-D1B83B5956CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCE2C42-BFFB-4E1E-9E37-07F334BA3C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDD043-0138-4F9E-A369-B1AA779CA4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFA7B46-AA37-4943-81A1-DF8C7F2CB038"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.10",
            "matchCriteriaId" : "C5344C25-BD71-4228-903F-E419A4455F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13",
            "versionEndIncluding" : "13.0.6",
            "matchCriteriaId" : "4D1453F5-ABB5-48F8-9C1C-69EEEE3949A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15",
            "versionEndIncluding" : "15.0.2",
            "matchCriteriaId" : "8602555C-1C07-4A4C-8DBB-5D304366A7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E78B7C5A-FA51-41E4-AAB0-C6DED2EFCF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "02011EDC-20A7-4A16-A592-7C76E0037997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6D4652-1226-4C60-BEDF-01EBF8AC0849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1F9ED7-7D93-41F4-9130-15BA734420AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF9CDF1-95D3-4125-A73F-396D2280FC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "A13266DC-F8D9-4F30-987F-65BBEAF8D3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "C28388AB-CFC9-4749-A90F-383F5B905EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1B00F9-A81C-48B7-8DAA-F394DDF323F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7AD457-6CE6-4925-8D94-A907B40233D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F3FDD1-7CAC-4B84-ABB7-64E9D3FBD708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "5480E5AD-DB46-474A-9B57-84ED088A75FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "881A4AE9-6012-4E91-98BE-0A352CC20703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E1079-57D9-473B-A017-964F4745F329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D6446E-2915-4F12-87BE-E7420BC2626E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "564EDCE3-16E6-401D-8A43-032D1F8875E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "08278802-D31B-488A-BA6A-EBC816DF883A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "72BDA05A-C8BD-472E-8465-EE1F3E5D8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBB0969-565E-43E2-B067-A10AAA5F1958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "D78BE95D-6270-469A-8035-FCDDB398F952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "88C24F40-3150-4584-93D9-8307DE04EEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FC5A03-FF11-4787-BBF1-3ACF93A21F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "19626B36-62FC-4497-A2E1-7D6CD9839B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "5713AEBD-35F6-44E8-A0CC-A42830D7AE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE0C04B-440E-4B35-ACC8-6264514F764C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "555EC2A6-0475-48ED-AE0C-B306714A9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update251:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1CF2AD-3F7A-4EF3-BD41-117A21553A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update261:*:*:*:*:*:*",
            "matchCriteriaId" : "02C55E2E-AEDE-455C-B128-168C918B5D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "81831D37-6597-441B-87DE-38F7191BEA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA1594D-0AB5-436D-9E60-C26EE2175753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "B868FA41-C71B-491C-880B-484740B30C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "C242D3BE-9114-4A9E-BB78-45754C7CC450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D61068FE-18EE-4ADB-BC69-A3ECE8724575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB59E80-4EC4-4399-BF40-6733E4E475A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "84E31265-22E1-4E91-BFCB-D2AFF445926A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3A58C3-94BB-4120-BE1D-AAF8BBF7F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "50319E52-8739-47C5-B61E-3CA9B6A9A48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update55:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED515B9-DC74-4DC5-B98A-08D87D85E11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1D4868-1F9F-43F7-968C-6469B67D3F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "568F1AC4-B0D7-4438-82E5-0E61500F2240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E99B4A-EDAD-4471-81C4-7E9C775C9D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update67:*:*:*:*:*:*",
            "matchCriteriaId" : "14E9133E-9FF3-40DB-9A11-7469EF5FD265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "94834710-3FA9-49D9-8600-B514CBCA4270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "4228D9E1-7D82-4B49-9669-9CDAD7187432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update76:*:*:*:*:*:*",
            "matchCriteriaId" : "F6231F48-2936-4F7D-96D5-4BA11F78EBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
            "matchCriteriaId" : "D96D5061-4A81-497E-9AD6-A8381B3B454C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
            "matchCriteriaId" : "5345C21E-A01B-43B9-9A20-F2783D921C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "B219F360-83BD-4111-AB59-C9D4F55AF4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "D25377EA-8E8F-4C76-8EA9-3BBDFB352815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update95:*:*:*:*:*:*",
            "matchCriteriaId" : "59FEFE05-269A-4EAF-A80F-E4C2107B1197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update97:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E2AA7C-F602-4DB7-9EC1-0708C46C253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update99:*:*:*:*:*:*",
            "matchCriteriaId" : "FB70E154-A304-429E-80F5-8D87B00E32D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFB65CD-98D5-4024-86CF-130D70DC5A5F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7447BC-F315-4298-A822-549942FC118B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DEB4FB-A21D-4CB1-B522-EEE5093E8521"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.10.0",
            "matchCriteriaId" : "A30F7908-5AF6-4761-BC6A-4C18EFAE48E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "0F30D3AF-4FA3-4B7A-BE04-C24E2EA19A95"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_1:*:*:*:*:*:*",
            "matchCriteriaId" : "7B00DDE7-7002-45BE-8EDE-65D964922CB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_10:*:*:*:*:*:*",
            "matchCriteriaId" : "DB88C165-BB24-49FB-AAF6-087A766D5AD1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_2:*:*:*:*:*:*",
            "matchCriteriaId" : "FF806B52-DAD5-4D12-8BB6-3CBF9DC6B8DF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_3:*:*:*:*:*:*",
            "matchCriteriaId" : "7DE847E0-431D-497D-9C57-C4E59749F6A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_4:*:*:*:*:*:*",
            "matchCriteriaId" : "46385384-5561-40AA-9FDE-A2DE4FDFAD3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_5:*:*:*:*:*:*",
            "matchCriteriaId" : "B7CA7CA6-7CF2-48F6-81B5-69BA0A37EF4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9E4E5481-1070-4E1F-8679-1985DE4E785A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_7:*:*:*:*:*:*",
            "matchCriteriaId" : "D9EEA681-67FF-43B3-8610-0FA17FD279E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_8:*:*:*:*:*:*",
            "matchCriteriaId" : "C33BA8EA-793D-4E79-BE9C-235ACE717216"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mcafee:epolicy_orchestrator:5.10.0:update_9:*:*:*:*:*:*",
            "matchCriteriaId" : "823DBE80-CB8D-4981-AE7C-28F3FDD40451"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.azul.com/core/zulu-openjdk/release-notes/april-2021.html#fixed-common-vulnerabilities-and-exposures",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-05",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4899",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.azul.com/core/zulu-openjdk/release-notes/april-2021.html#fixed-common-vulnerabilities-and-exposures",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2162",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.067",
      "lastModified" : "2024-11-21T06:02:30.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plug-in). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Audit Plug-in).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.3 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "192395E3-46B1-4646-ABED-ADBD5F247938"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2163",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.093",
      "lastModified" : "2024-11-21T06:02:30.933",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition de Oracle Java SE (componente: Libraries).&#xa0;Las versiones compatibles que están afectadas son Java SE: 7u291, 8u281, 11.0.10, 16;&#xa0;Java SE integrado: 8u281;&#xa0;Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 y 21.0.0.2.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso a la red por medio de múltiples protocolos comprometer a Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition.&#xa0;Nota:&#xa0;Esta vulnerabilidad se aplica a las implementaciones de Java que cargan y ejecutan código que no es confiable (p. Ej., Código que proviene de Internet) y dependen del sandbox de Java para su seguridad.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.7.0:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "CC7644D5-EEA1-4FA8-8F5E-9C476DACF956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:1.8.0:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3484EAC9-2F68-4952-8F0B-D1B83B5956CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:11.0.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FCE2C42-BFFB-4E1E-9E37-07F334BA3C12"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jdk:16.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16BDD043-0138-4F9E-A369-B1AA779CA4C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:jre:1.8.0:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "6DFA7B46-AA37-4943-81A1-DF8C7F2CB038"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:19.3.5:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "058C7C4B-D692-49DE-924A-C2725A8162D3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.1.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "0F0434A5-F2A1-4973-917C-A95F2ABE97D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.0.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "96DD93E0-274E-4C36-99F3-EEF085E57655"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11",
            "versionEndIncluding" : "11.0.10",
            "matchCriteriaId" : "C5344C25-BD71-4228-903F-E419A4455F5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13",
            "versionEndIncluding" : "13.0.6",
            "matchCriteriaId" : "4D1453F5-ABB5-48F8-9C1C-69EEEE3949A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15",
            "versionEndIncluding" : "15.0.2",
            "matchCriteriaId" : "8602555C-1C07-4A4C-8DBB-5D304366A7E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E78B7C5A-FA51-41E4-AAB0-C6DED2EFCF4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update1:*:*:*:*:*:*",
            "matchCriteriaId" : "02011EDC-20A7-4A16-A592-7C76E0037997"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update10:*:*:*:*:*:*",
            "matchCriteriaId" : "AC6D4652-1226-4C60-BEDF-01EBF8AC0849"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "3C1F9ED7-7D93-41F4-9130-15BA734420AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "1CF9CDF1-95D3-4125-A73F-396D2280FC4E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "A13266DC-F8D9-4F30-987F-65BBEAF8D3A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "C28388AB-CFC9-4749-A90F-383F5B905EA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update13:*:*:*:*:*:*",
            "matchCriteriaId" : "DA1B00F9-A81C-48B7-8DAA-F394DDF323F3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7AD457-6CE6-4925-8D94-A907B40233D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F3FDD1-7CAC-4B84-ABB7-64E9D3FBD708"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update15:*:*:*:*:*:*",
            "matchCriteriaId" : "5480E5AD-DB46-474A-9B57-84ED088A75FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "881A4AE9-6012-4E91-98BE-0A352CC20703"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E1079-57D9-473B-A017-964F4745F329"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update17:*:*:*:*:*:*",
            "matchCriteriaId" : "B8D6446E-2915-4F12-87BE-E7420BC2626E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "564EDCE3-16E6-401D-8A43-032D1F8875E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "08278802-D31B-488A-BA6A-EBC816DF883A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "72BDA05A-C8BD-472E-8465-EE1F3E5D8CF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update2:*:*:*:*:*:*",
            "matchCriteriaId" : "7BBB0969-565E-43E2-B067-A10AAA5F1958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "D78BE95D-6270-469A-8035-FCDDB398F952"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update21:*:*:*:*:*:*",
            "matchCriteriaId" : "88C24F40-3150-4584-93D9-8307DE04EEE9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "E0FC5A03-FF11-4787-BBF1-3ACF93A21F2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "19626B36-62FC-4497-A2E1-7D6CD9839B19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "5713AEBD-35F6-44E8-A0CC-A42830D7AE20"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE0C04B-440E-4B35-ACC8-6264514F764C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "555EC2A6-0475-48ED-AE0C-B306714A9333"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update251:*:*:*:*:*:*",
            "matchCriteriaId" : "EC1CF2AD-3F7A-4EF3-BD41-117A21553A9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update261:*:*:*:*:*:*",
            "matchCriteriaId" : "02C55E2E-AEDE-455C-B128-168C918B5D97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "81831D37-6597-441B-87DE-38F7191BEA42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "EEA1594D-0AB5-436D-9E60-C26EE2175753"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update291:*:*:*:*:*:*",
            "matchCriteriaId" : "B868FA41-C71B-491C-880B-484740B30C72"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update3:*:*:*:*:*:*",
            "matchCriteriaId" : "C242D3BE-9114-4A9E-BB78-45754C7CC450"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update4:*:*:*:*:*:*",
            "matchCriteriaId" : "D61068FE-18EE-4ADB-BC69-A3ECE8724575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "EFB59E80-4EC4-4399-BF40-6733E4E475A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "84E31265-22E1-4E91-BFCB-D2AFF445926A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3A58C3-94BB-4120-BE1D-AAF8BBF7F22B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "50319E52-8739-47C5-B61E-3CA9B6A9A48F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update55:*:*:*:*:*:*",
            "matchCriteriaId" : "7ED515B9-DC74-4DC5-B98A-08D87D85E11E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update6:*:*:*:*:*:*",
            "matchCriteriaId" : "6D1D4868-1F9F-43F7-968C-6469B67D3F1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "568F1AC4-B0D7-4438-82E5-0E61500F2240"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F5E99B4A-EDAD-4471-81C4-7E9C775C9D9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update67:*:*:*:*:*:*",
            "matchCriteriaId" : "14E9133E-9FF3-40DB-9A11-7469EF5FD265"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update7:*:*:*:*:*:*",
            "matchCriteriaId" : "94834710-3FA9-49D9-8600-B514CBCA4270"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "4228D9E1-7D82-4B49-9669-9CDAD7187432"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update76:*:*:*:*:*:*",
            "matchCriteriaId" : "F6231F48-2936-4F7D-96D5-4BA11F78EBE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update80:*:*:*:*:*:*",
            "matchCriteriaId" : "D96D5061-4A81-497E-9AD6-A8381B3B454C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update85:*:*:*:*:*:*",
            "matchCriteriaId" : "5345C21E-A01B-43B9-9A20-F2783D921C60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update9:*:*:*:*:*:*",
            "matchCriteriaId" : "B219F360-83BD-4111-AB59-C9D4F55AF4C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "D25377EA-8E8F-4C76-8EA9-3BBDFB352815"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update95:*:*:*:*:*:*",
            "matchCriteriaId" : "59FEFE05-269A-4EAF-A80F-E4C2107B1197"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update97:*:*:*:*:*:*",
            "matchCriteriaId" : "E7E2AA7C-F602-4DB7-9EC1-0708C46C253C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:7:update99:*:*:*:*:*:*",
            "matchCriteriaId" : "FB70E154-A304-429E-80F5-8D87B00E32D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:-:*:*:*:*:*:*",
            "matchCriteriaId" : "70892D06-6E75-4425-BBF0-4B684EC62A1C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone1:*:*:*:*:*:*",
            "matchCriteriaId" : "7A165D71-71CC-4E6A-AA4F-FF8DB5B9A5AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone2:*:*:*:*:*:*",
            "matchCriteriaId" : "7417B2BB-9AC2-4AF4-A828-C89A0735AD92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone3:*:*:*:*:*:*",
            "matchCriteriaId" : "6A0A57B5-6F88-4288-9CDE-F6613FE068D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone4:*:*:*:*:*:*",
            "matchCriteriaId" : "67ED8559-C348-4932-B7CE-CB96976A30EC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone5:*:*:*:*:*:*",
            "matchCriteriaId" : "40AC3D91-263F-4345-9FAA-0E573EA64590"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone6:*:*:*:*:*:*",
            "matchCriteriaId" : "DD92AFA9-81F8-48D4-B79A-E7F066F69A99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone7:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4B2F24-A730-4818-90C8-A2D90C081F03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone8:*:*:*:*:*:*",
            "matchCriteriaId" : "464087F2-C285-4574-957E-CE0663F07DE0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:milestone9:*:*:*:*:*:*",
            "matchCriteriaId" : "3E9BB880-A4F6-4887-8BB9-47AA298753D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update101:*:*:*:*:*:*",
            "matchCriteriaId" : "18DCFF53-B298-4534-AB5C-8A5EF59C616F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update102:*:*:*:*:*:*",
            "matchCriteriaId" : "083419F8-FDDF-4E36-88F8-857DB317C1D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update11:*:*:*:*:*:*",
            "matchCriteriaId" : "D7A74F65-57E8-4C9A-BA96-5EF401504F13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update111:*:*:*:*:*:*",
            "matchCriteriaId" : "0D0B90FC-57B6-4315-9B29-3C36E58B2CF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update112:*:*:*:*:*:*",
            "matchCriteriaId" : "07812576-3C35-404C-A7D7-9BE9E3D76E00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update121:*:*:*:*:*:*",
            "matchCriteriaId" : "00C52B1C-5447-4282-9667-9EBE0720B423"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update131:*:*:*:*:*:*",
            "matchCriteriaId" : "92BB9EB0-0C12-4E77-89EE-FB77097841B8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update141:*:*:*:*:*:*",
            "matchCriteriaId" : "FF9D5DCE-2E8F-42B9-9038-AEA7E8C8CFFD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update151:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC0E7BB-F8B7-4369-9910-71240E4073A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update152:*:*:*:*:*:*",
            "matchCriteriaId" : "551B2640-8CEC-4C24-AF8B-7A7CEF864D9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update161:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE30779-48FB-451E-8CE1-F469F93B8772"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update162:*:*:*:*:*:*",
            "matchCriteriaId" : "60590FDE-7156-4314-A012-AA38BD2ADDC9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update171:*:*:*:*:*:*",
            "matchCriteriaId" : "BE51AD3A-8331-4E8F-9DB1-7A0051731DFB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update172:*:*:*:*:*:*",
            "matchCriteriaId" : "F24F6122-2256-41B6-9033-794C6424ED99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update181:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAFA79E-8C7A-48CF-8868-11378FE4B26F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update191:*:*:*:*:*:*",
            "matchCriteriaId" : "D1D6F19F-59B5-4BB6-AD35-013384025970"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update192:*:*:*:*:*:*",
            "matchCriteriaId" : "E7BA97BC-3ADA-465A-835B-6C3C5F416B56"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update20:*:*:*:*:*:*",
            "matchCriteriaId" : "B71F77A4-B7EB-47A1-AAFD-431A7D040B86"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update201:*:*:*:*:*:*",
            "matchCriteriaId" : "91D6BEA9-5943-44A4-946D-CEAA9BA99376"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update202:*:*:*:*:*:*",
            "matchCriteriaId" : "C079A3E0-44EB-4B9C-B4FC-B7621D165C3B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update211:*:*:*:*:*:*",
            "matchCriteriaId" : "2CB74086-14B8-4237-8357-E0C6B5BB8313"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update212:*:*:*:*:*:*",
            "matchCriteriaId" : "3ABED20A-7C34-4E86-9AFB-F4DC9ECBB3A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update221:*:*:*:*:*:*",
            "matchCriteriaId" : "00C2B9C9-1177-4DA6-96CE-55F37F383F99"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update222:*:*:*:*:*:*",
            "matchCriteriaId" : "435CF189-0BD8-40DF-A0DC-99862CDEAF8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update231:*:*:*:*:*:*",
            "matchCriteriaId" : "12A3F367-33AD-47C3-BFDC-871A17E72C94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update232:*:*:*:*:*:*",
            "matchCriteriaId" : "A18F994F-72CA-4AF5-A7D1-9F5AEA286D85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update241:*:*:*:*:*:*",
            "matchCriteriaId" : "78261932-7373-4F16-91E0-1A72ADBEBC3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update242:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD90D3D-9B3A-4101-9A8A-5090F0A9719F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update25:*:*:*:*:*:*",
            "matchCriteriaId" : "B38C0276-0EBD-4E0B-BFCF-4DDECACE04E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update252:*:*:*:*:*:*",
            "matchCriteriaId" : "F5A40B8A-D428-4008-9F21-AF21394C51D1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update262:*:*:*:*:*:*",
            "matchCriteriaId" : "FEC5B777-01E1-45EE-AF95-C3BD1F098B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update271:*:*:*:*:*:*",
            "matchCriteriaId" : "3B504718-5DCE-43B4-B19A-C6B6E7444BD3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update281:*:*:*:*:*:*",
            "matchCriteriaId" : "3102AA10-99A8-49A9-867E-7EEC56865680"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update282:*:*:*:*:*:*",
            "matchCriteriaId" : "5A55CBC7-A7B2-4B89-8AB5-ED30DBE6814E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update31:*:*:*:*:*:*",
            "matchCriteriaId" : "F8483034-DD5A-445D-892F-CDE90A7D58EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update40:*:*:*:*:*:*",
            "matchCriteriaId" : "8279718F-878F-4868-8859-1728D13CD0D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update45:*:*:*:*:*:*",
            "matchCriteriaId" : "2C024E1A-FD2C-42E8-B227-C2AFD3040436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update5:*:*:*:*:*:*",
            "matchCriteriaId" : "4F24389D-DDD0-4204-AA24-31C920A4F47E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update51:*:*:*:*:*:*",
            "matchCriteriaId" : "966979BE-1F21-4729-B6B8-610F74648344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update60:*:*:*:*:*:*",
            "matchCriteriaId" : "F8534265-33BF-460D-BF74-5F55FDE50F29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update65:*:*:*:*:*:*",
            "matchCriteriaId" : "F77AFC25-1466-4E56-9D5F-6988F3288E16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update66:*:*:*:*:*:*",
            "matchCriteriaId" : "A650BEB8-E56F-4E42-9361-8D2DB083F0F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update71:*:*:*:*:*:*",
            "matchCriteriaId" : "799FFECD-E80A-44B3-953D-CDB5E195F3AA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update72:*:*:*:*:*:*",
            "matchCriteriaId" : "A7047507-7CAF-4A14-AA9A-5CEF806EDE98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update73:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC7B179-95D3-4F94-84F6-73F1034A1AF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update74:*:*:*:*:*:*",
            "matchCriteriaId" : "9FB28526-9385-44CA-AF08-1899E6C3AE4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update77:*:*:*:*:*:*",
            "matchCriteriaId" : "E26B69E4-0B43-415F-A82B-52FDCB262B3E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update91:*:*:*:*:*:*",
            "matchCriteriaId" : "27BC4150-70EC-462B-8FC5-20B3442CBB31"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:8:update92:*:*:*:*:*:*",
            "matchCriteriaId" : "02646989-ECD9-40AE-A83E-EFF4080C69B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:openjdk:16:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCFB65CD-98D5-4024-86CF-130D70DC5A5F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:hci_management_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3C19813-E823-456A-B1CE-EC0684CE1953"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:solidfire:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6E9EF0C-AFA8-4F7B-9FDC-1E0F7C26E737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_compute_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7447BC-F315-4298-A822-549942FC118B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:h:netapp:hci_storage_node:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02DEB4FB-A21D-4CB1-B522-EEE5093E8521"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-05",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0001/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4899",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5ACX4JEVYH6H4PSMGMYWTGABPOFPH3TS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CFXOKM2233JVGYDOWW77BN54X3GZTIBK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CG7EWXSO6JUCVHP7R3SOZQ7WPNBOISJH/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MAULPCQFLAMBJIS27YLNNX6IHRFJMVP4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MVDY4T5XMSYDQT6RRKPMRCV4MVGS7KXF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UD3JEP4HPLK7MNZHVUMKIJPBP74M3A2V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4899",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2164",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.123",
      "lastModified" : "2024-11-21T06:02:31.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2166",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.153",
      "lastModified" : "2024-11-21T06:02:31.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "192395E3-46B1-4646-ABED-ADBD5F247938"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.38",
            "matchCriteriaId" : "75B97905-B321-492C-9118-FE0CCB27D8EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.29",
            "matchCriteriaId" : "B245FD81-5F97-4583-B733-924191F975C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.19",
            "matchCriteriaId" : "CAA619E7-8990-4B0C-A823-42B8352C0663"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.10",
            "matchCriteriaId" : "6038BB84-2756-4A42-ACE9-6AC4D6622EC9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPA3CTGXPVWKHMCQDVURK4ETH7GE34KK/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAU7KW36A6TQGKG3RUITYSVUFIHBY3OT/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEF5CRATUGQZUSQU63MHQIDZPOLHW2VE/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DPA3CTGXPVWKHMCQDVURK4ETH7GE34KK/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GAU7KW36A6TQGKG3RUITYSVUFIHBY3OT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEF5CRATUGQZUSQU63MHQIDZPOLHW2VE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2167",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.183",
      "lastModified" : "2024-11-21T06:02:31.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Common Desktop Environment).&#xa0;La versión compatible que está afectada es 10. La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle Solaris comprometer a Oracle Solaris.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Solaris.&#xa0;CVSS 3.1 Puntuación Base 7.8 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2169",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.210",
      "lastModified" : "2024-11-21T06:02:31.617",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "192395E3-46B1-4646-ABED-ADBD5F247938"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2170",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.240",
      "lastModified" : "2024-11-21T06:02:31.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0; Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2171",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.267",
      "lastModified" : "2024-11-21T06:02:31.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Replication).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "192395E3-46B1-4646-ABED-ADBD5F247938"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2172",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.300",
      "lastModified" : "2024-11-21T06:02:32.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2173",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.327",
      "lastModified" : "2024-11-21T06:02:32.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Recovery component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having DBA Level Account privilege with network access via Oracle Net to compromise Recovery. While the vulnerability is in Recovery, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Recovery accessible data. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Recovery de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado que tenga privilegios DBA Level Account con acceso a la red por medio de Oracle Net comprometer a Recovery.&#xa0;Aunque la vulnerabilidad está en Recovery, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Recovery.&#xa0;CVSS 3.1 Puntuación Base 4.1 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6833701E-5510-4180-9523-9CFD318DEE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2204841-585F-40C7-A1D9-C34E612808CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/171344/Oracle-DB-Broken-PDB-Isolation-Metadata-Exposure.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://github.com/emad-almousa/CVE-2021-2173",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/171344/Oracle-DB-Broken-PDB-Isolation-Metadata-Exposure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/emad-almousa/CVE-2021-2173",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2174",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.357",
      "lastModified" : "2024-11-21T06:02:32.420",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:P",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.18",
            "matchCriteriaId" : "D265CBD9-7403-43EC-A0A5-C00CF0C7DAB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2175",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.387",
      "lastModified" : "2024-11-21T06:02:32.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Database Vault component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Any View, Select Any View privilege with network access via Oracle Net to compromise Database Vault. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Database Vault accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Database Vault de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado que tenga el privilegio Create Any View, Select Any View con acceso a la red por medio de Oracle Net comprometer a Database Vault.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Database Vault.&#xa0;CVSS 3.1 Puntuación Base 2.7 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6833701E-5510-4180-9523-9CFD318DEE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2204841-585F-40C7-A1D9-C34E612808CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/170373/Oracle-Database-Vault-Metadata-Exposure.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://databasesecurityninja.wordpress.com/2022/02/02/cve-2021-2175-database-vault-metadata-exposure-vulnerability/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/170373/Oracle-Database-Vault-Metadata-Exposure.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://databasesecurityninja.wordpress.com/2022/02/02/cve-2021-2175-database-vault-metadata-exposure-vulnerability/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2177",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.453",
      "lastModified" : "2024-11-21T06:02:32.743",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Secure Global Desktop de Oracle Virtualization (componente: Gateway). La versión compatible que está afectada es la 5.6. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Secure Global Desktop. Aunque la vulnerabilidad está en Oracle Secure Global Desktop, los ataques pueden afectar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Secure Global Desktop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2178",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.527",
      "lastModified" : "2024-11-21T06:02:32.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Replication).&#xa0;Las versiones compatibles que están afectadas son 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2179",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.557",
      "lastModified" : "2024-11-21T06:02:33.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Group Replication Plugin).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad). Vector&#xa0;CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2180",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.587",
      "lastModified" : "2024-11-21T06:02:33.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.38",
            "matchCriteriaId" : "75B97905-B321-492C-9118-FE0CCB27D8EF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-28",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2181",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.620",
      "lastModified" : "2024-11-21T06:02:33.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Attachments). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. While the vulnerability is in Oracle Document Management and Collaboration, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Document Management and Collaboration accessible data as well as unauthorized update, insert or delete access to some of Oracle Document Management and Collaboration accessible data. CVSS 3.1 Base Score 7.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Document Management and Collaboration de Oracle E-Business Suite (componente: Attachments).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a  Oracle Document Management and Collaboration.&#xa0;Aunque la vulnerabilidad está en Oracle Document Management and Collaboration, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Document Management and Collaboration, así como actualizar, insertar o eliminar acceso no autorizado a algunos de los datos accesibles de Oracle Document Management and Collaboration.&#xa0;CVSS 3.1 Puntuación Base 7.6 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:document_management_and_collaboration:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "ED5C9CA1-9ABD-48F3-BAC3-F424D2D28349"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:document_management_and_collaboration:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "883A6A31-6F57-4196-B8FC-B3C3B7A5EF53"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2182",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.650",
      "lastModified" : "2024-11-21T06:02:34.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2183",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.680",
      "lastModified" : "2024-11-21T06:02:34.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2184",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.710",
      "lastModified" : "2024-11-21T06:02:34.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2185",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.740",
      "lastModified" : "2024-11-21T06:02:34.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2186",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.770",
      "lastModified" : "2024-11-21T06:02:34.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2187",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.797",
      "lastModified" : "2024-11-21T06:02:34.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2188",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.827",
      "lastModified" : "2024-11-21T06:02:34.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2189",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.857",
      "lastModified" : "2024-11-21T06:02:35.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales Offline. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Sales Offline. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Sales Offline de Oracle E-Business Suite (componente: Template).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Sales Offline.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de Oracle Sales Offline.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sales_offline:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6C200D7C-4932-4ABD-A8F4-EE6E6A6E4249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sales_offline:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "2F0758DC-11D2-40AB-927F-22943A146B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2190",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.887",
      "lastModified" : "2024-11-21T06:02:35.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Template). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Sales Offline. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Sales Offline. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Sales Offline de Oracle E-Business Suite (componente: Template).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Sales Offline.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de Oracle Sales Offline.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sales_offline:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6C200D7C-4932-4ABD-A8F4-EE6E6A6E4249"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sales_offline:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "2F0758DC-11D2-40AB-927F-22943A146B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2191",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.917",
      "lastModified" : "2024-11-21T06:02:35.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions that are affected are 5.5.0.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Business Intelligence Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Business Intelligence Enterprise Edition accessible data as well as unauthorized read access to a subset of Oracle Business Intelligence Enterprise Edition accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Business Intelligence Enterprise Edition de Oracle Fusion Middleware (componente: Analytics Actions).&#xa0;Las versiones compatibles que están afectadas son 5.5.0.0.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Business Intelligence Enterprise Edition.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Business Intelligence Enterprise Edition, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada,&#xa0;insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Business Intelligence Enterprise Edition, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Business Intelligence Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 5.4 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:5.5.0.0.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "D40AD626-B23A-44A3-A6C0-1FFB4D647AE4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.3.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "77C3DD16-1D81-40E1-B312-50FBD275507C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:business_intelligence:12.2.1.4.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "81DAC8C0-D342-44B5-9432-6B88D389584F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2192",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.947",
      "lastModified" : "2024-11-21T06:02:35.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris as well as unauthorized update, insert or delete access to some of Oracle Solaris accessible data. Note: This vulnerability applies to Oracle Solaris on SPARC systems only. CVSS 3.1 Base Score 6.1 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Solaris de Oracle Systems (componente: Kernel).&#xa0;La versión compatible que está afectada es la 11. La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle Solaris comprometer a Oracle Solaris.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de Oracle Solaris, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Solaris.&#xa0;Nota: Esta vulnerabilidad se aplica a Oracle Solaris en sistemas SPARC únicamente.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos en la Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E8C192B-8044-4BF9-9F1F-57371FC0E8FD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2193",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:13.973",
      "lastModified" : "2024-11-21T06:02:35.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2194",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.003",
      "lastModified" : "2024-11-21T06:02:35.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: InnoDB).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.2.0",
            "versionEndExcluding" : "10.2.35",
            "matchCriteriaId" : "5CC7D30E-CFBC-44E4-AC6F-012ED7B5BFED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.3.0",
            "versionEndExcluding" : "10.3.26",
            "matchCriteriaId" : "BF08B6B8-FB2D-4AAB-AB0A-D1B058C870EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.4.0",
            "versionEndExcluding" : "10.4.16",
            "matchCriteriaId" : "75516973-6172-4478-8F5B-E95AE39C9A82"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5.0",
            "versionEndExcluding" : "10.5.7",
            "matchCriteriaId" : "A6DA1CBD-89B4-4D16-A1E3-C9B0BFFD1939"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2195",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.053",
      "lastModified" : "2024-11-21T06:02:35.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Attribute Admin Setup). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Partner Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Partner Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Partner Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Partner Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Partner Management de Oracle E-Business Suite (componente: Attribute Admin Setup).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Partner Management.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Partner Management, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Partner Management, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Partner Management.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "D253D71D-D19B-4073-9590-46C47088EB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:partner_management:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15079C95-2741-4267-A99C-37474BF16F19"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2196",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.087",
      "lastModified" : "2024-11-21T06:02:36.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AKV7TRUEQW6EV45RSZVVFLVQMNHVHBCJ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JJQRPXNDH6YHQLUSCS5VA7DAW32PN7N7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UJVUTKKFQAWR7NURCQHQQ5JHTVYGEOYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2197",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.117",
      "lastModified" : "2024-11-21T06:02:36.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2198",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.147",
      "lastModified" : "2024-11-21T06:02:36.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Knowledge Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Knowledge Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Knowledge Management de Oracle E-Business Suite (componente: Setup, Admin).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Knowledge Management.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Knowledge Management, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Knowledge Management, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Knowledge Management.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "9DC3AEC5-5228-4A00-A285-FAA02848E73A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:knowledge_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "EEAF437E-398B-405D-9130-A47B510639EC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2199",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.177",
      "lastModified" : "2024-11-21T06:02:36.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle iStore accessible data as well as unauthorized update, insert or delete access to some of Oracle iStore accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle iStore, los ataques pueden tener un impacto significativo en productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle iStore, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1AE96606-FEA2-4BF2-A097-AA8EA4DA6D05"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2200",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.207",
      "lastModified" : "2024-11-21T06:02:36.720",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The supported version that is affected is 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Applications Framework. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Framework accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Framework accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Applications Framework de Oracle E-Business Suite (componente: Home page).&#xa0;La versión compatible que está afectada es la 12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Applications Framework.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Applications Framework, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Applications Framework.&#xa0;CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_framework:12.2.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40C19F63-D2B9-430A-A9D4-BFCE5B0F05FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2201",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.237",
      "lastModified" : "2024-11-21T06:02:36.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Partition).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2202",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.267",
      "lastModified" : "2024-11-21T06:02:36.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.32 and prior and 8.0.22 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Replication).&#xa0;Las versiones compatibles que están afectadas son 5.7.32 y anteriores y 8.0.22 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.32",
            "matchCriteriaId" : "B39ACD93-5D84-4B0A-8558-D69F8B7C5728"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2203",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.297",
      "lastModified" : "2024-11-21T06:02:37.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2204",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.327",
      "lastModified" : "2024-11-21T06:02:37.303",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2205",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.353",
      "lastModified" : "2024-11-21T06:02:37.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.7-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Marketing accessible data as well as unauthorized access to critical data or complete access to all Oracle Marketing accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Marketing de Oracle E-Business Suite (componente: Marketing Administration).&#xa0;Las versiones compatibles que están afectadas son 12.2.7-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Marketing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Marketing, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Marketing.&#xa0;CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:marketing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.7",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "393310EE-0AF4-4732-B944-800924DE384A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2206",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.383",
      "lastModified" : "2024-11-21T06:02:37.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Trade Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Trade Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Trade Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Trade Management de Oracle E-Business Suite (componente: Quotes).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Trade Management.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Trade Management, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Trade Management, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Trade Management.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "FC28B627-AFAD-420A-BD67-72D4B0226F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "75805A76-0801-44CD-B996-3B6794608F6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2207",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.420",
      "lastModified" : "2024-11-21T06:02:37.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Database - Enterprise Edition component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having RMAN executable privilege with logon to the infrastructure where Oracle Database - Enterprise Edition executes to compromise Oracle Database - Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition accessible data. CVSS 3.1 Base Score 2.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Database - Enterprise Edition de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado contar con privilegios de ejecución RMAN con inicio de sesión en la infraestructura donde se ejecuta Oracle Database - Enterprise Edition comprometer a Oracle Database - Enterprise Edition.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Database - Enterprise Edition.&#xa0;CVSS 3.1 Puntuación Base 2.3 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.1.0.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "89FE33CE-5995-4C53-8331-B49156F852B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:12.2.0.1:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "46E7237C-00BD-4490-96C3-A8EAE4CE2C0B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "20352616-6BCA-485D-8DD7-DFC97AD6A30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/174448/Oracle-RMAN-Missing-Auditing.html",
        "source" : "secalert_us@oracle.com"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/174448/Oracle-RMAN-Missing-Auditing.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2208",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.450",
      "lastModified" : "2024-11-21T06:02:37.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Partition).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2209",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.480",
      "lastModified" : "2024-11-21T06:02:38.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Display). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Email Center. While the vulnerability is in Oracle Email Center, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Email Center accessible data as well as unauthorized update, insert or delete access to some of Oracle Email Center accessible data. CVSS 3.1 Base Score 8.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Email Center de Oracle E-Business Suite (componente: Message Display).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Email Center.&#xa0;Aunque la vulnerabilidad está en Oracle Email Center, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Email Center, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Email Center.&#xa0;CVSS 3.1 Puntuación Base 8.5 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "A8BF78C0-6D75-4334-8254-48CE17110436"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:email_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1BEAA15C-0FC4-47DE-B0F5-C3C1646F0029"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2210",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.510",
      "lastModified" : "2024-11-21T06:02:38.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Trade Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Trade Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Trade Management accessible data as well as unauthorized update, insert or delete access to some of Oracle Trade Management accessible data. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Trade Management de Oracle E-Business Suite (componente: Quotes).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Trade Management.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Trade Management, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o un acceso completo a todos los datos accesibles de Oracle Trade Management, así como en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Trade Management.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "FC28B627-AFAD-420A-BD67-72D4B0226F6B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:trade_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "75805A76-0801-44CD-B996-3B6794608F6B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2211",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.540",
      "lastModified" : "2024-11-21T06:02:38.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Web Services).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso a la red por medio de T3, IIOP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 5.9 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-454/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-454/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2212",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.570",
      "lastModified" : "2024-11-21T06:02:38.413",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2213",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.603",
      "lastModified" : "2024-11-21T06:02:38.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.22 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.22 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.22",
            "matchCriteriaId" : "D98E76D5-B089-425D-9C44-8C6C393DE1DE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2214",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.630",
      "lastModified" : "2024-11-21T06:02:38.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 4.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Console).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;La vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.7,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:N/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2215",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.660",
      "lastModified" : "2024-11-21T06:02:38.843",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2216",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.690",
      "lastModified" : "2024-11-21T06:02:38.987",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Multichannel Framework). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: Multichannel Framework).&#xa0;Las versiones compatibles que están afectadas son 8.56, 8.57 y 8.58.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a PeopleSoft Enterprise PeopleTools.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en PeopleSoft Enterprise PeopleTools, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS : (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2217",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.720",
      "lastModified" : "2024-11-21T06:02:39.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2218",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.750",
      "lastModified" : "2024-11-21T06:02:39.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component: Health Center). Supported versions that are affected are 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PT PeopleTools. While the vulnerability is in PeopleSoft Enterprise PT PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PT PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PT PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PT PeopleTools. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto PeopleSoft Enterprise PT PeopleTools de Oracle PeopleSoft (componente: Health Center).&#xa0;Las versiones compatibles que están afectadas son 8.56 y 8.57.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a PeopleSoft Enterprise PT PeopleTools.&#xa0;Aunque la vulnerabilidad está en PeopleSoft Enterprise PT PeopleTools, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de PeopleSoft Enterprise PT PeopleTools, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PT PeopleTools y en la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de PeopleSoft Enterprise PT PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 8.&#xa0;3 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEB3BE9F-44AC-4EE0-9E66-2B72CF4AF0F5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_pt_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "99BA317E-3C52-4BAF-B61C-803B7208C155"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2219",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.780",
      "lastModified" : "2024-11-21T06:02:39.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR). Supported versions that are affected are 8.56, 8.57 and 8.58. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. While the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise PeopleTools accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise PeopleTools accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of PeopleSoft Enterprise PeopleTools. CVSS 3.1 Base Score 7.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto PeopleSoft Enterprise PeopleTools de Oracle PeopleSoft (componente: SQR).&#xa0;Las versiones compatibles que están afectadas son 8.56, 8.57 y 8.58.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a PeopleSoft Enterprise PeopleTools.&#xa0;Aunque la vulnerabilidad está en PeopleSoft Enterprise PeopleTools, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de PeopleSoft Enterprise PeopleTools, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise PeopleTools y en la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de PeopleSoft Enterprise PeopleTools.&#xa0;CVSS 3.1 Puntuación Base 7.4 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0A735B4-4F3C-416B-8C08-9CB21BAD2889"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E1E416B-920B-49A0-9523-382898C2979D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9DB4A14-2EF5-4B54-95D2-75E6CF9AA0A9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2220",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.810",
      "lastModified" : "2024-11-21T06:02:39.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status). The supported version that is affected is 9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise PeopleSoft Enterprise SCM eProcurement. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of PeopleSoft Enterprise SCM eProcurement accessible data as well as unauthorized read access to a subset of PeopleSoft Enterprise SCM eProcurement accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto PeopleSoft Enterprise SCM eProcurement de Oracle PeopleSoft (componente: Manage Requisition Status).&#xa0;La versión compatible que está afectada es la 9.2.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a PeopleSoft Enterprise SCM eProcurement.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de PeopleSoft Enterprise SCM eProcurement, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de PeopleSoft Enterprise SCM eProcurement.&#xa0;CVSS 3.1 Puntuación Base 5.4 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:peoplesoft_enterprise_scm_eprocurement:9.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9938A25-0584-4666-BAF3-42257CB94F4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2221",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.837",
      "lastModified" : "2024-11-21T06:02:39.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Secure Global Desktop de Oracle Virtualization (componente: Client). La versión compatible que está afectada es la 5.6. La vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de TLS comprometer a Oracle Secure Global Desktop. Los ataques con éxito requieren la interacción humana de una persona diferente del atacante y, aunque la vulnerabilidad está en Oracle Secure Global Desktop, los ataques pueden afectar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Secure Global Desktop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2222",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.873",
      "lastModified" : "2024-11-21T06:02:39.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Bill Presentment Architecture product of Oracle E-Business Suite (component: Template Search). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bill Presentment Architecture. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Bill Presentment Architecture accessible data as well as unauthorized access to critical data or complete access to all Oracle Bill Presentment Architecture accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Bill Presentment Architecture de Oracle E-Business Suite (componente: Template Search).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Bill Presentment Architecture.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Bill Presentment Architecture, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Bill Presentment Architecture.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bill_presentment_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "414654DC-C8CA-4C36-825B-545F76D16896"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bill_presentment_architecture:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "4FCEEF9D-25CE-46D5-B965-8EBB82E66E8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2223",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.903",
      "lastModified" : "2024-11-21T06:02:39.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Receipts). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Receivables. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Receivables accessible data as well as unauthorized access to critical data or complete access to all Oracle Receivables accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Receivables de Oracle E-Business Suite (componente: Receipts).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Receivables.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Receivables, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Receivables.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:receivables:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "FEC8A725-B727-4017-90F0-97879B043432"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2224",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.930",
      "lastModified" : "2024-11-21T06:02:40.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Compensation Workbench). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Compensation Workbench. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Compensation Workbench accessible data as well as unauthorized access to critical data or complete access to all Oracle Compensation Workbench accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Compensation Workbench de Oracle E-Business Suite (componente: Compensation Workbench).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Compensation Workbench.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Compensation Workbench, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Compensation Workbench.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:compensation_workbench:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D1490B22-82B2-4124-B2B5-300C45BEAFEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2225",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.960",
      "lastModified" : "2024-11-21T06:02:40.223",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle E-Business Intelligence product of Oracle E-Business Suite (component: DBI Setups). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Intelligence. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle E-Business Intelligence accessible data as well as unauthorized access to critical data or complete access to all Oracle E-Business Intelligence accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle E-Business Intelligence de Oracle E-Business Suite (componente: DBI Setups).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle E-Business Intelligence.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle E-Business Intelligence, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle E-Business Intelligence.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_intelligence:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "273A5AB9-E42F-45B1-9A15-81DCD8250F37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2226",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:14.990",
      "lastModified" : "2024-11-21T06:02:40.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Information Schema).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndIncluding" : "5.7.33",
            "matchCriteriaId" : "DC6FC82F-3002-4B76-80C4-44266151098F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2227",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.020",
      "lastModified" : "2024-11-21T06:02:40.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Cash Management product of Oracle E-Business Suite (component: Bank Account Transfer). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cash Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Cash Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Cash Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Cash Management de Oracle E-Business Suite (componente: Bank Account Transfer).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Cash Management.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Cash Management, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Cash Management.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:cash_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "159F5CC6-B836-4027-B853-644686C87A85"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2228",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.047",
      "lastModified" : "2024-11-21T06:02:40.693",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Incentive Compensation. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Incentive Compensation accessible data as well as unauthorized access to critical data or complete access to all Oracle Incentive Compensation accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Incentive Compensation de Oracle E-Business Suite (componente: User Interface).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Incentive Compensation.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Compensación de Incentivos de Oracle, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Incentive Compensation.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:incentive_compensation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "92603422-A480-4A3E-970F-FE7C0FE8F39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:incentive_compensation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B18F61F-0149-4D99-9DCB-1B914A0E9FF4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2229",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.077",
      "lastModified" : "2024-11-21T06:02:40.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: LOVs). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Depot Repair. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Depot Repair accessible data as well as unauthorized access to critical data or complete access to all Oracle Depot Repair accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Depot Repair de Oracle E-Business Suite (componente: LOV).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Depot Repair.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Depot Repair, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Depot Repair.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:depot_repair:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "56E31AFB-611C-4351-A8B8-6DB206D8BE4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2230",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.107",
      "lastModified" : "2024-11-21T06:02:40.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una suspensión o un bloqueo repetible frecuentemente (DOS completa) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2231",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.137",
      "lastModified" : "2024-11-21T06:02:41.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: APIs). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Installed Base. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Installed Base accessible data as well as unauthorized access to critical data or complete access to all Oracle Installed Base accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Installed Base de Oracle E-Business Suite (componente: API).&#xa0;La versión compatible que está afectada es la 12.1.3.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Installed Base.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o todos los datos accesibles de Oracle Installed Base, así como en el acceso no autorizado a datos críticos o el acceso completo a todos los datos accesibles de Oracle Installed Base.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:installed_base:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B4BB2B3-91E1-47A1-A725-0107EF6ED8EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2232",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.163",
      "lastModified" : "2024-11-21T06:02:41.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.23 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 1.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Group Replication Plugin).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta MySQL Server comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 1.9 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 1.9,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2233",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.193",
      "lastModified" : "2024-11-21T06:02:41.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Enterprise Asset Management product of Oracle E-Business Suite (component: Setup). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise Asset Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Enterprise Asset Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Enterprise Asset Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Enterprise Asset Management de Oracle E-Business Suite (componente: Setup).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Enterprise Asset Management.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Enterprise Asset Management, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Enterprise Asset Management.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_asset_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "3ABC83AD-2B4D-479D-9819-8658D9CAF941"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:enterprise_asset_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "386857B5-512C-48E5-89D1-7A87D296429B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2234",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.223",
      "lastModified" : "2024-11-21T06:02:41.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult to exploit vulnerability allows low privileged attacker having Create Session privilege with network access via Oracle Net to compromise Java VM. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java VM accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Java VM de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 12.1.0.2, 12.2.0.1, 18c y 19c.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante poco privilegiado que tenga el privilegio Create Session con acceso a la red por medio de Oracle Net comprometer a Java VM.&#xa0; Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Java VM.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.1.0.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D40B7-925C-413D-AFF3-60BF330D5BC2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:12.2.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C614BA7-7103-4ED7-ADD0-56064FE256A3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:18c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6833701E-5510-4180-9523-9CFD318DEE6A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database_server:19c:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2204841-585F-40C7-A1D9-C34E612808CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2235",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.250",
      "lastModified" : "2024-11-21T06:02:41.653",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Install and Upgrade). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportation Execution. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Transportation Execution accessible data as well as unauthorized access to critical data or complete access to all Oracle Transportation Execution accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Transportation Execution de Oracle E-Business Suite (componente: Install and Upgrade).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Transportation Execution.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Transportation Execution, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Transportation Execution.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:transportation_execution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "8FA164D1-0BB6-42C9-B914-FC97EB75E304"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2236",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.280",
      "lastModified" : "2024-11-21T06:02:41.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Financials Common Modules product of Oracle E-Business Suite (component: Advanced Global Intercompany). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financials Common Modules. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Financials Common Modules accessible data as well as unauthorized access to critical data or complete access to all Oracle Financials Common Modules accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Financials Common Modules de Oracle E-Business Suite (componente: Advanced Global Intercompany).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Financials Common Modules.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Financials Common Module, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Financials Common Module.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financials_common_modules:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "55551B35-09BA-43BD-9A6A-E5EC51E9963C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2237",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.310",
      "lastModified" : "2024-11-21T06:02:41.917",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Account Hierarchy Manager). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle General Ledger. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle General Ledger accessible data as well as unauthorized access to critical data or complete access to all Oracle General Ledger accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle General Ledger de Oracle E-Business Suite (componente: Account Hierarchy Manager).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle General Ledger.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle General Ledger, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle General Ledger.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:general_ledger:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6AFB474F-4B10-4A3A-AC94-61B29A383211"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2238",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.340",
      "lastModified" : "2024-11-21T06:02:42.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle MES for Process Manufacturing product of Oracle E-Business Suite (component: Process Operations). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle MES for Process Manufacturing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle MES for Process Manufacturing accessible data as well as unauthorized access to critical data or complete access to all Oracle MES for Process Manufacturing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle MES for Process Manufacturing de Oracle E-Business Suite (componente: Process Operations).&#xa0;La versión compatible que está afectada es la 12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle MES for Process Manufacturing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle MES for Process Manufacturing, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle MES for Process Manufacturing.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:manufacturing_execution_system_for_process_manufacturing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08EC58A1-A489-41F4-A37F-58EAF24AF37D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2239",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.367",
      "lastModified" : "2024-11-21T06:02:42.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Time and Labor product of Oracle E-Business Suite (component: Timecard). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Time and Labor. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Time and Labor accessible data as well as unauthorized access to critical data or complete access to all Oracle Time and Labor accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Time and Labor de Oracle E-Business Suite (componente: Timecard).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Time and Labor.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Time and Labor, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Time and Labor.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:time_and_labor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "9F1D1B1E-201C-43B7-8DE0-ABD40E1F12F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:time_and_labor:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "85148DF0-98EA-43B2-B426-595EBDD5706B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2240",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.397",
      "lastModified" : "2024-11-21T06:02:42.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Outside In Technology. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS Base Score depend on the software that uses Outside In Technology. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology, but if data is not received over a network the CVSS score may be lower. CVSS 3.1 Base Score 7.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Outside In Technology de Oracle Fusion Middleware (componente: Outside In Filters).&#xa0;La versión compatible que está afectada es 8.5.5.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Outside In Technology.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Outside In Technology, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Outside In Technology y la capacidad no autorizada de causar una denegación de servicio parcial. (DOS parcial) de Oracle Outside In Technology.&#xa0;Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDK).&#xa0;El protocolo y la puntuación base CVSS dependen del software que utiliza Outside In Technology.&#xa0;La puntuación CVSS asume que el software pasa los datos recibidos a través de una red directamente a Outside In Technology, pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor.&#xa0;CVSS 3.1 Puntuación Base 7.3 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2241",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.427",
      "lastModified" : "2024-11-21T06:02:42.487",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iStore accessible data as well as unauthorized access to critical data or complete access to all Oracle iStore accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iStore de Oracle E-Business Suite (componente: Shopping Cart).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle iStore.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle iStore, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iStore.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:istore:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "D306FB6E-BEA1-4F95-AA3F-12653DB53D39"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2242",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.457",
      "lastModified" : "2024-11-21T06:02:42.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In Technology. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Outside In Technology accessible data as well as unauthorized read access to a subset of Oracle Outside In Technology accessible data. Note: Outside In Technology is a suite of software development kits (SDKs). The protocol and CVSS Base Score depend on the software that uses Outside In Technology. The CVSS score assumes that the software passes data received over a network directly to Outside In Technology, but if data is not received over a network the CVSS score may be lower. CVSS 3.1 Base Score 8.2 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Outside In Technology de Oracle Fusion Middleware (componente: Outside In Filters).&#xa0;La versión compatible que está afectada es 8.5.5.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Outside In Technology.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Outside In Technology, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Outside In Technology.&#xa0;Nota: Outside In Technology es un conjunto de kits de desarrollo de software (SDK).&#xa0;El protocolo y la puntuación base CVSS dependen del software que utiliza Outside In Technology.&#xa0;La puntuación CVSS asume que el software pasa los datos recibidos a través de una red directamente a Outside In Technology,&#xa0;pero si los datos no se reciben a través de una red, la puntuación CVSS puede ser menor.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:outside_in_technology:8.5.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3198F822-43F8-4CB3-97F7-C2982FDA5CBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2244",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.487",
      "lastModified" : "2024-11-21T06:02:42.753",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider Services product of Oracle Essbase (component: JAPI). Supported versions that are affected are Hyperion Analytic Provider Services 11.1.2.4 and 12.2.1.4, and Essbase Analytic Provider Services 21.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Hyperion Analytic Provider Services. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Hyperion Analytic Provider Services, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Hyperion Analytic Provider Services. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Hyperion Analytic Provider Services de Oracle Hyperion (componente: JAPI) y en el producto Essbase Analytic Provider Services de Oracle Essbase (componente: JAPI). Las versiones afectadas son Hyperion Analytic Provider Services 11.1.2.4 y 12.2.1.4, y Essbase Analytic Provider Services 21.2. La vulnerabilidad, fácilmente explotable, permite a un atacante no autentificado con acceso a la red a través de HTTP comprometer Hyperion Analytic Provider Services. Los ataques exitosos requieren la interacción humana de una persona que no sea el atacante y, aunque la vulnerabilidad está en Hyperion Analytic Provider Services, los ataques pueden afectar significativamente a otros productos. Los ataques exitosos de esta vulnerabilidad pueden resultar en la toma de posesión de Hyperion Analytic Provider Services. Puntuación base CVSS 3.1 10.0 (impactos en la confidencialidad, integridad y disponibilidad). Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:essbase_analytic_provider_services:21.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D9C9D32-4A24-44A0-8BD2-BA686541CE94"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_analytic_provider_services:11.1.2.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8B745F-2C91-4CF8-831C-FC9950DA29B1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hyperion_analytic_provider_services:12.2.1.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0239EC49-064D-40BA-8D37-6428C6CBEA00"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2245",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.517",
      "lastModified" : "2024-11-21T06:02:42.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Database - Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 18c and 19c. Easily exploitable vulnerability allows high privileged attacker having Create Audit Policy privilege with network access via Oracle Net to compromise Oracle Database - Enterprise Edition Unified Audit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Database - Enterprise Edition Unified Audit accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Oracle Database - Enterprise Edition Unified Audit de Oracle Database Server.&#xa0;Las versiones compatibles que están afectadas son 18c y 19c.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado que tenga el privilegio Create Audit Policy con acceso a la red por medio de Oracle Net comprometer a Oracle Database - Enterprise Edition Unified Audit.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle Database - Enterprise Edition Unified Audit.&#xa0;CVSS 3.1 Puntuación Base 2.7 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:18c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "20352616-6BCA-485D-8DD7-DFC97AD6A30D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:database:19c:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C1E05472-8F3A-4E46-90E5-50EA6D555FDC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2246",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.547",
      "lastModified" : "2024-11-21T06:02:43.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Universal Work Queue. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Universal Work Queue accessible data as well as unauthorized access to critical data or complete access to all Oracle Universal Work Queue accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Universal Work Queue de Oracle E-Business Suite (componente: Work Provider Site Level Administration).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Universal Work Queue.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Universal Work Queue, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Universal Work Queue.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:universal_work_queue:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "BC5F0DE4-1E9A-4C6E-8E2D-3742223B0968"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2247",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.573",
      "lastModified" : "2024-11-21T06:02:43.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Collections product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Collections. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Collections accessible data as well as unauthorized access to critical data or complete access to all Oracle Advanced Collections accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Advanced Collections de Oracle E-Business Suite (componente: Admin).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Advanced Collections.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Advanced Collections, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Collections.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_collections:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "AD909193-5AF9-4133-8508-F39F7483965B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_collections:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "2645A282-52C6-41BB-8326-00C7C7DFA551"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2248",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.603",
      "lastModified" : "2024-11-21T06:02:43.317",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Secure Global Desktop. While the vulnerability is in Oracle Secure Global Desktop, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Secure Global Desktop."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Secure Global Desktop de Oracle Virtualization (componente: Server). La versión compatible que está afectada es la 5.6. Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de SKID comprometer a Oracle Secure Global Desktop. Si bien la vulnerabilidad está en Oracle Secure Global Desktop, los ataques pueden afectar significativamente a productos adicionales. Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Secure Global Desktop"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:secure_global_desktop:5.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DA11710-9EA8-49B4-8FD1-3AEE442F6ADC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2249",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.633",
      "lastModified" : "2024-11-21T06:02:43.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Landed Cost Management product of Oracle E-Business Suite (component: Shipment Workbench). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Landed Cost Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Landed Cost Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Landed Cost Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Landed Cost Management de Oracle E-Business Suite (componente: Shipment Workbench).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Landed Cost Management.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Landed Cost Management, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Landed Cost Management.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:landed_cost_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "7AF2F6B2-E6BF-45DC-AAAD-BA96B31454D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:landed_cost_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "A9A86E41-1AD1-4761-8F8F-77BAF62D6E37"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2250",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.660",
      "lastModified" : "2024-11-21T06:02:43.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.2 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 8.2 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-484/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-484/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2251",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.690",
      "lastModified" : "2024-11-21T06:02:43.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Data Source). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle CRM Technical Foundation. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle CRM Technical Foundation accessible data as well as unauthorized access to critical data or complete access to all Oracle CRM Technical Foundation accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle CRM Technical Foundation de Oracle E-Business Suite (componente: Data Source).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle CRM Technical Foundation.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle CRM Technical Foundation, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle CRM Technical Foundation.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "57E34132-E1B4-4A0D-8480-05DFC3C3A089"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:crm_technical_foundation:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10215644-3B05-480F-B175-4BDB72619A48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2252",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.720",
      "lastModified" : "2024-11-21T06:02:43.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Loans product of Oracle E-Business Suite (component: Loan Details, Loan Accounting Events). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Loans. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Loans accessible data as well as unauthorized access to critical data or complete access to all Oracle Loans accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Loans de Oracle E-Business Suite (componente:  Loan Details, Loan Accounting Events).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Loans.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Loans, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Loans.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:loans:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "810DB492-BFC0-4F8F-8630-89185E630A3D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2253",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.750",
      "lastModified" : "2024-11-21T06:02:43.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). Supported versions that are affected are 12.1 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Advanced Supply Chain Planning. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Supply Chain Planning accessible data as well as unauthorized access to critical data or complete access to all Oracle Advanced Supply Chain Planning accessible data. CVSS 3.1 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Advanced Supply Chain Planning de Oracle Supply Chain (componente: Core).&#xa0;Las versiones compatibles que están afectadas son 12.1 y 12.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Advanced Supply Chain Planning.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Advanced Supply Chain Planning, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Supply Chain Planning.&#xa0;CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A62E2A25-1AD7-4B4B-9D1B-F0DEA4550557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_supply_chain_planning:12.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0331158C-BBE0-42DB-8180-EB1FCD290567"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2254",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.780",
      "lastModified" : "2024-11-21T06:02:44.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Hold Management). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Project Contracts. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Project Contracts accessible data as well as unauthorized access to critical data or complete access to all Oracle Project Contracts accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Project Contracts de Oracle E-Business Suite (componente: Hold Management).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Project Contracts.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Project Contracts, así como el acceso no autorizado a los datos críticos o el acceso completo a todos los datos accesibles de Oracle Project Contracts.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:project_contracts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "BA7E6241-E5AC-434C-9650-9E8466A19918"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2255",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.807",
      "lastModified" : "2024-11-21T06:02:44.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Authoring). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Service Contracts. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Service Contracts accessible data as well as unauthorized access to critical data or complete access to all Oracle Service Contracts accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Service Contracts de Oracle E-Business Suite (componente: Authoring).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Service Contracts.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Service Contracts, así como el acceso no autorizado a los datos críticos o el acceso completo a todos los datos accesibles de Oracle Service Contracts.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:service_contracts:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "FE7EC6F2-B129-4ECF-95FC-343E391C6394"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2256",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.837",
      "lastModified" : "2024-11-21T06:02:44.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 16.3.1.4.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Storage Cloud Software Appliance. While the vulnerability is in Oracle Storage Cloud Software Appliance, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Storage Cloud Software Appliance. Note: Updating the Oracle Storage Cloud Software Appliance to version 16.3.1.4.2 or later will address these vulnerabilities. Download the latest version of Oracle Storage Cloud Software Appliance from <a href=\" https://www.oracle.com/downloads/cloud/oscsa-downloads.html\">here. Refer to Document <a href=\"https://support.oracle.com/rstype=doc&id=2768897.1\">2768897.1 for more details. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Storage Cloud Software Appliance de Oracle Storage Gateway (componente:  Management Console).&#xa0;La versión compatible que está afectada es anterior a la 16.3.1.4.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Storage Cloud Software Appliance.&#xa0;Si bien la vulnerabilidad se encuentra en Oracle Storage Cloud Software Appliance, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Storage Cloud Software Appliance.&#xa0;Nota: La actualización de Oracle Storage Cloud Software Appliance a la versión 16.3.1.4.2 o posterior solucionará estas vulnerabilidades.&#xa0;Descargue la última versión de Oracle Storage Cloud Software Appliance de (a href = \"https://www.oracle.com/downloads/cloud/oscsa-downloads.html\") aquí.&#xa0;Consulte el documento "
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:storage_cloud_software_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.1.4.2",
            "matchCriteriaId" : "9E2C32C9-678B-4433-BDB2-6FD194643276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2257",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.867",
      "lastModified" : "2024-11-21T06:02:44.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 16.3.1.4.2. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Storage Cloud Software Appliance. While the vulnerability is in Oracle Storage Cloud Software Appliance, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Storage Cloud Software Appliance accessible data. Note: Updating the Oracle Storage Cloud Software Appliance to version 16.3.1.4.2 or later will address these vulnerabilities. Download the latest version of Oracle Storage Cloud Software Appliance from <a href=\" https://www.oracle.com/downloads/cloud/oscsa-downloads.html\">here. Refer to Document <a href=\"https://support.oracle.com/rstype=doc&id=2768897.1\">2768897.1 for more details. CVSS 3.1 Base Score 4.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Storage Cloud Software Appliance de Oracle Storage Gateway (componente:  Management Console).&#xa0;La versión compatible que está afectada es anterior a la 16.3.1.4.2.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Storage Cloud Software Appliance.&#xa0;Si bien la vulnerabilidad se encuentra en Oracle Storage Cloud Software Appliance, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle Storage Cloud Software Appliance.&#xa0;Nota: La actualización de Oracle Storage Cloud Software Appliance a la versión 16.3.1.4.2 o posterior solucionará estas vulnerabilidades.&#xa0;Descargue la última versión de Oracle Storage Cloud Software Appliance desde (a href=\" https://www.oracle.com/downloads/cloud/oscsa-downloads.html\")here. Refer to Document (a href=\"https://support.oracle.com/rstype=doc&amp;id=2768897.1\")2768897.1 para mayores detalles. CVSS 3.1 Puntuación Base 4.1 (Impactos en la Confidencialidad). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 4.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:storage_cloud_software_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "16.3.1.4.2",
            "matchCriteriaId" : "9E2C32C9-678B-4433-BDB2-6FD194643276"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2258",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.897",
      "lastModified" : "2024-11-21T06:02:44.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Projects product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Projects. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Projects accessible data as well as unauthorized access to critical data or complete access to all Oracle Projects accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Projects de Oracle E-Business Suite (componente: User Interface).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Projects.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Projects, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Projects.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:projects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "597E66DC-C875-4590-96F0-A383D3ABCFA4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:projects:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "EA498B18-CE4A-4F95-95CE-1BFE7A7514DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2259",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.927",
      "lastModified" : "2024-11-21T06:02:44.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: India Localization, Results). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Payables. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Payables accessible data as well as unauthorized access to critical data or complete access to all Oracle Payables accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Payables de Oracle E-Business Suite (componente:India Localization, Results).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Payables.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Payables, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Payables.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payables:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "8C2D8611-25F3-4F20-A846-B55F3326A745"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:payables:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "BC9DE013-3686-4083-92E3-F7063FE18696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2260",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.957",
      "lastModified" : "2024-11-21T06:02:44.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Human Resources product of Oracle E-Business Suite (component: iRecruitment). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Human Resources. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Human Resources accessible data as well as unauthorized access to critical data or complete access to all Oracle Human Resources accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Human Resources de Oracle E-Business Suite (componente: iRecruitment).&#xa0;La versión compatible que está afectada es la 12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Human Resources.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Human Resources, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Human Resources.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:human_resources:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DBFF8AD3-A046-4519-830E-09D44DA15901"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2261",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:15.987",
      "lastModified" : "2024-11-21T06:02:45.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite (component: Quotes). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Lease and Finance Management. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Lease and Finance Management accessible data as well as unauthorized access to critical data or complete access to all Oracle Lease and Finance Management accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Lease and Finance Management de Oracle E-Business Suite (componente: Quotes).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Lease and Finance Management.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Lease and Finance Management, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Lease and Finance Management.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:lease_and_finance_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "617E79EB-9E62-4478-BEE8-E2B381065FF6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:lease_and_finance_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "1F42809E-2C1D-4755-84BB-3AF986068CC3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2262",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.017",
      "lastModified" : "2024-11-21T06:02:45.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Endeca). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTPS to compromise Oracle Purchasing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Purchasing accessible data as well as unauthorized access to critical data or complete access to all Oracle Purchasing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Purchasing de Oracle E-Business Suite (componente: Endeca).&#xa0;La versión compatible que está afectada es la 12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTPS comprometer a Oracle Purchasing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Purchasing, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Purchasing.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:purchasing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83CEDA10-4E7C-4B46-A014-04F91711F098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2263",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.050",
      "lastModified" : "2024-11-21T06:02:45.327",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite (component: Intelligence, RFx). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Sourcing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Sourcing accessible data as well as unauthorized access to critical data or complete access to all Oracle Sourcing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Sourcing de Oracle E-Business Suite (componente: Intelligence, RFx).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Sourcing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Sourcing, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Sourcing.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:sourcing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "6B455955-8BEB-426E-A88F-22BAF090DF94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2264",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.080",
      "lastModified" : "2024-11-21T06:02:45.463",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data as well as unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 8.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle VM VirtualBox, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 8.4 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS:  (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/26/1",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/26/2",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/26/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/26/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2266",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.110",
      "lastModified" : "2024-11-21T06:02:45.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2267",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.140",
      "lastModified" : "2024-11-21T06:02:45.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Labor Distribution product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Labor Distribution. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Labor Distribution accessible data as well as unauthorized access to critical data or complete access to all Oracle Labor Distribution accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Labor Distribution de Oracle E-Business Suite (componente: User Interface).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Labor Distribution.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Labor Distribution, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Labor Distribution.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:labor_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "4C265604-39C2-4128-9C48-5225E5542C7C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2268",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.170",
      "lastModified" : "2024-11-21T06:02:45.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Courseware). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Quoting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Quoting accessible data as well as unauthorized access to critical data or complete access to all Oracle Quoting accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Quoting de Oracle E-Business Suite (componente: Courseware).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Quoting.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Quoting, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Quoting.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:quoting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "56E61EC1-562D-47C6-83C9-5C2C3E32218A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2269",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.200",
      "lastModified" : "2024-11-21T06:02:46.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component: Price Book). The supported version that is affected is 12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Advanced Pricing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Advanced Pricing accessible data as well as unauthorized access to critical data or complete access to all Oracle Advanced Pricing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Advanced Pricing de Oracle E-Business Suite (componente: Price Book).&#xa0;La versión compatible que está afectada es la 12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Advanced Pricing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Advanced Pricing, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Advanced Pricing.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:advanced_pricing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "133C27E0-1866-444D-85A9-749C1F73E45B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2270",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.230",
      "lastModified" : "2024-11-21T06:02:46.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Site Hub product of Oracle E-Business Suite (component: Sites). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Site Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Site Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Site Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Site Hub de Oracle E-Business Suite (componente: Sites).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Site Hub.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Site Hub, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Site Hub.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:site_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "BD1A8D68-594E-4F77-A628-843A57AAA192"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2271",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.260",
      "lastModified" : "2024-11-21T06:02:46.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Resource Exceptions). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Work in Process. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Work in Process accessible data as well as unauthorized access to critical data or complete access to all Oracle Work in Process accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Work in Process de Oracle E-Business Suite (componente: Resource Exceptions).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.8.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Work in Process.&#xa0; Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Work in Process, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Work in Process.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:work_in_progress:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.8",
            "matchCriteriaId" : "49CE76B2-1573-455C-96F9-D4A1316B654A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:work_in_progress:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "924450C8-6CB6-4330-9E68-02A36F396D7F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2272",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.287",
      "lastModified" : "2024-11-21T06:02:46.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component: Inquiries). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Subledger Accounting. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Subledger Accounting accessible data as well as unauthorized access to critical data or complete access to all Oracle Subledger Accounting accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Subdger Accounting de Oracle E-Business Suite (componente: Inquiries).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Subledger Accounting.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Subdger Accounting, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Subdger Accounting.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:subledger_accounting:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "C42A2EE3-6EFF-42B3-AE9B-8E30A8F6D9C5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2273",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.320",
      "lastModified" : "2024-11-21T06:02:46.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Legal Entity Configurator product of Oracle E-Business Suite (component: Create Contracts). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Legal Entity Configurator. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Legal Entity Configurator accessible data as well as unauthorized access to critical data or complete access to all Oracle Legal Entity Configurator accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Legal Entity Configurator de Oracle E-Business Suite (componente: Create Contracts).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Legal Entity Configurator.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Legal Entity Configurator, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Legal Entity Configurator.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:oracle:legal_entity_configurator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "F3AE1687-CE11-4BAC-BF65-8B6501BDB29B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2274",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.347",
      "lastModified" : "2024-11-21T06:02:46.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle E-Business Tax product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle E-Business Tax. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle E-Business Tax accessible data as well as unauthorized access to critical data or complete access to all Oracle E-Business Tax accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle E-Business Tax de Oracle E-Business Suite (componente: User Interface).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle E-Business Tax.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle E-Business Tax, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle E-Business Tax.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_tax:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "31186ECF-81F5-41DF-97D6-E31AB817BB13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:e-business_tax:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "0EA903B6-C0C2-4A71-88E7-45BA6FC01C32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2275",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.377",
      "lastModified" : "2024-11-21T06:02:46.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: View Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications Manager. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Applications Manager accessible data as well as unauthorized access to critical data or complete access to all Oracle Applications Manager accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Applications Manager de Oracle E-Business Suite (componente: View Reports).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Applications Manager.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Applications Manager, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Applications Manager.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "6A6F3B61-CB56-4E89-ADA4-21935BB19105"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:applications_manager:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2FDF7A2-A97E-46CD-8F20-BF4A1C4F0058"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2276",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.407",
      "lastModified" : "2024-11-21T06:02:47.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iSetup. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle iSetup accessible data as well as unauthorized access to critical data or complete access to all Oracle iSetup accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle iSetup de Oracle E-Business Suite (componente: General Ledger Update Transform, Reports).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle iSetup.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle iSetup, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle iSetup.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isetup:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "AD199E5A-C5CB-40C4-B5F5-27B952BBFB09"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:isetup:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6A9AEF9-BFB7-4F0E-B852-105024D8D0B1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2277",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.437",
      "lastModified" : "2024-11-21T06:02:47.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Coherence de Oracle Fusion Middleware (componente: Core).&#xa0;Las versiones compatibles que están afectadas son 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Coherence.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Coherence.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:3.7.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06EF2E5D-265E-44FE-9F99-7C5AC7B2C0FC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E3D6BC7-B12D-44A9-84F1-7B97F848B97A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "956B2712-8FB5-4FBF-A7FF-8930C05677FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FF57C7A-92C9-4D71-A7B1-CC9DEFAA8193"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:coherence:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FA64A1D-34F9-4441-857A-25C165E6DBB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2278",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.467",
      "lastModified" : "2024-11-21T06:02:47.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server .&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o una suspensión repetible frecuentemente (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2279",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.497",
      "lastModified" : "2024-11-21T06:02:47.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows unauthenticated attacker with network access via RDP to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante no autenticado con acceso a la red por medio de RDP comprometer a Oracle VM VirtualBox.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-453/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-453/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2280",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.533",
      "lastModified" : "2024-11-21T06:02:47.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2281",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.567",
      "lastModified" : "2024-11-21T06:02:47.817",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2282",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.597",
      "lastModified" : "2024-11-21T06:02:47.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2283",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.627",
      "lastModified" : "2024-11-21T06:02:48.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2284",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.657",
      "lastModified" : "2024-11-21T06:02:48.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2285",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.690",
      "lastModified" : "2024-11-21T06:02:48.387",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2286",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.720",
      "lastModified" : "2024-11-21T06:02:48.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2287",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.747",
      "lastModified" : "2024-11-21T06:02:48.680",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 7.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la anterior a la 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Si bien la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.1 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2288",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.780",
      "lastModified" : "2024-11-21T06:02:48.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Bill Issues). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bills of Material. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Bills of Material accessible data as well as unauthorized access to critical data or complete access to all Oracle Bills of Material accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Bills of Material de Oracle E-Business Suite (componente: Bill Issues).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Bills of Material.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Bills of Material, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Bills of Material.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:bills_of_material:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "9E1D1F33-2782-45B6-B1AE-90A92EB41703"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2289",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.810",
      "lastModified" : "2024-11-21T06:02:48.977",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Template, GTIN search). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Product Hub. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Product Hub accessible data as well as unauthorized access to critical data or complete access to all Oracle Product Hub accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Product Hub de Oracle E-Business Suite (componente: Template, GTIN search).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Product Hub.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Product Hub, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Product Hub.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:product_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "7D193725-A4FD-4275-93AD-A654959C32BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:product_hub:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "5A6892A6-7B2A-4C7F-BD39-E92B92868342"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2290",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.840",
      "lastModified" : "2024-11-21T06:02:49.130",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Engineering. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Engineering accessible data as well as unauthorized access to critical data or complete access to all Oracle Engineering accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Engineering de Oracle E-Business Suite (componente: Change Management).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Engineering.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Engineering, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Engineering.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:engineering:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "7B230602-13FA-4B14-804F-78CBC2962B37"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:engineering:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "045568AD-1AA6-4059-A11B-445C8D0B9567"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2291",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.873",
      "lastModified" : "2024-11-21T06:02:49.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 4.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la versiones anteriores a la 6.1.20.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante poco privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 4.7 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-457/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-457/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2292",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.903",
      "lastModified" : "2024-11-21T06:02:49.430",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Document Management and Collaboration product of Oracle E-Business Suite (component: Document Management). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Document Management and Collaboration. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Document Management and Collaboration accessible data as well as unauthorized access to critical data or complete access to all Oracle Document Management and Collaboration accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Document Management and Collaboration de Oracle E-Business Suite (componente: Document Management).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Document Management and Collaboration.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de Oracle Document Management and Collaboration, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Document Management and Collaboration.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:document_management_and_collaboration:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "A8776EE6-6D9B-4060-ABD0-83F645B3136B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:document_management_and_collaboration:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "ED5C9CA1-9ABD-48F3-BAC3-F424D2D28349"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2293",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.933",
      "lastModified" : "2024-11-21T06:02:49.573",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un bloqueo repetible (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2294",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.963",
      "lastModified" : "2024-11-21T06:02:49.697",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle WebLogic Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle WebLogic Server. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle WebLogic Server de Oracle Fusion Middleware (componente: Core).&#xa0;Las versiones compatibles que están afectadas son 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de T3, IIOP comprometer a Oracle WebLogic Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle WebLogic Server y la capacidad no autorizada de causar una denegación de servicio parcial (DOS parcial) de Oracle WebLogic Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B40B13B7-68B3-4510-968C-6A730EB46462"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C93CC705-1F8C-4870-99E6-14BF264C3811"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F14A818F-AA16-4438-A3E4-E64C9287AC66"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A5BB153-68E0-4DDA-87D1-0D9AB7F0A418"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04BCDC24-4A21-473C-8733-0D9CFB38A752"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2295",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:16.993",
      "lastModified" : "2024-11-21T06:02:49.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Concurrent Processing accessible data as well as unauthorized access to critical data or complete access to all Oracle Concurrent Processing accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Concurrent Processing de Oracle E-Business Suite (componente: BI Publisher Integration).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Concurrent Processing.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle Concurrent Processing, así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Concurrent Processing.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:concurrent_processing:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "D000945C-3782-4BC1-8132-F6408AE083C6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:concurrent_processing:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7285E59-A8D4-48FF-B8DB-BB9E035A6FE2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2296",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.020",
      "lastModified" : "2024-11-21T06:02:49.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la versiones anteriores a la 6.1.20.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Mientras la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-459/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-459/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2297",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.050",
      "lastModified" : "2024-11-21T06:02:50.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la versiones anteriores a la 6.1.20.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Mientras la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 5.3 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-462/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-462/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2298",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.080",
      "lastModified" : "2024-11-21T06:02:50.210",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un bloqueo repetible (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2299",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.110",
      "lastModified" : "2024-11-21T06:02:50.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Optimizer).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un bloqueo repetible (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2300",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.140",
      "lastModified" : "2024-11-21T06:02:50.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un bloqueo repetible (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2301",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.170",
      "lastModified" : "2024-11-21T06:02:50.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Information Schema).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 2.7 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2302",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.200",
      "lastModified" : "2024-11-21T06:02:50.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Platform Security para Java de Oracle Fusion Middleware (componente: OPSS).&#xa0;Las versiones compatibles que están afectadas son 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Platform Security para Java.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Platform Security para Java.&#xa0;CVSS 3.1 Puntuación Base 9.8 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:platform_security_for_java:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFC3FEDD-0683-4D3F-AF51-EC0104D11468"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:platform_security_for_java:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BF6ECD9-5654-43F0-B8F1-204F425B1A91"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:platform_security_for_java:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB35358D-B749-4653-9499-EEE5E433031E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-460/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-460/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2303",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.230",
      "lastModified" : "2024-11-21T06:02:50.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Diagnostic Assistant). The supported version that is affected is Prior to 2.12.41. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise OSS Support Tools. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all OSS Support Tools accessible data. CVSS 3.1 Base Score 4.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto OSS Support Tools de Oracle Support Tools (componente: Diagnostic Assistant).&#xa0;La versión compatible que está afectada es versiones anteriores a 2.12.41.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a OSS Support Tools.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de OSS Support Tools.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.12.41",
            "matchCriteriaId" : "61B4D874-CCF2-4C78-A823-69A62FA1F6C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-458/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-458/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2304",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.260",
      "lastModified" : "2024-11-21T06:02:51.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Stored Procedure).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o bloqueo repetible (DOS completo) de MySQL Server, así como la actualización no autorizada, insertar o eliminar algunos de los datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 5.5 (Impactos en la Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2305",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.290",
      "lastModified" : "2024-11-21T06:02:51.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: DML).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la capacidad no autorizada de causar un bloqueo o un bloqueo repetible (DOS completo) de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 4.9 (Impactos en la Disponibilidad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2306",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.317",
      "lastModified" : "2024-11-21T06:02:51.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es versiones anteriores a 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Mientras la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2307",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.347",
      "lastModified" : "2024-11-21T06:02:51.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Server accessible data as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Packaging).&#xa0;Las versiones compatibles que están afectadas son 5.7.33 y anteriores y 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado iniciar sesión en la infraestructura donde se ejecuta MySQL Server comprometer a MySQL Server.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de MySQL Server, así como una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 6.1 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/567764",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2308",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.377",
      "lastModified" : "2024-11-21T06:02:51.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto MySQL Server de Oracle MySQL (componente: Server: Information Schema).&#xa0;Las versiones compatibles que están afectadas son 8.0.23 y anteriores.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de múltiples protocolos comprometer a MySQL Server.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en acceso de lectura no autorizado a un subconjunto de datos accesibles de MySQL Server.&#xa0;CVSS 3.1 Puntuación Base 2.7 (Impactos en la Confidencialidad).&#xa0;Vector CVSS:  (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.0.23",
            "matchCriteriaId" : "45E2906A-3A25-4B17-8DB9-DA88ED3AD056"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "B55E8D50-99B4-47EC-86F9-699B67D473CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210513-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2309",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.407",
      "lastModified" : "2024-11-21T06:02:51.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es la versiones anteriores a la 6.1.20.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Mientras la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-461/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-461/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2310",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.437",
      "lastModified" : "2024-11-21T06:02:51.797",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle VM VirtualBox. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es versiones anteriores a 6.1.20.&#xa0;Una vulnerabilidad difícil de explotar permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Mientras la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 7.5 (Impactos en la Confidencialidad, Integridad y Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-456/",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-456/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2311",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.467",
      "lastModified" : "2024-11-21T06:02:51.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Hospitality Inventory Management product of Oracle Food and Beverage Applications (component: Export to Reporting and Analytics). The supported version that is affected is 9.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Hospitality Inventory Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Hospitality Inventory Management accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Hospitality Inventory Management de Oracle Food and Beverage Applications (componente: Export to Reporting and Analytics).&#xa0;La versión compatible que está afectada es 9.1.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Hospitality Inventory Management.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en un acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle Hospitality Inventory Management.&#xa0;CVSS 3.1 Puntuación Base 6.5 (Impactos en la Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8865CE15-F9A1-4A46-AF93-B58356BDEE6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2312",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.497",
      "lastModified" : "2024-11-21T06:02:52.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle VM VirtualBox. Note: This vulnerability applies to Windows systems only. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core).&#xa0;La versión compatible que está afectada es versiones anteriores a 6.1.20.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con inicio de sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox comprometer a Oracle VM VirtualBox.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una capacidad no autorizada para causar un bloqueo o un bloqueo repetible (DOS completo) de Oracle VM VirtualBox.&#xa0;Nota: esta vulnerabilidad solo se aplica a los sistemas Windows.&#xa0;CVSS 3.1 Puntuación Base 4.4 (Impactos en la Disponibilidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-36",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2314",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.527",
      "lastModified" : "2024-11-21T06:02:52.173",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Profiles). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Application Object Library. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Application Object Library accessible data as well as unauthorized access to critical data or complete access to all Oracle Application Object Library accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Application Object Library de Oracle E-Business Suite (componente: Profiles).&#xa0;Las versiones compatibles que están afectadas son 12.1.3 y 12.2.3-12.2.10.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Application Object Library.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o de todos los datos accesibles de la biblioteca de objetos de aplicación de Oracle, así como el acceso no autorizado a los datos críticos o el acceso completo a todos los datos accesibles de Oracle Application Object Library.&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.2.3",
            "versionEndIncluding" : "12.2.10",
            "matchCriteriaId" : "AD2BFD9C-B04E-44C8-83BC-FF7BC59DD89A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:application_object_library:12.1.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A59435-A033-48BD-AC2A-140DCF6113DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2315",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.557",
      "lastModified" : "2024-11-21T06:02:52.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle HTTP Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle HTTP Server accessible data as well as unauthorized read access to a subset of Oracle HTTP Server accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle HTTP Server de Oracle Fusion Middleware (componente: Web Listener).&#xa0;Las versiones compatibles que están afectadas son 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle HTTP Server.&#xa0;Los ataques con éxito requieren la interacción humana de una persona diferente del atacante.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en una actualización no autorizada, insertar o eliminar el acceso a algunos de los datos accesibles de Oracle HTTP Server, así como en el acceso de lectura no autorizado a un subconjunto de datos accesibles de Oracle HTTP Server.&#xa0;CVSS 3.1 Puntuación Base 5.4 (Impactos en la Confidencialidad e Integridad).&#xa0;Vector CVSS: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:11.1.1.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EBD2676F-EE9D-4462-ABA5-C11CE726849C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:12.2.1.3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DFC79B17-E9D2-44D5-93ED-2F959E7A3D43"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:http_server:12.2.1.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD04BEE5-E9A8-4584-A68C-0195CE9C402C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2316",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.587",
      "lastModified" : "2024-11-21T06:02:52.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French HR). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle HRMS (France). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle HRMS (France) accessible data as well as unauthorized access to critical data or complete access to all Oracle HRMS (France) accessible data. CVSS 3.1 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle HRMS (France) de Oracle E-Business Suite (componente:  French HR).&#xa0;Las versiones compatibles que están afectadas son 12.1.1-12.1.3.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante poco privilegiado con acceso a la red por medio de HTTP comprometer a Oracle HRMS (France).&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la creación, eliminación o modificación no autorizada del acceso a datos críticos o a todos los datos accesibles de Oracle HRMS (France) así como en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle HRMS (France).&#xa0;CVSS 3.1 Puntuación Base 8.1 (Impactos en la Confidencialidad e Integridad).&#xa0;CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:human_resource_management_software_for_france:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.1.1",
            "versionEndIncluding" : "12.1.3",
            "matchCriteriaId" : "91E6C4FE-87FD-4F60-9EC6-CAFD3C19A736"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2317",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.617",
      "lastModified" : "2024-11-21T06:02:52.563",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Cloud Infrastructure Storage Gateway. While the vulnerability is in Oracle Cloud Infrastructure Storage Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Cloud Infrastructure Storage Gateway. Note: Updating the Oracle Cloud Infrastructure Storage Gateway to version 1.4 or later will address these vulnerabilities. Download the latest version of Oracle Cloud Infrastructure Storage Gateway from <a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\">here. Refer to Document <a href=\"https://support.oracle.com/rs?type=doc&id=2768897.1\">2768897.1 for more details. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Cloud Infrastructure Storage Gateway de Oracle Storage Gateway (componente: Management Console).&#xa0;La versión compatible que está afectada es la anterior a la 1.4.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante no autenticado con acceso a la red por medio de HTTP comprometer a Oracle Cloud Infrastructure Storage Gateway.&#xa0;Si bien la vulnerabilidad está en Oracle Cloud Infrastructure Storage Gateway, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Cloud Infrastructure Storage Gateway.&#xa0;Nota: La actualización de Oracle Cloud Infrastructure Storage Gateway a versión 1.4 o posterior solucionará estas vulnerabilidades.&#xa0;Descargue la última versión de Oracle Cloud Infrastructure Storage Gateway desde  (a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\")here. Refer to Document (a href=\"https://support.oracle.com/rs?type=doc&amp;id=2768897.1\")2768897.1 para mayores detalles. CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS: 3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:cloud_infrastructure_storage_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "0A7C7129-2DB9-4423-8998-9C9D50A8F1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2318",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.647",
      "lastModified" : "2024-11-21T06:02:52.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cloud Infrastructure Storage Gateway. While the vulnerability is in Oracle Cloud Infrastructure Storage Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Cloud Infrastructure Storage Gateway. Note: Updating the Oracle Cloud Infrastructure Storage Gateway to version 1.4 or later will address these vulnerabilities. Download the latest version of Oracle Cloud Infrastructure Storage Gateway from <a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\">here. Refer to Document <a href=\"https://support.oracle.com/rs?type=doc&id=2768897.1\">2768897.1 for more details. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Cloud Infrastructure Storage Gateway de Oracle Storage Gateway (componente: Management Console).&#xa0;La versión compatible que está afectada es la anterior a la 1.4.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Cloud Infrastructure Storage Gateway.&#xa0;Si bien la vulnerabilidad está en Oracle Cloud Infrastructure Storage Gateway, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Cloud Infrastructure Storage Gateway.&#xa0;Nota: La actualización de Oracle Cloud Infrastructure Storage Gateway a versión 1.4 o posterior solucionará estas vulnerabilidades.&#xa0;Descargue la última versión de Oracle Cloud Infrastructure Storage Gateway desde (a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\")here. Refer to Document (a href=\"https://support.oracle.com/rs?type=doc&amp;id=2768897.1\")2768897.1 para mayores detalles. CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS: 3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:cloud_infrastructure_storage_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "0A7C7129-2DB9-4423-8998-9C9D50A8F1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2319",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.673",
      "lastModified" : "2024-11-21T06:02:52.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cloud Infrastructure Storage Gateway. While the vulnerability is in Oracle Cloud Infrastructure Storage Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Cloud Infrastructure Storage Gateway. Note: Updating the Oracle Cloud Infrastructure Storage Gateway to version 1.4 or later will address these vulnerabilities. Download the latest version of Oracle Cloud Infrastructure Storage Gateway from <a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\">here. Refer to Document <a href=\"https://support.oracle.com/rs?type=doc&id=2768897.1\">2768897.1 for more details. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Cloud Infrastructure Storage Gateway de Oracle Storage Gateway (componente: Management Console).&#xa0;La versión compatible que está afectada es la anterior a la 1.4.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Cloud Infrastructure Storage Gateway.&#xa0;Si bien la vulnerabilidad está en Oracle Cloud Infrastructure Storage Gateway, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Cloud Infrastructure Storage Gateway.&#xa0;Nota: La actualización de Oracle Cloud Infrastructure Storage Gateway a versión 1.4 o posterior solucionará estas vulnerabilidades.&#xa0;Descargue la última versión de Oracle Cloud Infrastructure Storage Gateway desde (a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\")here. Refer to Document (a href=\"https://support.oracle.com/rs?type=doc&amp;id=2768897.1\")2768897.1 para más detalles. CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS: 3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:cloud_infrastructure_storage_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "0A7C7129-2DB9-4423-8998-9C9D50A8F1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2320",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-22T22:15:17.703",
      "lastModified" : "2024-11-21T06:02:52.947",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that is affected is Prior to 1.4. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Cloud Infrastructure Storage Gateway. While the vulnerability is in Oracle Cloud Infrastructure Storage Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Cloud Infrastructure Storage Gateway. Note: Updating the Oracle Cloud Infrastructure Storage Gateway to version 1.4 or later will address these vulnerabilities. Download the latest version of Oracle Cloud Infrastructure Storage Gateway from <a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\">here. Refer to Document <a href=\"https://support.oracle.com/rs?type=doc&id=2768897.1\">2768897.1 for more details. CVSS 3.1 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle Cloud Infrastructure Storage Gateway de Oracle Storage Gateway (componente: Management Console).&#xa0;La versión compatible que está afectada es anterior a la 1.4.&#xa0;Una vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado con acceso a la red por medio de HTTP comprometer a Oracle Cloud Infrastructure Storage Gateway.&#xa0;Si bien la vulnerabilidad está en Oracle Cloud Infrastructure Storage Gateway, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en la toma de control de Oracle Cloud Infrastructure Storage Gateway.&#xa0;Nota: La actualización de Oracle Cloud Infrastructure Storage Gateway a versión 1.4 o posteriores solucionará estas vulnerabilidades.&#xa0;Descargue la última versión de Oracle Cloud Infrastructure Storage Gateway desde (a href=\" https://www.oracle.com/downloads/cloud/oci-storage-gateway-downloads.html\"Mhere. Refer to Document a href=\"https://support.oracle.com/rs?type=doc&amp;id=2768897.1\")2768897.1 para más detalles. CVSS 3.1 Puntuación Base 9.1 (Impactos en la Confidencialidad, Integridad y Disponibilidad). Vector CVSS: (CVSS: 3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:cloud_infrastructure_storage_gateway:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4",
            "matchCriteriaId" : "0A7C7129-2DB9-4423-8998-9C9D50A8F1B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31597",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T00:15:08.283",
      "lastModified" : "2024-11-21T06:05:57.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The xmlhttprequest-ssl package before 1.6.1 for Node.js disables SSL certificate validation by default, because rejectUnauthorized (when the property exists but is undefined) is considered to be false within the https.request function of Node.js. In other words, no certificate is ever rejected."
      }, {
        "lang" : "es",
        "value" : "El paquete xmlhttprequest-ssl versiones anteriores a 1.6.1 para Node.js deshabilita la comprobación del certificado SSL por defecto, porque acceptUnauthorized (cuando la propiedad existe pero no está definida) se considera falso dentro de la función https.request de Node.js.&#xa0;En otras palabras, nunca se rechaza ningún certificado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xmlhttprequest-ssl_project:xmlhttprequest-ssl:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.6.1",
            "matchCriteriaId" : "FBCD5604-E3C3-47BE-B429-6AAB717E7DB8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mjwwit/node-XMLHttpRequest/commit/bf53329b61ca6afc5d28f6b8d2dc2e3ca740a9b2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mjwwit/node-XMLHttpRequest/compare/v1.6.0...1.6.1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://people.kingsds.network/wesgarland/xmlhttprequest-ssl-vuln.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0004/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mjwwit/node-XMLHttpRequest/commit/bf53329b61ca6afc5d28f6b8d2dc2e3ca740a9b2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mjwwit/node-XMLHttpRequest/compare/v1.6.0...1.6.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://people.kingsds.network/wesgarland/xmlhttprequest-ssl-vuln.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31607",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T06:15:07.893",
      "lastModified" : "2024-11-21T06:05:59.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff function (which executes popen unsafely)."
      }, {
        "lang" : "es",
        "value" : "En SaltStack Salt versiones 2016.9 hasta 3002.6, se presenta una vulnerabilidad de inyección de comando en el módulo snapper que permite una escalada local de privilegios en un minion.&#xa0;El ataque requiere que sea creado un archivo con un nombre de ruta respaldado por snapper, y que el maestro llame a la función snapper.diff (que ejecuta popen de manera no segura)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:saltstack:salt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2016.9",
            "versionEndIncluding" : "3002.6",
            "matchCriteriaId" : "4356368B-804F-4201-85FA-BDF1F66DEDD6"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/11/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6BUWUF5VTENNP2ZYZBVFKPSUHLKLUBD5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ACVT7M4YLZRLWWQ6SGRK3C6TOF4FXOXT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LDKMAJXYFHM4USVX3H5V2GCCBGASWUSM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBAHHSGZLEJRCG4DX6J4RBWJAAWH55RQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sec.stealthcopter.com/saltstack-snapper-minion-privledge-escaltion/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202310-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5011",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25382",
      "sourceIdentifier" : "mobile.security@samsung.com",
      "published" : "2021-04-23T15:15:09.197",
      "lastModified" : "2024-11-21T05:54:52.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An improper authorization of using debugging command in Secure Folder prior to SMR Oct-2020 Release 1 allows unauthorized access to contents in Secure Folder via debugging command."
      }, {
        "lang" : "es",
        "value" : "Una autorización inapropiada para usar el comando de depuración en Secure Folder versiones anteriores a SMR Oct-2020 Release 1, permite el acceso no autorizado a los contenidos en Secure Folder por medio del comando de depuración"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "mobile.security@samsung.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.3,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "mobile.security@samsung.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-285"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B578E383-0D77-4AC7-9C81-3F0B8C18E033"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:8.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06BE74B-83F4-41A3-8AD3-2E6248F7B0B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DFAAD08-36DA-4C95-8200-C29FE5B6B854"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D558D965-FA70-4822-A770-419E73BA9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10",
        "source" : "mobile.security@samsung.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.samsungmobile.com/securityUpdate.smsb?year=2020&month=10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26291",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-23T15:15:09.387",
      "lastModified" : "2024-11-21T05:56:01.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Maven will follow repositories that are defined in a dependency’s Project Object Model (pom) which may be surprising to some users, resulting in potential risk if a malicious actor takes over that repository or is able to insert themselves into a position to pretend to be that repository. Maven is changing the default behavior in 3.8.1+ to no longer follow http (non-SSL) repository references by default. More details available in the referenced urls. If you are currently using a repository manager to govern the repositories used by your builds, you are unaffected by the risks present in the legacy behavior, and are unaffected by this vulnerability and change to default behavior. See this link for more information about repository management: https://maven.apache.org/repository-management.html"
      }, {
        "lang" : "es",
        "value" : "Apache Maven seguirá los repositorios que se definen en el Project Object Model (pom) de una dependencia, lo que puede resultar sorprendente para algunos usuarios, resultando en un riesgo potencial si un actor malicioso se hace cargo de ese repositorio o es capaz de insertarse en una posición para fingir ser ese repositorio.&#xa0;Maven está cambiando el comportamiento predeterminado en versiones 3.8.1+ para que ya no siga las referencias del repositorio http (sin SSL) por defecto.&#xa0;Más detalles disponibles en las URL a las que se hace referencia.&#xa0;Si actualmente está utilizando un administrador de repositorios para controlar los repositorios usados por sus compilaciones, no está afectado por los riesgos presentes en el comportamiento heredado y no está afectado por esta vulnerabilidad y cambia al comportamiento predeterminado. Consulte este enlace para mayor información sobre la administración de repositorios: https://maven.apache.org/repository-management.html"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:maven:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.8.1",
            "matchCriteriaId" : "BA089EB2-CBE2-48E0-AC10-5CA3281E41D8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:quarkus:quarkus:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.13.5",
            "matchCriteriaId" : "CDD95A74-029A-48FD-9C34-5ADB1FAB373A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.6.0.0",
            "versionEndIncluding" : "8.0.9.0.0",
            "matchCriteriaId" : "C284573B-3900-4ABB-ABF9-611F31C1778F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0.0",
            "versionEndIncluding" : "8.1.2.0",
            "matchCriteriaId" : "66BC5B9C-9CE0-41D5-A3B2-AE8481697F67"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:23.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01108AF-6B34-46A7-8C20-D83EF131425E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/23/5",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0556ce5db7231025785477739ee416b169d8aff5ee9bac7854d64736%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06db4057b74e0598a412734f693a34a8836ac6f06d16d139e5e1027c%40%3Cdev.maven.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r07a89b32783f73bda6903c1f9aadeb859e5bef0a4daed6d87db8e4a9%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r08a401f8c98a99f68d061fde6e6659d695f28d60fe4f0413bcb355b0%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a5e4ff2a7ca7ad8595d7683afbaeb3b8788ba974681907f97e7dc8e%40%3Cjira.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0d083314aa3934dd4b6e6970d1f6ee50f6eaa9d867deb2cd96788478%40%3Cjira.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r30e9fcba679d164158cc26236704c351954909c18cb2485d11038aa6%40%3Cdev.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r340e75c9bb6e8661b89e1cf2c52f4638a18312e57bd884722bc28f52%40%3Cjira.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r39fa6ec4b7e912d3e04ea68efd23e554ec9c8efa2c96f5b45104fc61%40%3Cjira.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3f0450dcab7e63b5f233ccfbc6fca5f1867a75c8aa2493ea82732381%40%3Cdev.jena.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r52c6cda14dc6315dc79e72d30109f4589e9c6300ef6dc1a019da32d4%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r53cd5de57aaa126038c5301d8f518f3defab3c5b1c7e17c97bad08d8%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5ae6aaa8a2ce86145225c3516bb45d315c0454e3765d651527e5df8a%40%3Ccommits.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r71bc13669be84c2ff45b74a67929bc2da905c152e12a39b406e3c2a0%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7212b874e575e59d648980d91bc22e684906aee9b211ab92da9591f5%40%3Cdev.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r74329c671df713f61ae4620ee2452a0443ccad7f33c60e8ed7d21ff9%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r78fb6d2cf0ca332cfa43abd4471e75fa6c517ed9cdfcb950bff48d40%40%3Cjira.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86aebd0387ae19b740b3eb28bad83fe6aceca0d6257eaa810a6e0002%40%3Ccommits.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86e1c81e03f441855f127980e9b3d41939d04a7caea2b7ab718e2288%40%3Cjira.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r96cc126d3ee9aa42af9d3bb4baa94828b0a5f656584a50dcc594125f%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fdec9f9b22c38c2442f00%40%3Cusers.maven.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fdec9f9b22c38c2442f00%40%3Cusers.maven.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ra88a0eba7f84658cefcecc0143fd8bbad52c229ee5dfcbfdde7b6457%40%3Cdev.jena.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra9d984eccfd2ae7726671e025f0296bf03786e5cdf872138110ac29b%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc7ae2530063d1cd1cf8e9fa130d10940760f927168d4063d23b8cd0a%40%3Ccommits.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd6c3a36f1dbc130da1b89d0f320db7040de71661a512695a8d513ac%40%3Cdev.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re75f8b3dbc5faa1640908f87e644d373e00f8b4e6ba3e2ba4bd2c80b%40%3Ccommits.druid.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/red3bf6cbfd99e36b0c0a4fa1cea1eef1eb300c6bd8f372f497341265%40%3Cdev.kafka.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2%40%3Cissues.karaf.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594%40%3Cdev.myfaces.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "security@apache.org"
      }, {
        "url" : "https://www.whitesourcesoftware.com/resources/blog/maven-security-vulnerability-cve-2021-26291/",
        "source" : "security@apache.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/23/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r0556ce5db7231025785477739ee416b169d8aff5ee9bac7854d64736%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r06db4057b74e0598a412734f693a34a8836ac6f06d16d139e5e1027c%40%3Cdev.maven.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r07a89b32783f73bda6903c1f9aadeb859e5bef0a4daed6d87db8e4a9%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r08a401f8c98a99f68d061fde6e6659d695f28d60fe4f0413bcb355b0%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0a5e4ff2a7ca7ad8595d7683afbaeb3b8788ba974681907f97e7dc8e%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r0d083314aa3934dd4b6e6970d1f6ee50f6eaa9d867deb2cd96788478%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r167dbc42ef7c59802c2ca1ac14735ef9cf687c25208229993d6206fe%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2721aba31a8562639c4b937150897e24f78f747cdbda8641c0f659fe%40%3Cusers.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r2ddabd06d94b60cfb0141e4abb23201c628ab925e30742f61a04d013%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r30a139c165b3da6e0d5536434ab1550534011b1fdfcd2f5d95892c5b%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r30e9fcba679d164158cc26236704c351954909c18cb2485d11038aa6%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r340e75c9bb6e8661b89e1cf2c52f4638a18312e57bd884722bc28f52%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r39fa6ec4b7e912d3e04ea68efd23e554ec9c8efa2c96f5b45104fc61%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r3f0450dcab7e63b5f233ccfbc6fca5f1867a75c8aa2493ea82732381%40%3Cdev.jena.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r4e1619cfefcd031fac62064a3858f5c9229eef907bd5d8ef14c594fc%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r52c6cda14dc6315dc79e72d30109f4589e9c6300ef6dc1a019da32d4%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r53cd5de57aaa126038c5301d8f518f3defab3c5b1c7e17c97bad08d8%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r5ae6aaa8a2ce86145225c3516bb45d315c0454e3765d651527e5df8a%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r71bc13669be84c2ff45b74a67929bc2da905c152e12a39b406e3c2a0%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r7212b874e575e59d648980d91bc22e684906aee9b211ab92da9591f5%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r74329c671df713f61ae4620ee2452a0443ccad7f33c60e8ed7d21ff9%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r77af3ac7c3bfbd5454546e13faf7aec21d627bdcf36c9ca240436b94%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r78fb6d2cf0ca332cfa43abd4471e75fa6c517ed9cdfcb950bff48d40%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86aebd0387ae19b740b3eb28bad83fe6aceca0d6257eaa810a6e0002%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r86e1c81e03f441855f127980e9b3d41939d04a7caea2b7ab718e2288%40%3Cjira.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r96cc126d3ee9aa42af9d3bb4baa94828b0a5f656584a50dcc594125f%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fdec9f9b22c38c2442f00%40%3Cusers.maven.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r9a027668558264c4897633e66bcb7784099fdec9f9b22c38c2442f00%40%3Cusers.maven.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/ra88a0eba7f84658cefcecc0143fd8bbad52c229ee5dfcbfdde7b6457%40%3Cdev.jena.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra9d984eccfd2ae7726671e025f0296bf03786e5cdf872138110ac29b%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc7ae2530063d1cd1cf8e9fa130d10940760f927168d4063d23b8cd0a%40%3Ccommits.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rc9e441c1576bdc4375d32526d5cf457226928e9c87b9f54ded26271c%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd37d9214b08067a2e8f2b5b4fd123a1f8cb6008698d11ef44028c21%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rcd6c3a36f1dbc130da1b89d0f320db7040de71661a512695a8d513ac%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rdcbad6d8ce72c79827ed8c635f9a62dd919bb21c94a0b64cab2efc31%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re75f8b3dbc5faa1640908f87e644d373e00f8b4e6ba3e2ba4bd2c80b%40%3Ccommits.druid.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/red3bf6cbfd99e36b0c0a4fa1cea1eef1eb300c6bd8f372f497341265%40%3Cdev.kafka.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf9abfc0223747a56694825c050cc6b66627a293a32ea926b3de22402%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfc0db1f3c375087e69a239f9284ded72d04fbb55849eadde58fa9dc2%40%3Cissues.karaf.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rfc27e2727a20a574f39273e0432aa97486a332f9b3068f6ac1346594%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.whitesourcesoftware.com/resources/blog/maven-security-vulnerability-cve-2021-26291/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26908",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2021-04-23T16:15:08.527",
      "lastModified" : "2024-11-21T05:57:00.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Automox Agent prior to version 31 logs potentially sensitive information in local log files, which could be used by a locally-authenticated attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent."
      }, {
        "lang" : "es",
        "value" : "Automox Agent anterior a versión 31, registra información potencialmente confidencial en archivos de registro locales, que podrían ser usados por un atacante autenticado localmente para subvertir el programa de seguridad de una organización.&#xa0;Desde entonces, el problema ha sido corregido en versión 31 de Automox Agent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automox:automox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31",
            "matchCriteriaId" : "F4CFC070-2E9F-4D41-BFF2-B85C76916214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.automox.com/t/cve-2021-26908-and-cve-201-26909-automox-agent-information-disclosure-vulnerabilities-fixed/1955",
        "source" : "cve@rapid7.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2021/04/13/cve-2021-26908-and-cve-2021-26909-automox-agent-information-disclosure-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.automox.com/t/cve-2021-26908-and-cve-201-26909-automox-agent-information-disclosure-vulnerabilities-fixed/1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2021/04/13/cve-2021-26908-and-cve-2021-26909-automox-agent-information-disclosure-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26909",
      "sourceIdentifier" : "cve@rapid7.com",
      "published" : "2021-04-23T16:15:08.563",
      "lastModified" : "2024-11-21T05:57:01.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Automox Agent prior to version 31 uses an insufficiently protected S3 bucket endpoint for storing sensitive files, which could be brute-forced by an attacker to subvert an organization's security program. The issue has since been fixed in version 31 of the Automox Agent."
      }, {
        "lang" : "es",
        "value" : "Automox Agent anterior a versión 31, usa un endpoint de bucket S3 insuficientemente protegido para almacenar archivos confidenciales, que podrían ser forzados por un atacante para subvertir el programa de seguridad de una organización.&#xa0;Desde entonces, el problema ha sido corregido en versión 31 de Automox Agent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@rapid7.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve@rapid7.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-330"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:automox:automox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "31",
            "matchCriteriaId" : "F4CFC070-2E9F-4D41-BFF2-B85C76916214"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.automox.com/t/cve-2021-26908-and-cve-201-26909-automox-agent-information-disclosure-vulnerabilities-fixed/1955",
        "source" : "cve@rapid7.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2021/04/13/cve-2021-26908-and-cve-2021-26909-automox-agent-information-disclosure-fixed/",
        "source" : "cve@rapid7.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.automox.com/t/cve-2021-26908-and-cve-201-26909-automox-agent-information-disclosure-vulnerabilities-fixed/1955",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.rapid7.com/blog/post/2021/04/13/cve-2021-26908-and-cve-2021-26909-automox-agent-information-disclosure-fixed/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31403",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T16:15:08.600",
      "lastModified" : "2024-11-21T06:05:35.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:vaadin-server versions 7.0.0 through 7.7.23 (Vaadin 7.0.0 through 7.7.23), and 8.0.0 through 8.12.2 (Vaadin 8.0.0 through 8.12.2) allows attacker to guess a security token via timing attack"
      }, {
        "lang" : "es",
        "value" : "La comparación non-constant-time de tokens CSRF en el controlador de peticiones UIDL en com.vaadin:vaadin-server versiones 7.0.0 hasta 7.7.23 (Vaadin versiones 7.0.0 hasta 7.7.23) y versiones 8.0.0 hasta 8.12.2 (Vaadin versiones 8.0.0 hasta 8.12.2), permite al atacante adivinar un token de seguridad por medio de un ataque de sincronización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.7.24",
            "matchCriteriaId" : "7C38D198-2ABE-4074-A889-282E7938E76D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.12.3",
            "matchCriteriaId" : "EC04E83C-6C04-4BAD-AF0F-4B91F067B65C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/framework/pull/12188",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/framework/pull/12190",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31403",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/framework/pull/12188",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/framework/pull/12190",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31404",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T16:15:08.647",
      "lastModified" : "2024-11-21T06:05:35.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.13 (Vaadin 10.0.0 through 10.0.16), 1.1.0 prior to 2.0.0 (Vaadin 11 prior to 14), 2.0.0 through 2.4.6 (Vaadin 14.0.0 through 14.4.6), 3.0.0 prior to 5.0.0 (Vaadin 15 prior to 18), and 5.0.0 through 5.0.2 (Vaadin 18.0.0 through 18.0.5) allows attacker to guess a security token via timing attack."
      }, {
        "lang" : "es",
        "value" : "La comparación non-constant-time de tokens CSRF en el manejador de peticiones UIDL en com.vaadin:flow-server versiones 1.0.0 hasta 1.0.13 (Vaadin versiones 10.0.0 hasta 10.0.16), versiones 1.1.0 anteriores a 2.0.0 (Vaadin versiones 11 anteriores a 14), versiones 2.0.0 hasta 2.4.6 (Vaadin versiones 14.0.0 hasta 14.4.6), versiones 3.0.0 anteriores a 5.0.0 (Vaadin versiones 15 anteriores a 18) y versiones 5.0.0 hasta 5.0.2 (Vaadin versiones 18.0.0 hasta 18.0.5), permite al atacante adivinar un token de seguridad por medio de un ataque de sincronización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.0.14",
            "matchCriteriaId" : "8B6B73DE-1089-401A-8E6E-31938A277F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "EA762C83-724A-4D14-B4C4-9824799B2999"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.4.7",
            "matchCriteriaId" : "409F92E2-6634-4596-BD66-FBD46E45E658"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "5.0.0",
            "matchCriteriaId" : "796C0FAD-172F-4186-847E-5312F3664734"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "5.0.3",
            "matchCriteriaId" : "53839127-7CF7-4BDC-BC21-29DF165B2BB0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.17",
            "matchCriteriaId" : "18A7C1CA-ED82-43FD-A3FC-68CC66D17B96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "14.0.0",
            "matchCriteriaId" : "06E47D63-52A7-4B6A-B90F-7692D854DECC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.0",
            "versionEndExcluding" : "14.4.7",
            "matchCriteriaId" : "C13F08D0-2AB9-4B27-B023-59B9F43626F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "17.0.0",
            "matchCriteriaId" : "2D0B97C7-D17B-4006-AFE6-707F1290E39E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "18.0.0",
            "versionEndExcluding" : "18.0.6",
            "matchCriteriaId" : "C06D13A9-529D-4523-BA83-AC217FF63808"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/flow/pull/9875",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31404",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/9875",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31404",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31405",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T16:15:08.687",
      "lastModified" : "2024-11-21T06:05:35.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unsafe validation RegEx in EmailField component in com.vaadin:vaadin-text-field-flow versions 2.0.4 through 2.3.2 (Vaadin 14.0.6 through 14.4.3), and 3.0.0 through 4.0.2 (Vaadin 15.0.0 through 17.0.10) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses."
      }, {
        "lang" : "es",
        "value" : "Una comprobación no segura de RegEx en el componente EmailField en com.vaadin:vaadin-text-field-flow versiones 2.0.4 hasta 2.3.2 (Vaadin versiones 14.0.6 hasta 14.4.3) y versiones 3.0.0 hasta 4.0.2 (Vaadin versiones 15.0.0 hasta 17.0.10), permite a atacantes causar un consumo de recursos no controlado mediante el envío de direcciones de correo electrónico maliciosas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.4",
            "versionEndExcluding" : "2.3.3",
            "matchCriteriaId" : "74EA30C3-4C81-4C39-8EB8-75BB8A3BF1C9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "4.0.3",
            "matchCriteriaId" : "7F972BCA-7736-42A8-A676-656183AB1096"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.6",
            "versionEndExcluding" : "14.4.4",
            "matchCriteriaId" : "78D36620-0467-4D06-9228-B1F21CD7CC45"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "17.0.11",
            "matchCriteriaId" : "2C540D0C-0B64-49FB-87B7-9D856C31154F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/flow-components/pull/442",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31405",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow-components/pull/442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31405",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31406",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T16:15:08.727",
      "lastModified" : "2024-11-21T06:05:35.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Non-constant-time comparison of CSRF tokens in endpoint request handler in com.vaadin:flow-server versions 3.0.0 through 5.0.3 (Vaadin 15.0.0 through 18.0.6), and com.vaadin:fusion-endpoint version 6.0.0 (Vaadin 19.0.0) allows attacker to guess a security token for Fusion endpoints via timing attack."
      }, {
        "lang" : "es",
        "value" : "La comparación non-constant-time de tokens CSRF en el manejador de peticiones de endpoint en com.vaadin:flow-server versiones 3.0.0 hasta 5.0.3 (Vaadin versiones 15.0.0 hasta 18.0.6) y com.vaadin:fusion-endpoint versión 6.0.0 (Vaadin versión 19.0.0), permite al atacante adivinar un token de seguridad para los endpoints de Fusion por medio de un ataque de sincronización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-208"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "5.0.4",
            "matchCriteriaId" : "4A738EE8-ED33-4DF3-9B27-4BEDA32DAF13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:6.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "E257F9BA-A8BF-419A-B7C9-49815A837DB3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "18.0.7",
            "matchCriteriaId" : "56B0887F-B5F8-49C2-8D19-C72F99C053D0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:19.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B26A2E69-D944-4470-A8C3-C5E80DDECFF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/flow/pull/10157",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31406",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/10157",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31406",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31407",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T16:15:08.767",
      "lastModified" : "2024-11-21T06:05:36.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in OSGi integration in com.vaadin:flow-server versions 1.2.0 through 2.4.7 (Vaadin 12.0.0 through 14.4.9), and 6.0.0 through 6.0.1 (Vaadin 19.0.0) allows attacker to access application classes and resources on the server via crafted HTTP request."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la integración de OSGi en com.vaadin:flow-server versiones 1.2.0 hasta 2.4.7 (Vaadin versiones 12.0.0 hasta 14.4.9) y versiones 6.0.0 hasta 6.0.1 (Vaadin versión 19.0.0), permite al atacante acceder a las clases y recursos de aplicación en el servidor por medio de una petición HTTP diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-402"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.2.0",
            "versionEndExcluding" : "2.4.8",
            "matchCriteriaId" : "4E3DE3D6-5F47-4347-AD2C-B6ACCE0AE0A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.2",
            "matchCriteriaId" : "BCA508EE-E259-4B03-9427-71B87478417C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0.0",
            "versionEndExcluding" : "14.4.10",
            "matchCriteriaId" : "86C5C2D8-20E4-47F1-907B-5A8439285777"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:19.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B26A2E69-D944-4470-A8C3-C5E80DDECFF5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/flow/pull/10229",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/10269",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/osgi/issues/50",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31407",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/10229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/10269",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/osgi/issues/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31407",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22893",
      "sourceIdentifier" : "support@hackerone.com",
      "published" : "2021-04-23T17:15:08.127",
      "lastModified" : "2025-12-18T02:00:02.347",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Pulse Connect Secure 9.0R3/9.1R1 and higher is vulnerable to an authentication bypass vulnerability exposed by the Windows File Share Browser and Pulse Secure Collaboration features of Pulse Connect Secure that can allow an unauthenticated user to perform remote arbitrary code execution on the Pulse Connect Secure gateway. This vulnerability has been exploited in the wild."
      }, {
        "lang" : "es",
        "value" : "Pulse Connect Secure versiones 9.0R3/9.1R1 y posteriores, es susceptible a una vulnerabilidad de omisión de autenticación expuesta por las funciones de Windows File Share Browser y Pulse Secure Collaboration de Pulse Connect Secure, que pueden permitir a un usuario no autenticado llevar a cabo una ejecución de código remoto arbitrario en Pulse Connect Secure gateway.&#xa0;Esta vulnerabilidad ha sido explotado en el wild"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2022-05-03",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Ivanti Pulse Connect Secure Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "support@hackerone.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3818B543-3415-4E27-8DAD-6BA9D3D9A1A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "D47D09A8-4AC4-4CD9-B648-5F26453E2E1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "59331DC5-FF5F-4BB3-905E-5A4A621F86ED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r2.1:*:*:*:*:*:*",
            "matchCriteriaId" : "6A708C3F-9050-4475-95B3-4785D3E2CB69"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "52851AAA-88FB-40BC-B41A-B821F6BA9F79"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r3.1:*:*:*:*:*:*",
            "matchCriteriaId" : "F05DC11E-7C41-450B-A2BF-603E9252BB40"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r3.2:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA976D9-A330-475E-B8C0-09EF3E08F18D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r3.3:*:*:*:*:*:*",
            "matchCriteriaId" : "59F4A6F7-A6D4-4517-A316-7C7C002A9ED3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r3.5:*:*:*:*:*:*",
            "matchCriteriaId" : "702094B0-2E5C-4A16-A8B0-F0EAF78E4ECB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "A369AE09-17E4-4541-A8E1-A2F4A1398EE7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r4.1:*:*:*:*:*:*",
            "matchCriteriaId" : "24EF2F1A-8140-4FDB-8AF4-309AFAF998E1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r5.0:*:*:*:*:*:*",
            "matchCriteriaId" : "4755BC2C-A96E-47AF-9D7C-E8D44B31F10B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.0:r6.0:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6E8A0C-192B-4F51-86AA-FC2B85657632"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:*",
            "matchCriteriaId" : "4F450898-0B06-4073-9B76-BF22F68BD14F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*",
            "matchCriteriaId" : "4B21C181-DC49-4EBD-9932-DBB337151FF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:*",
            "matchCriteriaId" : "5AA4B39F-2FB9-4752-B1F1-18812B0990B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*",
            "matchCriteriaId" : "232BAB6C-D318-4F80-8F49-4E700C21F535"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*",
            "matchCriteriaId" : "ABD840BF-944E-4F4C-96DC-0256286338F6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*",
            "matchCriteriaId" : "A1995F34-AE75-47C4-9A9D-DBB1D3E130E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*",
            "matchCriteriaId" : "366EF5B8-0233-49B8-806A-E54F60410ADE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*",
            "matchCriteriaId" : "4FEFC4B1-7350-46F9-80C1-42F5AE06142F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7A6D62-6576-4713-9BF4-11068A72E8B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*",
            "matchCriteriaId" : "843BC1B9-50CC-4F8F-A454-A0CEC6E92290"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*",
            "matchCriteriaId" : "D5355372-03EA-46D7-9104-A2785C29B664"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*",
            "matchCriteriaId" : "3DE32A0C-8944-4F51-A286-266055CA4B2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*",
            "matchCriteriaId" : "0349A0CC-A372-4E51-899E-D7BA67876F4B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*",
            "matchCriteriaId" : "93D1A098-BD77-4A7B-9070-A764FB435981"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCC2D7B-F835-45EC-A316-2F0C5F2CF565"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*",
            "matchCriteriaId" : "AD812596-C77C-4129-982F-C22A25B52126"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*",
            "matchCriteriaId" : "9FA0B20D-3FA1-42AE-BDC5-93D8A182927C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*",
            "matchCriteriaId" : "BFFA0B02-7F6D-4434-B1E7-EB8520FD68A0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*",
            "matchCriteriaId" : "DFE8FA87-9622-4D5B-99C7-D8EE230C0AA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*",
            "matchCriteriaId" : "07AB853D-5A3F-4142-8417-1C9FB729A89E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*",
            "matchCriteriaId" : "16DAA769-8F0D-4C54-A8D9-9902995605B0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*",
            "matchCriteriaId" : "B2C10C89-1DBC-4E91-BD28-D5097B589CA9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*",
            "matchCriteriaId" : "F54753D0-6275-4F82-B874-55438D2983B3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.pulsesecure.net/pulse-connect-secure-security-update/",
        "source" : "support@hackerone.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.cert.org/vuls/id/213092",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/",
        "source" : "support@hackerone.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html",
        "source" : "support@hackerone.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.pulsesecure.net/pulse-connect-secure-security-update/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kb.cert.org/vuls/id/213092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://kb.pulsesecure.net/articles/Pulse_Security_Advisories/SA44784/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://www.fireeye.com/blog/threat-research/2021/04/suspected-apt-actors-leverage-bypass-techniques-pulse-secure-zero-day.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/213092",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "US Government Resource" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22893",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31408",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T17:15:08.260",
      "lastModified" : "2024-11-21T06:05:36.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Authentication.logout() helper in com.vaadin:flow-client versions 5.0.0 prior to 6.0.0 (Vaadin 18), and 6.0.0 through 6.0.4 (Vaadin 19.0.0 through 19.0.3) uses incorrect HTTP method, which, in combination with Spring Security CSRF protection, allows local attackers to access Fusion endpoints after the user attempted to log out."
      }, {
        "lang" : "es",
        "value" : "El asistente Authentication.logout() en com.vaadin:flow-client versiones  5.0.0 anteriores a 6.0.0 (Vaadin 18) y versiones 6.0.0 hasta 6.0.4 (versiones Vaadin 19.0.0 hasta 19.0.3) usan un método HTTP incorrecto , que, en combinación con la protección CSRF de Spring Security, permite a atacantes locales acceder a endpoints de Fusion después de que el usuario intenta cerrar la sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndExcluding" : "6.0.0",
            "matchCriteriaId" : "138C0A40-EC8F-4F6F-B907-1F5282B83958"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.5",
            "matchCriteriaId" : "B9CCDECF-655E-48E5-ADEC-F5189C6E043D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.0.0",
            "versionEndExcluding" : "19.0.4",
            "matchCriteriaId" : "74A5FA0C-C1AE-496E-8601-A9CC193F750E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:18.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B0C90C81-A26F-4686-BC0C-6D86C3620F5C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/flow/pull/10577",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31408",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/10577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31408",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31410",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-04-23T17:15:08.297",
      "lastModified" : "2024-11-21T06:05:36.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Overly relaxed configuration of frontend resources server in Vaadin Designer versions 4.3.0 through 4.6.3 allows remote attackers to access project sources via crafted HTTP request."
      }, {
        "lang" : "es",
        "value" : "Una configuración demasiado relajada del servidor de recursos frontend en Vaadin Designer versiones 4.3.0 hasta 4.6.3, permite a atacantes remotos acceder a fuentes del proyecto por medio de una petición HTTP diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-402"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:designer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.3.0",
            "versionEndExcluding" : "4.6.4",
            "matchCriteriaId" : "E732F75A-8B10-4FB7-9086-C043F9249875"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://vaadin.com/security/cve-2021-31410",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31410",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31539",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T17:15:08.333",
      "lastModified" : "2024-11-21T06:05:52.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wowza Streaming Engine before 4.8.8.01 (in a default installation) has cleartext passwords stored in the conf/admin.password file. A regular local user is able to read usernames and passwords."
      }, {
        "lang" : "es",
        "value" : "Wowza Streaming Engine versiones hasta 4.8.8.01 (en una instalación predeterminada) presenta contraseñas de texto sin cifrar almacenadas en el archivo conf/admin.password. Un usuario local habitual puede leer nombres de usuario y contraseñas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.8.8.01",
            "matchCriteriaId" : "E88392F5-67D3-4057-982D-AF3CD496E3AB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wowza.com/docs/wowza-streaming-engine-4-8-8-01-release-notes#breaking",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wowza.com/products/streaming-engine",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wowza.com/docs/wowza-streaming-engine-4-8-8-01-release-notes#breaking",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wowza.com/products/streaming-engine",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31540",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T17:15:08.363",
      "lastModified" : "2024-11-21T06:05:52.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Wowza Streaming Engine through 4.8.5 (in a default installation) has incorrect file permissions of configuration files in the conf/ directory. A regular local user is able to read and write to all the configuration files, e.g., modify the application server configuration."
      }, {
        "lang" : "es",
        "value" : "Wowza Streaming Engine versiones hasta 4.8.5 (en una instalación predeterminada) presenta permisos de archivo incorrectos de archivos de configuración en el directorio conf/.&#xa0;Un usuario local habitual puede leer y escribir en todos los archivos de configuración, por ejemplo, modificar la configuración del servidor de aplicaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wowza:streaming_engine:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.8.5",
            "matchCriteriaId" : "5E355AE9-6896-4286-85A6-D6A48774FF32"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wowza.com/docs/wowza-streaming-engine-4-8-12-release-notes",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wowza.com/products/streaming-engine",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.gruppotim.it/redteam",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wowza.com/docs/wowza-streaming-engine-4-8-12-release-notes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.wowza.com/products/streaming-engine",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20084",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T18:15:08.037",
      "lastModified" : "2024-11-21T05:45:53.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-sparkle 1.5.2-beta allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes(\"Prototype Pollution\") en jquery-sparkle versión 1.5.2-beta, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jquery-sparkle_project:jquery-sparkle:1.5.2:beta:*:*:*:*:*:*",
            "matchCriteriaId" : "D69C234E-5A3D-462E-B31D-C06845633E4C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-sparkle.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-sparkle.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20087",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T18:15:08.067",
      "lastModified" : "2025-08-14T21:15:26.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-deparam 0.5.1 allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes (\"Prototype Pollution\") en jquery-deparam versión 0.5.1, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:acemetrix:jquery-deparam:0.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "688E083F-44F1-48F2-8F52-CAE0DFA683A2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-deparam.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-deparam.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/RetireJS/retire.js/blob/6da45fcb6a3425e55ee8181b2ac35168879bf086/repository/jsrepository-master.json#L824-L842",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20088",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T18:15:08.097",
      "lastModified" : "2024-11-21T05:45:54.243",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in mootools-more 1.6.0 allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes (\"Prototype Pollution\") en mootools-more versión 1.6.0, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mootools:mootools-more:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2D4F294-BD54-401F-99F2-F245C3841E8E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/mootools-more.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/mootools-more.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22204",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-23T18:15:08.127",
      "lastModified" : "2025-11-03T18:58:34.113",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image"
      }, {
        "lang" : "es",
        "value" : "Una neutralización inapropiada de los datos del usuario en el formato de archivo DjVu en ExifTool versiones 7.44 y posteriores, permite una ejecución de código arbitrario cuando se analiza la imagen maliciosa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-17",
      "cisaActionDue" : "2021-12-01",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "ExifTool Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiftool_project:exiftool:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.44",
            "versionEndExcluding" : "12.24",
            "matchCriteriaId" : "9C18C58A-4D97-41AC-A2E6-5983D3376107"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162558/ExifTool-DjVu-ANT-Perl-Injection.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167038/ExifTool-12.23-Arbitrary-Code-Execution.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/09/1",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/5",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22204.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1154542",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00018.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDKDLJLBTBBR66OOPXSXCG2PQRM5KCZL/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F6UOBPU3LSHAPRRJNISNVXZ5DSUIALLV/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4RF6PJCJ6NQOVJJJF6HN6BORUQVIXY6/",
        "source" : "cve@gitlab.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4910",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162558/ExifTool-DjVu-ANT-Perl-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/167038/ExifTool-12.23-Arbitrary-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/09/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/10/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/exiftool/exiftool/commit/cf0f4e7dcd024ca99615bfd1102a841a25dde031#diff-fa0d652d10dbcd246e6b1df16c1e992931d3bb717a7e36157596b76bdadb3800",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22204.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://hackerone.com/reports/1154542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DDKDLJLBTBBR66OOPXSXCG2PQRM5KCZL/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/F6UOBPU3LSHAPRRJNISNVXZ5DSUIALLV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U4RF6PJCJ6NQOVJJJF6HN6BORUQVIXY6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4910",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22204",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22205",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-23T18:15:08.167",
      "lastModified" : "2025-10-24T14:46:35.853",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de 11.9.&#xa0;GitLab no estaba comprobado apropiadamente archivos de imagen que fueron pasados a un analizador de archivos, lo que resultó en una ejecución de comando remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "GitLab Community and Enterprise Editions Remote Code Execution Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.9.0",
            "versionEndExcluding" : "13.8.8",
            "matchCriteriaId" : "01EAFA19-205A-4512-9B97-CAE6C5C9E150"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.9.0",
            "versionEndExcluding" : "13.8.8",
            "matchCriteriaId" : "E50A00D3-A0CA-4A2C-9863-DF3FDD03598F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.6",
            "matchCriteriaId" : "2A6892FA-6192-48DE-B3A6-E3992A95487D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.9.0",
            "versionEndExcluding" : "13.9.6",
            "matchCriteriaId" : "C38714A5-8AE4-432E-B67B-99F393E1D566"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.3",
            "matchCriteriaId" : "AD03F460-6E1E-4504-B924-D416AF98744B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.3",
            "matchCriteriaId" : "58904C4B-E763-4870-921D-65D6A7F6A0AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22205.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/327121",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1154542",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164768/GitLab-Unauthenticated-Remote-ExifTool-Command-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164994/GitLab-13.10.2-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22205.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/327121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/1154542",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-22205",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22207",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-04-23T18:15:08.200",
      "lastModified" : "2024-11-21T05:49:42.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Excessive memory consumption in MS-WSP dissector in Wireshark 3.4.0 to 3.4.4 and 3.2.0 to 3.2.12 allows denial of service via packet injection or crafted capture file"
      }, {
        "lang" : "es",
        "value" : "Un consumo excesivo de la memoria en el disector MS-WSP en Wireshark versiones 3.4.0 hasta 3.4.4 y versiones 3.2.0 hasta 3.2.12, permite una denegación de servicio por medio de una inyección de paquetes o archivo de captura diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2.0",
            "versionEndIncluding" : "3.2.12",
            "matchCriteriaId" : "BBBB9FD4-A2EC-45BE-9DA4-A3ABE4AA152F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wireshark:wireshark:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.4.0",
            "versionEndIncluding" : "3.4.4",
            "matchCriteriaId" : "A65FEEB5-C609-4990-A5F8-546DE637555C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA6FEEC2-9F11-4643-8827-749718254FED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22207.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17331",
        "source" : "cve@gitlab.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIWWO27HV4HUKXV6NH6ULHCRAQB26DMD/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NL7ZTMMWIEPHHFK3ONRKATWE7CLIGLFD/",
        "source" : "cve@gitlab.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5019",
        "source" : "cve@gitlab.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-04.html",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22207.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/wireshark/wireshark/-/issues/17331",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/12/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GIWWO27HV4HUKXV6NH6ULHCRAQB26DMD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NL7ZTMMWIEPHHFK3ONRKATWE7CLIGLFD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-5019",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wireshark.org/security/wnpa-sec-2021-04.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22678",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-23T18:15:08.233",
      "lastModified" : "2024-11-21T05:50:27.733",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cscape (All versions prior to 9.90 SP4) lacks proper validation of user-supplied data when parsing project files. This could lead to memory corruption. An attacker could leverage this vulnerability to execute code in the context of the current process."
      }, {
        "lang" : "es",
        "value" : "Cscape (todas las versiones anteriores a 9.90 SP4) carece de una comprobación apropiada de datos suministrados por el usuario cuando se analizan archivos del proyecto.&#xa0;Esto podría causar una corrupción de la memoria.&#xa0;Un atacante podría aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.90",
            "matchCriteriaId" : "EE2DC26D-983D-42DF-A903-1AFC1430EB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F3037FE7-0230-48F0-8665-3F63F4D57AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "419F775A-9EC9-4C78-9834-D241D18E67AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A20012C0-21A9-42BD-AF6A-CC193A3631FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D62ADB7C-09CC-4A36-BD7C-235029100510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22682",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-23T18:15:08.267",
      "lastModified" : "2024-11-21T05:50:28.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cscape (All versions prior to 9.90 SP4) is configured by default to be installed for all users, which allows full permissions, including read/write access. This may allow unprivileged users to modify the binaries and configuration files and lead to local privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Cscape (todas las versiones anteriores a 9.90 SP4) está configurado por defecto para ser instalado para todos los usuarios, lo que permite permisos completos, incluyendo el acceso de lectura y escritura.&#xa0;Esto puede permitir a usuarios sin privilegios modificar los archivos binarios y de configuración y conllevar a una escalada de privilegios local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.90",
            "matchCriteriaId" : "EE2DC26D-983D-42DF-A903-1AFC1430EB07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:-:*:*:*:*:*:*",
            "matchCriteriaId" : "F3037FE7-0230-48F0-8665-3F63F4D57AFF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:sp1:*:*:*:*:*:*",
            "matchCriteriaId" : "419F775A-9EC9-4C78-9834-D241D18E67AE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:sp2:*:*:*:*:*:*",
            "matchCriteriaId" : "A20012C0-21A9-42BD-AF6A-CC193A3631FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hornerautomation:cscape:9.90:sp3:*:*:*:*:*:*",
            "matchCriteriaId" : "D62ADB7C-09CC-4A36-BD7C-235029100510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-112-01",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29469",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-23T18:15:08.303",
      "lastModified" : "2024-11-21T06:01:10.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Node-redis is a Node.js Redis client. Before version 3.1.1, when a client is in monitoring mode, the regex begin used to detected monitor messages could cause exponential backtracking on some strings. This issue could lead to a denial of service. The issue is patched in version 3.1.1."
      }, {
        "lang" : "es",
        "value" : "Node-redis es un cliente de Node.js Redis.&#xa0;versiones anteriores a 3.1.1, cuando un cliente está en modo de monitoreo, la expresión regular que comienza a usarse para detectar mensajes de monitoreo podría causar un retroceso exponencial en algunas cadenas.&#xa0;Este problema podría conllevar a una denegación de servicio.&#xa0;El problema está parcheado en versión 3.1.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redis.js:redis:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "391FC3B2-DDF4-414D-B6B1-FBA70A87DEEE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NodeRedis/node-redis/releases/tag/v3.1.1",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NodeRedis/node-redis/security/advisories/GHSA-35q2-47q7-3pc3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0010/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NodeRedis/node-redis/commit/2d11b6dc9b9774464a91fb4b448bad8bf699629e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NodeRedis/node-redis/releases/tag/v3.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/NodeRedis/node-redis/security/advisories/GHSA-35q2-47q7-3pc3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0010/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20083",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T19:15:09.163",
      "lastModified" : "2024-11-21T05:45:53.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-plugin-query-object 2.2.3 allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes (\"Prototype Pollution\") en jquery-plugin-query-object versión 2.2.3, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jquery-plugin-query-object_project:jquery-plugin-query-object:2.2.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2ADE6D8-C532-4BA8-84CB-62E7C3500D61"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/166299/WordPress-Core-5.9.0-5.9.1-Cross-Site-Scripting.html",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-query-object.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7CR6VGITIB2TXXZ6B5QRRWPU5S4BXQPD/",
        "source" : "vulnreport@tenable.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJX6NVXSRN3RX3YUVEJQ4WUTQSDL3DSR/",
        "source" : "vulnreport@tenable.com"
      }, {
        "url" : "http://packetstormsecurity.com/files/166299/WordPress-Core-5.9.0-5.9.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-query-object.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7CR6VGITIB2TXXZ6B5QRRWPU5S4BXQPD/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IJX6NVXSRN3RX3YUVEJQ4WUTQSDL3DSR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20085",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T19:15:10.647",
      "lastModified" : "2024-11-21T05:45:53.930",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in backbone-query-parameters 0.4.0 allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes (\"Prototype Pollution\") en backbone-query-parameters versión 0.4.0, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:backbone-query-parameters_project:backbone-query-parameters:0.4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C94CC9-D33F-443A-B618-85B140CD291D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/backbone-qp.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/backbone-qp.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20086",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T19:15:10.943",
      "lastModified" : "2025-11-03T22:15:47.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes (\"Prototype Pollution\") en jquery-bbq versión 1.2.1, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jquery-bbq_project:jquery-bbq:1.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7237FF-DC76-4863-AB49-447FBD87D974"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-bbq.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/jquery-bbq.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20241108-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20089",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-23T19:15:11.140",
      "lastModified" : "2024-11-21T05:45:54.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in purl 2.3.2 allows a malicious user to inject properties into Object.prototype."
      }, {
        "lang" : "es",
        "value" : "Una Modificación Controlada Inapropiadamente de Object Prototype Attributes (\"Prototype Pollution\") en purl versión 2.3.2, permite a un usuario malicioso inyectar propiedades en Object.prototype"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purl_project:purl:2.3.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5B4D552-EE91-4EBC-BC2F-59FFC452BCAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/purl.md",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/BlackFan/client-side-prototype-pollution/blob/master/pp/purl.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29470",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-23T19:15:11.243",
      "lastModified" : "2024-11-21T06:01:11.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as insert. The bug is fixed in version v0.27.4."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una utilidad de línea de comandos y una biblioteca C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen.&#xa0;Se encontró una lectura fuera de límites en Exiv2 versiones v0.27.3 y anteriores.&#xa0;La lectura fuera de límites es desencadenada cuando es usado Exiv2 para escribir metadatos en un archivo de imagen diseñado.&#xa0;Un atacante podría explotar la vulnerabilidad para causar una denegación de servicio al bloquear Exiv2, si puede engañar a la víctima para que ejecute Exiv2 en un archivo de imagen diseñado.&#xa0;Note que este bug solo es desencadenado al escribir los metadatos, que es una operación de Exiv2 que es usada con menos frecuencia que la lectura de los metadatos.&#xa0;Por ejemplo, para desencadenar el bug en la aplicación de línea de comandos Exiv2, debe agregar un argumento de línea de comando adicional como insert.&#xa0;El bug es corregido en la versión v0.27.4"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.27.3",
            "matchCriteriaId" : "2159AB56-2DD0-4FF3-9D61-0C35D1DCB850"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/pull/1581",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-8949-hhfh-j7rj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWZLDECIXXW3CCZ3RS4A3NG5X5VE4WZM/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBKWLTXM7IKZ4PVGKLUQVAVFAYGGF7QR/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Exiv2/exiv2/pull/1581",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-8949-hhfh-j7rj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWZLDECIXXW3CCZ3RS4A3NG5X5VE4WZM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBKWLTXM7IKZ4PVGKLUQVAVFAYGGF7QR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31780",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T20:15:08.027",
      "lastModified" : "2024-11-21T06:06:12.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In app/Model/MispObject.php in MISP 2.4.141, an incorrect sharing group association could lead to information disclosure on an event edit. When an object has a sharing group associated with an event edit, the sharing group object is ignored and instead the passed local ID is reused."
      }, {
        "lang" : "es",
        "value" : "En el archivo app/Model/MispObject.php en MISP versión 2.4.141, una asociación de grupo de intercambio incorrecta podría conllevar a la divulgación de información en una edición de evento.&#xa0;Cuando un objeto presenta un grupo para compartir asociado con una edición de evento, el objeto del grupo para compartir se ignora y, en su lugar, es reutilizado la ID local pasado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-212"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:misp:misp:2.4.141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0709C4C6-DB6A-459D-BA1C-23198DC2F894"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/MISP/MISP/commit/a0f08501d2850025892e703f40fb1570c7995478",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/MISP/MISP/commit/a0f08501d2850025892e703f40fb1570c7995478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25898",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T21:15:08.180",
      "lastModified" : "2024-11-21T05:55:33.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. Passwords are stored in unencrypted source-code text files. This was noted when accessing the svc-login.php file. The value is used to authenticate a high-privileged user upon authenticating with the server."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo svc-login.php en Void Aural Rec Monitor versión 9.0.0.1.&#xa0;Las contraseñas son almacenadas en archivos de texto de código fuente sin cifrar.&#xa0;Esto fue notado cuando se accede al archivo svc-login.php.&#xa0;El valor es usado para autenticar a un usuario con muchos privilegios al autenticarse con el servidor"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        }, {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:void:aural_rec_monitor:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "381D41E3-C81B-4098-933F-54106CB93F57"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T21:15:08.213",
      "lastModified" : "2024-11-21T05:55:33.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a crafted HTTP request to perform a blind time-based SQL Injection. The vulnerable parameter is param1."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en el archivo svc-login.php en Void Aural Rec Monitor versión 9.0.0.1.&#xa0;Un atacante no autenticado puede enviar una petición HTTP diseñada para llevar a cabo una inyección SQL ciega basada en tiempo.&#xa0;El parámetro param1 es vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:void:aurall_rec_monitor:9.0.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C8EA074-769E-423A-9A05-FA6DF756C7D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/all-your-databases-belong-to-me-a-blind-sqli-case-study/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.trustwave.com/en-us/resources/security-resources/security-advisories/?fid=28765",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29158",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T21:15:08.280",
      "lastModified" : "2024-11-21T06:00:48.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sonatype Nexus Repository Manager 3 Pro up to and including 3.30.0 has Incorrect Access Control."
      }, {
        "lang" : "es",
        "value" : "Sonatype Nexus Repository Manager 3 Pro versiones hasta 3.30.0 incluyéndola, presenta un Control de Acceso Incorrecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonatype:nexus_repository_manager_3:*:*:*:*:pro:*:*:*",
            "versionEndIncluding" : "3.30.0",
            "matchCriteriaId" : "6743486E-C8BF-4AD1-84BD-9C86386D86EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.sonatype.com/hc/en-us/articles/1500006126462",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/articles/1500006126462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31583",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T21:15:08.310",
      "lastModified" : "2024-11-21T06:05:56.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including platform version NGCP CE 3.0 has multiple authenticated stored and reflected XSS vulnerabilities when input passed via several parameters to several scripts is not properly sanitized before being returned to the user: Stored XSS in callforward/time/set/save (POST tsetname); Reflected XSS in addressbook (GET filter); Stored XSS in addressbook/save (POST firstname, lastname, company); and Reflected XSS in statistics/versions (GET lang)."
      }, {
        "lang" : "es",
        "value" : "Sipwise C5 NGCP WWW Admin versión 3.6.7 hasta la versión de plataforma NGCP CE 3.0 inclusive tiene múltiples vulnerabilidades XSS almacenadas y reflejadas autenticadas cuando la entrada pasada a través de varios parámetros a varias secuencias de comandos no se sanea adecuadamente antes de ser devuelta al usuario: XSS almacenado en callforward/time/set/save (POST tsetname); XSS reflejado en addressbook (GET filter); XSS almacenado en addressbook/save (POST firstname, lastname, company); y XSS reflejado en statistics/versions (GET lang)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sipwise:next_generation_communication_platform:3.6.7:*:*:*:ce:*:*:*",
            "matchCriteriaId" : "CFDCF4D3-D704-4DD8-BB42-C7C00492551D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/2021-September/014708.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162316/Sipwise-C5-NGCP-CSC-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sipwise.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5648.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/2021-September/014708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162316/Sipwise-C5-NGCP-CSC-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sipwise.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5648.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31584",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T21:15:08.343",
      "lastModified" : "2024-11-21T06:05:57.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sipwise C5 NGCP www_csc version 3.6.4 up to and including platform NGCP CE mr3.8.13 allows call/click2dial CSRF attacks for actions with administrative privileges."
      }, {
        "lang" : "es",
        "value" : "Sipwise C5 NGCP www_csc versión 3.6.4 hasta e incluyendo la plataforma NGCP CE mr3.8.13 permite ataques CSRF call/click2dial para acciones con privilegios administrativos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sipwise:next_generation_communication_platform:3.6.4:*:*:*:ce:*:*:*",
            "matchCriteriaId" : "1A51AF04-B4EC-44A5-B7CE-E9A39058B4DF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/2021-September/014708.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162318/Sipwise-C5-NGCP-CSC-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sipwise.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5649.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.sipwise.com/pipermail/spce-user_lists.sipwise.com/2021-September/014708.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162318/Sipwise-C5-NGCP-CSC-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sipwise.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5649.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31791",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-23T22:15:07.723",
      "lastModified" : "2024-11-21T06:06:13.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Hardware Sentry KM before 10.0.01 for BMC PATROL, a cleartext password may be discovered after a failure or timeout of a command."
      }, {
        "lang" : "es",
        "value" : "En Hardware Sentry KM versiones anteriores a 10.0.01 para BMC PATROL, se puede detectar una contraseña de texto sin cifrar después de un fallo o tiempo de espera de un comando"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sentrysoftware:hardware_sentry_km_for_bmc_patrol:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.0.01",
            "matchCriteriaId" : "6690B96E-8E9D-4BE2-87EC-CFAAF5F44BAE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.sentrysoftware.com/library/releaseNotes/index.html?hardwaresentrykmforpatrol10_0_01releasenotes.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.sentrysoftware.com/library/releaseNotes/index.html?hardwaresentrykmforpatrol10_0_01releasenotes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31598",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-24T17:15:07.490",
      "lastModified" : "2024-11-21T06:05:58.047",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_decode() performs incorrect memory handling while parsing crafted XML files, leading to a heap-based buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la biblioteca libezxml.a en ezXML versión 0.8.6.&#xa0;La función ezxml_decode() lleva a cabo un manejo incorrecto de la memoria mientras analiza archivos XML diseñados, conllevando a un desbordamiento del búfer en la región heap de la memoria"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ezxml_project:ezxml:0.8.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7D40D46-20EB-4287-8B80-9CF98AD4DE97"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/28/",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceforge.net/p/ezxml/bugs/28/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31795",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-24T18:15:07.683",
      "lastModified" : "2024-11-21T06:06:14.197",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04-24 for the Linux kernel, as used on Alcatel 1S phones, allows attackers to overwrite heap memory via PhysmemNewRamBackedPMR."
      }, {
        "lang" : "es",
        "value" : "El controlador del kernel del PowerVR GPU en pvrsrvkm.ko hasta el 24-04-2021 para el kernel de Linux, como es usado en los teléfonos Alcatel 1S, permite a atacantes sobrescribir la memoria de la pila por medio de la función  PhysmemNewRamBackedPMR"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 6.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pvrsrvkm.ko_project:pvrsrvkm.ko:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2021-04-24",
            "matchCriteriaId" : "FF270D00-2267-4711-BD5A-9ED4D8167479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mcyoloswagham.github.io/linux/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://mcyoloswagham.github.io/linux/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31794",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-24T20:15:07.563",
      "lastModified" : "2024-11-21T06:06:14.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header."
      }, {
        "lang" : "es",
        "value" : "Settings.aspx?view=About en Directum versión 5.8.2, permite un ataque de tipo XSS por medio del encabezado HTTP User-Agent"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:directum:directum:5.8.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F483B38D-0E95-44E0-ABD7-17F4F039632C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/awillix/research/blob/main/cve/CVE-2021-31794.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.directum.ru/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/awillix/research/blob/main/cve/CVE-2021-31794.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.directum.ru/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31712",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-24T21:15:07.490",
      "lastModified" : "2024-11-21T06:06:08.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "react-draft-wysiwyg (aka React Draft Wysiwyg) before 1.14.6 allows a javascript: URi in a Link Target of the link decorator in decorators/Link/index.js when a draft is shared across users, leading to XSS."
      }, {
        "lang" : "es",
        "value" : "react-draft-wysiwyg (también se conoce como React Draft Wysiwyg) versiones anteriores a 1.14.6, permite un URI javascript: en un Link Target del decorador de enlaces en el archivo decorators/Link/index.js cuando un borrador se comparte entre usuarios, conllevando a un ataque de tipo XSS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:react_draft_wysiwyg_project:react_draft_wysiwyg:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.14.6",
            "matchCriteriaId" : "31727DCF-77FB-4F82-A462-7C0674054D4E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jpuri/react-draft-wysiwyg/commit/d2faeb612b53f10dff048de7dc57e1f4044b5380",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpuri/react-draft-wysiwyg/issues/1102",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpuri/react-draft-wysiwyg/pull/1104",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpuri/react-draft-wysiwyg/commit/d2faeb612b53f10dff048de7dc57e1f4044b5380",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpuri/react-draft-wysiwyg/issues/1102",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jpuri/react-draft-wysiwyg/pull/1104",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30502",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-25T03:15:07.203",
      "lastModified" : "2024-11-21T06:04:03.217",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand."
      }, {
        "lang" : "es",
        "value" : "La extensión no oficial vscode-ghc-simple (también se conoce como Simple Glasgow Haskell Compiler) versiones anteriores a 0.2.3 para Visual Studio Code, permite una ejecución de código remota por medio de una configuración de workspace diseñada con replCommand"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:simple_glasgow_haskell_compiler_project:simple_glasgow_haskell_compiler:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "0.2.3",
            "matchCriteriaId" : "9D3FBB49-FB1A-4DCA-89BE-B6766DC21DD4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/dramforever/vscode-ghc-simple/blob/master/CHANGELOG.md#v023",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dramforever/vscode-ghc-simple/commit/bc7f6f0b857dade46ea51496d8bd1a4edef39b46",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dramforever/vscode-ghc-simple/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/38",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dramforever/vscode-ghc-simple/blob/master/CHANGELOG.md#v023",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dramforever/vscode-ghc-simple/commit/bc7f6f0b857dade46ea51496d8bd1a4edef39b46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/dramforever/vscode-ghc-simple/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://vuln.ryotak.me/advisories/38",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31718",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-25T19:15:08.100",
      "lastModified" : "2024-11-21T06:06:09.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The server in npupnp before 4.1.4 is affected by DNS rebinding in the embedded web server (including UPnP SOAP and GENA endpoints), leading to remote code execution."
      }, {
        "lang" : "es",
        "value" : "El servidor en npupnp versiones anteriores a 4.1.4, esta afectado por el reenlace de DNS en el servidor web integrado (incluyendo los endpoints UPnP SOAP y GENA), conllevando a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:npupnp_project:npupnp:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.1.4",
            "matchCriteriaId" : "A18AAF2B-2121-4054-AECB-5D886D82D787"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/25/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://framagit.org/medoc92/npupnp",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/25/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://framagit.org/medoc92/npupnp",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.lesbonscomptes.com/upmpdcli/npupnp-doc/libnpupnp.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31726",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-25T19:15:08.137",
      "lastModified" : "2024-11-21T06:06:09.323",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Akuvox C315 115.116.2613 allows remote command Injection via the cfgd_server service. The attack vector is sending a payload to port 189 (default root 0.0.0.0)."
      }, {
        "lang" : "es",
        "value" : "Akuvox versión C315 115.116.2613, permite una inyección de comandos remota por medio del servicio cfgd_server.&#xa0;El vector de ataque envía una carga útil al puerto 189 (root predeterminada 0.0.0.0)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:akuvox:c315_firmware:115.116.2613:*:*:*:*:*:*:*",
            "matchCriteriaId" : "879DDC0F-76A3-4B03-BE4D-06039A269D46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:akuvox:c315:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "543A89AF-D579-477D-B2C1-4219D21A9366"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://pastebin.com/yv4ajFjD",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.akuvox.com/ProductsDisp.aspx?pid=21",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://pastebin.com/yv4ajFjD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.akuvox.com/ProductsDisp.aspx?pid=21",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31760",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-25T19:15:08.173",
      "lastModified" : "2024-11-21T06:06:11.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to achieve Remote Command Execution (RCE) through Webmin's running process feature."
      }, {
        "lang" : "es",
        "value" : "Webmin versión 1.973, esta afectado por una vulnerabilidad de tipo Cross Site Request Forgery (CSRF) para lograr una Ejecución de Comandos Remota (RCE) por medio de la funcionalidad Webmin's running process"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF9E26-A663-4BCE-AD76-CABD6DA36B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Mesh3l911/CVE-2021-31760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electronicbots/CVE-2021-31760",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/D45FN8QrzDo",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Mesh3l911/CVE-2021-31760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electronicbots/CVE-2021-31760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/D45FN8QrzDo",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31761",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-25T19:15:08.207",
      "lastModified" : "2024-11-21T06:06:11.657",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature."
      }, {
        "lang" : "es",
        "value" : "Webmin versión 1.973, esta afectado por una vulnerabilidad de tipo Cross Site Scripting (XSS) reflejado para lograr una ejecución de comandos remota por medio de la funcionalidad Webmin's running process"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF9E26-A663-4BCE-AD76-CABD6DA36B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163559/Webmin-1.973-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mesh3l911/CVE-2021-31761",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electronicbots/CVE-2021-31761",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/23VvUMu-28c",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163559/Webmin-1.973-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mesh3l911/CVE-2021-31761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electronicbots/CVE-2021-31761",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/23VvUMu-28c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31762",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-25T19:15:08.240",
      "lastModified" : "2024-11-21T06:06:11.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature."
      }, {
        "lang" : "es",
        "value" : "Webmin versión 1.973, esta afectado por una vulnerabilidad de tipo Cross Site Request Forgery (CSRF) para crear un usuario privilegiado mediante la funcionalidad Webmin's add users, y luego obtener un shell inverso mediante la funcionalidad Webmin's running process"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webmin:webmin:1.973:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36AF9E26-A663-4BCE-AD76-CABD6DA36B66"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163492/Webmin-1.973-Cross-Site-Request-Forgery.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mesh3l911/CVE-2021-31762",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electronicbots/CVE-2021-31762",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/qCvEXwyaF5U",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163492/Webmin-1.973-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/Mesh3l911/CVE-2021-31762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/electronicbots/CVE-2021-31762",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/webmin/webmin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://youtu.be/qCvEXwyaF5U",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20680",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.770",
      "lastModified" : "2024-11-21T05:46:59.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in NEC Aterm devices (Aterm WG1900HP2 firmware Ver.1.3.1 and earlier, Aterm WG1900HP firmware Ver.2.5.1 and earlier, Aterm WG1800HP4 firmware Ver.1.3.1 and earlier, Aterm WG1800HP3 firmware Ver.1.5.1 and earlier, Aterm WG1200HS2 firmware Ver.2.5.0 and earlier, Aterm WG1200HP3 firmware Ver.1.3.1 and earlier, Aterm WG1200HP2 firmware Ver.2.5.0 and earlier, Aterm W1200EX firmware Ver.1.3.1 and earlier, Aterm W1200EX-MS firmware Ver.1.3.1 and earlier, Aterm WG1200HS firmware all versions Aterm WG1200HP firmware all versions Aterm WF800HP firmware all versions Aterm WF300HP2 firmware all versions Aterm WR8165N firmware all versions Aterm W500P firmware all versions, and Aterm W300P firmware all versions) allows remote attackers to inject arbitrary script or HTML via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en los dispositivos NEC Aterm (Aterm WG1900HP2 versiones de firmware Ver.1.3.1 y anterior, Aterm WG1900HP versiones de firmware Ver.2.5.1 y anterior, Aterm WG1800HP4 versiones de firmware Ver.1.3.1 y anterior, Aterm WG1800HP3 versiones de firmware Ver.1.5. 1 y anterior, Aterm WG1200HS2 versiones de firmware Ver.2.5.0 y anterior, Aterm WG1200HP3 versiones de firmware Ver.1.3.1 y anterior, Aterm WG1200HP2 versiones de firmware Ver.2.5.0 y anterior, Aterm W1200EX versiones de firmware Ver.1.3.1 y anterior, Aterm W1200EX -MS versiones de firmware Ver.1.3.1 y anteriores, Aterm WG1200HS todas las versiones de firmware, Aterm WG1200HP todas las versiones de firmware, Aterm WF800HP todas las versiones de firmware, Aterm WF300HP2 todas las versiones de firmware, Aterm WR8165N todas las versiones de firmware, Aterm W500P todas las versiones y Aterm W300P todas las versiones de firmware) permite a atacantes remotos inyectar script o HTML  arbitrario por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1900hp2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "83AEFD6C-A7A1-4A75-8DD3-0D967753E453"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1900hp2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "189508FB-75EC-49CE-A6F5-3E4A8F3E57E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1900hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.1",
            "matchCriteriaId" : "8712C863-812C-43C6-B132-C9B4865F1FC1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1900hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EE892DF-9165-4ED3-B5F4-B3232BC7B07A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1800hp4_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "B3A82997-AD12-4FD6-BA13-041B63F9149D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1800hp4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9130B16-D277-4335-8FBF-83715094FA70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1800hp3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "B6265021-1C8A-4956-B60B-2DDDDD943E5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1800hp3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87EF7C61-A13A-4EF8-8034-90D7E2AD3A86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200hs3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "8D8EC4D3-F7D5-40EA-9132-74C92305D943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200hs3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BE6AFC0-F46F-491F-88E0-5EB17420F5EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200hs2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.0",
            "matchCriteriaId" : "ACA55E65-20CF-4837-A19D-8D066D55D700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200hs2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C2F75B-CA40-4795-ABD4-2101A1DF1EDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200hp3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "5B1CD2FB-AE3E-454D-BF77-315408F429F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200hp3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB299D6D-056F-4F75-AD19-81F11C79CA08"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200hp2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.5.0",
            "matchCriteriaId" : "7ABEF0FE-DFF6-4EA2-9F4B-19067B3B0E33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200hp2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90D0B0AE-064D-4E48-9155-47ECDFBAAE26"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_w1200ex_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "03154BBD-A8DF-467B-A52F-3D504AB8D289"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_w1200ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6FC4695-46CA-489F-8AAC-70B6B5998A78"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_w1200ex-ms_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.1",
            "matchCriteriaId" : "BD14910C-11F2-40CF-AED3-94CFF4CBD550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_w1200ex-ms:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29756D80-6095-4CCA-9436-FA61503B2E47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200hs_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A71148C3-6ABC-42DB-A413-C66E3B162792"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "787BD0AE-4F79-47C0-89D2-DF6979AA34C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200hp_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "233211A6-DA9B-4744-A535-1FF7326FA135"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10366DDB-2294-47CF-851A-06DFEE24402C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wf800hp_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF216701-8434-4106-A56F-62B20F350C27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wf800hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C12DE60-3B6E-4450-8D30-C3ED64A86915"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wf300hp2_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4087211-55B1-4704-B78C-376917D5EDB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wf300hp2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2EBDFB7-3920-4982-8114-EC9E92180D89"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wr8165n_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54517F68-A183-4791-8871-C85FA60F7842"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wr8165n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7188074-EE16-4110-8AC4-4084300EE122"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_w500p_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E726FDA-A803-472C-B30B-32BE8283CAFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_w500p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A67ABBE5-AED3-416F-A57D-06DBE302FF3B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_w300p_firmware:*:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5203B2C-AB30-49B2-BDB2-4FD48C6119F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_w300p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "157C035B-CA94-43C3-83B8-6C531F7D0FEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-008.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN67456944/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN67456944/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20693",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.800",
      "lastModified" : "2024-11-21T05:47:01.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Gurunavi App for Android ver.10.0.10 and earlier and for iOS ver.11.1.2 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en la Aplicación Gurunavi para Android versiones ver.10.0.10 y anteriores y para iOS versiones ver.11.1.2 y anteriores, permite a un atacante remoto conducir un usuario a acceder a un sitio web arbitrario por medio de la App vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gurunavi:gurunavi:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "10.0.10",
            "matchCriteriaId" : "907637DE-DBE7-4806-9B01-5DC1DED714FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gurunavi:gurunavi:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "11.1.2",
            "matchCriteriaId" : "971656E6-85B4-4801-BAFB-98BFD0D8A403"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN54025691/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN54025691/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20694",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.830",
      "lastModified" : "2024-11-21T05:47:01.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to bypass access restriction and to start a telnet service via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en DAP-1880AC versiones de firmware 1.21 y anteriores, permite a un atacante autenticado remoto omitir una restricción de acceso e iniciar un servicio Telnet por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-1880ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "4A34EE04-1B2C-4DE7-8FC6-9F9AE972328F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-1880ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2B9717-DD29-495D-B2B6-6920E972EB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20695",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.857",
      "lastModified" : "2024-11-21T05:47:01.477",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper following of a certificate's chain of trust vulnerability in DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to gain root privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un seguimiento inapropiado de la vulnerabilidad de la cadena confiable de un certificado en DAP-1880AC versiones de firmware 1.21 y anteriores, permite a un atacante autenticado remoto alcanzar privilegios root por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-295"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-1880ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "4A34EE04-1B2C-4DE7-8FC6-9F9AE972328F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-1880ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2B9717-DD29-495D-B2B6-6920E972EB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20696",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.893",
      "lastModified" : "2024-11-21T05:47:01.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "DAP-1880AC firmware version 1.21 and earlier allows a remote authenticated attacker to execute arbitrary OS commands by sending a specially crafted request to a specific CGI program."
      }, {
        "lang" : "es",
        "value" : "Un DAP-1880AC versiones de firmware 1.21 y anteriores, permite a un atacante autenticado remoto ejecutar comandos arbitrarios del Sistema Operativo mediante el envio de una petición especialmente diseñada a un programa CGI específico"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-1880ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "4A34EE04-1B2C-4DE7-8FC6-9F9AE972328F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-1880ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2B9717-DD29-495D-B2B6-6920E972EB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20697",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.920",
      "lastModified" : "2024-11-21T05:47:01.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Missing authentication for critical function in DAP-1880AC firmware version 1.21 and earlier allows a remote attacker to login to the device as an authenticated user without the access privilege via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una falta de autenticación para funciones críticas en el firmware DAP-1880AC versión 1.21 y anteriores, permite a un atacante remoto iniciar sesión en el dispositivo como un usuario autenticado sin el privilegio de acceso por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dlink:dap-1880ac_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21",
            "matchCriteriaId" : "4A34EE04-1B2C-4DE7-8FC6-9F9AE972328F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dlink:dap-1880ac:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2B9717-DD29-495D-B2B6-6920E972EB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU92898656/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.dlink-jp.com/support/release/jvnvu92898656_dap-1880ac.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20708",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.947",
      "lastModified" : "2024-11-21T05:47:03.053",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NEC Aterm devices (Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier) allow authenticated attackers to execute arbitrary OS commands by sending a specially crafted request to a specific URL."
      }, {
        "lang" : "es",
        "value" : "Unos dispositivos NEC Aterm (firmware Aterm WF1200CR versiones Ver1.3.2 y anteriores, firmware Aterm WG1200CR versiones Ver1.3.3 y anteriores, y firmware Aterm WG2600HS versiones Ver1.5.1 y anteriores) permiten a atacantes autenticados ejecutar comandos arbitrarios del Sistema Operativo mediante el envio de una petición especialmente diseñada a una URL específica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "303286F8-9C3D-42E4-8DBD-16F9CD6B6FDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wf1200cr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A91D9EB-5962-498E-9B14-C5712DDDF7C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "C6CC0F17-379E-4711-B1E6-4D726C404A31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200cr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "936D9DD3-11E5-4862-B157-85B13EA06C38"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "98011875-167E-4921-858E-C30AF5E9DB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623C9C7B-C947-49A8-9C1D-20B23FDA73ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20709",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:07.977",
      "lastModified" : "2024-11-21T05:47:03.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper validation of integrity check value vulnerability in NEC Aterm WF1200CR firmware Ver1.3.2 and earlier, Aterm WG1200CR firmware Ver1.3.3 and earlier, and Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to a specific URL."
      }, {
        "lang" : "es",
        "value" : "Una validación inapropiada de la vulnerabilidad del valor de comprobación de integridad en NEC Aterm WF1200CR firmware Ver1.3.2 y anterior, Aterm WG1200CR firmware Ver1.3.3 y anterior, y Aterm WG2600HS firmware Ver1.5.1 y anterior permite a un atacante con privilegios administrativos ejecutar comandos arbitrarios del Sistema Operativo mediante el envio de una petición especialmente diseñada a una URL específica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-354"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wf1200cr_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.2",
            "matchCriteriaId" : "303286F8-9C3D-42E4-8DBD-16F9CD6B6FDB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wf1200cr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A91D9EB-5962-498E-9B14-C5712DDDF7C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg1200cr_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.3.3",
            "matchCriteriaId" : "C6CC0F17-379E-4711-B1E6-4D726C404A31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg1200cr:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "936D9DD3-11E5-4862-B157-85B13EA06C38"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "98011875-167E-4921-858E-C30AF5E9DB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623C9C7B-C947-49A8-9C1D-20B23FDA73ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20710",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:08.003",
      "lastModified" : "2024-11-21T05:47:03.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.5.1 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross-site scripting en el Aterm WG2600HS versiones de firmware Ver1.5.1 y anteriores, permite a atacantes remotos inyectar una script  arbitraria por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:aterm:wg2600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "70D2D9D2-D983-4848-814F-0E8F826F9A9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:aterm:wg2600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7182ABE8-213C-499C-9979-C6A19B6372B6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20711",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:08.030",
      "lastModified" : "2024-11-21T05:47:03.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aterm WG2600HS firmware Ver1.5.1 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Un firmware Aterm WG2600HS versiones Ver1.5.1 y anteriores, permite a un atacante ejecutar comandos arbitrarios del Sistema Operativo por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "98011875-167E-4921-858E-C30AF5E9DB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623C9C7B-C947-49A8-9C1D-20B23FDA73ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20712",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-26T01:15:08.060",
      "lastModified" : "2024-11-21T05:47:03.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in NEC Aterm WG2600HS firmware Ver1.5.1 and earlier, and Aterm WX3000HP firmware Ver1.1.2 and earlier allows a device connected to the LAN side to be accessed from the WAN side due to the defect in the IPv6 firewall function."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en NEC Aterm WG2600HS versiones de firmware Ver1.5.1 y anteriores, y Aterm WX3000HP versiones de firmware Ver1.1.2 y anteriores, permite acceder a un dispositivo conectado al lado LAN desde el lado WAN debido al defecto en la función firewall IPv6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wg2600hs_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.5.1",
            "matchCriteriaId" : "98011875-167E-4921-858E-C30AF5E9DB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wg2600hs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623C9C7B-C947-49A8-9C1D-20B23FDA73ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nec:aterm_wx3000hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2",
            "matchCriteriaId" : "A92A76EA-80EE-49EF-817C-5CB11E60B61F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nec:aterm_wx3000hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F34C11C-91C8-4DE6-B170-06C857E9E3F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jpn.nec.com/security-info/secinfo/nv21-010.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN29739718/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31803",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T08:15:07.147",
      "lastModified" : "2024-11-21T06:06:15.427",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cPanel before 94.0.3 allows self-XSS via EasyApache 4 Save Profile (SEC-581)."
      }, {
        "lang" : "es",
        "value" : "cPanel versiones anteriores a 94.0.3, permite un ataque de tipo auto-XSS por medio de EasyApache 4 Save Profile (SEC-581)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cpanel:cpanel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "94.0.3",
            "matchCriteriaId" : "B291F269-577D-4EDD-8CE8-AD55C766AB22"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.cpanel.net/changelogs/94-change-log/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.cpanel.net/changelogs/94-change-log/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T08:15:07.183",
      "lastModified" : "2024-11-21T06:06:15.567",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "LeoCAD before 21.03 sometimes allows a use-after-free during the opening of a new document."
      }, {
        "lang" : "es",
        "value" : "LeoCAD versiones anteriores a 21.03, a veces permite un uso de la memoria previamente liberada durante la apertura de un nuevo documento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leocad:leocad:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "21.03",
            "matchCriteriaId" : "301DD585-C96E-4696-B292-D4F1BBD03491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/leozide/leocad/issues/645",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/leozide/leocad/issues/645",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23365",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-26T10:15:12.597",
      "lastModified" : "2024-11-21T05:51:35.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package github.com/tyktechnologies/tyk-identity-broker before 1.1.1 are vulnerable to Authentication Bypass via the Go XML parser which can cause SAML authentication bypass. This is because the XML parser doesn’t guarantee integrity in the XML round-trip (encoding/decoding XML data)."
      }, {
        "lang" : "es",
        "value" : "El paquete github.com/tyktechnologies/tyk-identity-broker versiones anteriores a 1.1.1, es vulnerable a una omisión de autenticación por medio del analizador Go XML, lo que puede causar una omisión de autenticación SAML.&#xa0;Esto es debido a que el analizador XML no garantiza la integridad en el viaje de ida y vuelta XML (datos XML encoding/decoding)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:tyk:tyk-identity-broker:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.1.1",
            "matchCriteriaId" : "509C7956-E3F8-4F26-A047-DDEC86CA5EBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/commit/243092965b0f93a95a14cb882b5b9a3df61dd5c0",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/commit/46f70420e0911e4e8b638575e29d394c227c75d0",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/pull/147",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/releases/tag/v1.1.1",
        "source" : "report@snyk.io",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTYKTECHNOLOGIESTYKIDENTITYBROKER-1089720",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/commit/243092965b0f93a95a14cb882b5b9a3df61dd5c0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/commit/46f70420e0911e4e8b638575e29d394c227c75d0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/pull/147",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/TykTechnologies/tyk-identity-broker/releases/tag/v1.1.1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMTYKTECHNOLOGIESTYKIDENTITYBROKER-1089720",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25927",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-04-26T11:15:08.217",
      "lastModified" : "2025-04-30T21:15:49.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'safe-flat' versions 2.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Prototype pollution en \"safe-flat\" versiones 2.0.0 hasta 2.0.1, permite a un atacante causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:safe-flat_project:safe-flat:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "718F6E67-8807-40B0-8827-08A5A7F0EDAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jessie-codes/safe-flat/commit/4b9b7db976bba8c968354f4315f5f9c219b7cbf3",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25927",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jessie-codes/safe-flat/commit/4b9b7db976bba8c968354f4315f5f9c219b7cbf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25928",
      "sourceIdentifier" : "vulnerabilitylab@mend.io",
      "published" : "2021-04-26T11:15:08.250",
      "lastModified" : "2025-04-30T21:15:50.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de contaminación de prototipo en \"safe-obj\" versiones 1.0.0 hasta 1.0.2, permite a un atacante causar una denegación de servicio y puede conllevar a una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:manta:safe-obj:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "F36BE82B-35EF-42A2-B363-2C3E56B8F72C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mantacode/safe-obj/blob/6ab63529182b6cf11704ac84f10800290afd3f9f/lib/index.js#L122",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25928",
        "source" : "vulnerabilitylab@mend.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mantacode/safe-obj/blob/6ab63529182b6cf11704ac84f10800290afd3f9f/lib/index.js#L122",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-25928",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26797",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T12:15:07.893",
      "lastModified" : "2024-11-21T05:56:50.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An access control vulnerability in Hame SD1 Wi-Fi firmware <=V.20140224154640 allows an attacker to get system administrator through an open Telnet service."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso en el firmware de Wi-Fi Hame SD1 versiones anteriores a V.20140224154640, permite a un atacante lograr ser administrador del sistema por medio de un servicio Telnet abierto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hametech:hame_sd1_wi-fi_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "20140224154640",
            "matchCriteriaId" : "C2BE11C4-AC3E-4058-88D9-1A5198D0F471"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hametech:hame_sd1_wi-fi:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4931EF00-F61A-4A65-8629-1EF315227E77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://le0nc.blogspot.com/2021/04/cve-2021-26797-access-control.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://le0nc.blogspot.com/2021/04/cve-2021-26797-access-control.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28079",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T12:15:07.927",
      "lastModified" : "2024-11-21T05:59:03.773",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jamovi <=1.6.18 is affected by a cross-site scripting (XSS) vulnerability. The column-name is vulnerable to XSS in the ElectronJS Framework. An attacker can make a .omv (Jamovi) document containing a payload. When opened by victim, the payload is triggered."
      }, {
        "lang" : "es",
        "value" : "Jamovi versiones anteriores a 1.6.18, está afectado por una vulnerabilidad de tipo cross-site scripting (XSS).&#xa0;El column-name es vulnerable a un ataque de tipo XSS en ElectronJS Framework.&#xa0;Un atacante puede crear un documento .omv (Jamovi) que contenga una carga útil.&#xa0;Cuando la víctima lo abre, es activada la carga útil"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jamovi:jamovi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.6.18",
            "matchCriteriaId" : "A1F78D03-9A78-4EB0-802C-17AB21F6CB7A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/theart42/cves/blob/master/CVE-2021-28079/CVE-2021-28079.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jamovi.org",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/theart42/cves/blob/master/CVE-2021-28079/CVE-2021-28079.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.jamovi.org",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T13:15:07.787",
      "lastModified" : "2024-11-21T06:06:15.283",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute code as root. The problem is that a user-provided length value is trusted during a backup.cgi file upload. The attacker must add a \\n before the Content-Length header."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos NETGEAR R7000 versión 1.0.11.116, presentan un desbordamiento de búfer en la región heap de la memoria que es explotable desde la red local sin autenticación.&#xa0;La vulnerabilidad se presenta dentro del manejo de una petición HTTP.&#xa0;Un atacante puede aprovechar esto para ejecutar código como root.&#xa0;El problema es que un valor de longitud proporcionado por el usuario es confiable durante la carga de un archivo backup.cgi.&#xa0;El atacante debe agregar un \\n antes del encabezado Content-Length"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netgear:r7000_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.11.116",
            "matchCriteriaId" : "2C3E253B-84E1-4857-9C71-D3A0387989DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netgear:r7000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F86FF6-AB32-4E51-856A-DDE790C0A9A6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netgear-nighthawk-r7000-httpd-preauth-rce/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netgear.com/about/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-netgear-nighthawk-r7000-httpd-preauth-rce/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.netgear.com/about/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25838",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T14:15:08.683",
      "lastModified" : "2024-11-21T05:55:30.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Import function in MintHCM RELEASE 3.0.8 allows an attacker to execute a cross-site scripting (XSS) payload in file-upload."
      }, {
        "lang" : "es",
        "value" : "La función Import en MintHCM RELEASE versión 3.0.8, permite a un atacante ejecutar una carga útil cross-site scripting (XSS) en la carga de archivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minthcm:minthcm:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DFB48D1-3F82-4A4A-A5D2-A3F9156EAC1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-25838%5DMintHCM%203.0.8.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://minthcm.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-25838%5DMintHCM%203.0.8.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://minthcm.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25839",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T14:15:08.717",
      "lastModified" : "2024-11-21T05:55:30.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A weak password requirement vulnerability exists in the Create New User function of MintHCM RELEASE 3.0.8, which could lead an attacker to easier password brute-forcing."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de requisito de contraseña débil en la función Create New User de MintHCM RELEASE versión 3.0.8, que podría conllevar a un atacante a una fuerza bruta de contraseña fácil"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-521"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:minthcm:minthcm:3.0.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DFB48D1-3F82-4A4A-A5D2-A3F9156EAC1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-25839%5DMintHCM%203.0.8.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://minthcm.org/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-25839%5DMintHCM%203.0.8.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://minthcm.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28399",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T14:15:08.747",
      "lastModified" : "2024-11-21T05:59:37.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OrangeHRM 4.7 allows an unauthenticated user to enumerate the valid username and email address via the forgot password function."
      }, {
        "lang" : "es",
        "value" : "OrangeHRM versió, 4.7, permite a un usuario no autenticado enumerar el nombre de usuario y la dirección de correo electrónico válidos por medio de la función forgot password"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:orangehrm:orangehrm:4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A117D8E0-4D78-4FD8-85B7-B251273C66F3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-28399%5DOrangeHRM%204.7.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.orangehrm.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/C1inton/CVE-Record/blob/master/CVE%20Record/%5BCVE-2021-28399%5DOrangeHRM%204.7.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://www.orangehrm.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3472",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-26T15:15:07.857",
      "lastModified" : "2024-11-21T06:21:37.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in xorg-x11-server in versions before 1.20.11. An integer underflow can occur in xserver which can lead to a local privilege escalation. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en xorg-x11-server en versiones anteriores a 1.20.11.&#xa0;Se puede producir un subdesbordamiento de enteros en xserver que puede conllevar a una escalada de privilegios local.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos, así como la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-191"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:x.org:x_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.20.11",
            "matchCriteriaId" : "F1002D17-1E44-4CEE-BBD5-CA24A140C87F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/13/1",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1944167",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cd",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00013.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDF7TAJE7NPZPNVOXSD5HBIFLNPUOD2V/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N63KL3T22HNFT4FJ7VMVF6U5Q4RFJIQF/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEXPCLMVU25AUZTUXC4MYBGPKOAIM5TW/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2021-April/003080.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2021-April/003080.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2021/q2/20",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-02",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4893",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/plugins/nessus/148701",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-463/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/13/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1944167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.freedesktop.org/xorg/xserver/-/commit/7aaf54a1884f71dc363f0b884e57bcb67407a6cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/04/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDF7TAJE7NPZPNVOXSD5HBIFLNPUOD2V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MO6S5OPXUDYBSRSVWVLFLJ6AFERG4HNY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N63KL3T22HNFT4FJ7VMVF6U5Q4RFJIQF/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PEXPCLMVU25AUZTUXC4MYBGPKOAIM5TW/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2021-April/003080.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.x.org/archives/xorg-announce/2021-April/003080.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2021/q2/20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4893",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/plugins/nessus/148701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-463/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3494",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-26T15:15:07.900",
      "lastModified" : "2024-11-21T06:21:40.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A smart proxy that provides a restful API to various sub-systems of the Foreman is affected by the flaw which can cause a Man-in-the-Middle attack. The FreeIPA module of Foreman smart proxy does not check the SSL certificate, thus, an unauthenticated attacker can perform actions in FreeIPA if certain conditions are met. The highest threat from this flaw is to system confidentiality. This flaw affects Foreman versions before 2.5.0."
      }, {
        "lang" : "es",
        "value" : "Un proxy inteligente que proporciona una API restful a varios subsistemas del Foreman está afectado por un fallo que puede causar un ataque de tipo Man-in-the-Middle.&#xa0;El módulo FreeIPA del proxy inteligente Foreman no comprueba el certificado SSL, por lo tanto, un atacante no autenticado puede llevar a cabo acciones en FreeIPA si determinadas condiciones se cumplen. La mayor amenaza de este fallo es la confidencialidad del sistema.&#xa0;Esta fallo afecta a Foreman versiones anteriores a 2.5.0."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:theforeman:foreman:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.5.0",
            "matchCriteriaId" : "5D57AF33-980D-4529-8606-1D5850224D1B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1948005",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1948005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23382",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-26T16:15:07.330",
      "lastModified" : "2024-11-21T05:51:36.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package postcss before 8.2.13 are vulnerable to Regular Expression Denial of Service (ReDoS) via getAnnotationURL() and loadAnnotation() in lib/previous-map.js. The vulnerable regexes are caused mainly by the sub-pattern \\/\\*\\s* sourceMappingURL=(.*)."
      }, {
        "lang" : "es",
        "value" : "El paquete postcss versiones anteriores a 8.2.13, es vulnerable a una Denegación de Servicio de Expresión Regular (ReDoS) por medio de las funciones getAnnotationURL() y loadAnnotation() en la biblioteca lib/previous-map.js.&#xa0;Las expresiones regulares vulnerables son causadas principalmente por el subpatrón \\/\\*\\s* sourceMappingURL=(.*)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postcss:postcss:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "7.0.36",
            "matchCriteriaId" : "E1B614E1-6FA9-42AE-93D5-85B32B1E0176"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:postcss:postcss:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.2.13",
            "matchCriteriaId" : "9C4E9674-C7C3-4CB3-9B06-AB659DA7A8E2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/postcss/postcss/commit/2b1d04c867995e55124e0a165b7c6622c1735956",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1255641",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/postcss/postcss/commit/2b1d04c867995e55124e0a165b7c6622c1735956",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1255641",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-POSTCSS-1255640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27851",
      "sourceIdentifier" : "cret@cert.org",
      "published" : "2021-04-26T16:15:07.433",
      "lastModified" : "2024-11-21T05:58:38.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’. It affects multi-user setups in which ’guix-daemon’ runs locally. The attack consists in having an unprivileged user spawn a build process, for instance with `guix build`, that makes its build directory world-writable. The user then creates a hardlink to a root-owned file such as /etc/shadow in that build directory. If the user passed the --keep-failed option and the build eventually fails, the daemon changes ownership of the whole build tree, including the hardlink, to the user. At that point, the user has write access to the target file. Versions after and including v0.11.0-3298-g2608e40988, and versions prior to v1.2.0-75109-g94f0312546 are vulnerable."
      }, {
        "lang" : "es",
        "value" : "Se ha encontrado una vulnerabilidad de seguridad en \"guix-daemon\" que puede conllevar a una escalada de privilegios local.&#xa0;Afecta a las configuraciones multiusuario en las que \"guix-daemon\" se ejecuta localmente.&#xa0;El ataque consiste en hacer que un usuario no privilegiado genere un proceso de compilación, por ejemplo con \"guix build\", que hace que su directorio de compilación sea world-writable.&#xa0;Luego, el usuario crea un vínculo físico a un archivo de propiedad root tal y como /etc/shadow en ese directorio de compilación.&#xa0;Si el usuario pasó la opción --keep-failed y finalmente se produce un fallo en la compilación, el demonio cambia la propiedad de todo el árbol de compilación, incluido el enlace físico, al usuario.&#xa0;En ese momento, el usuario tiene acceso de escritura al archivo de destino.&#xa0;Las versiones posteriores a la v0.11.0-3298-g2608e40988 y las versiones anteriores a la v1.2.0-75109-g94f0312546 son vulnerables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cret@cert.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-264"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-59"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:guix:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.11.0",
            "versionEndExcluding" : "1.2.0",
            "matchCriteriaId" : "D489F131-C780-45C0-99CF-B59532F60807"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.gnu.org/47229",
        "source" : "cret@cert.org",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://guix.gnu.org/en/blog/2021/risk-of-local-privilege-escalation-via-guix-daemon/",
        "source" : "cret@cert.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugs.gnu.org/47229",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://guix.gnu.org/en/blog/2021/risk-of-local-privilege-escalation-via-guix-daemon/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20432",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-26T17:15:07.947",
      "lastModified" : "2024-11-21T05:46:35.170",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses Cross-Origin Resource Sharing (CORS) which could allow an attacker to carry out privileged actions and retrieve sensitive information as the domain name is not being limited to only trusted domains. IBM X-Force ID: 196344."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Plus versiones 10.1.0 hasta 10.1.7, utiliza el Cross-Origin Resource Sharing (CORS), que podría permitir a un atacante llevar a cabo acciones privilegiadas y recuperar información confidencial, ya que el nombre de dominio no se limita solo a los dominios confiables.&#xa0;IBM X-Force ID: 196344"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndIncluding" : "10.1.7",
            "matchCriteriaId" : "C7C8056B-6038-4819-B241-39A9A6EAC0FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196344",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445733",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196344",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445733",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20532",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-26T17:15:07.980",
      "lastModified" : "2024-11-21T05:46:43.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 could allow a local user to escalate their privileges to take full control of the system due to insecure directory permissions. IBM X-Force ID: 198811."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Client versiones 8.1.0.0 hasta 8.1.11.0, podría permitir a un usuario local escalar sus privilegios para tomar el control total del sistema debido a permisos de directorio no seguros.&#xa0;IBM X-Force ID: 198811"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_backup-archive_client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "6AE275E8-674B-4A23-A169-9EF16D3F67E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:hyper-v:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "0B8A5B71-C113-44A2-80FE-F3F31B3ADDBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_for_virtual_environments:*:*:*:*:*:vmware:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "F33D8258-17A0-4A37-A6E0-127355613AB0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198811",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445503",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198811",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445503",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20536",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-26T17:15:08.010",
      "lastModified" : "2024-11-21T05:46:44.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Plus File Systems Agent 10.1.6 and 10.1.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 198836."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Plus File Systems Agent versiones 10.1.6 y 10.1.7, almacena información potencialmente confidencial en archivos de registro que podría ser leído por un usuario local.&#xa0;IBM X-Force ID: 198836"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_plus:10.1.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7875085D-FE1F-46C3-90D0-1C8DF0588344"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_plus:10.1.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26D149B1-7428-4C09-9086-938F20E7FCFF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198836",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445739",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445739",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20546",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-26T17:15:08.043",
      "lastModified" : "2024-11-21T05:46:45.347",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Client 8.1.0.0 through 8.1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking. A local attacker could overflow a buffer and cause the application to crash. IBM X-Force ID: 198934"
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Client versiones 8.1.0.0 hasta 8.1.11.0, es vulnerable a un desbordamiento de búfer en la región stack de la memoria, causado por una comprobación de límites inapropiada.&#xa0;Un atacante local podría desbordar un búfer y causar que la aplicación se bloquee.&#xa0;IBM X-Force ID: 198934"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "CC8077DA-B6EF-49D6-BB96-7902E1E2DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "947CD7E1-82FC-4883-BECD-BC764C3720C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198934",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445497",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198934",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21201",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.077",
      "lastModified" : "2024-11-21T05:47:45.897",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in permissions in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en permissions en Google Chrome versiones anteriores a 90.0.4430.72, permitía a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1025683",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1025683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21202",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.107",
      "lastModified" : "2024-11-21T05:47:46.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en extensions de Google Chrome versiones anteriores a 90.0.4430.72, permitía a un atacante convencer a un usuario de instalar una extensión maliciosa para llevar a cabo potencialmente un escape del sandbox por medio de una extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1188889",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1188889",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21203",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.133",
      "lastModified" : "2024-11-21T05:47:46.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome versiones anteriores a 90.0.4430.72, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1192054",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1192054",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21204",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.160",
      "lastModified" : "2024-11-21T05:47:46.257",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome on OS X prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome en OS X versiones anteriores a 90.0.4430.72, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:apple:mac_os_x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4781BF1E-8A4E-4AFF-9540-23D523EE30DD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1189926",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1189926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21205",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.187",
      "lastModified" : "2024-11-21T05:47:46.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una aplicación de políticas insuficientes en navigation en Google Chrome en iOS versiones anteriores a 90.0.4430.72, permitía a un atacante remoto omitir las restricciones de navegación por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "BAEC6D74-FDA6-4A5D-9153-2E7A5300DF7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1165654",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1165654",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21206",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.213",
      "lastModified" : "2025-10-24T20:57:35.980",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Blink en Google Chrome versiones anteriores a 89.0.4389.128, permitía a un atacante remoto explotar potencialmente una corrupción de la memoria por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium Blink Use-After-Free Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.128",
            "matchCriteriaId" : "060C60A1-9A64-4B1D-A546-8397599DE453"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1196781",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1196781",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21206",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21207",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.240",
      "lastModified" : "2024-11-21T05:47:46.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en IndexedDB en Google Chrome versiones anteriores a 90.0.4430.72, permitía a un atacante convencer a un usuario de instalar una extensión maliciosa para llevar a cabo potencialmente un escape del sandbox por medio de una extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1185732",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1185732",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21208",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.273",
      "lastModified" : "2024-11-21T05:47:46.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in QR scanner in Google Chrome on iOS prior to 90.0.4430.72 allowed an attacker displaying a QR code to perform domain spoofing via a crafted QR code."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de datos en QR scanner en Google Chrome en iOS versiones anteriores a 90.0.4430.72, permitió a un atacante que mostraba un código QR llevar a cabo una suplantación de dominio por medio de un código QR diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1039539",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1039539",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21209",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.300",
      "lastModified" : "2024-11-21T05:47:46.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in storage in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en storage en Google Chrome versiones anteriores a 90.0.4430.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1143526",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1143526",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21210",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.327",
      "lastModified" : "2024-11-21T05:47:46.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Network in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially access local UDP ports via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Network en Google Chrome versiones anteriores a 90.0.4430.72, permitió a un atacante remoto acceder potencialmente a los puertos UDP locales por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1184562",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1184562",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21211",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.357",
      "lastModified" : "2024-11-21T05:47:47.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Navigation en Google Chrome en iOS versiones anteriores a 90.0.4430.72, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:iphone_os:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "BAEC6D74-FDA6-4A5D-9153-2E7A5300DF7C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1103119",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1103119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21212",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.380",
      "lastModified" : "2024-11-21T05:47:47.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in Network Config UI in Google Chrome on ChromeOS prior to 90.0.4430.72 allowed a remote attacker to potentially compromise WiFi connection security via a malicious WAP."
      }, {
        "lang" : "es",
        "value" : "La Iinterfaz de Usuario de seguridad incorrecta en Network Config UI en Google Chrome en ChromeOS versiones anteriores a 90.0.4430.72, permitía a un atacante remoto comprometer potencialmente la seguridad de la conexión WiFi por medio de un WAP malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1145024",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1145024",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21213",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.407",
      "lastModified" : "2024-11-21T05:47:47.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in WebMIDI in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en WebMIDI en Google Chrome versiones anteriores a 90.0.4430.72, permitía a un atacante remoto explotar  potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1161806",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1161806",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21214",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.437",
      "lastModified" : "2024-11-21T05:47:47.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Network API in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Network API en Google Chrome versiones anteriores a 90.0.4430.72, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una extensión de Chrome diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1170148",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1170148",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21215",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.463",
      "lastModified" : "2024-11-21T05:47:47.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Autofill en Google Chrome versiones anteriores a 90.0.4430.72, permitió a un atacante remoto falsificar la Interfaz de Usuario de seguridad por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1172533",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1172533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21216",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.487",
      "lastModified" : "2024-11-21T05:47:47.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Inappropriate implementation in Autofill in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to spoof security UI via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una implementación inapropiada en Autofill en Google Chrome versiones anteriores a 90.0.4430.72, permitió a un atacante remoto falsificar la Interfaz de Usuario de seguridad por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173297",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1173297",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21217",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.513",
      "lastModified" : "2024-11-21T05:47:47.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Los datos no inicializados en PDFium en Google Chrome versiones anteriores a 90.0.4430.72, permitían a un atacante remoto obtener información potencialmente confidencial de la memoria del proceso por medio de un archivo PDF diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166462",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1166462",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21218",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.543",
      "lastModified" : "2024-11-21T05:47:47.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Los datos no inicializados en PDFium en Google Chrome versiones anteriores a 90.0.4430.72, permitían a un atacante remoto obtener información potencialmente confidencial de la memoria del proceso por medio de un archivo PDF diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1166478",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1166478",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21219",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.567",
      "lastModified" : "2024-11-21T05:47:48.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Los datos no inicializados en PDFium en Google Chrome versiones anteriores a 90.0.4430.72, permitían a un atacante remoto obtener información potencialmente confidencial de la memoria del proceso por medio de un archivo PDF diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-252"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1166972",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1166972",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21220",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.593",
      "lastModified" : "2025-10-24T21:08:07.703",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de una entrada no confiable en V8 en Google Chrome versiones anteriores a e 89.0.4389.128, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium V8 Improper Input Validation Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "89.0.4389.128",
            "matchCriteriaId" : "060C60A1-9A64-4B1D-A546-8397599DE453"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162437/Google-Chrome-XOR-Typer-Out-Of-Bounds-Access-Remote-Code-Execution.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/176210/Chrome-V8-JIT-XOR-Arbitrary-Code-Execution.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1196683",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162437/Google-Chrome-XOR-Typer-Out-Of-Bounds-Access-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/176210/Chrome-V8-JIT-XOR-Arbitrary-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1196683",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21220",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21221",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.623",
      "lastModified" : "2024-11-21T05:47:48.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient validation of untrusted input in Mojo in Google Chrome prior to 90.0.4430.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de una entrada no confiable en Mojo en Google Chrome versiones anteriores a 90.0.4430.72, permitió a un atacante remoto que había comprometido el proceso del renderizador filtrar datos de origen cruzado por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.72",
            "matchCriteriaId" : "AA25EC6D-14D9-4EAA-AA09-065B7DF90FE8"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1195333",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_14.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1195333",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21222",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.647",
      "lastModified" : "2024-11-21T05:47:48.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en V8 en Google Chrome versiones anteriores a 90.0.4430.85, permitió a un atacante remoto que había comprometido el proceso del renderizador evitar el aislamiento del sitio por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.85",
            "matchCriteriaId" : "4E0E86C5-BD29-4D37-BBE0-575228D9E766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1194046",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1194046",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21223",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.677",
      "lastModified" : "2024-11-21T05:47:48.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Integer overflow in Mojo in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento de enteros en Mojo en Google Chrome versiones anteriores a 90.0.4430.85, permitió a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox  por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.85",
            "matchCriteriaId" : "4E0E86C5-BD29-4D37-BBE0-575228D9E766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1195308",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1195308",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21224",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.703",
      "lastModified" : "2025-10-24T21:08:03.330",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en V8 en Google Chrome versiones anteriores a 90.0.4430.85, permitía a un atacante remoto ejecutar código arbitrario dentro del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Google Chromium V8 Type Confusion Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.85",
            "matchCriteriaId" : "4E0E86C5-BD29-4D37-BBE0-575228D9E766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1195777",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://crbug.com/1195777",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21224",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21225",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.730",
      "lastModified" : "2024-11-21T05:47:48.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un acceso a la memoria fuera de límites en V8 en Google Chrome versiones anteriores a 90.0.4430.85, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.85",
            "matchCriteriaId" : "4E0E86C5-BD29-4D37-BBE0-575228D9E766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1195977",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1195977",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21226",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-26T17:15:08.757",
      "lastModified" : "2024-11-21T05:47:48.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in navigation in Google Chrome prior to 90.0.4430.85 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en navigation en Google Chrome versiones anteriores a 90.0.4430.85, permitía a un atacante remoto que había comprometido el proceso del renderizador llevar a cabo potencialmente un escape del sandbox por medio de una página HTML diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.6,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.85",
            "matchCriteriaId" : "4E0E86C5-BD29-4D37-BBE0-575228D9E766"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1197904",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_20.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://crbug.com/1197904",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4906",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29672",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-26T17:15:08.833",
      "lastModified" : "2024-11-21T06:01:37.297",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Client 8.1.0.0-8 through 1.11.0 is vulnerable to a stack-based buffer overflow, caused by improper bounds checking when processing the current locale settings. A local attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the application to crash. IBM X-Force ID: 199479"
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Client versiones 8.1.0.0-8 hasta 1.11.0, es vulnerable a un desbordamiento del búfer en la región stack de la memoria, causado por una comprobación de límites inapropiada al procesar la configuración local actual.&#xa0;Un atacante local podría desbordar un búfer y ejecutar código arbitrario en el sistema con privilegios elevados o causar que la aplicación se bloquee.&#xa0;IBM X-Force ID: 199479"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_client:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "CC8077DA-B6EF-49D6-BB96-7902E1E2DAEB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_for_space_management:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1.0.0",
            "versionEndIncluding" : "8.1.11.0",
            "matchCriteriaId" : "947CD7E1-82FC-4883-BECD-BC764C3720C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199479",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-02",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445497",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199479",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202209-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445497",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29694",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-26T17:15:08.870",
      "lastModified" : "2024-11-21T06:01:39.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Protect Plus 10.1.0 through 10.1.7 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 200258."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Protect Plus versiones 10.1.0 hasta 10.1.7, utiliza algoritmos criptográficos más débiles de lo esperado que podrían permitir a un atacante descifrar información altamente confidencial.&#xa0;IBM X-Force ID: 200258"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-327"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_protect_plus:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.1.0",
            "versionEndIncluding" : "10.1.7",
            "matchCriteriaId" : "C7C8056B-6038-4819-B241-39A9A6EAC0FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/200258",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445735",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/200258",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6445735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22669",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-26T19:15:08.417",
      "lastModified" : "2024-11-21T05:50:26.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system."
      }, {
        "lang" : "es",
        "value" : "Los permisos incorrectos son ajustados de forma predeterminada en la página \"Project Management\" del portal WebAccess/SCADA de WebAccess/SCADA Versiones 9.0.1 y anteriores, lo que puede permitir a un usuario poco privilegiado actualizar la contraseña de un administrador e iniciar sesión como administrador para escalar privilegios en el sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:advantech:webaccess\\/scada:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.1",
            "matchCriteriaId" : "5D875587-E579-4333-AEE7-7434502B4057"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-02",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-103-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29473",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-26T19:15:08.460",
      "lastModified" : "2024-11-21T06:01:11.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4. Please see our security policy for information about Exiv2 security."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una biblioteca C++ y una utilidad de línea de comandos para leer, escribir, eliminar y modificar metadatos de imágenes Exif, IPTC, XMP e ICC.&#xa0;Se encontró una lectura fuera de límites en Exiv2 versiones v0.27.3 y anteriores.&#xa0;Exiv2 es una utilidad de línea de comandos y una biblioteca C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen.&#xa0;La lectura fuera de límites es desencadenada cuando es usado Exiv2 para escribir metadatos en un archivo de imagen diseñado.&#xa0;Un atacante podría explotar la vulnerabilidad para causar una denegación de servicio al bloquear Exiv2, si puede engañar a la víctima de ejecutar Exiv2 en un archivo de imagen diseñado.&#xa0;Nota que este bug solo es desencadenado al escribir los metadatos, que es una operación Exiv2 que es usado con menos frecuencia que la lectura de los metadatos.&#xa0;Por ejemplo, para desencadenar el bug en la aplicación de línea de comandos Exiv2,&#xa0;necesita agregar un argumento de línea de comando adicional como \"insert\".&#xa0;El bug es corregido en versión v0.27.4.&#xa0;Véase nuestra política de seguridad para información sobre la seguridad de Exiv2"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L",
            "baseScore" : 2.5,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 4.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.27.4",
            "matchCriteriaId" : "0A049EBD-7A7E-458F-9ABD-F6626DDEABB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/policy",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/github/advisory-review/pull/1587",
        "source" : "security-advisories@github.com",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWZLDECIXXW3CCZ3RS4A3NG5X5VE4WZM/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBKWLTXM7IKZ4PVGKLUQVAVFAYGGF7QR/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4958",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-7569-phvm-vwc2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/policy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/github/advisory-review/pull/1587",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/08/msg00028.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2XQT5F5IINTDYDAFGVGQZ7PMMLG7I5ZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JWZLDECIXXW3CCZ3RS4A3NG5X5VE4WZM/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LBKWLTXM7IKZ4PVGKLUQVAVFAYGGF7QR/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/P2A5GMJEXQ5Q76JK6F6VKK5JYCLVFGKN/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29475",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-26T19:15:08.507",
      "lastModified" : "2024-11-21T06:01:12.963",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker is able to receive arbitrary files from the file system when exporting a note to PDF. Since the code injection has to take place as note content, there fore this exploit requires the attackers ability to modify a note. This will affect all instances, which have pdf export enabled. This issue has been fixed by https://github.com/hedgedoc/hedgedoc/commit/c1789474020a6d668d616464cb2da5e90e123f65 and is available in version 1.5.0. Starting the CodiMD/HedgeDoc instance with `CMD_ALLOW_PDF_EXPORT=false` or set `\"allowPDFExport\": false` in config.json can mitigate this issue for those who cannot upgrade. This exploit works because while PhantomJS doesn't actually render the `file:///` references to the PDF file itself, it still uses them internally, and exfiltration is possible, and easy through JavaScript rendering. The impact is pretty bad, as the attacker is able to read the CodiMD/HedgeDoc `config.json` file as well any other files on the filesystem. Even though the suggested Docker deploy option doesn't have many interesting files itself, the `config.json` still often contains sensitive information, database credentials, and maybe OAuth secrets among other things."
      }, {
        "lang" : "es",
        "value" : "\"HedgeDoc (antes se conoce como CodiMD) es un editor colaborativo de código abierto. Un atacante es capaz de recibir archivos arbitrarios del sistema de archivos al exportar una nota a PDF. Dado que la inyección de código presente que toma lugar como contenido de la nota, esta explotación requiere la habilidad de los atacantes para modificar una nota. Esto afectará a todas las instancias que tengan habilitada la exportación a PDF. Este problema ha sido corregido por https://github.com/hedgedoc/hedgedoc/commit/c1789474020a6d668d616464cb2da5e90e123f65 y está disponible en versión 1.5.0. Iniciar la instancia de CodiMD/HedgeDoc con \"\"CMD_ALLOW_PDF_EXPORT=false\"\" o ajustar \"\"allowPDFExport\"\": false\"\" en config.json puede mitigar este problema para aquellos que no puedan actualizar. Esta explotación funciona porque aunque PhantomJS no renderiza realmente las referencias \"\"file:///\"\" al archivo PDF en sí, sigue usándolas internamente, y la exfiltración es posible, y fácil por medio del renderizado de JavaScript. El impacto es bastante malo, ya que el atacante es capaz de leer el archivo CodiMD/HedgeDoc \"\"config.json\"\" así como cualquier otro archivo en el sistema de archivos. Aunque la opción de despliegue de Docker sugerida no presenta muchos archivos interesantes en sí misma, el archivo \"\"config.json\"\" suele contener información confidencial, credenciales de bases de datos, y quizás secretos de OAuth entre otras cosas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 10.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.8
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        }, {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hedgedoc:hedgedoc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.0",
            "matchCriteriaId" : "664CACC3-C0B6-4494-8C2E-BD90BBB01EE5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hedgedoc/hedgedoc/commit/c1789474020a6d668d616464cb2da5e90e123f65",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pxxg-px9v-6qf3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/commit/c1789474020a6d668d616464cb2da5e90e123f65",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-pxxg-px9v-6qf3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31646",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T19:15:08.550",
      "lastModified" : "2024-11-21T06:06:04.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses a weak algorithm for the generation of password recovery tokens (the PHP uniqueid function), allowing a brute force attack."
      }, {
        "lang" : "es",
        "value" : "Gestsup versiones anteriores a 3.2.10, permite una toma de control de la cuenta por medio de la funcionalidad password recovery (remote).&#xa0;El componente afectado es el archivo forgot_pwd.php, usa un algoritmo débil para la generación de tokens de recuperación de contraseña (la función PHP uniqueid), permitiendo un ataque de fuerza bruta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-307"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gestsup:gestsup:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2.10",
            "matchCriteriaId" : "CCC91FEE-0720-447A-9FE3-1EBF2B9D4249"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://dojo.maltem.ca/public/advisories/CVE-2021-31646.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://gestsup.fr/index.php?page=download",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.10&type=patch",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://dojo.maltem.ca/public/advisories/CVE-2021-31646.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Third Party Advisory" ]
      }, {
        "url" : "https://gestsup.fr/index.php?page=download",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://gestsup.fr/index.php?page=download&channel=beta&version=3.2.10&type=patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31783",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T19:15:08.583",
      "lastModified" : "2024-11-21T06:06:12.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "show_default.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check."
      }, {
        "lang" : "es",
        "value" : "En el archivo show_default.php en la extensión LocalFilesEditor versiones anteriores a 11.4.0.1 para Piwigo, permite una inclusión de archivos locales porque el parámetro file no es validado con una comprobación  apropiada de expresión regular"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:piwigo:localfiles_editor:*:*:*:*:*:piwigo:*:*",
            "versionEndExcluding" : "11.4.0.1",
            "matchCriteriaId" : "1D204012-A33D-4D5F-9FC6-309103C20C31"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Piwigo/LocalFilesEditor/commit/dda691d3e45bfd166ac175c70bd8b91cb4917b6b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/LocalFilesEditor/issues/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://piwigo.org/ext/index.php?cid=null",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/LocalFilesEditor/commit/dda691d3e45bfd166ac175c70bd8b91cb4917b6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Piwigo/LocalFilesEditor/issues/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://piwigo.org/ext/index.php?cid=null",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31784",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-26T19:15:08.613",
      "lastModified" : "2024-11-21T06:06:13.037",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds write vulnerability exists in the file-reading procedure in Open Design Alliance Drawings SDK before 2021.6 on all supported by ODA platforms in static configuration. This can allow attackers to cause a crash, potentially enabling a denial of service attack (Crash, Exit, or Restart) or possible code execution."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en el procedimiento de lectura de archivos en Open Design Alliance Drawings SDK versiones anteriores a 2021.6. En todas las plataformas compatibles con ODA en configuración estática.&#xa0;Esto puede permitir a atacantes causar un bloqueo, potencialmente habilitando un ataque de denegación de servicio (Bloqueo, Salida o Reinicio) o una posible ejecución de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opendesign:drawings_sdk:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.6",
            "matchCriteriaId" : "E952B425-780A-406B-89C8-C356EC88C8B9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:comos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.1",
            "matchCriteriaId" : "0F0CFB85-CD4F-424C-8B9F-9289D08FA665"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-155599.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.opendesign.com/security-advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29474",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-26T22:15:08.900",
      "lastModified" : "2024-11-21T06:01:11.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can try to open the following URL: `http://localhost:3000/..%2F..%2FREADME#` (replace `http://localhost:3000` with your instance's base-URL e.g. `https://demo.hedgedoc.org/..%2F..%2FREADME#`). If you see a README page being rendered, you run an affected version. The attack works due the fact that the internal router passes the url-encoded alias to the `noteController.showNote`-function. This function passes the input directly to findNote() utility function, that will pass it on the the parseNoteId()-function, that tries to make sense out of the noteId/alias and check if a note already exists and if so, if a corresponding file on disk was updated. If no note exists the note creation-function is called, which pass this unvalidated alias, with a `.md` appended, into a path.join()-function which is read from the filesystem in the follow up routine and provides the pre-filled content of the new note. This allows an attacker to not only read arbitrary `.md` files from the filesystem, but also observes changes to them. The usefulness of this attack can be considered limited, since mainly markdown files are use the file-ending `.md` and all markdown files contained in the hedgedoc project, like the README, are public anyway. If other protections such as a chroot or container or proper file permissions are in place, this attack's usefulness is rather limited. On a reverse-proxy level one can force a URL-decode, which will prevent this attack because the router will not accept such a path."
      }, {
        "lang" : "es",
        "value" : "HedgeDoc (anteriormente conocida como CodiMD) es un editor colaborativo de código abierto. Un atacante puede leer archivos arbitrarios \".md\" del sistema de archivos del servidor debido a una comprobación inapropiada de la entrada, lo que resulta en la habilidad de llevar a cabo un salto de ruta relativo. Para comprobar si está afectado, puede intentar abrir la siguiente URL: \"http://localhost:3000/..%2F..%2FREADME#\" (sustituya \"http://localhost:3000\" por la URL base de su instancia, por ejemplo \"https://demo.hedgedoc.org/..%2F..%2FREADME#\"). Si ve que se muestra una página README, significa que está ejecutando una versión afectada. El ataque funciona debido a que el router interno pasa el alias codificado en url a la función \"noteController.showNote\". Esta función pasa la entrada directamente a la función de utilidad findNote(), que la pasará a la función parseNoteId(), que intenta dar sentido al noteId/alias y comprobar si ya se presenta una nota y, si es así, si se ha actualizado el archivo correspondiente en el disco. Si no se presenta ninguna nota, se llama a la función de creación de notas, que pasa este alias no comprobado, con un \".md\" añadido, a una función path.join() que se lee del sistema de archivos en la rutina de seguimiento y proporciona el contenido precargado de la nueva nota. Esto permite a un atacante no sólo leer archivos \".md\" arbitrarios del sistema de archivos, sino también observar los cambios en ellos. La utilidad de este ataque puede considerarse limitada, ya que principalmente los archivos markdown usan la terminación de archivo \".md\" y todos los archivos markdown contenidos en el proyecto hedgedoc, como el README, son públicos de todos modos. Si se presentan otras protecciones, como un chroot o un contenedor, o los permisos adecuados para los archivos, la utilidad de este ataque es bastante limitada. A nivel de proxy inverso se puede forzar una decodificación de la URL, lo que evitará este ataque porque el router no aceptará dicha ruta"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hedgedoc:hedgedoc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.0",
            "matchCriteriaId" : "91611414-D98E-4E83-ACE0-BD32E4221510"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-p528-555r-pf87",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hedgedoc/hedgedoc/security/advisories/GHSA-p528-555r-pf87",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30165",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-27T03:15:07.567",
      "lastModified" : "2024-11-21T06:03:26.183",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The default administrator account & password of the EDIMAX wireless network camera is hard-coded. Remote attackers can disassemble firmware to obtain the privileged permission and further control the devices."
      }, {
        "lang" : "es",
        "value" : "La cuenta de administrador y la contraseña predeterminadas de la cámara de red inalámbrica EDIMAX están embebidas.&#xa0;Los atacantes remotos pueden desensamblar el firmware para obtener el permiso privilegiado y controlar aún más los dispositivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:edimax:ic-3140w_firmware:3.11:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CC9E219-CCBA-412A-9A2F-26AEAF7E3251"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:edimax:ic-3140w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4263A638-4D3D-4546-965F-F691B8CF05CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4670-359c8-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4670-359c8-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30635",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-27T03:15:07.617",
      "lastModified" : "2024-11-21T06:04:20.157",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via directory traversal (no customer-specific data is exposed)."
      }, {
        "lang" : "es",
        "value" : "Sonatype Nexus Repository Manager versiones 3.x anteriores a 3.30.1, permite a un atacante remoto obtener una lista de archivos y directorios que se presentan en una carpeta relacionada con la interfaz de usuario por medio de un salto de directorio (no es expuesto datos específicos del cliente)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.30.1",
            "matchCriteriaId" : "C0BDD7AE-2BFB-4B20-AA84-3D7314F0B76F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.sonatype.com/hc/en-us/articles/1500006879561",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/articles/1500006879561",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31671",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-27T03:15:07.647",
      "lastModified" : "2024-11-21T06:06:06.230",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pgsync before 0.6.7 is affected by Information Disclosure of sensitive information. Syncing the schema with the --schema-first and --schema-only options is mishandled. For example, the sslmode connection parameter may be lost, which means that SSL would not be used."
      }, {
        "lang" : "es",
        "value" : "pgsync versiones anteriores a 0.6.7 está afectado por la divulgación de información confidencial.&#xa0;La sincronización del esquema con las opciones --schema-first y --schema-only no es manejado apropiadamente.&#xa0;Por ejemplo, es posible que se pierda el parámetro sslmode connection, lo que significa que no es usado SSL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pgsync_project:pgsync:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.6.7",
            "matchCriteriaId" : "E25C07F9-DFF2-41EB-AD53-C73BF840B45A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ankane/pgsync/issues/121",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ankane/pgsync/issues/121",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31826",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-27T04:15:08.550",
      "lastModified" : "2024-11-21T06:06:18.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Shibboleth Service Provider 3.x before 3.2.2 is prone to a NULL pointer dereference flaw involving the session recovery feature. The flaw is exploitable (for a daemon crash) on systems not using this feature if a crafted cookie is supplied."
      }, {
        "lang" : "es",
        "value" : "Shibboleth Service Provider versiones 3.x anteriores a 3.2.2, es propenso a un fallo de desreferencia del puntero NULL que involucra la funcionalidad session recovery.&#xa0;El fallo es explotable (para un bloqueo del demonio) en sistemas que no usan esta funcionalidad si es suministrada una cookie diseñada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shibboleth:service_provider:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "7515117E-CEA5-47C9-BE81-0D1220C06545"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.debian.org/987608",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=5a47c3b9378f4c49392dd4d15189b70956f9f2ec",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://issues.shibboleth.net/jira/browse/SSPCPP-927",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20210426.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4905",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.debian.org/987608",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://git.shibboleth.net/view/?p=cpp-sp.git%3Ba=commit%3Bh=5a47c3b9378f4c49392dd4d15189b70956f9f2ec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://issues.shibboleth.net/jira/browse/SSPCPP-927",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://shibboleth.net/community/advisories/secadv_20210426.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4905",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20714",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-27T06:15:07.800",
      "lastModified" : "2024-11-21T05:47:03.737",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de salto de directorio en WP Fastest Cache versiones anteriores a 0.9.1.7 permite a un atacante remoto con privilegios de administrador eliminar archivos arbitrarios en el servidor por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpfastestcache:wp_fastest_cache:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "0.9.1.7",
            "matchCriteriaId" : "76ACB242-1C61-4812-80FF-BF8337E73BBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN35240327/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-fastest-cache/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wpfastestcache.com/",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN35240327/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wordpress.org/plugins/wp-fastest-cache/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.wpfastestcache.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20715",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-27T06:15:07.830",
      "lastModified" : "2024-11-21T05:47:03.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Hot Pepper Gourmet App for Android ver.4.111.0 and earlier, and for iOS ver.4.111.0 and earlier allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App."
      }, {
        "lang" : "es",
        "value" : "La vulnerabilidad de control de acceso inapropiado en la aplicación Hot Pepper Gourmet para Android versiones 4.111.0 y anteriores, y para iOS versión 4.111.0 y anterior, permite a un atacante remoto conllevar a un usuario a acceder a un sitio web arbitrario por medio de la aplicación vulnerable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recruit-holdings:hot_pepper_gourmet:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "4.111.0",
            "matchCriteriaId" : "7F3E161A-B554-46FE-94F2-052B88592C87"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:recruit-holdings:hot_pepper_gourmet:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "4.111.0",
            "matchCriteriaId" : "FC43E9BB-46BE-4D17-9A10-4B6606AD11AA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/jp/JVN97434260/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/jp/JVN97434260/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28125",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-27T10:15:09.693",
      "lastModified" : "2024-11-21T05:59:07.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Superset up to and including 1.0.1 allowed for the creation of an external URL that could be malicious. By not checking user input for open redirects the URL shortener functionality would allow for a malicious user to create a short URL for a dashboard that could convince the user to click the link."
      }, {
        "lang" : "es",
        "value" : "Apache Superset versiones hasta 1.0.1 incluyéndola, permitió la creación de una URL externa que podría ser maliciosa.&#xa0;Al no comprobar la entrada del usuario para los redireccionamientos abiertos, la funcionalidad URL shortener permitiría a un usuario malicioso crear una URL corta para un panel que podría convencer al usuario de que haga clic en el enlace"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:superset:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.1",
            "matchCriteriaId" : "265A8282-BF38-4327-A0FD-B46CDDE81496"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/2",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r89b5d0dd35c1adc9624b48d6247729c73b2641b32754226661368434%40%3Cdev.superset.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27480",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-27T12:15:07.453",
      "lastModified" : "2024-11-21T05:58:04.707",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Delta Industrial Automation COMMGR Versions 1.12 and prior are vulnerable to a stack-based buffer overflow, which may allow an attacker to execute remote code."
      }, {
        "lang" : "es",
        "value" : "Delta Industrial Automation COMMGR versiones 1.12 y anteriores, son vulnerables a un desbordamiento de búfer en la región stack de la memoria, lo que puede permitir a un atacante ejecutar código remoto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:deltaww:industrial_automation_commgr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.12",
            "matchCriteriaId" : "EC502352-B1C6-4A4F-B3DD-1A58B8C9FF9C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-110-03",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22660",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-27T13:15:08.287",
      "lastModified" : "2024-11-21T05:50:25.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds read, which may allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "CNCSoft-B versiones 1.0.0.3 y anteriores, son vulnerables a una lectura fuera de límites, lo que puede permitir a un atacante ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:criticalmanufacturing:cncsoft-b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.3",
            "matchCriteriaId" : "2A0E0D56-DFDA-4214-ADA4-70044A30D85A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-445/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-446/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-509/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-445/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-446/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-509/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22664",
      "sourceIdentifier" : "ics-cert@hq.dhs.gov",
      "published" : "2021-04-27T13:15:08.327",
      "lastModified" : "2024-11-21T05:50:26.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CNCSoft-B Versions 1.0.0.3 and prior is vulnerable to an out-of-bounds write, which may allow an attacker to execute arbitrary code."
      }, {
        "lang" : "es",
        "value" : "CNCSoft-B versiones 1.0.0.3 y anteriores, son vulnerables a una escritura fuera de límites, lo que puede permitir a un atacante ejecutar código arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "ics-cert@hq.dhs.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:criticalmanufacturing:cncsoft-b:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.0.3",
            "matchCriteriaId" : "2A0E0D56-DFDA-4214-ADA4-70044A30D85A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-444/",
        "source" : "ics-cert@hq.dhs.gov",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://us-cert.cisa.gov/ics/advisories/icsa-21-110-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-444/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28271",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-27T13:15:08.373",
      "lastModified" : "2024-11-21T05:59:24.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag (Full) for 'Everyone'and 'Authenticated Users' group."
      }, {
        "lang" : "es",
        "value" : "Soyal Technologies SOYAL versión 701Server 9.0.1, sufre de una vulnerabilidad de escalada de privilegios que puede ser usada por un usuario autenticado para cambiar el archivo ejecutable con una opción binaria.&#xa0;La vulnerabilidad es debido a permisos inapropiados con el flag \"F\" (Full) para el grupo \"Everyone\" y \"Authenticated Users\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soyal:701clientsql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "D87218FA-E4CB-4013-936D-2E2EABE5A081"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soyal:701server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "9.0.2",
            "matchCriteriaId" : "B852C725-1128-4D4D-B991-BA07AB1B9A8B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soyal:701serversql:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0",
            "versionEndExcluding" : "10.2",
            "matchCriteriaId" : "59788149-3C92-4A5F-81AB-9F320ED4CD33"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49678",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49678",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5633.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28269",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-27T15:15:07.553",
      "lastModified" : "2024-11-21T05:59:24.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Soyal Technology 701Client 9.0.1 is vulnerable to Insecure permissions via client.exe binary with Authenticated Users group with Full permissions."
      }, {
        "lang" : "es",
        "value" : "Soyal Technology versión 701Client 9.0.1, es vulnerable a permisos no seguros por medio del binario client.exe con el grupo de Usuarios Autenticados con permisos Completos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:soyal:701client:9.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0BF587E5-CBB0-4709-AA9D-05ACFE040ED9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49679",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5634.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49679",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.zeroscience.mk/en/vulnerabilities/ZSL-2021-5634.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30642",
      "sourceIdentifier" : "secure@symantec.com",
      "published" : "2021-04-27T15:15:07.587",
      "lastModified" : "2024-11-21T06:04:21.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An input validation flaw in the Symantec Security Analytics web UI 7.2 prior 7.2.7, 8.1, prior to 8.1.3-NSR3, 8.2, prior to 8.2.1-NSR2 or 8.2.2 allows a remote, unauthenticated attacker to execute arbitrary OS commands on the target with elevated privileges."
      }, {
        "lang" : "es",
        "value" : "Un fallo de comprobación de entrada en la Interfaz de Usuario web de Symantec Security Analytics 7.2 anterior a versión 7.2.7, 8.1, anterior a versión 8.1.3-NSR3, 8.2, anterior a versión 8.2.1-NSR2 o 8.2.2, permite a un atacante remoto no autenticado ejecutar un Sistema Operativo arbitrario comandos en el destino con privilegios elevados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.2",
            "versionEndExcluding" : "7.2.7",
            "matchCriteriaId" : "3A5351FB-9C96-4F7C-A62A-0589B2175475"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.1",
            "versionEndExcluding" : "8.1.3-nsr3",
            "matchCriteriaId" : "16947737-D883-4138-B28F-A70320DB8A7C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:symantec:security_analytics:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2",
            "versionEndExcluding" : "8.2.2",
            "matchCriteriaId" : "7404068A-A0CE-4C69-9236-CCDC2BFE32F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA17969",
        "source" : "secure@symantec.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://support.broadcom.com/security-advisory/content/security-advisories/0/SYMSA17969",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3451",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-27T16:15:07.720",
      "lastModified" : "2024-11-21T06:21:34.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow configuration files to be written to non-standard locations."
      }, {
        "lang" : "es",
        "value" : "Se reportó una vulnerabilidad de denegación de servicio en Lenovo PCManager, anterior a versión 3.0.400.3252, que podría permitir a archivos de configuración se escribieran en ubicaciones no estándar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:pcmanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.400.3252",
            "matchCriteriaId" : "A9FF25B9-8295-40DF-9B25-11D436DFE1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iknow.lenovo.com.cn/detail/dc_196156.html",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://iknow.lenovo.com.cn/detail/dc_196156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3464",
      "sourceIdentifier" : "psirt@lenovo.com",
      "published" : "2021-04-27T16:15:07.763",
      "lastModified" : "2024-11-21T06:21:36.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A DLL search path vulnerability was reported in Lenovo PCManager, prior to version 3.0.400.3252, that could allow privilege escalation."
      }, {
        "lang" : "es",
        "value" : "Se reportó una vulnerabilidad en la ruta de búsqueda de DLL en Lenovo PCManager, anterior a versión 3.0.400.3252, que podría permitir una escalada de privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@lenovo.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@lenovo.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:lenovo:pcmanager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.400.3252",
            "matchCriteriaId" : "A9FF25B9-8295-40DF-9B25-11D436DFE1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://iknow.lenovo.com.cn/detail/dc_196156.html",
        "source" : "psirt@lenovo.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://iknow.lenovo.com.cn/detail/dc_196156.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20448",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-27T17:15:08.187",
      "lastModified" : "2024-11-21T05:46:36.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624."
      }, {
        "lang" : "es",
        "value" : "IBM Content Navigator versión 3.0.CD, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista que puede conllevar a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 196624"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:continuous_delivery:*:*:*",
            "matchCriteriaId" : "862A5E5D-03A2-44E7-B19B-B98CDA912C57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196624",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447139",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196624",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447139",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20549",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-27T17:15:08.223",
      "lastModified" : "2024-11-21T05:46:45.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167."
      }, {
        "lang" : "es",
        "value" : "IBM Content Navigator versión 3.0.CD, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista que puede conllevar a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 199167"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:continuous_delivery:*:*:*",
            "matchCriteriaId" : "862A5E5D-03A2-44E7-B19B-B98CDA912C57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199167",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447143",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199167",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20550",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-27T17:15:08.257",
      "lastModified" : "2024-11-21T05:46:45.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168."
      }, {
        "lang" : "es",
        "value" : "IBM Content Navigator versión 3.0.CD, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista que puede conllevar a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 199168"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:content_navigator:3.0.0:*:*:*:continuous_delivery:*:*:*",
            "matchCriteriaId" : "862A5E5D-03A2-44E7-B19B-B98CDA912C57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199168",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447143",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199168",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447143",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29666",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-27T17:15:08.440",
      "lastModified" : "2024-11-21T06:01:36.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199400."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Scale versiones 5.0.0 hasta 5.0.5.6 y versiones 5.1.0 hasta 5.1.0.2, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista que puede conllevar a una divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 199400"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.5.6",
            "matchCriteriaId" : "F7B6457E-1D43-4D57-BAC0-7450122CBD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.1.0.2",
            "matchCriteriaId" : "90440D6E-C3E8-4DFB-8ACD-CDCC6D0C96AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199400",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447107",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199400",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29667",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-27T17:15:08.477",
      "lastModified" : "2024-11-21T06:01:36.813",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Spectrum Scale 5.0.0 through 5.0.5.6 and 5.1.0 through 5.1.0.2 is potentially vulnerable to CSV Injection. A remote attacker could execute arbitrary commands on the system, caused by improper validation of csv file contents. IBM X-Force ID: 199403."
      }, {
        "lang" : "es",
        "value" : "IBM Spectrum Scale versiones 5.0.0 hasta 5.0.5.6 y versiones 5.1.0 hasta 5.1.0.2, es potencialmente vulnerable a una inyección de CSV.&#xa0;Un atacante remoto podría ejecutar comandos arbitrarios en el sistema, causados por una comprobación inapropiada del contenido del archivo csv. IBM X-Force ID: 199403"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1236"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.0.0",
            "versionEndIncluding" : "5.0.5.6",
            "matchCriteriaId" : "F7B6457E-1D43-4D57-BAC0-7450122CBD2B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:spectrum_scale:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.1.0",
            "versionEndIncluding" : "5.1.0.2",
            "matchCriteriaId" : "90440D6E-C3E8-4DFB-8ACD-CDCC6D0C96AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199403",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447107",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/199403",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6447107",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30638",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-27T19:15:07.733",
      "lastModified" : "2024-11-21T06:04:20.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using a specially-constructed URL. This was caused by an incomplete fix for CVE-2020-13953. This issue affects Apache Tapestry Apache Tapestry 5.4.0 version to Apache Tapestry 5.6.3; Apache Tapestry 5.7.0 version and Apache Tapestry 5.7.1."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Exposición de Información en el manejo de activos de contexto de Apache Tapestry, permite a un atacante descargar archivos dentro de WEB-INF si usa una URL especialmente construida.&#xa0;Esto fue causado por una corrección incompleta para CVE-2020-13953.&#xa0;Este problema afecta a Apache Tapestry Apache Tapestry versión 5.4.0 a Apache Tapestry 5.6.3;&#xa0;Apache Tapestry 5.7.0 versión y Apache Tapestry 5.7.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tapestry:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.4.0",
            "versionEndExcluding" : "5.6.4",
            "matchCriteriaId" : "7A0DF29E-DB18-435F-AEEE-BBE15AB58102"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:tapestry:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "5.7.0",
            "versionEndExcluding" : "5.7.2",
            "matchCriteriaId" : "CAB95899-BCFE-4B01-AB69-3F4C02617313"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/3",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0004/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-491/",
        "source" : "security@apache.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r37dab61fc7f7088d4311e7f995ef4117d58d86a675f0256caa6991eb%40%3Cusers.tapestry.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0004/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-491/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21365",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T20:15:08.713",
      "lastModified" : "2024-11-21T05:48:12.363",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Bootstrap Package is a theme for TYPO3. It has been discovered that rendering content in the website frontend is vulnerable to cross-site scripting. A valid backend user account is needed to exploit this vulnerability. Users of the extension, who have overwritten the affected templates with custom code must manually apply the security fix. Update to version 7.1.2, 8.0.8, 9.1.4, 10.0.10 or 11.0.3 of the Bootstrap Package that fix the problem described. Updated version are available from the TYPO3 extension manager, Packagist and at https://extensions.typo3.org/extension/download/bootstrap_package/."
      }, {
        "lang" : "es",
        "value" : "Bootstrap Package es un tema para TYPO3.&#xa0;Se ha descubierto que la renderización de contenido en la interfaz del sitio web es vulnerable a ataques de tipo cross-site scripting.&#xa0;Es necesario una cuenta de usuario de backend válida para explotar esta vulnerabilidad.&#xa0;Los usuarios de la extensión que hayan sobrescrito las plantillas afectadas con código personalizado deben aplicar manualmente la corrección de seguridad.&#xa0;Actualiza a versiones 7.1.2, 8.0.8, 9.1.4, 10.0.10 o 11.0.3 del paquete Bootstrap que corrige el problema descrito.&#xa0;La versión actualizada está disponible en el administrador de extensiones TYPO3, Packagist y en https://extensions.typo3.org/extension/download/bootstrap_package/"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "17B07B8B-EBB9-4966-B743-365B32FC31E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndExcluding" : "8.0.8",
            "matchCriteriaId" : "E99F1CE2-72CE-40CE-8FBD-678346EE0C1D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.0.4",
            "matchCriteriaId" : "C887BFE4-14C9-478A-9889-AD83FA34DCDB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.1.0",
            "versionEndExcluding" : "9.1.3",
            "matchCriteriaId" : "85B9F508-0633-40AC-BA40-0A48B7B0DB81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.0.0",
            "versionEndExcluding" : "10.0.10",
            "matchCriteriaId" : "6AF391E6-82CF-410E-AA25-C83A833DAFF2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0.0",
            "versionEndExcluding" : "11.0.3",
            "matchCriteriaId" : "FFD19514-12D5-4CE5-A26A-3DC13432E692"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/benjaminkott/bootstrap_package/commit/de3a568fc311d6712d9339643e51e8627c80530b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/benjaminkott/bootstrap_package/security/advisories/GHSA-p48w-vf3c-rqjx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-007",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/benjaminkott/bootstrap_package/commit/de3a568fc311d6712d9339643e51e8627c80530b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/benjaminkott/bootstrap_package/security/advisories/GHSA-p48w-vf3c-rqjx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21429",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T20:15:08.763",
      "lastModified" : "2024-11-21T05:48:20.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OpenAPI Generator allows generation of API client libraries, server stubs, documentation and configuration automatically given an OpenAPI Spec. Using `File.createTempFile` in JDK will result in creating and using insecure temporary files that can leave application and system data vulnerable to attacks. OpenAPI Generator maven plug-in creates insecure temporary files during the process. The issue has been patched with `Files.createTempFile` and released in the v5.1.0 stable version."
      }, {
        "lang" : "es",
        "value" : "OpenAPI Generator permite la generación de bibliotecas cliente API, stubs de servidor, documentación y configuración de forma automática dada una especificación OpenAPI.&#xa0;El uso de la función \"File.createTempFile\" en JDK dará como resultado la creación y el uso de archivos temporales no seguros que pueden dejar la aplicación y los datos del sistema vulnerables a ataques.&#xa0;El plugin Maven de OpenAPI Generator crea archivos temporales no seguros durante el proceso.&#xa0;El problema ha sido parcheado con \"Files.createTempFile\" y es lanzado en versión estable v5.1.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openapi-generator:openapi_generator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.1.0",
            "matchCriteriaId" : "E271BD89-5082-49B0-85BB-39B7AE2792BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/OpenAPITools/openapi-generator/pull/8795",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-867q-77cc-98mv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenAPITools/openapi-generator/pull/8795",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/OpenAPITools/openapi-generator/security/advisories/GHSA-867q-77cc-98mv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29200",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-27T20:15:08.827",
      "lastModified" : "2024-11-21T06:00:48.660",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack"
      }, {
        "lang" : "es",
        "value" : "Apache OFBiz, presenta deserialización no segura anteriores a versión 17.12.07. Un usuario no autenticado puede llevar a cabo un ataque RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.12.07",
            "matchCriteriaId" : "C8ACF21F-15F9-4F4D-97FD-909514BCCDBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/4",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r708351f1a8af7adb887cc3d8a92bed8fcbff4a9e495e69a9ee546fda%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cuser.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r708351f1a8af7adb887cc3d8a92bed8fcbff4a9e495e69a9ee546fda%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/re21d25d9fb89e36cea910633779c23f144b9b60596b113b7bf1e8097%40%3Cuser.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29460",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T20:15:08.860",
      "lastModified" : "2024-11-21T06:01:08.957",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to other users or visitors of the site. If the victim opens that link in a browser where they are logged in to Kirby, the script will run and can for example trigger requests to Kirby's API with the permissions of the victim. This vulnerability is critical if you might have potential attackers in your group of authenticated Panel users, as they can escalate their privileges if they get access to the Panel session of an admin user. Depending on your site, other JavaScript-powered attacks are possible. Visitors without Panel access can only use this attack vector if your site allows SVG file uploads in frontend forms and you don't already sanitize uploaded SVG files. The problem has been patched in Kirby 3.5.4. Please update to this or a later version to fix the vulnerability. Frontend upload forms need to be patched separately depending on how they store the uploaded file(s). If you use `File::create()`, you are protected by updating to 3.5.4+. As a work around you can disable the upload of SVG files in your file blueprints."
      }, {
        "lang" : "es",
        "value" : "Kirby es un CMS de código abierto.&#xa0;Un editor con acceso de escritura al Kirby Panel puede cargar un archivo SVG que contenga contenido dañino como etiquetas \"(script)\".&#xa0;El enlace directo a ese archivo puede ser enviado a otros usuarios o visitantes al sitio.&#xa0;Si la víctima abre ese enlace en un navegador donde ha iniciado sesión en Kirby, el script se ejecutará y puede, por ejemplo, desencadenar peticiones a la API de Kirby con los permisos de la víctima.&#xa0;Esta vulnerabilidad es crítica si puede tener atacantes potenciales en su grupo de usuarios autenticados del Panel, ya que pueden escalar sus privilegios si consiguen acceso a la sesión del Panel de un usuario administrador.&#xa0;Dependiendo de su sitio, son posibles otros ataques basados ??en JavaScript.&#xa0;Los visitantes sin acceso al Panel solo pueden usar este vector de ataque si su sitio permite la carga de archivos SVG en formularios de frontend y usted no&#xa0;sanea los archivos SVG cargados.&#xa0;El problema ha sido parcheado en Kirby versión 3.5.4.&#xa0;Actualice a esta o una versión posterior para corregir la vulnerabilidad.&#xa0;Los formularios de carga de frontend deben parchearse por separado dependiendo de cómo almacenan los archivos cargados.&#xa0;Si usa la función \"File::create()\", está protegido actualizando a 3.5.4+.&#xa0;Como solución alternativa, puede desencadenar la carga de archivos SVG en sus planos de archivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getkirby:kirby:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.5.4",
            "matchCriteriaId" : "F6D1B4A2-1BAE-4A15-9904-5229E7632479"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162359/Kirby-CMS-3.5.3.1-Cross-Site-Scripting.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/getkirby/kirby/releases/tag/3.5.4",
        "source" : "security-advisories@github.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getkirby/kirby/security/advisories/GHSA-qgp4-5qx6-548g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162359/Kirby-CMS-3.5.3.1-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/getkirby/kirby/releases/tag/3.5.4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/getkirby/kirby/security/advisories/GHSA-qgp4-5qx6-548g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30128",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-04-27T20:15:08.903",
      "lastModified" : "2024-11-21T06:03:21.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache OFBiz has unsafe deserialization prior to 17.12.07 version"
      }, {
        "lang" : "es",
        "value" : "Apache OFBiz, presenta una deserialización no segura, anterior a versión 17.12.07"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "17.12.07",
            "matchCriteriaId" : "C8ACF21F-15F9-4F4D-97FD-909514BCCDBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/5",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cuser.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb82f41de3c44bb644632531f79649046ca76afeab25a2bdb9991ab84%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/27/5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r078351a876ed284ba667b33aba29428d7308a5bd4df78f14a3df6661%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/r108a964764b8bd21ebd32ccd4f51c183ee80a251c105b849154a8e9d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rab718cfe6468085d7560c0c1ae816841e175886199f42e36efb8d735%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cdev.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rb3f5cd65f3ddce9b9eb4d6ea6e2919933f0f89b15953769d11003743%40%3Cuser.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rb82f41de3c44bb644632531f79649046ca76afeab25a2bdb9991ab84%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe512e5ccd6b11169c6379daa1234bc805f3d53c5a38224e956295ce%40%3Cnotifications.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rbe8439b26a71fc3b429aa793c65dcc4a6e349bc7bb5010746a74fa1d%40%3Ccommits.ofbiz.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29441",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T21:15:07.993",
      "lastModified" : "2024-11-21T06:01:06.293",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce authentication. This filter has a backdoor that enables Nacos servers to bypass this filter and therefore skip authentication checks. This mechanism relies on the user-agent HTTP header so it can be easily spoofed. This issue may allow any user to carry out any administrative tasks on the Nacos server."
      }, {
        "lang" : "es",
        "value" : "Nacos es una plataforma diseñada para el descubrimiento y la configuración dinámica de servicios y la gestión de servicios.&#xa0;En Nacos versiones anteriores a  1.4.1, cuando se configura para usar autenticación (-Dnacos.core.auth.enabled=true), Nacos usa el filtro de servlet AuthFilter para hacer cumplir la autenticación.&#xa0;Este filtro presenta una backdoor que permite a servidores de Nacos omitir este filtro y, por lo tanto, omitir las comprobaciones de autenticación.&#xa0;Este mecanismo es basado en el encabezado HTTP del agente de usuario para que pueda falsificarse fácilmente.&#xa0;Este problema puede permitir a cualquier usuario llevar a cabo cualquier tarea administrativa en el servidor de Nacos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-290"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alibaba:nacos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "167EF403-0A27-4951-83BF-0BE274BBA6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-36hp-jr8h-556f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/issues/4701",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/pull/4703",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-36hp-jr8h-556f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/issues/4701",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/pull/4703",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29442",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T21:15:08.030",
      "lastModified" : "2024-11-21T06:01:06.423",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wiping it out. While the /data/remove endpoint is properly protected with the @Secured annotation, the /derby endpoint is not protected and can be openly accessed by unauthenticated users. These endpoints are only valid when using embedded storage (derby DB) so this issue should not affect those installations using external storage (e.g. mysql)"
      }, {
        "lang" : "es",
        "value" : "Nacos es una plataforma diseñada para el descubrimiento y la configuración dinámica de servicios y la administración de servicios.&#xa0;En Nacos versiones anteriores a 1.4.1, la función ConfigOpsController permite al usuario llevar a cabo operaciones de administración como consultar la base de datos o incluso borrarla.&#xa0;Si bien el endpoint /data/remove está protegido apropiadamente con la anotación @Secured, el endpoint /derby no está protegido y los usuarios no autenticados pueden acceder a él abiertamente.&#xa0;Estos endpoints solo son válidos cuando se usa almacenamiento integrado (derby DB), por lo que este problema no debería afectar las instalaciones que usan almacenamiento externo (por ejemplo, mysql)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:alibaba:nacos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.1",
            "matchCriteriaId" : "167EF403-0A27-4951-83BF-0BE274BBA6B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/advisories/GHSA-36hp-jr8h-556f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/issues/4463",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/pull/4517",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/advisories/GHSA-36hp-jr8h-556f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/issues/4463",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/alibaba/nacos/pull/4517",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29472",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T21:15:08.067",
      "lastModified" : "2024-11-21T06:01:11.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Composer is a dependency manager for PHP. URLs for Mercurial repositories in the root composer.json and package source download URLs are not sanitized correctly. Specifically crafted URL values allow code to be executed in the HgDriver if hg/Mercurial is installed on the system. The impact to Composer users directly is limited as the composer.json file is typically under their own control and source download URLs can only be supplied by third party Composer repositories they explicitly trust to download and execute source code from, e.g. Composer plugins. The main impact is to services passing user input to Composer, including Packagist.org and Private Packagist. This allowed users to trigger remote code execution. The vulnerability has been patched on Packagist.org and Private Packagist within 12h of receiving the initial vulnerability report and based on a review of logs, to the best of our knowledge, was not abused by anyone. Other services/tools using VcsRepository/VcsDriver or derivatives may also be vulnerable and should upgrade their composer/composer dependency immediately. Versions 1.10.22 and 2.0.13 include patches for this issue."
      }, {
        "lang" : "es",
        "value" : "Composer es un administrador de dependencias para PHP.&#xa0;Las URL de los repositorios de Mercurial en la root composer.json y las URL de descarga de la fuente del paquete no se sanean correctamente.&#xa0;Los valores de URL específicamente diseñados permiten que el código se ejecute en HgDriver si hg/Mercurial está instalado en el sistema.&#xa0;El impacto para usuarios de Composer directamente es limitado ya que el archivo composer.json generalmente está bajo su propio control y las URL de descarga de origen solo pueden ser proporcionadas por repositorios de Composer de terceros en los que confían explícitamente para descargar y ejecutar el código fuente, por ejemplo, complementos de Composer.&#xa0;El principal impacto es en los servicios que pasan la entrada del usuario a Composer, incluidos Packagist.org y Private Packagist.&#xa0;Esto permitió a usuarios activar la ejecución remota de código.&#xa0;La vulnerabilidad se ha corregido en Packagist.&#xa0;org y Private Packagist dentro de las 12 horas posteriores a la recepción del informe de vulnerabilidad inicial y, en base a una revisión de los registros, hasta donde sabemos, nadie abusó de ella.&#xa0;Otros servicios y herramientas que usan VcsRepository/VcsDriver o derivados también pueden ser vulnerables y deberían actualizar su dependencia de compositor/compositor de inmediato.&#xa0;Las versiones 1.10.22 y 2.0.13 incluyen parches para este problema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-88"
        }, {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getcomposer:composer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.10.22",
            "matchCriteriaId" : "0DE98825-670B-465E-8ACC-70F7EFEFCABD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getcomposer:composer:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0",
            "versionEndExcluding" : "2.0.13",
            "matchCriteriaId" : "2427D469-77EA-48B0-9DC1-9BF56ACCE719"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/php-supply-chain-attack-on-composer/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://getcomposer.org/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/composer/composer/security/advisories/GHSA-h5h8-pc6h-jvvx",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00009.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAQUAMGO4Q4BLNZ2OH4CXQD7UK4IO2GE/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KN3DMFH42BJW45VT6FYF2RXKC26D6VC2/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4907",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/php-supply-chain-attack-on-composer/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://getcomposer.org/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/composer/composer/security/advisories/GHSA-h5h8-pc6h-jvvx",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00009.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FAQUAMGO4Q4BLNZ2OH4CXQD7UK4IO2GE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KN3DMFH42BJW45VT6FYF2RXKC26D6VC2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4907",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29476",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-27T21:15:08.107",
      "lastModified" : "2024-11-21T06:01:13.087",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Requests is a HTTP library written in PHP. Requests mishandles deserialization in FilteredIterator. The issue has been patched and users of `Requests` 1.6.0, 1.6.1 and 1.7.0 should update to version 1.8.0."
      }, {
        "lang" : "es",
        "value" : "Requests es una biblioteca HTTP escrita en PHP.&#xa0;Las peticiones manejan inapropiadamente una deserialización en FilteredIterator.&#xa0;El problema ha sido parcheado y usuarios de \"Requests\" versiones 1.6.0, 1.6.1 y 1.7.0 deberían actualizar a versión 1.8.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:requests:1.6.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3145DE0F-A194-4E09-8CEB-3AE04D360E29"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:requests:1.6.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C81C02F-FB0E-4977-A4BA-441A2652FBEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wordpress:requests:1.7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C38CDEB-A420-4419-A538-92B86A51B501"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/WordPress/Requests/security/advisories/GHSA-52qp-jpq7-6c54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rmccue/Requests/pull/421",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/WordPress/Requests/security/advisories/GHSA-52qp-jpq7-6c54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/rmccue/Requests/pull/421",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20716",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-28T01:15:17.107",
      "lastModified" : "2024-11-21T05:47:03.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hidden functionality in multiple Buffalo network devices (BHR-4RV firmware Ver.2.55 and prior, FS-G54 firmware Ver.2.04 and prior, WBR2-B11 firmware Ver.2.32 and prior, WBR2-G54 firmware Ver.2.32 and prior, WBR2-G54-KD firmware Ver.2.32 and prior, WBR-B11 firmware Ver.2.23 and prior, WBR-G54 firmware Ver.2.23 and prior, WBR-G54L firmware Ver.2.20 and prior, WHR2-A54G54 firmware Ver.2.25 and prior, WHR2-G54 firmware Ver.2.23 and prior, WHR2-G54V firmware Ver.2.55 and prior, WHR3-AG54 firmware Ver.2.23 and prior, WHR-G54 firmware Ver.2.16 and prior, WHR-G54-NF firmware Ver.2.10 and prior, WLA2-G54 firmware Ver.2.24 and prior, WLA2-G54C firmware Ver.2.24 and prior, WLA-B11 firmware Ver.2.20 and prior, WLA-G54 firmware Ver.2.20 and prior, WLA-G54C firmware Ver.2.20 and prior, WLAH-A54G54 firmware Ver.2.54 and prior, WLAH-AM54G54 firmware Ver.2.54 and prior, WLAH-G54 firmware Ver.2.54 and prior, WLI2-TX1-AG54 firmware Ver.2.53 and prior, WLI2-TX1-AMG54 firmware Ver.2.53 and prior, WLI2-TX1-G54 firmware Ver.2.20 and prior, WLI3-TX1-AMG54 firmware Ver.2.53 and prior, WLI3-TX1-G54 firmware Ver.2.53 and prior, WLI-T1-B11 firmware Ver.2.20 and prior, WLI-TX1-G54 firmware Ver.2.20 and prior, WVR-G54-NF firmware Ver.2.02 and prior, WZR-G108 firmware Ver.2.41 and prior, WZR-G54 firmware Ver.2.41 and prior, WZR-HP-G54 firmware Ver.2.41 and prior, WZR-RS-G54 firmware Ver.2.55 and prior, and WZR-RS-G54HP firmware Ver.2.55 and prior) allows a remote attacker to enable the debug option and to execute arbitrary code or OS commands, change the configuration, and cause a denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Una funcionalidad Hidden en múltiples dispositivos de red de Buffalo (firmware de BHR-4RV Ver.2.55 y anteriores, firmware de FS-G54 Ver.2.04 y anteriores, firmware de WBR2-B11 Ver.2.32 y anteriores, firmware de WBR2-G54 Ver.2 .32 y anteriores, firmware de WBR2-G54-KD Ver.2.32 y anteriores, firmware de WBR-B11 Ver.2.23 y anteriores, firmware de WBR-G54 Ver.2.23 y anteriores, firmware de WBR-G54L Ver.2.20 y anteriores, firmware de WHR2-A54G54 Ver.2 .25 y anteriores, firmware de WHR2-G54 Ver.2.23 y anteriores, firmware de WHR2-G54V Ver.2.55 y anteriores, firmware de WHR3-AG54 Ver.2.23 y anteriores, firmware de WHR-G54 Ver.2.16 y anteriores, firmware de WHR-G54-NF Ver.2 .10 y anteriores, firmware de WLA2-G54 Ver.2.24 y anteriores, firmware de WLA2-G54C Ver.2.24 y anteriores, firmware de WLA-B11 Ver.2.20 y anteriores, firmware de WLA-G54 Ver.2.20 y anteriores, firmware de WLA-G54C Ver.2.20 y anteriores, firmware de WLAH-A54G54 Ver.2 .54 y anteriores, firmware de WLAH-AM54G54 Ver.2.54 y anteriores, firmware de WLAH-G54 Ver.2.54 y anteriores, firmware de WLI2-TX1-AG54 Ver.2.53 y anteriores, firmware de WLI2-TX1-AMG54 Ver.2.53 y anteriores, firmware de WLI2-TX1-G54 Ver.2 .20 y anteriores, firmware de WLI3-TX1-AMG54 Ver.2.53 y anteriores, firmware de WLI3-TX1-G54 Ver.2.53 y anteriores, firmware de WLI-T1-B11 Ver.2.20 y anteriores, firmware de WLI-TX1-G54 Ver.2.20 y anteriores, firmware de WVR-G54-NF Ver.2 .02 y anteriores, firmware de WZR-G108 Ver.2.41 y anteriores, firmware de WZR-G54 Ver.2.41 y anteriores, firmware de WZR-HP-G54 Ver.2.41 y anteriores, firmware de WZR-RS-G54 Ver.2.55 y anteriores, y firmware de WZR-RS-G54HP Ver.2.55 y anteriores) permite a un atacante remoto habilitar la opción de depuración y ejecutar código arbitrario o comandos del Sistema Operativo, cambiar la configuración, y causar una condición de denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bhr-4rv_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.55",
            "matchCriteriaId" : "A5870F64-5EE0-425F-B71E-DDE20BCDFD0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bhr-4rv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0BAD48-7DB1-4F5C-8503-D86397814FAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.04",
            "matchCriteriaId" : "74DD66E3-90E8-4567-883A-04CE9412A80E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38861F63-A04A-4EF0-B3E8-D4EA979EE1AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wbr2-b11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.32",
            "matchCriteriaId" : "A9D050ED-860A-4154-8402-8A6214C5D9AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wbr2-b11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF5EEF7B-42BC-4755-98F6-CFA2FAD956B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wbr2-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.32",
            "matchCriteriaId" : "21DD735D-16B3-424A-ADF9-48B4FD2923AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wbr2-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "126F7265-9B71-44E5-8C9D-7187A9A615E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wbr2-g54-kd_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.32",
            "matchCriteriaId" : "D99B403F-8E68-4A1B-86F9-CEB0C89F3BDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wbr2-g54-kd:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18E26714-316A-493C-A87E-9045EC964C24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wbr-b11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.23",
            "matchCriteriaId" : "8CB556A4-0E37-48EA-8A41-94916F84A6D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wbr-b11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD7F11A5-614F-4DC2-A6F4-F50929B35CB1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wbr-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.23",
            "matchCriteriaId" : "F1E3DE3C-C479-44EC-98FE-C6651344ADF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wbr-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC28158A-3AC9-4845-B3FC-DA0D15F1A234"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wbr-g54l_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "2E3CD564-DF11-4BCE-AE47-F492B1E34D47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wbr-g54l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECE55F75-F79C-43D2-B0EC-0606E09BEBA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr2-a54g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.25",
            "matchCriteriaId" : "59ECCE87-35AE-4DE4-A64D-7266EA2C1DF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr2-a54g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9C7FD1B-522F-4F5F-B70D-7974629CECD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr2-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.23",
            "matchCriteriaId" : "8971EBC0-38A9-4ADD-BF54-377711B7A202"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr2-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424D75EE-6A08-4BAE-ABA2-3AA0CB66AE09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr2-g54v_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.55",
            "matchCriteriaId" : "53AC2B3D-1AC2-4A4B-8574-0281BE8D0112"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr2-g54v:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC638B4-5AA5-4FB7-BF81-93284B4C383D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr3-ag54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.23",
            "matchCriteriaId" : "243CA979-35B8-480B-88B1-D2396C2B1EBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr3-ag54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A9D554A-7834-4F8F-B09A-60B07BA68183"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.16",
            "matchCriteriaId" : "8C27DCC1-4BAA-4FDB-981C-620FB673DCFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E6CE343-E4AA-4193-8F14-3D3636336C39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-g54-nf_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.10",
            "matchCriteriaId" : "B1CDF075-F252-420A-8D95-665B459286A3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-g54-nf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5666A7B5-F61D-407F-92EB-BF617494FAAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wla2-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.24",
            "matchCriteriaId" : "A4F8B41F-6323-4A4F-8C04-778E9C9E353A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wla2-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C10BFB1-5279-4B83-B718-C2DDA278EE39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wla2-g54c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.24",
            "matchCriteriaId" : "6D55ABAA-1134-44BA-96C4-94D342D80925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wla2-g54c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A4D1EDA2-5FFC-4BEF-8896-47C9B321A9EA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wla-b11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "DB4F145F-F986-43E5-B673-3960E4036ACC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wla-b11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E98B6936-7028-493E-8172-F0B37814E50D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wla-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "41D3D3A5-C320-4B64-A229-FE2C5456D13C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wla-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2D2A48F-F9A2-493D-9BB3-E9532D23CE94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wla-g54c_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "AA1CA814-9908-42F4-A8AD-A7DED8A64D96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wla-g54c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BFF863A-47DE-4DA4-94A7-35C500C6EDE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wlah-a54g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.54",
            "matchCriteriaId" : "F70B3D38-C263-42DA-9132-2C655F1006D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wlah-a54g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27242BE1-FE1D-4375-8B58-25ED9C72D5CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wlah-am54g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.54",
            "matchCriteriaId" : "A7D2A4EF-E2D7-482B-B8F9-078458A32E46"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wlah-am54g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAA95E36-C07F-49A5-8249-175A0A58988E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wlah-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.54",
            "matchCriteriaId" : "5B1FDE14-9E3D-4471-AB45-32DB47320776"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wlah-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1E976B4-E92C-4D89-9451-D7D1F71E341B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli2-tx1-ag54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "95C16CD8-DA3C-40E5-82E3-E642179E8B00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli2-tx1-ag54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43B4520B-6782-4C95-B042-9190A972133C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli2-tx1-amg54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "86B74E01-FFA3-431A-B5EB-BB17861906C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli2-tx1-amg54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06A94087-2F4D-4839-BB49-87EDF2B46E45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli2-tx1-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "56D7C0BC-E88A-457D-B741-2E27C32F1137"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli2-tx1-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71A94806-CC4D-490D-B219-4A4DCEF19FC7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli3-tx1-amg54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "26A426BB-E1D2-4C9D-9E44-CC4DCC162DF2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli3-tx1-amg54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F5259C-9D25-43F8-B83C-6484C21589FD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli3-tx1-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.53",
            "matchCriteriaId" : "AB5162DD-0A9B-4C57-8AAD-424EF1AB1EBD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli3-tx1-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68182904-2100-4AEF-B155-26C76E4A95AA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli-t1-b11_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "2C23ADB3-DAFC-4039-9C82-29FC1A30158C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli-t1-b11:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AC65A05-7452-488B-984C-D5FF8F675806"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wli-tx1-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.20",
            "matchCriteriaId" : "D2000A0E-9E6C-4804-BA57-3AD4223D0933"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wli-tx1-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "719095B6-A2D4-44F5-B38D-ADEB4DB16DEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wvr-g54-nf_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.02",
            "matchCriteriaId" : "F15611D1-3D46-4824-B3A7-D61475D4D39B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wvr-g54-nf:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086A819B-D0FE-4689-8647-3A0C128ABAE8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-g108_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.41",
            "matchCriteriaId" : "5F9AE0C2-2D7E-4C91-9212-18696307E6A0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-g108:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4286D1A-0E67-44BC-9E2C-19118CA9D7D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.41",
            "matchCriteriaId" : "2F026AD1-4117-44DE-BE84-6DE9EE65A290"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "220B227C-AEF5-403D-83E5-FC739168E0EF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.41",
            "matchCriteriaId" : "6E907479-F6A4-40D5-A859-4ED7421BC93A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49734A6A-1CD2-4866-8A43-5D31E319C1A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-rs-g54_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.55",
            "matchCriteriaId" : "D4AAB693-433F-4952-9A76-A44FAC2D7D9D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-rs-g54:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E1F62B-EF45-4945-A2A8-5FC6576FEB5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-rs-g54hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.55",
            "matchCriteriaId" : "B827DA8E-11E7-46E0-8B87-707D82F2BB55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-rs-g54hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3576314-AF31-4C42-A526-507F86DCF59D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU90274525/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20210427-02.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU90274525/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20210427-02.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3511",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-28T01:15:17.153",
      "lastModified" : "2024-11-21T06:21:43.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Disclosure of sensitive information to an unauthorized user vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to obtain information such as configuration via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una divulgación de información confidencial a una vulnerabilidad de usuario no autorizado en los enrutadores de banda ancha de Buffalo (firmware de BHR-4GRV Ver.1.99 y anterior, firmware de DWR-HP-G300NH Ver.1.83 y anterior, firmware HW-450HP-ZWE Ver.1.99 y anterior, WHR- Firmware 300HP Ver.1.99 y anteriores, firmware de WHR-300 Ver.1.99 y anteriores, firmware de WHR-G301N Ver.1.86 y anteriores, firmware de WHR-HP-G300N Ver.1.99 y anteriores, firmware de WHR-HP-GN Ver.1.86 y anterior, firmware de WPL-05G300 Ver.1.87 y anterior, firmware de WZR-450HP-CWT Ver.1.99 y anterior, firmware de WZR-450HP-UB Ver.1.99 y anterior, firmware de WZR-HP-AG300H Ver.1.75 y anterior, WZR- Firmware HP-G300NH Ver.1.83 y anterior, firmware de WZR-HP-G301NH Ver.1.83 y anterior, firmware de WZR-HP-G302H Ver.1.85 y anterior, firmware de WZR-HP-G450H Ver.1.89 y anterior, firmware de WZR-300HP Ver.1.99 y anteriores, firmware de WZR-450HP Ver.1.99 y anteriores, firmware de WZR-600DHP Ver.1.99 y anteriores, firmware de WZR-D1100H Ver.1.99 y anteriores, firmware FS-HP-G300N Ver.3.32 y anteriores, firmware FS-600DHP Ver.3.38 y anteriores, firmware FS-R600DHP Ver.3.39 y anteriores, y el firmware de FS-G300N Ver.3.13 y anteriores) permite a atacantes remotos no autenticados obtener información como la configuración por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "50014200-AEB2-474F-8472-AA9D61C63EBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bhr-4grv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48780EC9-0E32-4DB5-91C2-3DD9048BCDA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.84",
            "matchCriteriaId" : "D4A328F7-7578-4B0A-84E9-C9466B3928CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:dwr-hp-g300nh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96F509-FF8C-409B-BB40-E05A9F722554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "F6429DFF-698C-4D6A-8499-BCD907889E55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:hw-450hp-zwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BE2F24-8A3F-426F-B935-62F82F83E457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "1D03A8D2-57AB-4384-86D3-541273F50F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-300hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697F6576-D774-4DC8-A2C9-A57F4E037F24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "776F042B-0826-46E7-A385-DAEB84893E18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342ABB1C-DEB2-4B34-B5FB-A3D072B4760F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-g301n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.87",
            "matchCriteriaId" : "A2421920-5863-48BB-B4C8-C2D36C232295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-g301n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95600434-8888-40AA-9FF4-273031A9C316"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "0D7050D0-6398-465A-9FE5-7F195FCE2940"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-hp-g300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E26183-35D3-4A44-8D9A-AB358957C75F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-hp-gn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.87",
            "matchCriteriaId" : "9A19100A-DF19-4268-BAB0-33FBC4B413B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-hp-gn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC10377-CF91-43A5-BC3F-C690F291535A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.88",
            "matchCriteriaId" : "133F1788-993B-445B-AF28-1348BEBD30E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wpl-05g300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C24CCE-813A-4F11-B4A5-2AF075018F2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "3526B328-E0D8-419D-8C94-4D9098DAC1CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-450hp-cwt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348D05E5-E619-4AE9-8A62-DF214899DB17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "B83893C6-CD36-42B7-B117-4964DC2A1322"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-450hp-ub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5923DA5-CF09-408D-BE0D-A878EFB8BB6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.76",
            "matchCriteriaId" : "5EF711EA-6449-4C83-A5E1-590CFC913FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-ag300h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DBC06D-0003-4196-A360-59657454DAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.84",
            "matchCriteriaId" : "A5C80B97-740C-4685-AFA4-F1C7A942A903"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g300nh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3BFED6-500A-49C0-BBE1-E9AB5525C143"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.84",
            "matchCriteriaId" : "8E6462B9-978F-432E-BB7C-E8A2BFB73669"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g301nh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A753B947-1562-4147-965B-6437C4328F44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.86",
            "matchCriteriaId" : "E4249F56-42ED-4F5F-AEE9-07335DAA23E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g302h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE42D0C-2181-47E3-87AA-A50C0C3ED002"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.90",
            "matchCriteriaId" : "AB5DEEF4-7D48-49D0-A4C5-23FC8DB07343"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g450h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BEF724-6B38-4862-A74D-9FB7F5EB4233"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "32C5BCDF-BB62-4D58-95F3-317267DA170F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-300hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FFBDA4-E1A4-46CC-8EE0-6C92CB5C0A03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "26F1AA6C-F40B-44EC-BE80-BEFBB86CA6DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-450hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6014747F-30BA-4C65-8340-CA16C886A45B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-600dhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "CEDF49B2-2981-4266-9DD0-3384AA1CEB6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AF9040-7F63-4E80-82DD-7448320BC940"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "8C4E565E-6C13-4203-B119-5F338DD283F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-d1100h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BB1A7E-19AD-4897-B20F-03BDA7DCFA8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-hp-g300n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.33",
            "matchCriteriaId" : "9C2DD237-46C6-403C-BED5-762E1D36F77D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-hp-g300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BAF7C5-60B2-445A-9FB5-99FE0CDBEA3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.40",
            "matchCriteriaId" : "A0748472-978E-41A5-A172-AA326256C473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-600dhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3511D6-1738-43DD-ACBB-76D5C998906E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-r600dhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.40",
            "matchCriteriaId" : "D3CD88A9-F7BF-47E9-9C8B-159AEF4002A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-r600dhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A96BC7-410E-4341-A91C-343E44BEA3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-g300n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.14",
            "matchCriteriaId" : "E38B272E-748F-4532-ADF9-A2A86F399ADB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-g300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A229AF-D4F8-45CC-BAC1-792A24CAA6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU99235714/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20210427-01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU99235714/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20210427-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3512",
      "sourceIdentifier" : "vultures@jpcert.or.jp",
      "published" : "2021-04-28T01:15:17.187",
      "lastModified" : "2024-11-21T06:21:43.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Improper access control vulnerability in Buffalo broadband routers (BHR-4GRV firmware Ver.1.99 and prior, DWR-HP-G300NH firmware Ver.1.83 and prior, HW-450HP-ZWE firmware Ver.1.99 and prior, WHR-300HP firmware Ver.1.99 and prior, WHR-300 firmware Ver.1.99 and prior, WHR-G301N firmware Ver.1.86 and prior, WHR-HP-G300N firmware Ver.1.99 and prior, WHR-HP-GN firmware Ver.1.86 and prior, WPL-05G300 firmware Ver.1.87 and prior, WZR-450HP-CWT firmware Ver.1.99 and prior, WZR-450HP-UB firmware Ver.1.99 and prior, WZR-HP-AG300H firmware Ver.1.75 and prior, WZR-HP-G300NH firmware Ver.1.83 and prior, WZR-HP-G301NH firmware Ver.1.83 and prior, WZR-HP-G302H firmware Ver.1.85 and prior, WZR-HP-G450H firmware Ver.1.89 and prior, WZR-300HP firmware Ver.1.99 and prior, WZR-450HP firmware Ver.1.99 and prior, WZR-600DHP firmware Ver.1.99 and prior, WZR-D1100H firmware Ver.1.99 and prior, FS-HP-G300N firmware Ver.3.32 and prior, FS-600DHP firmware Ver.3.38 and prior, FS-R600DHP firmware Ver.3.39 and prior, and FS-G300N firmware Ver.3.13 and prior) allows remote unauthenticated attackers to bypass access restriction and to start telnet service and execute arbitrary OS commands with root privileges via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de control de acceso inapropiado en los enrutadores de banda ancha de Buffalo (firmware de BHR-4GRV Ver.1.99 y anterior, firmware de DWR-HP-G300NH Ver.1.83 y anterior, firmware HW-450HP-ZWE Ver.1.99 y anterior, firmware de WHR-300HP Ver.1.99 y versiones anteriores, firmware de WHR-300 Ver.1.99 y anteriores, firmware de WHR-G301N Ver.1.86 y anteriores, firmware de WHR-HP-G300N Ver.1.99 y anteriores, firmware de WHR-HP-GN Ver.1.86 y anteriores, WPL-05G300 firmware Ver.1.87 y anterior, firmware de WZR-450HP-CWT Ver.1.99 y anterior, firmware de WZR-450HP-UB Ver.1.99 y anterior, firmware de WZR-HP-AG300H Ver.1.75 y anterior, firmware de WZR-HP-G300NH Ver .1.83 y anteriores, firmware de WZR-HP-G301NH Ver.1.83 y anteriores, firmware de WZR-HP-G302H Ver.1.85 y anteriores, firmware de WZR-HP-G450H Ver.1.89 y anteriores, firmware de WZR-300HP Ver.1.99 y anteriores , Firmware WZR-450HP Ver.1.99 y anteriores, firmware de WZR-600DHP Ver.1.99 y anteriores, firmware WZR-D1100H Ver.1.99 y anteriores, firmware de FS-HP-G300N Ver.3.32 y anteriores, firmware de FS-600DHP Ver.3.38 y anteriores, firmware de FS-R600DHP Ver.3.39 y anteriores, y firmware de FS-G300N Ver.3.13 y anteriores) permite a atacantes remotos no autenticados omitir la restricción de acceso e iniciar el servicio Telnet y ejecutar comandos arbitrarios del Sistema Operativo con privilegios de root por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 8.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.5,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:bhr-4grv_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "50014200-AEB2-474F-8472-AA9D61C63EBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:bhr-4grv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48780EC9-0E32-4DB5-91C2-3DD9048BCDA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:dwr-hp-g300nh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.84",
            "matchCriteriaId" : "D4A328F7-7578-4B0A-84E9-C9466B3928CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:dwr-hp-g300nh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE96F509-FF8C-409B-BB40-E05A9F722554"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:hw-450hp-zwe_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "F6429DFF-698C-4D6A-8499-BCD907889E55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:hw-450hp-zwe:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54BE2F24-8A3F-426F-B935-62F82F83E457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-300hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "1D03A8D2-57AB-4384-86D3-541273F50F3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-300hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "697F6576-D774-4DC8-A2C9-A57F4E037F24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "776F042B-0826-46E7-A385-DAEB84893E18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342ABB1C-DEB2-4B34-B5FB-A3D072B4760F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-g301n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.87",
            "matchCriteriaId" : "A2421920-5863-48BB-B4C8-C2D36C232295"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-g301n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95600434-8888-40AA-9FF4-273031A9C316"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-hp-g300n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "0D7050D0-6398-465A-9FE5-7F195FCE2940"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-hp-g300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7E26183-35D3-4A44-8D9A-AB358957C75F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:whr-hp-gn_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.87",
            "matchCriteriaId" : "9A19100A-DF19-4268-BAB0-33FBC4B413B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:whr-hp-gn:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC10377-CF91-43A5-BC3F-C690F291535A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wpl-05g300_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.88",
            "matchCriteriaId" : "133F1788-993B-445B-AF28-1348BEBD30E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wpl-05g300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6C24CCE-813A-4F11-B4A5-2AF075018F2A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-450hp-cwt_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "3526B328-E0D8-419D-8C94-4D9098DAC1CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-450hp-cwt:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "348D05E5-E619-4AE9-8A62-DF214899DB17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-450hp-ub_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "B83893C6-CD36-42B7-B117-4964DC2A1322"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-450hp-ub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5923DA5-CF09-408D-BE0D-A878EFB8BB6B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-ag300h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.76",
            "matchCriteriaId" : "5EF711EA-6449-4C83-A5E1-590CFC913FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-ag300h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1DBC06D-0003-4196-A360-59657454DAF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g300nh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.84",
            "matchCriteriaId" : "A5C80B97-740C-4685-AFA4-F1C7A942A903"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g300nh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA3BFED6-500A-49C0-BBE1-E9AB5525C143"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g301nh_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.84",
            "matchCriteriaId" : "8E6462B9-978F-432E-BB7C-E8A2BFB73669"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g301nh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A753B947-1562-4147-965B-6437C4328F44"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g302h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.86",
            "matchCriteriaId" : "E4249F56-42ED-4F5F-AEE9-07335DAA23E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g302h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBE42D0C-2181-47E3-87AA-A50C0C3ED002"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-hp-g450h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.90",
            "matchCriteriaId" : "AB5DEEF4-7D48-49D0-A4C5-23FC8DB07343"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-hp-g450h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72BEF724-6B38-4862-A74D-9FB7F5EB4233"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-300hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "32C5BCDF-BB62-4D58-95F3-317267DA170F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-300hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80FFBDA4-E1A4-46CC-8EE0-6C92CB5C0A03"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-450hp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "26F1AA6C-F40B-44EC-BE80-BEFBB86CA6DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-450hp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6014747F-30BA-4C65-8340-CA16C886A45B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-600dhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "CEDF49B2-2981-4266-9DD0-3384AA1CEB6F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-600dhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06AF9040-7F63-4E80-82DD-7448320BC940"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wzr-d1100h_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.00",
            "matchCriteriaId" : "8C4E565E-6C13-4203-B119-5F338DD283F5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wzr-d1100h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BB1A7E-19AD-4897-B20F-03BDA7DCFA8C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-hp-g300n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.33",
            "matchCriteriaId" : "9C2DD237-46C6-403C-BED5-762E1D36F77D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-hp-g300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BAF7C5-60B2-445A-9FB5-99FE0CDBEA3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-600dhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.40",
            "matchCriteriaId" : "A0748472-978E-41A5-A172-AA326256C473"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-600dhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB3511D6-1738-43DD-ACBB-76D5C998906E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-r600dhp_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.40",
            "matchCriteriaId" : "D3CD88A9-F7BF-47E9-9C8B-159AEF4002A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-r600dhp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88A96BC7-410E-4341-A91C-343E44BEA3F5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:fs-g300n_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.14",
            "matchCriteriaId" : "E38B272E-748F-4532-ADF9-A2A86F399ADB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:fs-g300n:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84A229AF-D4F8-45CC-BAC1-792A24CAA6CF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jvn.jp/en/vu/JVNVU99235714/index.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20210427-01.html",
        "source" : "vultures@jpcert.or.jp",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://jvn.jp/en/vu/JVNVU99235714/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.buffalo.jp/news/detail/20210427-01.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31815",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T02:15:07.097",
      "lastModified" : "2024-11-21T06:06:17.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GAEN (aka Google/Apple Exposure Notifications) through 2021-04-27 on Android allows attackers to obtain sensitive information, such as a user's location history, in-person social graph, and (sometimes) COVID-19 infection status, because Rolling Proximity Identifiers and MAC addresses are written to the Android system log, and many Android devices have applications (preinstalled by the hardware manufacturer or network operator) that read system log data and send it to third parties. NOTE: a news outlet (The Markup) states that they received a vendor response indicating that fix deployment \"began several weeks ago and will be complete in the coming days.\""
      }, {
        "lang" : "es",
        "value" : "GAEN (también conocido como Google/Apple Exposure Notifications) hasta el 2021-04-27 en Android permite a los atacantes obtener información sensible, como el historial de localización de un usuario, el gráfico social en persona y (a veces) el estado de infección de COVID-19, porque los identificadores de proximidad y las direcciones MAC se escriben en el registro del sistema Android, y muchos dispositivos Android tienen aplicaciones (preinstaladas por el fabricante de hardware o el operador de red) que leen los datos del registro del sistema y los envían a terceros. NOTA: un medio de comunicación (The Markup) afirma haber recibido una respuesta del proveedor indicando que el despliegue de la corrección \"comenzó hace varias semanas y se completará en los próximos días.\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-319"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:google\\/apple_exposure_notifications:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "2021-04-27",
            "matchCriteriaId" : "7A93DEB7-285A-454B-B1EE-2A633249408C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.appcensus.io/2021/04/27/why-google-should-stop-logging-contact-tracing-data/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://themarkup.org/privacy/2021/04/27/google-promised-its-contact-tracing-app-was-completely-private-but-it-wasnt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.appcensus.io/2021/04/27/why-google-should-stop-logging-contact-tracing-data/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://themarkup.org/privacy/2021/04/27/google-promised-its-contact-tracing-app-was-completely-private-but-it-wasnt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Press/Media Coverage", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31856",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T06:15:07.257",
      "lastModified" : "2024-11-21T06:06:21.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persister.go)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en la API REST en Layer5 Meshery versión 0.5.2, permite a un atacante ejecutar comandos SQL arbitrarios por medio del endpoint /experimental/patternfiles (parámetro de orden en GetMesheryPatterns en el archivo models/meshery_pattern_persister.go)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:layer5:meshery:0.5.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95ADBB5A-55D1-4571-B686-08C060B605C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/layer5io/meshery/pull/2745",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://meshery.io",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/layer5io/meshery/pull/2745",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://meshery.io",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.477",
      "lastModified" : "2024-11-21T05:58:51.433",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "pfSense 2.5.0 allows XSS via the services_wol_edit.php Description field."
      }, {
        "lang" : "es",
        "value" : "pfSense versión 2.5.0, permite un ataque de tipo XSS por medio del campo Descripción services_wol_edit.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pfsense:pfsense:2.5.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CED912B5-9F23-4599-92A3-34104BA74D10"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/61",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://seclists.org/fulldisclosure/2021/Apr/61",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31777",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.507",
      "lastModified" : "2025-05-30T16:15:27.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dce (aka Dynamic Content Element) extension 2.2.0 through 2.6.x before 2.6.2, and 2.7.x before 2.7.1, for TYPO3 allows SQL Injection via a backend user account."
      }, {
        "lang" : "es",
        "value" : "La extensión dce (también se conoce como Elemento de contenido dinámico) versiones 2.2.0 hasta 2.6.x anteriores a 2.6.2 y versiones 2.7.x anteriores a 2.7.1, para TYPO3 permite una inyección SQL por medio de una cuenta de usuario backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynamic_content_elements_project:dynamic_content_elements:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "2.2.0",
            "versionEndExcluding" : "2.6.2",
            "matchCriteriaId" : "92DBB664-F9AD-495B-8826-3E20E65D93AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dynamic_content_elements_project:dynamic_content_elements:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "2.7.0",
            "versionEndExcluding" : "2.7.1",
            "matchCriteriaId" : "2EDEEDAD-7C08-4FDE-820B-9504A94B95C3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162429/TYPO3-6.2.1-SQL-Injection.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-31777",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-005",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162429/TYPO3-6.2.1-SQL-Injection.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://excellium-services.com/cert-xlm-advisory/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-005",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31778",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.533",
      "lastModified" : "2024-11-21T06:06:12.437",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The media2click (aka 2 Clicks for External Media) extension 1.x before 1.3.3 for TYPO3 allows XSS by a backend user account."
      }, {
        "lang" : "es",
        "value" : "La extensión media2click versión 1.x (también se conoce como 2 Clicks para External Media) versiones anteriores a 1.3.3 para TYPO3, permite un ataque de tipo XSS por medio de una cuenta de usuario backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:media2click_project:media2click:*:*:*:*:*:typo3:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.3.3",
            "matchCriteriaId" : "4F39241F-9CF3-4912-90ED-0509B2772CED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-004",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-004",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31779",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.557",
      "lastModified" : "2024-11-21T06:06:12.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The yoast_seo (aka Yoast SEO) extension before 7.2.1 for TYPO3 allows SSRF via a backend user account."
      }, {
        "lang" : "es",
        "value" : "La extensión yoast_seo (también se conoce como Yoast SEO) versiones anteriores a 7.2.1 para TYPO3, permite un ataque de tipo SSRF por medio de una cuenta de usuario backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:yoast:yoast_seo:*:*:*:*:*:typo3:*:*",
            "versionEndExcluding" : "7.2.1",
            "matchCriteriaId" : "3E6A803D-0E74-42F0-B921-67FECC66C749"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-006",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://typo3.org/security/advisory/typo3-ext-sa-2021-006",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31863",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.583",
      "lastModified" : "2024-11-21T06:06:22.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient input validation in the Git repository integration of Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows Redmine users to read arbitrary local files accessible by the application server process."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de entrada en la integración del repositorio Git de Redmine versiones anteriores a 4.0.9, versiones 4.1.x anteriores a 4.1.3 y versiones 4.2.x anteriores a 4.2.1, permite a usuarios de Redmine leer archivos locales arbitrarios accesibles por el proceso del servidor de aplicaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.9",
            "matchCriteriaId" : "9945EED3-D23D-4055-9A7D-0FF5956B838E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "80ACD361-2874-4B70-88F1-3999025D6192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "ECC28D7C-7E3E-406A-B0EC-41F58BA06981"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31864",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.610",
      "lastModified" : "2024-11-21T06:06:22.860",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows attackers to bypass the add_issue_notes permission requirement by leveraging the incoming mail handler."
      }, {
        "lang" : "es",
        "value" : "Redmine versiones anteriores a 4.0.9, versiones 4.1.x anteriores a 4.1.3 y versiones 4.2.x anteriores a 4.2.1, permite a atacantes omitir el requisito de permiso de la función add_issue_notes al aprovechar el controlador de correo entrante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.9",
            "matchCriteriaId" : "9945EED3-D23D-4055-9A7D-0FF5956B838E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "80ACD361-2874-4B70-88F1-3999025D6192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "ECC28D7C-7E3E-406A-B0EC-41F58BA06981"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31865",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.637",
      "lastModified" : "2024-11-21T06:06:23.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 4.0.9, 4.1.x before 4.1.3, and 4.2.x before 4.2.1 allows users to circumvent the allowed filename extensions of uploaded attachments."
      }, {
        "lang" : "es",
        "value" : "Redmine versiones anteriores a 4.0.9, versiones 4.1.x anteriores a 4.1.3 y versiones 4.2.x anteriores a 4.2.1, permite a usuarios omitir unas extensiones de nombre de archivo permitidas de archivos adjuntos cargados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.9",
            "matchCriteriaId" : "9945EED3-D23D-4055-9A7D-0FF5956B838E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "80ACD361-2874-4B70-88F1-3999025D6192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.2.0",
            "versionEndExcluding" : "4.2.1",
            "matchCriteriaId" : "ECC28D7C-7E3E-406A-B0EC-41F58BA06981"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31866",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T07:15:07.663",
      "lastModified" : "2024-11-21T06:06:23.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redmine before 4.0.9 and 4.1.x before 4.1.3 allows an attacker to learn the values of internal authentication keys by observing timing differences in string comparison operations within SysController and MailHandlerController."
      }, {
        "lang" : "es",
        "value" : "Redmine versiones anteriores a 4.0.9 y versiones 4.1.x anteriores a 4.1.3, permite a un atacante aprender los valores de las claves de autenticación internas al observar las diferencias de tiempo en las operaciones de comparación de cadenas dentro de las funciones SysController y MailHandlerController"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0.9",
            "matchCriteriaId" : "9945EED3-D23D-4055-9A7D-0FF5956B838E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redmine:redmine:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.1.0",
            "versionEndExcluding" : "4.1.3",
            "matchCriteriaId" : "80ACD361-2874-4B70-88F1-3999025D6192"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00013.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://www.redmine.org/news/131",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.redmine.org/projects/redmine/wiki/Security_Advisories",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27648",
      "sourceIdentifier" : "security@synology.com",
      "published" : "2021-04-28T08:15:07.690",
      "lastModified" : "2024-11-21T05:58:22.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Externally controlled reference to a resource in another sphere in quarantine functionality in Synology Antivirus Essential before 1.4.8-2801 allows remote authenticated users to obtain privilege via unspecified vectors."
      }, {
        "lang" : "es",
        "value" : "La referencia controlada externamente a un recurso en otra esfera en la funcionalidad quarantine en Synology Antivirus Essential versiones anteriores a 1.4.8-2801, permite a usuarios autenticados remoto alcanzar privilegios por medio de vectores no especificados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@synology.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "baseScore" : 9.0,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@synology.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-610"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:synology:antivirus_essential:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.4.8-2801",
            "matchCriteriaId" : "9DDD74B9-B143-419D-9771-B874E0A90E68"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_21_15",
        "source" : "security@synology.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.synology.com/security/advisory/Synology_SA_21_15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30166",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-28T10:15:08.647",
      "lastModified" : "2024-11-21T06:03:26.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The NTP Server configuration function of the IP camera device is not verified with special parameters. Remote attackers can perform a command Injection attack and execute arbitrary commands after logging in with the privileged permission."
      }, {
        "lang" : "es",
        "value" : "La función de configuración del servidor NTP del dispositivo de cámara IP no es comprobada con un parámetro especial.&#xa0;Unos atacantes remotos pueden llevar a cabo un ataque de inyección de comandos y ejecutar comandos arbitrarios después de iniciar sesión con el permiso privilegiado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CFB3042C-114F-4ED1-BA00-F20A5C0BB6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A9131E-7A7A-48AA-A429-6699314C1380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3841D1B9-CD30-4973-94F2-92320BF0C103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B92D194-8C53-405B-ACB9-94C56ABD5107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "586C449F-5D4C-4CF5-B596-4053F8AB0687"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D94D053-743A-4AF6-9E05-6C7A87A8913C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "94A22430-713F-49C4-87F5-4FB86BB3E485"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CC342A-E6D4-4ED7-B789-20FDA4FB3D0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "673FCCE6-2C02-48BD-B939-F4255E2CA75E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F82003-A28A-49FB-8D95-097AE4FB1B76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3E71580E-DB0C-4535-B024-C53545EEB48D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14491B1B-C538-4E89-A54E-7BC94D7B13C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D3425C76-A78A-45A4-8A68-73B11EBBD01C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BADDD-62D2-49B6-86C4-0E05BAF7EC14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "64AA3B69-1A87-42DD-9A40-3F4F2D7E7B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E6695-0FFE-4BE9-9DDA-45BE7C99D08D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "4158A2E5-FFC4-4AEE-BCB7-BDF0B0E48230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3052ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42315B3-4517-445F-86E3-BC40232F5C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "B5549217-0A9A-427F-ACE3-715A6659751C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C89F93-BC20-4900-B8E6-B69748CCF092"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C3A91BE4-5D41-47D1-819B-A643B5CF004E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6009643F-3561-46DC-826A-468F151E70E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25B11AE1-0BA2-4CFC-A380-E1C1B4ABBEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511A3B5D-0072-45E2-9E15-374878CB6B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1F733549-52C0-4446-99C2-1810F4CB0986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58F1D2D-8819-4C2B-B09A-B0994AA1F88D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "0C2E927A-A1FC-4119-8461-CB1FAB017450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7099C696-1D93-4F30-BE3E-882FBCC038DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C02C3F98-AE69-42CF-96D2-B3395CAFD9A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FDCC54-133A-4B07-8EC7-A67F549DC36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CC814A10-FB02-4514-83DE-FA50E15B718B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F331BA80-FD4D-441F-806D-C0AF83DA11C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F4A05F71-3B29-4C76-B22D-D863BFC9F3D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C6C6F4-9C6E-4766-82D3-FA15EF407229"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F033D14F-D552-4405-B8E3-86DC321DFA55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469978BD-A042-48F4-B84C-8A0CC4FC0E6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "23CF2710-27A7-422C-8B75-BEC9FA0FCEDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3022ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE10197E-C9DB-44AA-9DD5-7B7B0F9928B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D465D429-4EB0-4CBC-A909-7D8F08778073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C92472-6E8E-420F-BFDE-049AC04119FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "FD289724-B816-4CC8-887E-47ED3AB91A1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B90FBD-F9B9-4148-A684-16CF619C288C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "982899DC-A4D1-42D9-918A-D94A1F4FB2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8852ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A487D8-6707-408D-A518-8BB3F9A722E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "655AC751-6600-478E-9EBD-A74426688E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0583B058-0526-4E5F-A3D7-45FAE9319211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "49D69485-E371-46E1-8304-AD227E9FA1B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129F9D32-D19E-492D-AA76-3A46B92C7B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "5F178AD2-A191-4B0E-9277-8FBDC47EBB71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8052ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B747B7-2CD6-4CF7-9371-8EF93880E307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "32FA5EE1-CF52-4922-A274-FC4F1B69622A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6552x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2FA0C8-9658-4B11-B704-84375D6E5D7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "2E426C3C-09D9-40E2-B2C6-F1C44CC3B19D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD844D5-99A0-4B7D-BFC9-24479F4381C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CAAB99C4-C873-4024-B4D5-D87D485C78BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF4ACEC-138D-4CB0-8CF7-427CAF3AE34E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CDDB6F5E-8960-4FAB-8D03-78C2C9C64A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8822ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC3ACBE-C2D0-4302-9ED1-0E12D6772E2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "AAEED646-3171-407E-BFD6-69A822A98592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A07293-5D9E-4065-855C-92610938C4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "8CF12021-1726-452B-A5B4-9088A9455B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB153E8F-E997-462C-A876-2C8338C3FF46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D4262E24-A9EE-446D-906D-DFCA9F388751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8022ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C930EF97-0E3E-4782-A0F1-DFBB9931A71A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "764E9C36-84F8-4A54-A4D3-5BFB0F621999"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691D3A4C-12FB-4C62-9A44-A6F6F3497097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "93C2A216-620C-4A19-B058-A196FF6EC53D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A212B55-6EC4-4136-9AF6-F0B0514EBAA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C2238B38-274F-441A-B96E-B790D347B109"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC54DA97-FCD0-4800-A5C7-A93EED87AE5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "00D4B74D-4E42-4BF2-A69C-E53EB51CC76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6322e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FFC5F6-35D2-4ECC-9CE4-A6EAD55D0248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25ABE04A-183C-4077-BD0E-4D920CFCBDCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D836DA90-CA22-416D-9AD1-2E04C8FBD285"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1B232619-A97C-4C4A-B1C7-4B954274F2E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20064E5-8988-4BB1-9731-46015374C29C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25BF7A29-2E39-41C1-A509-AC2331554070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6422x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5BADF1-23EB-418F-8E30-1616329C9B16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CE621ECE-B0E2-41A3-8EA9-CA2935375DE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6E9CD5-D9AC-473B-8A50-9BBDDC4551D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "881EEE2D-F400-41A1-BD59-35B569248C0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r8922x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D830A98B-407C-4425-9371-D1813B5CA618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30167",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-28T10:15:08.697",
      "lastModified" : "2024-11-21T06:03:26.473",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The manage users profile services of the network camera device allows an authenticated. Remote attackers can modify URL parameters and further amend user’s information and escalate privileges to control the devices."
      }, {
        "lang" : "es",
        "value" : "Los servicios de administración de perfiles de usuarios del dispositivo de cámara de red permiten un autenticado.&#xa0;Unos atacantes remotos pueden modificar un parámetro URL y enmendar aún más la información del usuario y escalar privilegios para controlar los dispositivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CFB3042C-114F-4ED1-BA00-F20A5C0BB6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A9131E-7A7A-48AA-A429-6699314C1380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3841D1B9-CD30-4973-94F2-92320BF0C103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B92D194-8C53-405B-ACB9-94C56ABD5107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "586C449F-5D4C-4CF5-B596-4053F8AB0687"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D94D053-743A-4AF6-9E05-6C7A87A8913C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "94A22430-713F-49C4-87F5-4FB86BB3E485"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CC342A-E6D4-4ED7-B789-20FDA4FB3D0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "673FCCE6-2C02-48BD-B939-F4255E2CA75E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F82003-A28A-49FB-8D95-097AE4FB1B76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3E71580E-DB0C-4535-B024-C53545EEB48D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14491B1B-C538-4E89-A54E-7BC94D7B13C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D3425C76-A78A-45A4-8A68-73B11EBBD01C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BADDD-62D2-49B6-86C4-0E05BAF7EC14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "64AA3B69-1A87-42DD-9A40-3F4F2D7E7B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E6695-0FFE-4BE9-9DDA-45BE7C99D08D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "4158A2E5-FFC4-4AEE-BCB7-BDF0B0E48230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3052ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42315B3-4517-445F-86E3-BC40232F5C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "B5549217-0A9A-427F-ACE3-715A6659751C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C89F93-BC20-4900-B8E6-B69748CCF092"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C3A91BE4-5D41-47D1-819B-A643B5CF004E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6009643F-3561-46DC-826A-468F151E70E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25B11AE1-0BA2-4CFC-A380-E1C1B4ABBEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511A3B5D-0072-45E2-9E15-374878CB6B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1F733549-52C0-4446-99C2-1810F4CB0986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58F1D2D-8819-4C2B-B09A-B0994AA1F88D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "0C2E927A-A1FC-4119-8461-CB1FAB017450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7099C696-1D93-4F30-BE3E-882FBCC038DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C02C3F98-AE69-42CF-96D2-B3395CAFD9A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FDCC54-133A-4B07-8EC7-A67F549DC36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CC814A10-FB02-4514-83DE-FA50E15B718B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F331BA80-FD4D-441F-806D-C0AF83DA11C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F4A05F71-3B29-4C76-B22D-D863BFC9F3D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C6C6F4-9C6E-4766-82D3-FA15EF407229"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F033D14F-D552-4405-B8E3-86DC321DFA55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469978BD-A042-48F4-B84C-8A0CC4FC0E6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "23CF2710-27A7-422C-8B75-BEC9FA0FCEDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3022ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE10197E-C9DB-44AA-9DD5-7B7B0F9928B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D465D429-4EB0-4CBC-A909-7D8F08778073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C92472-6E8E-420F-BFDE-049AC04119FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "FD289724-B816-4CC8-887E-47ED3AB91A1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B90FBD-F9B9-4148-A684-16CF619C288C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "982899DC-A4D1-42D9-918A-D94A1F4FB2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8852ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A487D8-6707-408D-A518-8BB3F9A722E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "655AC751-6600-478E-9EBD-A74426688E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0583B058-0526-4E5F-A3D7-45FAE9319211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "49D69485-E371-46E1-8304-AD227E9FA1B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129F9D32-D19E-492D-AA76-3A46B92C7B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "5F178AD2-A191-4B0E-9277-8FBDC47EBB71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8052ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B747B7-2CD6-4CF7-9371-8EF93880E307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "32FA5EE1-CF52-4922-A274-FC4F1B69622A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6552x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2FA0C8-9658-4B11-B704-84375D6E5D7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "2E426C3C-09D9-40E2-B2C6-F1C44CC3B19D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD844D5-99A0-4B7D-BFC9-24479F4381C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CAAB99C4-C873-4024-B4D5-D87D485C78BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF4ACEC-138D-4CB0-8CF7-427CAF3AE34E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CDDB6F5E-8960-4FAB-8D03-78C2C9C64A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8822ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC3ACBE-C2D0-4302-9ED1-0E12D6772E2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "AAEED646-3171-407E-BFD6-69A822A98592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A07293-5D9E-4065-855C-92610938C4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "8CF12021-1726-452B-A5B4-9088A9455B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB153E8F-E997-462C-A876-2C8338C3FF46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D4262E24-A9EE-446D-906D-DFCA9F388751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8022ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C930EF97-0E3E-4782-A0F1-DFBB9931A71A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "764E9C36-84F8-4A54-A4D3-5BFB0F621999"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691D3A4C-12FB-4C62-9A44-A6F6F3497097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "93C2A216-620C-4A19-B058-A196FF6EC53D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A212B55-6EC4-4136-9AF6-F0B0514EBAA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C2238B38-274F-441A-B96E-B790D347B109"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC54DA97-FCD0-4800-A5C7-A93EED87AE5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "00D4B74D-4E42-4BF2-A69C-E53EB51CC76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6322e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FFC5F6-35D2-4ECC-9CE4-A6EAD55D0248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25ABE04A-183C-4077-BD0E-4D920CFCBDCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D836DA90-CA22-416D-9AD1-2E04C8FBD285"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1B232619-A97C-4C4A-B1C7-4B954274F2E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20064E5-8988-4BB1-9731-46015374C29C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25BF7A29-2E39-41C1-A509-AC2331554070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6422x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5BADF1-23EB-418F-8E30-1616329C9B16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CE621ECE-B0E2-41A3-8EA9-CA2935375DE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6E9CD5-D9AC-473B-8A50-9BBDDC4551D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "881EEE2D-F400-41A1-BD59-35B569248C0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r8922x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D830A98B-407C-4425-9371-D1813B5CA618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4676-391a5-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30168",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-28T10:15:08.740",
      "lastModified" : "2024-11-21T06:03:26.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant administrator’s credential and further control the devices."
      }, {
        "lang" : "es",
        "value" : "La información confidencial del el dispositivo webcam no está protegido apropiadamente.&#xa0;Los atacantes remotos pueden otorgar credenciales de administrador de forma no auténtica y controlar aún más los dispositivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CFB3042C-114F-4ED1-BA00-F20A5C0BB6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A9131E-7A7A-48AA-A429-6699314C1380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3841D1B9-CD30-4973-94F2-92320BF0C103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B92D194-8C53-405B-ACB9-94C56ABD5107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "586C449F-5D4C-4CF5-B596-4053F8AB0687"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D94D053-743A-4AF6-9E05-6C7A87A8913C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "94A22430-713F-49C4-87F5-4FB86BB3E485"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CC342A-E6D4-4ED7-B789-20FDA4FB3D0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "673FCCE6-2C02-48BD-B939-F4255E2CA75E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F82003-A28A-49FB-8D95-097AE4FB1B76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3E71580E-DB0C-4535-B024-C53545EEB48D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14491B1B-C538-4E89-A54E-7BC94D7B13C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D3425C76-A78A-45A4-8A68-73B11EBBD01C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BADDD-62D2-49B6-86C4-0E05BAF7EC14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "64AA3B69-1A87-42DD-9A40-3F4F2D7E7B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E6695-0FFE-4BE9-9DDA-45BE7C99D08D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "4158A2E5-FFC4-4AEE-BCB7-BDF0B0E48230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3052ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42315B3-4517-445F-86E3-BC40232F5C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "B5549217-0A9A-427F-ACE3-715A6659751C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C89F93-BC20-4900-B8E6-B69748CCF092"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C3A91BE4-5D41-47D1-819B-A643B5CF004E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6009643F-3561-46DC-826A-468F151E70E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25B11AE1-0BA2-4CFC-A380-E1C1B4ABBEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511A3B5D-0072-45E2-9E15-374878CB6B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1F733549-52C0-4446-99C2-1810F4CB0986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58F1D2D-8819-4C2B-B09A-B0994AA1F88D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "0C2E927A-A1FC-4119-8461-CB1FAB017450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7099C696-1D93-4F30-BE3E-882FBCC038DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C02C3F98-AE69-42CF-96D2-B3395CAFD9A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FDCC54-133A-4B07-8EC7-A67F549DC36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CC814A10-FB02-4514-83DE-FA50E15B718B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F331BA80-FD4D-441F-806D-C0AF83DA11C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F4A05F71-3B29-4C76-B22D-D863BFC9F3D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C6C6F4-9C6E-4766-82D3-FA15EF407229"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F033D14F-D552-4405-B8E3-86DC321DFA55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469978BD-A042-48F4-B84C-8A0CC4FC0E6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "23CF2710-27A7-422C-8B75-BEC9FA0FCEDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3022ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE10197E-C9DB-44AA-9DD5-7B7B0F9928B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D465D429-4EB0-4CBC-A909-7D8F08778073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C92472-6E8E-420F-BFDE-049AC04119FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "FD289724-B816-4CC8-887E-47ED3AB91A1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B90FBD-F9B9-4148-A684-16CF619C288C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "982899DC-A4D1-42D9-918A-D94A1F4FB2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8852ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A487D8-6707-408D-A518-8BB3F9A722E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "655AC751-6600-478E-9EBD-A74426688E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0583B058-0526-4E5F-A3D7-45FAE9319211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "49D69485-E371-46E1-8304-AD227E9FA1B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129F9D32-D19E-492D-AA76-3A46B92C7B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "5F178AD2-A191-4B0E-9277-8FBDC47EBB71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8052ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B747B7-2CD6-4CF7-9371-8EF93880E307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "32FA5EE1-CF52-4922-A274-FC4F1B69622A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6552x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2FA0C8-9658-4B11-B704-84375D6E5D7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "2E426C3C-09D9-40E2-B2C6-F1C44CC3B19D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD844D5-99A0-4B7D-BFC9-24479F4381C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CAAB99C4-C873-4024-B4D5-D87D485C78BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF4ACEC-138D-4CB0-8CF7-427CAF3AE34E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CDDB6F5E-8960-4FAB-8D03-78C2C9C64A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8822ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC3ACBE-C2D0-4302-9ED1-0E12D6772E2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "AAEED646-3171-407E-BFD6-69A822A98592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A07293-5D9E-4065-855C-92610938C4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "8CF12021-1726-452B-A5B4-9088A9455B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB153E8F-E997-462C-A876-2C8338C3FF46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D4262E24-A9EE-446D-906D-DFCA9F388751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8022ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C930EF97-0E3E-4782-A0F1-DFBB9931A71A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "764E9C36-84F8-4A54-A4D3-5BFB0F621999"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691D3A4C-12FB-4C62-9A44-A6F6F3497097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "93C2A216-620C-4A19-B058-A196FF6EC53D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A212B55-6EC4-4136-9AF6-F0B0514EBAA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C2238B38-274F-441A-B96E-B790D347B109"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC54DA97-FCD0-4800-A5C7-A93EED87AE5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "00D4B74D-4E42-4BF2-A69C-E53EB51CC76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6322e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FFC5F6-35D2-4ECC-9CE4-A6EAD55D0248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25ABE04A-183C-4077-BD0E-4D920CFCBDCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D836DA90-CA22-416D-9AD1-2E04C8FBD285"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1B232619-A97C-4C4A-B1C7-4B954274F2E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20064E5-8988-4BB1-9731-46015374C29C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25BF7A29-2E39-41C1-A509-AC2331554070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6422x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5BADF1-23EB-418F-8E30-1616329C9B16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CE621ECE-B0E2-41A3-8EA9-CA2935375DE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6E9CD5-D9AC-473B-8A50-9BBDDC4551D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "881EEE2D-F400-41A1-BD59-35B569248C0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r8922x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D830A98B-407C-4425-9371-D1813B5CA618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4678-aad70-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30169",
      "sourceIdentifier" : "twcert@cert.org.tw",
      "published" : "2021-04-28T10:15:08.777",
      "lastModified" : "2024-11-21T06:03:26.833",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The sensitive information of webcam device is not properly protected. Remote attackers can unauthentically grant user’s credential."
      }, {
        "lang" : "es",
        "value" : "La información confidencial del dispositivo webcam no está protegido apropiadamente.&#xa0;Los atacantes remotos pueden otorgar credenciales al usuario de forma no auténtica"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "twcert@cert.org.tw",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "twcert@cert.org.tw",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CFB3042C-114F-4ED1-BA00-F20A5C0BB6E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A9131E-7A7A-48AA-A429-6699314C1380"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3841D1B9-CD30-4973-94F2-92320BF0C103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B92D194-8C53-405B-ACB9-94C56ABD5107"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "586C449F-5D4C-4CF5-B596-4053F8AB0687"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D94D053-743A-4AF6-9E05-6C7A87A8913C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6852e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "94A22430-713F-49C4-87F5-4FB86BB3E485"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6852e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6CC342A-E6D4-4ED7-B789-20FDA4FB3D0B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "673FCCE6-2C02-48BD-B939-F4255E2CA75E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77F82003-A28A-49FB-8D95-097AE4FB1B76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6552e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "3E71580E-DB0C-4535-B024-C53545EEB48D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6552e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14491B1B-C538-4E89-A54E-7BC94D7B13C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D3425C76-A78A-45A4-8A68-73B11EBBD01C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E7BADDD-62D2-49B6-86C4-0E05BAF7EC14"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6352ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "64AA3B69-1A87-42DD-9A40-3F4F2D7E7B55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6352ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "086E6695-0FFE-4BE9-9DDA-45BE7C99D08D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3052ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "4158A2E5-FFC4-4AEE-BCB7-BDF0B0E48230"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3052ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C42315B3-4517-445F-86E3-BC40232F5C3C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1052_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "B5549217-0A9A-427F-ACE3-715A6659751C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82C89F93-BC20-4900-B8E6-B69748CCF092"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C3A91BE4-5D41-47D1-819B-A643B5CF004E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6009643F-3561-46DC-826A-468F151E70E7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r8822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25B11AE1-0BA2-4CFC-A380-E1C1B4ABBEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r8822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "511A3B5D-0072-45E2-9E15-374878CB6B0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1F733549-52C0-4446-99C2-1810F4CB0986"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C58F1D2D-8819-4C2B-B09A-B0994AA1F88D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6822e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "0C2E927A-A1FC-4119-8461-CB1FAB017450"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6822e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7099C696-1D93-4F30-BE3E-882FBCC038DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C02C3F98-AE69-42CF-96D2-B3395CAFD9A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7FDCC54-133A-4B07-8EC7-A67F549DC36B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6522e4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CC814A10-FB02-4514-83DE-FA50E15B718B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6522e4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F331BA80-FD4D-441F-806D-C0AF83DA11C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F4A05F71-3B29-4C76-B22D-D863BFC9F3D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5C6C6F4-9C6E-4766-82D3-FA15EF407229"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r6322ae4_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "F033D14F-D552-4405-B8E3-86DC321DFA55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r6322ae4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "469978BD-A042-48F4-B84C-8A0CC4FC0E6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2r3022ae2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "23CF2710-27A7-422C-8B75-BEC9FA0FCEDA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2r3022ae2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE10197E-C9DB-44AA-9DD5-7B7B0F9928B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D465D429-4EB0-4CBC-A909-7D8F08778073"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23C92472-6E8E-420F-BFDE-049AC04119FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p2g1022x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "FD289724-B816-4CC8-887E-47ED3AB91A1C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p2g1022x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55B90FBD-F9B9-4148-A684-16CF619C288C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8852ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "982899DC-A4D1-42D9-918A-D94A1F4FB2C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8852ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7A487D8-6707-408D-A518-8BB3F9A722E9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "655AC751-6600-478E-9EBD-A74426688E06"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0583B058-0526-4E5F-A3D7-45FAE9319211"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8152x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "49D69485-E371-46E1-8304-AD227E9FA1B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8152x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129F9D32-D19E-492D-AA76-3A46B92C7B45"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8052ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "5F178AD2-A191-4B0E-9277-8FBDC47EBB71"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8052ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60B747B7-2CD6-4CF7-9371-8EF93880E307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6552x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "32FA5EE1-CF52-4922-A274-FC4F1B69622A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6552x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2FA0C8-9658-4B11-B704-84375D6E5D7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "2E426C3C-09D9-40E2-B2C6-F1C44CC3B19D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFD844D5-99A0-4B7D-BFC9-24479F4381C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6452ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CAAB99C4-C873-4024-B4D5-D87D485C78BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6452ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EF4ACEC-138D-4CB0-8CF7-427CAF3AE34E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8822ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CDDB6F5E-8960-4FAB-8D03-78C2C9C64A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8822ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABC3ACBE-C2D0-4302-9ED1-0E12D6772E2D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "AAEED646-3171-407E-BFD6-69A822A98592"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98A07293-5D9E-4065-855C-92610938C4FC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8122x2-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "8CF12021-1726-452B-A5B4-9088A9455B91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8122x2-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB153E8F-E997-462C-A876-2C8338C3FF46"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r8022ex25_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "D4262E24-A9EE-446D-906D-DFCA9F388751"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r8022ex25:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C930EF97-0E3E-4782-A0F1-DFBB9931A71A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "764E9C36-84F8-4A54-A4D3-5BFB0F621999"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "691D3A4C-12FB-4C62-9A44-A6F6F3497097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "93C2A216-620C-4A19-B058-A196FF6EC53D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A212B55-6EC4-4136-9AF6-F0B0514EBAA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z2r6422ax-p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "C2238B38-274F-441A-B96E-B790D347B109"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z2r6422ax-p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC54DA97-FCD0-4800-A5C7-A93EED87AE5E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6322e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "00D4B74D-4E42-4BF2-A69C-E53EB51CC76B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6322e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25FFC5F6-35D2-4ECC-9CE4-A6EAD55D0248"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r6522e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25ABE04A-183C-4077-BD0E-4D920CFCBDCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r6522e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D836DA90-CA22-416D-9AD1-2E04C8FBD285"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:p3r8822e2_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "1B232619-A97C-4C4A-B1C7-4B954274F2E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:p3r8822e2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E20064E5-8988-4BB1-9731-46015374C29C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6422x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "25BF7A29-2E39-41C1-A509-AC2331554070"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6422x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5BADF1-23EB-418F-8E30-1616329C9B16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r6522x_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "CE621ECE-B0E2-41A3-8EA9-CA2935375DE2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r6522x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD6E9CD5-D9AC-473B-8A50-9BBDDC4551D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:meritlilin:z3r8922x3_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.1.94.8908",
            "matchCriteriaId" : "881EEE2D-F400-41A1-BD59-35B569248C0D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:meritlilin:z3r8922x3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D830A98B-407C-4425-9371-D1813B5CA618"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4679-d308c-1.html",
        "source" : "twcert@cert.org.tw",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/keniver/86ebef688fb274b534da51ef1a84dd3e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.chtsecurity.com/news/0b733a38-e616-4ff3-86a6-13e710643388",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.meritlilin.com/assets/uploads/support/file/M00166-TW.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.twcert.org.tw/tw/cp-132-4679-d308c-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22327",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-04-28T12:15:08.223",
      "lastModified" : "2024-11-21T05:49:55.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an arbitrary memory write vulnerability in Huawei smart phone when processing file parsing. Due to insufficient validation of the input files, successful exploit could cause certain service abnormal. Affected product versions include:HUAWEI P30 versions 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11),10.0.0.188(C605E19R1P3), 10.0.0.190(C185E4R7P1), 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5),10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4)."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura de memoria arbitraria en el teléfono inteligente Huawei cuando se procesa el análisis de archivos.&#xa0;Debido a una validación insuficiente de los archivos de entrada, una explotación con éxito podría causar que determinados servicios sean anormales.&#xa0;Las versiones de productos afectados incluyen: HUAWEI P30 versiones 10.0.0.186(C10E7R5P1), 10.0.0.186(C461E4R3P1), 10.0.0.188(C00E85R2P11), 10.0.0.188(C01E88R2P11), 10.0.0.188(C605E19R1P3), 10.0.0.188(C605E19R1P3), 10.0.0.190 10.0.0.190(C431E22R2P5), 10.0.0.190(C432E22R2P5), 10.0.0.190(C605E19R1P3), 10.0.0.190(C636E4R3P4), 10.0.0.192(C635E3R2P4)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.186\\(c10e7r5p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CCB8EA7-C9E7-4855-B203-B0E92629E96C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.186\\(c461e4r3p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8BB4F42-422C-4C7A-A1E0-4F7088D923C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.188\\(c00e85r2p11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1C06A19-8AE9-4184-97C1-62C370614CBE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.188\\(c01e88r2p11\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8FE7760-CE52-4B86-B016-EE2C1E91C128"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.188\\(c605e19r1p3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED9377B1-039C-4563-AE8D-53B821C72D2C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.190\\(c185e4r7p1\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A322538-FDA4-4AB4-AAB5-4055347676FA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.190\\(c431e22r2p5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "79845BD4-2B20-44CE-A78C-C666153D76C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.190\\(c432e22r2p5\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F51F54B-3D16-4568-BFA8-D5FBCA8F10E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.190\\(c605e19r1p3\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "06EDAE0B-D4A0-4E41-BF32-487DA170ACEA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.190\\(c636e4r3p4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "36B2746C-D296-4AF5-BFE9-B942802C7750"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:10.0.0.192\\(c635e3r2p4\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5901BC9-9EC0-4FFA-A597-3E8C8E858389"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-smartphone-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-smartphone-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22330",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-04-28T12:15:08.257",
      "lastModified" : "2024-11-21T05:49:55.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is an out of bounds write vulnerability in Huawei Smartphone HUAWEI P30 versions 9.1.0.131(C00E130R1P21) when processing a message. An unauthenticated attacker can exploit this vulnerability by sending specific message to the target device. Due to insufficient validation of the input parameter, successful exploit can cause the process and the service to be abnormal."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de escritura fuera de límites en el teléfono inteligente Huawei HUAWEI P30 versiones 9.1.0.131(C00E130R1P21) cuando se procesa un mensaje.&#xa0;Un atacante no autenticado puede explotar esta vulnerabilidad mediante el envío de un mensaje específico al dispositivo de destino.&#xa0;Debido a una comprobación insuficiente del parámetro de entrada, una explotación con éxito puede causar que el proceso y el servicio sean anormales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:9.1.0.131\\(c00e130r1p21\\):*:*:*:*:*:*:*",
            "matchCriteriaId" : "27DDA2A2-5F2B-430F-928B-17D88EDDFED9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-p30-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-p30-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22393",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-04-28T12:15:08.287",
      "lastModified" : "2024-11-21T05:50:02.277",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a denial of service vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. The affected product cannot deal with some messages because of module design weakness . Attackers can exploit this vulnerability by sending a large amount of specific messages to cause denial of service. This can compromise normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de denegación de servicio en algunas versiones de CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 y CloudEngine 12800. El producto afectado no puede manejar algunos mensajes debido a deficiencias en el diseño del módulo.&#xa0;Unos atacantes pueden explotar esta vulnerabilidad mediante el envío de una gran cantidad de mensajes específicos para causar una denegación de servicio.&#xa0;Esto puede comprometer el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A1D568-48C6-4CE4-8CD2-93F79F484448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32438232-3341-4056-B801-AA8F0F9E8DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EF3B57-0B07-40C0-943D-2C21EEE4D747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A9B879-DBF0-4F31-9BF8-7148BC2FCED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8A2875-0F7E-4790-A925-5999396B7578"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44D87EDA-E260-4364-915A-71187D82B1D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124AB6D4-A68D-45B9-B98C-DC30AB7AEED6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EF2025-3E33-4B7F-99BB-459D60B833EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86F46EA9-CDC9-4E0F-B32E-0373558FE832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D33183-3C97-4EA6-90F7-55ED36F710E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5CC84F-27DD-4D5E-8F28-CD7D12EAD2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5DDE2E-B7B3-4D7A-A3EA-C15F968F1186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369FD60C-215C-4172-9CFC-39AD5492BE17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C55E1D-E4E8-4E8F-8D3E-E3A72C5A45D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D64B7D-AA9B-476B-8389-617799BAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72424532-AB07-47DF-8301-275D6EC2F6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4196899F-1AB3-429A-B334-3B059DFBCAFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210324-01-dos-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210324-01-dos-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22514",
      "sourceIdentifier" : "security@opentext.com",
      "published" : "2021-04-28T12:15:08.317",
      "lastModified" : "2024-11-21T05:50:15.600",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An arbitrary code execution vulnerability exists in Micro Focus Application Performance Management, affecting versions 9.40, 9.50 and 9.51. The vulnerability could allow remote attackers to execute arbitrary code on affected installations of APM."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código arbitrario en Micro Focus Application Performance Management, que afecta a versiones 9.40, 9.50 y 9.51.&#xa0;La vulnerabilidad podría permitir a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de APM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.40:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C520D74-D011-4C1E-9429-BA0A38BC0D28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.50:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E3938F6-E50A-480B-8219-0B210983525E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:microfocus:application_performance_management:9.51:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C419162B-A41C-49D0-9293-5F10B8A911EB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03806649",
        "source" : "security@opentext.com"
      }, {
        "url" : "https://softwaresupport.softwaregrp.com/doc/KM03806649",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22331",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-04-28T13:15:08.077",
      "lastModified" : "2024-11-21T05:49:55.620",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a JavaScript injection vulnerability in certain Huawei smartphones. A module does not verify some inputs sufficiently. Attackers can exploit this vulnerability by sending a malicious application request to launch JavaScript injection. This may compromise normal service. Affected product versions include HUAWEI P30 versions earlier than 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R7P3), 11.0.0.138(C432E8R2P3), 11.0.0.138(C461E4R3P3), 11.0.0.138(C605E4R1P3), and 11.0.0.138(C636E4R3P3)."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de inyección de JavaScript en determinados teléfonos inteligentes de Huawei.&#xa0;Un módulo no verifica suficientemente algunas entradas.&#xa0;Los atacantes pueden explotar esta vulnerabilidad mediante el envío de una petición de aplicación maliciosa para iniciar la inyección de JavaScript.&#xa0;Esto puede comprometer el servicio normal.&#xa0;Las versiones de producto afectadas incluyen versiones de HUAWEI P30 anteriores a 10.1.0.165(C01E165R2P11), 11.0.0.118(C635E2R1P3), 11.0.0.120(C00E120R2P5), 11.0.0.138(C10E4R5P3), 11.0.0.138(C185E4R2P3), 11.0.0.138(C185E4R2P3) , 11.0.0.138(C461E4R3P3), 11.0.0.138(C605E4R1P3) y 11.0.0.138(C636E4R3P3)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.1.0.165\\(c01e165r2p11\\)",
            "matchCriteriaId" : "8A7CBB9B-878D-48E6-9AB2-F69FE744065D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.118\\(c635e2r1p3\\)",
            "matchCriteriaId" : "D6353EE9-A70E-432E-8BE3-63EC376C32B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.120\\(c00e120r2p5\\)",
            "matchCriteriaId" : "B21E914E-0DA7-4B31-A025-7CB049449F1F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.138\\(c10e4r5p3\\)",
            "matchCriteriaId" : "5D1B9275-29E6-43D2-BC07-8F9292CCA09B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.138\\(c185e4r7p3\\)",
            "matchCriteriaId" : "2C3D29C6-3FD2-4E7F-851C-9F4CACBC4B9F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.138\\(c432e8r2p3\\)",
            "matchCriteriaId" : "96BF5BF0-B8D8-4961-BF53-D8D7A5964A27"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.138\\(c461e4r3p3\\)",
            "matchCriteriaId" : "21230784-00C0-4F52-B700-6FD7D86BAB9C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.138\\(c605e4r1p3\\)",
            "matchCriteriaId" : "20116612-2D5D-48E5-81F4-E0C1982CFC86"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:p30_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "11.0.0.138\\(c636e4r3p3\\)",
            "matchCriteriaId" : "893BBE10-DCCE-42FA-A477-2A4FE9345280"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:p30:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21EE286C-8111-4F59-8CF1-13C68EA76B21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-js-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210331-01-js-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22332",
      "sourceIdentifier" : "psirt@huawei.com",
      "published" : "2021-04-28T13:15:08.277",
      "lastModified" : "2024-11-21T05:49:55.723",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "There is a pointer double free vulnerability in some versions of CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 and CloudEngine 12800. When a function is called, the same memory pointer is copied to two functional modules. Attackers can exploit this vulnerability by performing a malicious operation to cause the pointer double free. This may lead to module crash, compromising normal service."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de puntero doble liberación en algunas versiones de CloudEngine 5800, CloudEngine 6800, CloudEngine 7800 y CloudEngine 12800. Cuando es llamada una función, el mismo puntero de memoria es copiada en dos módulos funcionales.&#xa0;Unos atacantes pueden explotar esta vulnerabilidad al llevar a cabo una operación maliciosa para causar el puntero doblemente liberado.&#xa0;Esto puede conllevar a un bloqueo del módulo, comprometiendo el servicio normal"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2A1D568-48C6-4CE4-8CD2-93F79F484448"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32438232-3341-4056-B801-AA8F0F9E8DEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32EF3B57-0B07-40C0-943D-2C21EEE4D747"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_12800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6A9B879-DBF0-4F31-9BF8-7148BC2FCED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_12800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE8A2875-0F7E-4790-A925-5999396B7578"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C78467A9-4091-4710-BFB8-A6FB0606BDF5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB2923DC-9667-46F3-B879-C8C1DAECCC6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA3C214-FBB1-428A-8C0B-DF797296FC0E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_5800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38CAD360-6AD5-4714-91BE-0AAB516EDA79"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_5800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8FD775C-F6B6-42B3-942E-EB4DC889B5F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D33183-3C97-4EA6-90F7-55ED36F710E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA5CC84F-27DD-4D5E-8F28-CD7D12EAD2D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5DDE2E-B7B3-4D7A-A3EA-C15F968F1186"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_6800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369FD60C-215C-4172-9CFC-39AD5492BE17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_6800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F2B3CC-12AD-466D-98F9-0C09C7C053CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r002c50spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14C55E1D-E4E8-4E8F-8D3E-E3A72C5A45D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r003c00spc810:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70D64B7D-AA9B-476B-8389-617799BAC702"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c00spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72424532-AB07-47DF-8301-275D6EC2F6D9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:huawei:cloudengine_7800_firmware:v200r005c10spc800:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4196899F-1AB3-429A-B334-3B059DFBCAFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:huawei:cloudengine_7800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D05E858C-A3D8-4BF1-A750-CFD8C949ABF0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-doublefree-en",
        "source" : "psirt@huawei.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210407-01-doublefree-en",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29159",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T14:15:07.657",
      "lastModified" : "2024-11-21T06:00:48.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A cross-site scripting (XSS) vulnerability has been discovered in Nexus Repository Manager 3.x before 3.30.1. An attacker with a local account can create entities with crafted properties that, when viewed by an administrator, can execute arbitrary JavaScript in the context of the NXRM application."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) en Nexus Repository Manager versiones 3.x anteriores a 3.30.1.&#xa0;Un atacante con una cuenta local puede crear entidades con propiedades diseñadas que, cuando es visulizada por un administrador, pueden ejecutar JavaScript arbitrario en el contexto de la aplicación NXRM"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sonatype:nexus_repository_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.23.0",
            "versionEndExcluding" : "3.30.1",
            "matchCriteriaId" : "16E1990D-7682-40E7-A145-1FFFE0E9192D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.sonatype.com/hc/en-us/articles/1500005031082",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/articles/1500005031082",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://support.sonatype.com/hc/en-us/categories/201980768-Welcome-to-the-Sonatype-Support-Knowledge-Base",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29387",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T14:15:07.683",
      "lastModified" : "2024-11-21T06:01:01.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple stored cross-site scripting (XSS) vulnerabilities in Sourcecodester Equipment Inventory System 1.0 allow remote attackers to inject arbitrary javascript via any \"Add\" sections, such as Add Item , Employee and Position or others in the Name Parameters."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades de tipo cross-site scripting (XSS) almacenado en Sourcecodester Equipment Inventory System versión 1.0, permiten a atacantes remotos inyectar javascript arbitrario por medio de cualquier sección \"Add\", como Add Item, Employee y Position u otras en los Parámetros de Nombre"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:equipment_inventory_system_project:equipment_inventory_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B445BCF5-0ED6-4320-852B-4E3BCC2979BD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49722",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/11327/equipment-inventory.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49722",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/11327/equipment-inventory.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29388",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-28T14:15:07.710",
      "lastModified" : "2024-11-21T06:01:01.530",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A stored cross-site scripting (XSS) vulnerability in SourceCodester Budget Management System 1.0 allows users to inject and store arbitrary JavaScript code in index.php via vulnerable field 'Budget Title'."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) almacenada en SourceCodester Budget Management System versión 1.0, permite a usuarios inyectar y almacenar código JavaScript arbitrario en el archivo index.php por medio del campo vulnerable \"Budget Title\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:budget_management_system_project:budget_management_system:1.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BE9797F-0B48-4B7D-9E75-9639A65CFB1E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exploit-db.com/exploits/49723",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14403/budget-management-system.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49723",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.sourcecodester.com/php/14403/budget-management-system.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3508",
      "sourceIdentifier" : "patrick@puiterwijk.org",
      "published" : "2021-04-28T14:15:07.737",
      "lastModified" : "2024-11-21T06:21:42.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in PDFResurrect in version 0.22b. There is an infinite loop in get_xref_linear_skipped() in pdf.c via a crafted PDF file."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en PDFResurrect en versión 0.22b.&#xa0;Se presenta un bucle infinito en la función get_xref_linear_skipped() en el archivo pdf.c por medio de un archivo PDF diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "patrick@puiterwijk.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pdfresurrect_project:pdfresurrect:0.22b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1371B93-8755-460D-90ED-892BCBE6C107"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1951198",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/enferex/pdfresurrect/issues/17",
        "source" : "patrick@puiterwijk.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1951198",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/enferex/pdfresurrect/issues/17",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25147",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T15:15:08.010",
      "lastModified" : "2024-11-21T05:54:26.713",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote authentication restriction bypass vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de omisión de restricción de autenticación remota en Aruba AirWave Management Platform versiones anteriores a la 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23364",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-04-28T16:15:08.133",
      "lastModified" : "2024-11-21T05:51:34.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package browserslist from 4.0.0 and before 4.16.5 are vulnerable to Regular Expression Denial of Service (ReDoS) during parsing of queries."
      }, {
        "lang" : "es",
        "value" : "El paquete browserslist de versiones 4.0.0 y anteriores hasta 4.16.5, son vulnerables a una Denegación de Servicio de Expresión Regular (ReDoS) durante el análisis de consultas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1333"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:browserslist_project:browserslist:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.16.5",
            "matchCriteriaId" : "650A2A7E-03A0-4CD7-A5C9-389ADDFDCB79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/browserslist/browserslist/blob/e82f32d1d4100d6bc79ea0b6b6a2d281a561e33c/index.js%23L472-L474",
        "source" : "report@snyk.io",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/browserslist/browserslist/commit/c091916910dfe0b5fd61caad96083c6709b02d98",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/browserslist/browserslist/pull/593",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1277182",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/browserslist/browserslist/blob/e82f32d1d4100d6bc79ea0b6b6a2d281a561e33c/index.js%23L472-L474",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://github.com/browserslist/browserslist/commit/c091916910dfe0b5fd61caad96083c6709b02d98",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/browserslist/browserslist/pull/593",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1277182",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-BROWSERSLIST-1090194",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25151",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T19:15:08.493",
      "lastModified" : "2024-11-21T05:54:27.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de deserialización no segura remota en Aruba AirWave Management Platform versiones anteriores a la 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25153",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T19:15:08.527",
      "lastModified" : "2024-11-21T05:54:27.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote SQL injection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de inyección SQL remota en Aruba AirWave Management Platform versiones anteriores a 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25154",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T19:15:08.557",
      "lastModified" : "2024-11-21T05:54:27.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote escalation of privilege vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de escalada de privilegios remota en Aruba AirWave Management Platform versiones anteriores a 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29482",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-28T19:15:08.587",
      "lastModified" : "2024-11-21T06:01:13.820",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "xz is a compression and decompression library focusing on the xz format completely written in Go. The function readUvarint used to read the xz container format may not terminate a loop provide malicous input. The problem has been fixed in release v0.5.8. As a workaround users can limit the size of the compressed file input to a reasonable size for their use case. The standard library had recently the same issue and got the CVE-2020-16845 allocated."
      }, {
        "lang" : "es",
        "value" : "xz es una biblioteca de compresión y descompresión que se centra en el formato xz escrito completamente en Go.&#xa0;La función readUvarint utilizada para leer el formato contenedor xz no puede terminar un bucle y proporcionar una entrada maliciosa.&#xa0;El problema ha sido corregido en la versión v0.5.8.&#xa0;Como solución alternativa, los usuarios pueden limitar el tamaño de la entrada del archivo comprimido a un tamaño razonable para su caso de uso.&#xa0;La biblioteca estándar tuvo recientemente el mismo problema y se le asignó el CVE-2020-16845"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:xz_project:xz:*:*:*:*:*:go:*:*",
            "versionEndExcluding" : "0.5.8",
            "matchCriteriaId" : "7BD33BAB-9C3D-43FF-B75B-D71DFB85DB88"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulikunitz/xz/security/advisories/GHSA-25xm-hr59-7c27",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulikunitz/xz/commit/69c6093c7b2397b923acf82cb378f55ab2652b9b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ulikunitz/xz/security/advisories/GHSA-25xm-hr59-7c27",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25152",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T20:15:08.040",
      "lastModified" : "2024-11-21T05:54:27.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote insecure deserialization vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de deserialización no segura remota en Aruba AirWave Management Platform versiones anteriores a la 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25164",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T20:15:08.070",
      "lastModified" : "2024-11-21T05:54:28.903",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de entidad externa XML remota en Aruba AirWave Management Platform versiones anteriores a la 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25165",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-28T20:15:08.097",
      "lastModified" : "2024-11-21T05:54:29.003",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo XML external entity remota en Aruba AirWave Management Platform versiones anteriores a la 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29483",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-28T22:15:08.337",
      "lastModified" : "2024-11-21T06:01:13.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ManageWiki is an extension to the MediaWiki project. The 'wikiconfig' API leaked the value of private configuration variables set through the ManageWiki variable to all users. This has been patched by https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch. If you are unable to patch set `$wgAPIListModules['wikiconfig'] = 'ApiQueryDisabled';` or remove private config as a workaround."
      }, {
        "lang" : "es",
        "value" : "ManageWiki es una extensión del proyecto MediaWiki.&#xa0;La API \"wikiconfig\" filtró el valor de las variables de configuración privadas establecidas por medio de la variable ManageWiki a todos los usuarios.&#xa0;Esto ha sido parcheado por https://github.com/miraheze/ManageWiki/compare/99f3b2c8af18...befb83c66f5b.patch.&#xa0;Si no puede parchear, configure `$ wgAPIListModules ['wikiconfig'] = 'ApiQueryDisabled';` o elimine la configuración privada como solución alternativa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 9.4,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:miraheze:managewiki:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-04-28",
            "matchCriteriaId" : "07A8635C-1EE6-41CA-811E-99AFAE1D7F5F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/miraheze/ManageWiki/commit/befb83c66f5b643e174897ea41a8a46679b26304",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/miraheze/ManageWiki/security/advisories/GHSA-jmc9-rv2f-g8vv",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.miraheze.org/T7213",
        "source" : "security-advisories@github.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/miraheze/ManageWiki/commit/befb83c66f5b643e174897ea41a8a46679b26304",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/miraheze/ManageWiki/security/advisories/GHSA-jmc9-rv2f-g8vv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://phabricator.miraheze.org/T7213",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-2321",
      "sourceIdentifier" : "secalert_us@oracle.com",
      "published" : "2021-04-28T22:15:08.377",
      "lastModified" : "2024-11-21T06:02:53.077",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version that is affected is Prior to 6.1.20. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise Oracle VM VirtualBox. While the vulnerability is in Oracle VM VirtualBox, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle VM VirtualBox accessible data. CVSS 3.1 Base Score 6.0 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el producto Oracle VM VirtualBox de Oracle Virtualization (componente: Core). La versión compatible que está afectada es la versión anterior a 6.1.20.&#xa0;La vulnerabilidad fácilmente explotable permite a un atacante muy privilegiado iniciar sesión en la infraestructura donde se ejecuta Oracle VM VirtualBox para comprometer Oracle VM VirtualBox.&#xa0;Mientras la vulnerabilidad está en Oracle VM VirtualBox, los ataques pueden afectar significativamente a productos adicionales.&#xa0;Los ataques con éxito de esta vulnerabilidad pueden resultar en el acceso no autorizado a datos críticos o acceso completo a todos los datos accesibles de Oracle VM VirtualBox.&#xa0;CVSS 3.1 Puntuación Base 6.0 (Impactos de Confidencialidad).&#xa0;Vector CVSS: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "secalert_us@oracle.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:vm_virtualbox:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.1.20",
            "matchCriteriaId" : "78ECA457-72C4-4E3F-AB62-5AD004ACD1D6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "secalert_us@oracle.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21391",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T01:15:07.883",
      "lastModified" : "2024-11-21T05:48:15.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CKEditor 5 provides a WYSIWYG editing solution. This CVE affects the following npm packages: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office, and ckeditor5-widget. Following an internal audit, a regular expression denial of service (ReDoS) vulnerability has been discovered in multiple CKEditor 5 packages. The vulnerability allowed to abuse particular regular expressions, which could cause a significant performance drop resulting in a browser tab freeze. It affects all users using the CKEditor 5 packages listed above at version <= 26.0.0. The problem has been recognized and patched. The fix will be available in version 27.0.0."
      }, {
        "lang" : "es",
        "value" : "CKEditor 5 proporciona una solución de edición WYSIWYG.&#xa0;Este CVE afecta a los siguientes paquetes npm: ckeditor5-engine, ckeditor5-font, ckeditor5-image, ckeditor5-list, ckeditor5-markdown-gfm, ckeditor5-media-embed, ckeditor5-paste-from-office y ckeditor5-widget.&#xa0;Después de una auditoría interna, se detectó una vulnerabilidad de denegación de servicio de expresión regular (ReDoS) en varios paquetes de CKEditor 5.&#xa0;La vulnerabilidad permitió abusar de determinadas expresiones regulares, lo que podría causar una perdida significativa del rendimiento, lo que causaría la congelación de la pestaña del navegador.&#xa0;Afecta a todos los usuarios que usan los paquetes CKEditor 5 enumerados anteriormente en la versión anterior a 26.0.0 e incluyéndola.&#xa0;El problema ha sido reconocido y parcheado.&#xa0;La corrección estará disponible en la versión 27.0.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-engine:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "67079ED7-67C7-43E6-B2ED-FC8F38073844"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-font:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "49A57CEA-AF9A-406B-97E3-0174F98CF961"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-image:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "8AA7F807-41B2-492E-AC3F-ECC940A9D087"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-list:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "ECFF8404-52EF-49E0-BB96-5C366362DD9E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-markdown-gfm:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "2DDE77C4-ECA2-490F-8B67-D9CC0990FF33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-media-embed:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "C9FD93F0-391D-4910-846C-B972D0737066"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-paste-from-office:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "2B80F6F9-37B6-4FE3-B7C6-07931AD022BD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ckeditor:ckeditor5-widget:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "27.0.0",
            "matchCriteriaId" : "2BD4B908-0A73-4410-813D-34A4108052D0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-3rh3-wfr4-76mj",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-engine",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-font",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-image",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-list",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-markdown-gfm",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-media-embed",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-paste-from-office",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-widget",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/ckeditor/ckeditor5/security/advisories/GHSA-3rh3-wfr4-76mj",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-engine",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-font",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-image",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-list",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-markdown-gfm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-media-embed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-paste-from-office",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.npmjs.com/package/%40ckeditor/ckeditor5-widget",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21414",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T01:15:07.930",
      "lastModified" : "2024-11-21T05:48:18.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prisma is an open source ORM for Node.js & TypeScript. As of today, we are not aware of any Prisma users or external consumers of the `@prisma/sdk` package who are affected by this security vulnerability. This issue may lead to remote code execution if a client of the library calls the vulnerable method with untrusted input. It only affects the `getPackedPackage` function and this function is not advertised and only used for tests & building our CLI, no malicious code was found after checking our codebase."
      }, {
        "lang" : "es",
        "value" : "Prisma es un ORM de código abierto para Node.js y TypeScript.&#xa0;Al día de hoy, no tenemos conocimiento de ningún usuario de Prisma o consumidor externo del paquete \"@prisma/sdk\" que esté afectado por esta vulnerabilidad de seguridad.&#xa0;Este problema puede conllevar a una ejecución de código remota si un cliente de la biblioteca llama al método vulnerable con una entrada que no es confiable.&#xa0;Solo afecta a la función \"getPackedPackage\" y esta función no es anunciada y solo es usada para pruebas y construcción de nuestra CLI, no se encontró ningún código malicioso después de comprobar nuestra base de código"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N",
            "baseScore" : 7.7,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.3,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prisma:prisma:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.20.0",
            "matchCriteriaId" : "3FC865B7-FA94-499C-8E8E-9E5FC08B4F03"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/prisma/prisma/pull/6245",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/prisma/prisma/security/advisories/GHSA-pxcc-hj8w-fmm7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0003/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/prisma/prisma/pull/6245",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/prisma/prisma/security/advisories/GHSA-pxcc-hj8w-fmm7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25214",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2021-04-29T01:15:07.977",
      "lastModified" : "2024-11-21T05:54:33.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed."
      }, {
        "lang" : "es",
        "value" : "En BIND versiones 9.8.5 posteriores a 9.8.8, versiones 9.9.3 posteriores a 9.11.29, versiones 9.12.0 posteriores a 9.16.13, y BIND versiones 9.9.3-S1 posteriores a 9.11.29-S1 y versiones 9.16.8-S1 posteriores a 9.16.13-S1 de BIND 9 Supported Preview Edition, así como versiones de lanzamiento 9.17.0 posteriores a 9.17.11 de la rama de desarrollo de BIND versión 9.17, cuando una versión vulnerable de named recibe un IXFR malformado que desencadena el fallo descrito anteriormente, el proceso named finalizará debido a una aserción fallida la próxima vez que se actualice la zona secundaria transferida"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.8.5",
            "versionEndIncluding" : "9.8.8",
            "matchCriteriaId" : "1256D4F1-698F-4340-B398-3E2931F3B6CA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.9.3",
            "versionEndExcluding" : "9.11.31",
            "matchCriteriaId" : "3E042BE0-6F1A-4C67-A03D-A5555DE24DAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.12.0",
            "versionEndExcluding" : "9.16.15",
            "matchCriteriaId" : "E38EFB1A-11B5-403F-815F-4899E7007D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.17.0",
            "versionEndExcluding" : "9.17.12",
            "matchCriteriaId" : "00F9BCC7-51F7-47EE-AFCE-946F24CC3694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "40EE014B-0CD8-45F3-BEDB-AE6368A78B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "DAF8FA8C-0526-4389-AEC6-92AD62AA3929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "1A9BA952-A5DF-4CBA-8928-0B373C013C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "CAD41122-C5D8-4256-8CB7-FF88DCD96A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "6243685F-1E5B-4FF6-AE1B-44798032FBA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "C2FE13E1-0646-46FC-875B-CB4C34E20101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "1AA16E51-819C-4A1B-B66E-1C60C1782C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "91533F9F-C0E5-4E84-8A4C-F744F956BF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "46E6A4BD-D69B-4A70-821D-5612DD1315EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "8AF9D390-0D5B-4963-A2D3-BF1E7CD95E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "AB2B92F1-6BA8-41CA-9000-E0633462CC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "02CA4635-7DFC-408E-A837-856E0F96CA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "3CABCB08-B838-45F7-AA87-77C6B8767DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "5CC1F26C-4757-4C87-BD8B-2FA456A88C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "582A4948-B64F-45D4-807A-846A85BB6B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "F22E7F6A-0714-480D-ACDF-5027FD6697B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "288EAD80-574B-4839-9C2C-81D6D088A733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "3595F024-F910-4356-8B5B-D478960FF574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "94661BA2-27F8-4FFE-B844-9404F735579D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "E8F29E19-3A64-4426-A2AA-F169440267CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5DE972-F8B8-4964-943A-DA0BD18289D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B1F59C-6ADA-4930-834F-2A8A8444F6AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BB9A7-BF28-4068-A9A6-1DE19CEEC293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/1",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/2",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/3",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/4",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "security-officer@isc.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/v1/docs/cve-2021-25214",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0006/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4909",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/v1/docs/cve-2021-25214",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25215",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2021-04-29T01:15:08.013",
      "lastModified" : "2024-11-21T05:54:33.650",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIND 9.0.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a query for a record triggering the flaw described above, the named process will terminate due to a failed assertion check. The vulnerability affects all currently maintained BIND 9 branches (9.11, 9.11-S, 9.16, 9.16-S, 9.17) as well as all other versions of BIND 9."
      }, {
        "lang" : "es",
        "value" : "En BIND versiones 9.0.0 posteriores a 9.11.29, versiones 9.12.0 posteriores a 9.16.13, y BIND versiones 9.9.3-S1 posteriores a 9.11.29-S1 y versiones 9.16.8-S1 posteriores a 9.16.13-S1 de BIND Supported Preview Edition, así como versiones de lanzamiento 9.17.0 posteriores a 9.17.11 de la rama de desarrollo de BIND versión 9.17, cuando una versión vulnerable de named recibe una consulta para un registro que desencadena un fallo descrito anteriormente, el proceso named terminará debido a un comprobación de afirmación fallido.&#xa0;La vulnerabilidad afecta a todas las ramas de BIND 9 que se mantienen actualmente (9.11, 9.11-S, 9.16, 9.16-S, 9.17), así como a todas las demás versiones de BIND 9"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-617"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.11.31",
            "matchCriteriaId" : "18B8AA9D-C4D1-4F3B-9440-FC29D925961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.12.0",
            "versionEndExcluding" : "9.16.15",
            "matchCriteriaId" : "E38EFB1A-11B5-403F-815F-4899E7007D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.17.0",
            "versionEndExcluding" : "9.17.12",
            "matchCriteriaId" : "00F9BCC7-51F7-47EE-AFCE-946F24CC3694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "40EE014B-0CD8-45F3-BEDB-AE6368A78B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "DAF8FA8C-0526-4389-AEC6-92AD62AA3929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "1A9BA952-A5DF-4CBA-8928-0B373C013C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "CAD41122-C5D8-4256-8CB7-FF88DCD96A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "6243685F-1E5B-4FF6-AE1B-44798032FBA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "C2FE13E1-0646-46FC-875B-CB4C34E20101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "1AA16E51-819C-4A1B-B66E-1C60C1782C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "91533F9F-C0E5-4E84-8A4C-F744F956BF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "46E6A4BD-D69B-4A70-821D-5612DD1315EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "8AF9D390-0D5B-4963-A2D3-BF1E7CD95E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "AB2B92F1-6BA8-41CA-9000-E0633462CC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "02CA4635-7DFC-408E-A837-856E0F96CA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "3CABCB08-B838-45F7-AA87-77C6B8767DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "5CC1F26C-4757-4C87-BD8B-2FA456A88C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "582A4948-B64F-45D4-807A-846A85BB6B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "F22E7F6A-0714-480D-ACDF-5027FD6697B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "288EAD80-574B-4839-9C2C-81D6D088A733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "3595F024-F910-4356-8B5B-D478960FF574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "94661BA2-27F8-4FFE-B844-9404F735579D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*",
            "matchCriteriaId" : "3A756737-1CC4-42C2-A4DF-E1C893B4E2D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1236B66D-EB11-4324-929F-E2B86683C3C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DFC67-46BB-4FC2-BE03-3C65C9311F65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF32BB1-9A58-4821-AE49-5D5C8200631F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21DE67F-CDFD-4D36-9967-633CD0240C6F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:tekelec_platform_distribution:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndIncluding" : "7.7.1",
            "matchCriteriaId" : "26F05F85-7458-4C8F-B93F-93C92E506A40"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/1",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/2",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/3",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/4",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "security-officer@isc.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/v1/docs/cve-2021-25215",
        "source" : "security-officer@isc.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/",
        "source" : "security-officer@isc.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0006/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4909",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "security-officer@isc.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/v1/docs/cve-2021-25215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VEC2XG4Q2ODTN2C4CGXEIXU3EUTBMK7L/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZDSRPCJQ7MZC6CENH5PO3VQOFI7VSWBE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25216",
      "sourceIdentifier" : "security-officer@isc.org",
      "published" : "2021-04-29T01:15:08.047",
      "lastModified" : "2024-11-21T05:54:33.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In BIND 9.5.0 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.11.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.1 of the BIND 9.17 development branch, BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vulnerable by explicitly setting values for the tkey-gssapi-keytab or tkey-gssapi-credential configuration options. Although the default configuration is not vulnerable, GSS-TSIG is frequently used in networks where BIND is integrated with Samba, as well as in mixed-server environments that combine BIND servers with Active Directory domain controllers. For servers that meet these conditions, the ISC SPNEGO implementation is vulnerable to various attacks, depending on the CPU architecture for which BIND was built: For named binaries compiled for 64-bit platforms, this flaw can be used to trigger a buffer over-read, leading to a server crash. For named binaries compiled for 32-bit platforms, this flaw can be used to trigger a server crash due to a buffer overflow and possibly also to achieve remote code execution. We have determined that standard SPNEGO implementations are available in the MIT and Heimdal Kerberos libraries, which support a broad range of operating systems, rendering the ISC implementation unnecessary and obsolete. Therefore, to reduce the attack surface for BIND users, we will be removing the ISC SPNEGO implementation in the April releases of BIND 9.11 and 9.16 (it had already been dropped from BIND 9.17). We would not normally remove something from a stable ESV (Extended Support Version) of BIND, but since system libraries can replace the ISC SPNEGO implementation, we have made an exception in this case for reasons of stability and security."
      }, {
        "lang" : "es",
        "value" : "En BIND versiones 9.5.0 posteriores a 9.11.29, versiones 9.12.0 posteriores  a 9.16.13, y BIND versiones 9.11.3-S1 posteriores a 9.11.29-S1 y versiones 9.16.8-S1 posteriores a 9.16.13-S1 de BIND Supported Preview Edition, así como las versiones 9.17.0 posteriores 9.17.1 de la rama de desarrollo BIND 9.17, los servidores BIND son vulnerables si ejecutan una versión afectada y están configurados para usar las funcionalidades GSS-TSIG.&#xa0;En una configuración que usa la configuración predeterminada de BIND, la ruta del código vulnerable no está expuesta, pero un servidor puede volverse vulnerable al ajustar valores explícitamente para las opciones de configuración tkey-gssapi-keytab o tkey-gssapi-credential.&#xa0;Aunque la configuración predeterminada no es vulnerable, GSS-TSIG es usado con frecuencia en redes donde BIND está integrado con Samba, así como en entornos de servidores mixtos que combinan servidores BIND con controladores de dominio de Active Directory.&#xa0;Para los servidores que cumplen con estas condiciones, la implementación de ISC SPNEGO es vulnerable a varios ataques, dependiendo de la arquitectura de la CPU para la que se construyó BIND: Para binarios con nombre compilados para plataformas de 64 bits, este fallo puede ser usado para desencadenar una sobrelectura del búfer, conllevando a un bloqueo del servidor.&#xa0;Para binarios con nombre compilados para plataformas de 32 bits, este fallo puede ser usado para desencadenar un bloqueo del servidor debido a un desbordamiento del búfer y posiblemente también para lograr la Ejecución de Código Remota.&#xa0;Hemos determinado que las implementaciones estándar de SPNEGO están disponibles en las bibliotecas MIT y Heimdal Kerberos, que admiten una amplia gama de sistemas operativos, lo que hace que la implementación de ISC sea innecesaria y obsoleta.&#xa0;Por lo tanto, para reducir la superficie de ataque para los usuarios de BIND, eliminaremos la implementación de ISC SPNEGO en las versiones de abril de BIND 9.11 y 9.&#xa0;16 (ya se había eliminado de BIND 9.17).&#xa0;Normalmente no eliminaríamos algo de una ESV (versión de soporte extendido) estable de BIND, pero dado que las bibliotecas del sistema pueden reemplazar la implementación de ISC SPNEGO, hemos hecho una excepción en este caso por razones de estabilidad y seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-officer@isc.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.0.0",
            "versionEndExcluding" : "9.11.31",
            "matchCriteriaId" : "18B8AA9D-C4D1-4F3B-9440-FC29D925961D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.12.0",
            "versionEndExcluding" : "9.16.15",
            "matchCriteriaId" : "E38EFB1A-11B5-403F-815F-4899E7007D02"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:*:*:*:*:-:*:*:*",
            "versionStartIncluding" : "9.17.0",
            "versionEndExcluding" : "9.17.12",
            "matchCriteriaId" : "00F9BCC7-51F7-47EE-AFCE-946F24CC3694"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.3:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "40EE014B-0CD8-45F3-BEDB-AE6368A78B04"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.12:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "DAF8FA8C-0526-4389-AEC6-92AD62AA3929"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.9.13:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "1A9BA952-A5DF-4CBA-8928-0B373C013C32"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.5:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "CAD41122-C5D8-4256-8CB7-FF88DCD96A13"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.10.7:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "6243685F-1E5B-4FF6-AE1B-44798032FBA6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.3:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "C2FE13E1-0646-46FC-875B-CB4C34E20101"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s3:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "1AA16E51-819C-4A1B-B66E-1C60C1782C0D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s5:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "91533F9F-C0E5-4E84-8A4C-F744F956BF97"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.5:s6:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "46E6A4BD-D69B-4A70-821D-5612DD1315EF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.6:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "8AF9D390-0D5B-4963-A2D3-BF1E7CD95E9D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.7:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "AB2B92F1-6BA8-41CA-9000-E0633462CC28"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.8:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "02CA4635-7DFC-408E-A837-856E0F96CA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.12:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "3CABCB08-B838-45F7-AA87-77C6B8767DD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.21:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "5CC1F26C-4757-4C87-BD8B-2FA456A88C6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.27:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "582A4948-B64F-45D4-807A-846A85BB6B42"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.11.29:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "F22E7F6A-0714-480D-ACDF-5027FD6697B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.8:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "288EAD80-574B-4839-9C2C-81D6D088A733"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.11:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "3595F024-F910-4356-8B5B-D478960FF574"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:isc:bind:9.16.13:s1:*:*:supported_preview:*:*:*",
            "matchCriteriaId" : "94661BA2-27F8-4FFE-B844-9404F735579D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:siemens:sinec_infrastructure_network_services:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.1.1",
            "matchCriteriaId" : "B0F46497-4AB0-49A7-9453-CC26837BF253"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vsphere:*:*",
            "matchCriteriaId" : "E8F29E19-3A64-4426-A2AA-F169440267CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5DE972-F8B8-4964-943A-DA0BD18289D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4B1F59C-6ADA-4930-834F-2A8A8444F6AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:aff_500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "578BB9A7-BF28-4068-A9A6-1DE19CEEC293"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:aff_500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AB58180-E5E0-4056-ABF9-A99E9F6A9E86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/1",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/2",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/3",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/4",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "security-officer@isc.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/v1/docs/cve-2021-25215",
        "source" : "security-officer@isc.org",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html",
        "source" : "security-officer@isc.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0006/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4909",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-657/",
        "source" : "security-officer@isc.org",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/29/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kb.isc.org/v1/docs/cve-2021-25215",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00001.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210521-0006/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4909",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-657/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31776",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T01:15:08.083",
      "lastModified" : "2024-11-21T06:06:12.127",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Aviatrix VPN Client before 2.14.14 on Windows has an unquoted search path that enables local privilege escalation to the SYSTEM user, if the machine is misconfigured to allow unprivileged users to write to directories that are supposed to be restricted to administrators."
      }, {
        "lang" : "es",
        "value" : "Aviatrix VPN Client versiones anteriores a 2.14.14 en Windows, presenta una ruta de búsqueda sin comillas que habilita una escalada de privilegios local al usuario SYSTEM, si la máquina está configurada inapropiadamente para permitir a usuarios sin privilegios escribir en directorios que se supone que están restringidos a administradores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-428"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aviatrix:vpn_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.14.14",
            "matchCriteriaId" : "FCA75989-664A-4906-9F08-65451D334B29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://docs.aviatrix.com/Downloads/samlclient.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.aviatrix.com/Downloads/samlclient.html#windows-win",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.aviatrix.com/HowTos/changelog.html#aviatrix-vpn-client-changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.aviatrix.com/Downloads/samlclient.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.aviatrix.com/Downloads/samlclient.html#windows-win",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.aviatrix.com/HowTos/changelog.html#aviatrix-vpn-client-changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31875",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T02:15:08.043",
      "lastModified" : "2024-11-21T06:06:24.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ {
        "sourceIdentifier" : "cve@mitre.org",
        "tags" : [ "disputed" ]
      } ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because \"there isn’t very much of an opportunity to exploit this reliably for an information leak, so there isn’t any real security impact.\""
      }, {
        "lang" : "es",
        "value" : "En el archivo mjs_json.c en Cesanta MongooseOS mJS 1.26, una cadena JSON formada maliciosamente puede desencadenar un desbordamiento de búfer en la región heap de la memoria por un paso en la función mjs_json_parse, lo que potencialmente puede conllevar a un redireccionamiento del flujo de control"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-193"
        }, {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cesanta:mongooseos_mjs:1.26:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C30A2D2-9123-439A-9D5C-7372183FCA23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/418sec/mjs/pull/2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mjs/releases/tag/1.26",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1-other-mjs/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/418sec/mjs/pull/2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cesanta/mjs/releases/tag/1.26",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://huntr.dev/bounties/1-other-mjs/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31879",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T05:15:08.707",
      "lastModified" : "2024-11-21T06:06:25.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GNU Wget through 1.21.1 does not omit the Authorization header upon a redirect to a different origin, a related issue to CVE-2018-1000007."
      }, {
        "lang" : "es",
        "value" : "GNU Wget versiones hasta 1.21.1, no omite el encabezado Authorization tras un redireccionamiento a un origen diferente, un problema relacionado con CVE-2018-1000007"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:wget:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.21.1",
            "matchCriteriaId" : "2FB17F65-078F-4E8C-893D-3CF3FD8B2A5C"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:broadcom:brocade_fabric_operating_system_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2748912-FC54-47F6-8C0C-B96784765B8E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7CF3019-975D-40BB-A8A4-894E62BD3797"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:a250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1236B66D-EB11-4324-929F-E2B86683C3C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:a250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "281DFC67-46BB-4FC2-BE03-3C65C9311F65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:500f_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF32BB1-9A58-4821-AE49-5D5C8200631F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:500f:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F21DE67F-CDFD-4D36-9967-633CD0240C6F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://mail.gnu.org/archive/html/bug-wget/2021-02/msg00002.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25163",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T11:15:08.987",
      "lastModified" : "2024-11-21T05:54:28.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote XML external entity vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo XML external entity remota en Aruba AirWave Management Platform versiones anteriores a 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25166",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T11:15:09.040",
      "lastModified" : "2024-11-21T05:54:29.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de acceso remoto no autorizado en Aruba AirWave Management Platform versiones anteriores a 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25167",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T11:15:09.070",
      "lastModified" : "2024-11-21T05:54:29.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote unauthorized access vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de acceso remoto no autorizado en Aruba AirWave Management Platform versiones anteriores a 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29137",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T12:15:10.360",
      "lastModified" : "2024-11-21T06:00:45.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote URL redirection vulnerability was discovered in Aruba AirWave Management Platform version(s) prior to 8.2.12.1. Aruba has released patches for AirWave Management Platform that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de redireccionamiento abierto de una URL remota en Aruba AirWave Management Platform versiones anteriores a 8.2.12.1.&#xa0;Aruba ha publicado parches para AirWave Management Platform que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "8.2.12.1",
            "matchCriteriaId" : "9692D1CE-E2C6-4B6E-BF21-4A15A8621E1D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-010.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29144",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T12:15:10.390",
      "lastModified" : "2024-11-21T06:00:46.577",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de divulgación de información confidencial remota en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.5",
            "matchCriteriaId" : "22DEB555-76FF-4551-821B-A2F3E297FA79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29145",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T12:15:10.417",
      "lastModified" : "2024-11-21T06:00:46.710",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de Ejecución de Código Remota de tipo server side request forgery (SSRF) en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.6",
            "matchCriteriaId" : "25FFBBDA-7F94-470E-A1E6-A6C80C5F0490"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.1",
            "matchCriteriaId" : "9D2E051D-38A6-4E5D-9A4F-5C96B67DC696"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29146",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T12:15:10.450",
      "lastModified" : "2024-11-21T06:00:46.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.9",
            "matchCriteriaId" : "D335F6BF-93A7-4D43-B3DD-C7F10FF6814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "166E4A0B-C20D-4381-AB47-BCFFEA171F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EB2CBF-3BAE-4DF2-A936-0B4C807900A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29147",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T12:15:10.483",
      "lastModified" : "2024-11-21T06:00:46.960",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de ejecución de comandos remota arbitrarios en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.8",
            "matchCriteriaId" : "69697CC3-D0B0-4874-9FD7-53E5855E2F88"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.4",
            "matchCriteriaId" : "859F1A9B-C0A5-4C06-B6A8-662B2443A244"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EB2CBF-3BAE-4DF2-A936-0B4C807900A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29138",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T13:15:08.327",
      "lastModified" : "2024-11-21T06:00:45.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote disclosure of privileged information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de divulgación de información privilegiada remota en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.5",
            "matchCriteriaId" : "F6791E6A-6965-40B5-BFB9-468F62C13356"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.1",
            "matchCriteriaId" : "95B0E85B-CFE0-43D5-8975-7B91CF32F13F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29140",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T13:15:08.360",
      "lastModified" : "2024-11-21T06:00:46.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote XML external entity (XXE) vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de XML external entity (XXE) remota en Aruba ClearPass Policy Manager: versiones: Anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.13",
            "matchCriteriaId" : "7A93E733-7F7C-45C0-A419-3474745F8CDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.4",
            "matchCriteriaId" : "322D0EFF-351A-4CB3-9379-CEFE7E47F4B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29142",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T13:15:08.390",
      "lastModified" : "2024-11-21T06:00:46.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.9",
            "matchCriteriaId" : "D335F6BF-93A7-4D43-B3DD-C7F10FF6814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "166E4A0B-C20D-4381-AB47-BCFFEA171F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EB2CBF-3BAE-4DF2-A936-0B4C807900A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29139",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T14:15:09.433",
      "lastModified" : "2024-11-21T06:00:45.993",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote cross-site scripting (XSS) vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de tipo cross-site scripting (XSS) en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.9",
            "matchCriteriaId" : "D335F6BF-93A7-4D43-B3DD-C7F10FF6814B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.9.0",
            "versionEndExcluding" : "6.9.5",
            "matchCriteriaId" : "166E4A0B-C20D-4381-AB47-BCFFEA171F93"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:6.7.14:-:*:*:*:*:*:*",
            "matchCriteriaId" : "27EB2CBF-3BAE-4DF2-A936-0B4C807900A4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29141",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-04-29T14:15:09.463",
      "lastModified" : "2024-11-21T06:00:46.220",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability."
      }, {
        "lang" : "es",
        "value" : "Se detectó una vulnerabilidad de divulgación remota de información confidencial en Aruba ClearPass Policy Manager versiones anteriores a 6.9.5, 6.8.9, 6.7.14-HF1.&#xa0;Aruba ha publicado parches para Aruba ClearPass Policy Manager que abordan esta vulnerabilidad de seguridad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.14",
            "matchCriteriaId" : "BA9D0F41-6618-4E8E-A627-28A58608AA11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.8.0",
            "versionEndExcluding" : "6.8.5",
            "matchCriteriaId" : "22DEB555-76FF-4551-821B-A2F3E297FA79"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-009.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20090",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-29T15:15:10.630",
      "lastModified" : "2025-11-03T18:59:30.060",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de salto de ruta en las interfaces web de Buffalo WSR-2533DHPL2 versión de firmware anterior a 1.02 e incluyéndola y WSR-2533DHP3 versión de firmware anterior a 1.24 e incluyéndola, podría permitir a atacantes remotos no autenticados omitir la autenticación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Arcadyan Buffalo Firmware Path Traversal Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wsr-2533dhpl2-bk_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "D861729C-023B-4D73-8C4C-BF7E8B0B7045"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wsr-2533dhpl2-bk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B03FA14-33E3-44D2-8165-197CB446F2D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wsr-2533dhp3-bk_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24",
            "matchCriteriaId" : "63232EC8-B2B8-4867-93DB-C0C5147E2730"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wsr-2533dhp3-bk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA91D93-E2B9-4415-B541-1968F1F39814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.kb.cert.org/vuls/id/914124",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-13",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.kb.cert.org/vuls/id/914124",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "US Government Resource" ]
      }, {
        "url" : "https://www.secpod.com/blog/arcadyan-based-routers-and-modems-under-active-exploitation/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-20090",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20091",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-29T15:15:10.660",
      "lastModified" : "2024-11-21T05:45:54.603",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configuration, potentially gaining remote code execution."
      }, {
        "lang" : "es",
        "value" : "Las interfaces web de Buffalo WSR-2533DHPL2 versión de firmware anterior a 1.02 e incluyéndola y WSR-2533DHP3 versión de firmware anterior a 1.24 e incluyéndola, no sanean apropiadamente una entrada del usuario.&#xa0;Un atacante remoto autenticado podría aprovechar esta vulnerabilidad para alterar la configuración del dispositivo, potencialmente consiguiendo una ejecución de código remota"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wsr-2533dhpl2-bk_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "D861729C-023B-4D73-8C4C-BF7E8B0B7045"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wsr-2533dhpl2-bk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B03FA14-33E3-44D2-8165-197CB446F2D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wsr-2533dhp3-bk_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24",
            "matchCriteriaId" : "63232EC8-B2B8-4867-93DB-C0C5147E2730"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wsr-2533dhp3-bk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA91D93-E2B9-4415-B541-1968F1F39814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-13",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20092",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-29T15:15:10.693",
      "lastModified" : "2024-11-21T05:45:54.730",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor."
      }, {
        "lang" : "es",
        "value" : "Las interfaces web de Buffalo WSR-2533DHPL2 versión de firmware anterior a 1.02  e incluyéndola y WSR-2533DHP3 versión de firmware anterior a 1.24 e incluyéndola, no restringen apropiadamente el acceso a información confidencial de un actor no autorizado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wsr-2533dhpl2-bk_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.02",
            "matchCriteriaId" : "D861729C-023B-4D73-8C4C-BF7E8B0B7045"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wsr-2533dhpl2-bk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B03FA14-33E3-44D2-8165-197CB446F2D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:buffalo:wsr-2533dhp3-bk_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.24",
            "matchCriteriaId" : "63232EC8-B2B8-4867-93DB-C0C5147E2730"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:buffalo:wsr-2533dhp3-bk:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AA91D93-E2B9-4415-B541-1968F1F39814"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.tenable.com/security/research/tra-2021-13",
        "source" : "vulnreport@tenable.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-13",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20095",
      "sourceIdentifier" : "vulnreport@tenable.com",
      "published" : "2021-04-29T15:15:10.720",
      "lastModified" : "2023-11-07T03:28:57.977",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27651",
      "sourceIdentifier" : "security@pega.com",
      "published" : "2021-04-29T15:15:10.917",
      "lastModified" : "2024-11-21T05:58:22.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks."
      }, {
        "lang" : "es",
        "value" : "En versiones 8.2.1 hasta 8.5.2 de Pega Infinity, la funcionalidad password reset para cuentas locales puede ser usada para omitir las comprobaciones de autenticación locales"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "security@pega.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@pega.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:pega:infinity:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.2.1",
            "versionEndIncluding" : "8.5.2",
            "matchCriteriaId" : "B759124B-4436-4240-A992-75C9DC181ED2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://collaborate.pega.com/discussion/pega-security-advisory-a21-hotfix-matrix",
        "source" : "security@pega.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://collaborate.pega.com/discussion/pega-security-advisory-a21-hotfix-matrix",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28280",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T15:15:10.957",
      "lastModified" : "2024-11-21T05:59:25.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CSRF + Cross-site scripting (XSS) vulnerability in search.php in PHPFusion 9.03.110 allows remote attackers to inject arbitrary web script or HTML"
      }, {
        "lang" : "es",
        "value" : "CSRF + Una vulnerabilidad de Cross-site scripting (XSS) en el archivo search.php en PHPFusion versión 9.03.110, permite a atacantes remotos inyectar script web o HTML arbitrario"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        }, {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:php-fusion:phpfusion:9.03.110:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29149A91-66BD-4C42-9D94-7EE9044F1727"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://anotepad.com/notes/2skndayt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/08d6c2ea49bd06fcce32275252f5f25abe61965c",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/1c2b32321cf11ed1cd3ff835f8da0d172c849ce6",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/da9f89ae70219f357fba6fffd2dae1ec886d8a3b",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/fda266c3bb35c650a8c4c51b6923abdfb66ef5cd",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://anotepad.com/notes/2skndayt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/08d6c2ea49bd06fcce32275252f5f25abe61965c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/1c2b32321cf11ed1cd3ff835f8da0d172c849ce6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/da9f89ae70219f357fba6fffd2dae1ec886d8a3b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/PHPFusion/PHPFusion/commit/fda266c3bb35c650a8c4c51b6923abdfb66ef5cd",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28899",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T15:15:10.987",
      "lastModified" : "2024-11-21T06:00:21.980",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Vulnerability in the AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession, and AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession subclasses in Networks LIVE555 Streaming Media before 2021.3.16."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en las subclases AC3AudioFileServerMediaSubsession, ADTSAudioFileServerMediaSubsession y AMRAudioFileServerMediaSubsessionLive OnDemandServerMediaSubsession en redes LIVE555 Streaming Media versiones anteriores a 2021.3.16"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:live555:streaming_media:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021.3.16",
            "matchCriteriaId" : "6A3FA48C-510C-481C-8091-C3FF9412F577"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.live555.com/pipermail/live-devel/2021-March/021891.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "http://lists.live555.com/pipermail/live-devel/2021-March/021891.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30027",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T15:15:11.020",
      "lastModified" : "2024-11-21T06:03:14.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to trigger use of uninitialized memory, and cause a denial of service via a malformed Markdown document."
      }, {
        "lang" : "es",
        "value" : "En la función md_analyze_line en el archivo md4c.c en md4c versión 0.4.7, permite a atacantes desencadenar el uso de memoria no inicializada y causar una denegación de servicio por medio de un documento Markdown malformado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:md4c_project:md4c:0.4.7:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F8ADD1F-9AB8-41D2-87DD-7A112B44D1CC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/mity/md4c/commit/4fc808d8fe8d8904f8525bb4231d854f45e23a19",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mity/md4c/issues/155",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mity/md4c/commit/4fc808d8fe8d8904f8525bb4231d854f45e23a19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/mity/md4c/issues/155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30218",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T15:15:11.050",
      "lastModified" : "2024-11-21T06:03:31.953",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "samurai 1.2 has a NULL pointer dereference in writefile() in util.c via a crafted build file."
      }, {
        "lang" : "es",
        "value" : "samurai versión 1.2, presenta una desreferencia del puntero NULL en la función writefile() en el archivo util.c por medio de un archivo de compilación diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samurai_project:samurai:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EAE8155-445A-4338-A9C0-A6BB5928821D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/michaelforney/samurai/commit/e84b6d99c85043fa1ba54851ee500540ec206918",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelforney/samurai/issues/67",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelforney/samurai/commit/e84b6d99c85043fa1ba54851ee500540ec206918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelforney/samurai/issues/67",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30219",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T15:15:11.077",
      "lastModified" : "2024-11-21T06:03:32.103",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "samurai 1.2 has a NULL pointer dereference in printstatus() function in build.c via a crafted build file."
      }, {
        "lang" : "es",
        "value" : "samurai versión 1.2, presenta una desreferencia de puntero NULL en la función printstatus() en el archivo build.c por medio de un archivo de construcción diseñado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samurai_project:samurai:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6EAE8155-445A-4338-A9C0-A6BB5928821D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/michaelforney/samurai/commit/d2af3bc375e2a77139c3a28d6128c60cd8d08655",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelforney/samurai/issues/68",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelforney/samurai/commit/d2af3bc375e2a77139c3a28d6128c60cd8d08655",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/michaelforney/samurai/issues/68",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30224",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T15:15:11.107",
      "lastModified" : "2024-11-21T06:03:32.253",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Request Forgery (CSRF) in Rukovoditel v2.8.3 allows attackers to create an admin user with an arbitrary credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Request Forgery (CSRF) en Rukovoditel versión v2.8.3, permite a atacantes crear un usuario administrador con credenciales arbitrarias"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rukovoditel:rukovoditel:2.8.3:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E73C124-A25E-4354-A75C-FEDB078B6D44"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://forum.rukovoditel.net/viewtopic.php?f=19&t=2760",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/victomteng1997/d5f2db1d37aed5792c28685068ec41e2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.rukovoditel.net/viewtopic.php?f=19&t=2760",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://gist.github.com/victomteng1997/d5f2db1d37aed5792c28685068ec41e2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20228",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-29T16:15:09.737",
      "lastModified" : "2024-11-21T05:46:10.360",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Ansible Engine 2.9.18, where sensitive info is not masked by default and is not protected by the no_log feature when using the sub-option feature of the basic.py module. This flaw allows an attacker to obtain sensitive information. The highest threat from this vulnerability is to confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en Ansible Engine versión 2.9.18, donde la información confidencial no está enmascarada por defecto y no está protegida por la funcionalidad no_log cuando se usa la funcionalidad sub-option del módulo basic.py.&#xa0;Este fallo permite a un atacante obtener información confidencial.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_engine:2.9.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0966CDD1-4D3E-4994-A75D-B81E3DB957AE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_automation_platform:1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBA4F8F3-6FC3-4ADD-BB96-A707E94AB0AB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_engine:2.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8989CD03-49A1-4831-BF98-9F21592788BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_engine:2.9:*:*:*:*:*:*:*",
            "matchCriteriaId" : "031BA68C-C515-4F22-BB63-751767E1123E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:ansible_tower:3.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31C575C-06D2-4CAF-A5B7-B9469B3ED55F"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1925002",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ansible/ansible/pull/73487",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4950",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1925002",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/ansible/ansible/pull/73487",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4950",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20294",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-29T16:15:09.783",
      "lastModified" : "2024-11-21T05:46:17.983",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in binutils readelf 2.35 program. An attacker who is able to convince a victim using readelf to read a crafted file could trigger a stack buffer overflow, out-of-bounds write of arbitrary data supplied by the attacker. The highest impact of this flaw is to confidentiality, integrity, and availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en el programa binutils readelf versión 2.35.&#xa0;Un atacante que sea capaz de convencer a una víctima usando readelf para que lea un archivo diseñado podría desencadenar un desbordamiento de búfer de la pila, una escritura fuera de límites de los datos arbitrarios proporcionados por el atacante.&#xa0;El mayor impacto de este fallo es la confidencialidad, integridad y disponibilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnu:binutils:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.35",
            "versionEndExcluding" : "2.35.2",
            "matchCriteriaId" : "A775487B-2BF9-4578-B557-E77278DA5F94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1943533",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-30",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=26929",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/?p=binutils-gdb.git%3Ba=patch%3Bh=372dd157272e0674d13372655cc60eaca9c06926",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1943533",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r58af02e294bd07f487e2c64ffc0a29b837db5600e33b6e698b9d696b%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.apache.org/thread.html/rf4c02775860db415b4955778a131c2795223f61cb8c6a450893651e4%40%3Cissues.bookkeeper.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202208-30",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/bugzilla/show_bug.cgi?id=26929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://sourceware.org/git/?p=binutils-gdb.git%3Ba=patch%3Bh=372dd157272e0674d13372655cc60eaca9c06926",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25810",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.817",
      "lastModified" : "2024-11-21T05:55:28.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross site Scripting (XSS) vulnerability in MERCUSYS Mercury X18G 1.0.5 devices, via crafted values to the 'src_dport_start', 'src_dport_end', and 'dest_port' parameters."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en dispositivos MERCUSYS Mercury X18G versión 1.0.5, por medio de valores diseñados para los parámetros \"src_dport_start\", \"src_dport_end\" y \"dest_port\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mercusys:mercury_x18g_firmware:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50CE46-BF92-4A2C-A49B-E1C65880DCFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercusys:mercury_x18g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4AD714-C03E-48FE-B258-ED255886DF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/Mercury%20Router%20X18g%20v1.0.5%20Stored%20XSS.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/Mercury%20Router%20X18g%20v1.0.5%20Stored%20XSS.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25811",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.847",
      "lastModified" : "2024-11-21T05:55:28.717",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MERCUSYS Mercury X18G 1.0.5 devices allow Denial of service via a crafted value to the POST listen_http_lan parameter. Upon subsequent device restarts after this vulnerability is exploted the device will not be able to access the webserver unless the listen_http_lan parameter to uhttpd.json is manually fixed."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos MERCUSYS Mercury X18G versión 1.0.5, permiten una Denegación de Servicio por medio de un valor diseñado para el parámetro POST listen_http_lan.&#xa0;En los reinicios posteriores del dispositivo después de que esta vulnerabilidad es explotada, el dispositivo no podrá acceder al servidor web a menos que el parámetro listen_http_lan para el archivo uhttpd.json es manualmente corregido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:mercusys:mercury_x18g_firmware:1.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F50CE46-BF92-4A2C-A49B-E1C65880DCFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:mercusys:mercury_x18g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A4AD714-C03E-48FE-B258-ED255886DF51"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/Mercury%20Router%20X18g%20v1.0.5%20Denial%20of%20Service.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/Mercury%20Router%20X18g%20v1.0.5%20Denial%20of%20Service.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://www.mercurycom.com.cn/product-521-1.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://www.mercusys.com/en/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25812",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.873",
      "lastModified" : "2024-11-21T05:55:28.863",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Command injection vulnerability in China Mobile An Lianbao WF-1 1.01 via the 'ip' parameter with a POST request to /api/ZRQos/set_online_client."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección de comandos en China Mobile An Lianbao versión WF-1 1.01, por medio del parámetro \"ip\" con una petición POST para /api/ZRQos/set_online_client"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zhipinmall.com/prodetail?id=1266#skuId=3020",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.zhipinmall.com/prodetail?id=1266#skuId=3020",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27802",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.903",
      "lastModified" : "2023-11-07T03:32:01.343",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-24177. Reason: This candidate is a duplicate of CVE-2021-24177. Notes: All CVE users should reference CVE-2021-24177 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29350",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.933",
      "lastModified" : "2024-11-21T06:00:58.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SQL injection in the getip function in conn/function.php in 发货100-设计素材下载系统 1.1 allows remote attackers to inject arbitrary SQL commands via the X-Forwarded-For header to admin/product_add.php."
      }, {
        "lang" : "es",
        "value" : "Inyección SQL en la función getip en conn/function.php en ??100-???????? 1.1 permite a los atacantes remotos inyectar comandos SQL arbitrarios a través de la cabecera X-Forwarded-For en admin/product_add.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:shipment_100-design_material_download_system_project:shipment_100-design_material_download_system:1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EA151F9-643D-4A51-8226-6270565AB34C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/XD-519/Doc/blob/main/sql%20injection.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/XD-519/Doc/blob/main/sql%20injection.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30227",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.963",
      "lastModified" : "2024-11-21T06:03:32.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cross Site Scripting (XSS) vulnerability in the article comments feature in emlog 6.0."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo Cross Site Scripting (XSS) en la funcionalidad  article comments en emlog versión 6.0"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:6.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF9945F-F24D-4529-906F-E0BF560E4E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/issues/79",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/emlog/emlog/issues/79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30228",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:09.993",
      "lastModified" : "2024-11-21T06:03:32.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/ZRAndlink/set_ZRAndlink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iandlink_proc_enable parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz api/ZRAndlink/set_ZRAndlink en el router China Mobile Lianbao WF-1 versión 1.0.1, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro iandlink_proc_enable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection2.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection2.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30229",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:10.023",
      "lastModified" : "2024-11-21T06:03:32.703",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/zrDm/set_zrDm interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the dm_enable, AppKey, or Pwd parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz  api/zrDm/set_zrDm en el router China Mobile Lianbao WF-1 versión 1.0.1, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro dm_enable, AppKey o Pwd"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection3.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection3.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30230",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:10.050",
      "lastModified" : "2024-11-21T06:03:32.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/ZRFirmware/set_time_zone interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the zonename parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz api/ZRFirmware/set_time_zone en el router China Mobile Lianbao WF-1 versión 1.0.1, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro zonename"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection5.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection5.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:10.077",
      "lastModified" : "2024-11-21T06:03:33.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/zrDm/set_ZRElink interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the bssaddr, abiaddr, devtoken, devid, elinksync, or elink_proc_enable parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz api/zrDm/set_ZRElink en el router China Mobile Lianbao WF-1 versión 1.0.1, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en los parámetros bssaddr, abiaddr, devtoken, devid, elinksync o elink_proc_enable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection4.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection4.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:10.107",
      "lastModified" : "2024-11-21T06:03:33.193",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/ZRIGMP/set_IGMP_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the IGMP_PROXY_WAN_CONNECT parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz api/ZRIGMP/set_IGMP_PROXY en el router China Mobile Lianbao WF-1 versión 1.0.1, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro IGMP_PROXY_WAN_CONNECT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection6.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection6.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30233",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:10.137",
      "lastModified" : "2024-11-21T06:03:33.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/ZRIptv/setIptvInfo interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the iptv_vlan parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz api/ZRIptv/setIptvInfo en el router China Mobile Lianbao WF-1 versión 1.0.1, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro iptv_vlan"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection8.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection8.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30234",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T16:15:10.170",
      "lastModified" : "2024-11-21T06:03:33.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The api/ZRIGMP/set_MLD_PROXY interface in China Mobile An Lianbao WF-1 router 1.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the MLD_PROXY_WAN_CONNECT parameter."
      }, {
        "lang" : "es",
        "value" : "La interfaz aapi/ZRIGMP/set_MLD_PROXY en China Mobile Lianbao WF-versión1 1.0.1 router, permite a atacantes remotos ejecutar comandos arbitrarios por medio de metacaracteres de shell en el parámetro MLD_PROXY_WAN_CONNECT"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:chinamobile:an_lianbao_wf-1_firmware:1.0.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D12A7F9-493E-4406-9F5C-03853419A3D6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:chinamobile:an_lianbao_wf-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81224F70-2658-4E2E-9CC8-63F2D4B3CB52"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection7.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://iot.10086.cn/?l=en-us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/pokerfacett/MY_REQUEST/blob/master/China%20Mobile%20An%20Lianbao%20WF-1%20router%20Command%20Injection7.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.cnvd.org.cn/flaw/show/CNVD-2021-03520",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21415",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T17:15:08.977",
      "lastModified" : "2024-11-21T05:48:18.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Prisma VS Code a VSCode extension for Prisma schema files. This is a Remote Code Execution Vulnerability that affects all versions of the Prisma VS Code extension older than 2.20.0. If a custom binary path for the Prisma format binary is set in VS Code Settings, for example by downloading a project that has a .vscode/settings.json file that sets a value for \"prismaFmtBinPath\". That custom binary is executed when auto-formatting is triggered by VS Code or when validation checks are triggered after each keypress on a *.prisma file. Fixed in versions 2.20.0 and 20.0.27. As a workaround users can either edit or delete the `.vscode/settings.json` file or check if the binary is malicious and delete it."
      }, {
        "lang" : "es",
        "value" : "Prisma VS Code una extensión de VSCode para archivos de esquema Prisma.&#xa0;Esta es una vulnerabilidad de Ejecución de Código Remota que afecta a todas las versiones de la extensión Prisma VS Code anteriores a 2.20.0.&#xa0;Si una ruta binaria personalizada para el formato binario de Prisma en VS Code Settings  es establecida, por ejemplo, al cargar un proyecto que tiene un archivo .vscode/settings.json que establece un valor para \"prismaFmtBinPath\".&#xa0;Ese binario personalizado se ejecuta cuando el formato automático se activa mediante VS Code o cuando se activan las validaciones de comprobación después de cada pulsación de tecla en un archivo *.prisma.&#xa0;Corregido en las versiones 2.20.0 y 20.0.27.&#xa0;Como solución alternativa, los usuarios pueden editar o eliminar el archivo \"vscode/settings.json\" o comprobar si el binario es malicioso y eliminarlo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:prisma:language-tools:*:*:*:*:*:visual_studio_code:*:*",
            "versionEndExcluding" : "2.20.0",
            "matchCriteriaId" : "D5927100-7D5D-4C60-ACC0-7474A820CB2D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/prisma/language-tools/pull/750",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/prisma/language-tools/security/advisories/GHSA-4rf9-43m7-x828",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=Prisma.prisma",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=Prisma.prisma-insider",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://github.com/prisma/language-tools/pull/750",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/prisma/language-tools/security/advisories/GHSA-4rf9-43m7-x828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=Prisma.prisma",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://marketplace.visualstudio.com/items?itemName=Prisma.prisma-insider",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21417",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T17:15:09.023",
      "lastModified" : "2024-11-21T05:48:19.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "fluidsynth is a software synthesizer based on the SoundFont 2 specifications. A use after free violation was discovered in fluidsynth, that can be triggered when loading an invalid SoundFont file."
      }, {
        "lang" : "es",
        "value" : "fluidsynth es un sintetizador de software basado en las especificaciones de SoundFont 2.&#xa0;Se detectó un uso de la memoria previamente liberada en fluidsynth, que puede ser activado al cargar un archivo SoundFont no válido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.8
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:fluidsynth:fluidsynth:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.1.8",
            "matchCriteriaId" : "759BF781-36AC-4C2C-8BD2-11C3E7849492"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FluidSynth/fluidsynth/issues/808",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FluidSynth/fluidsynth/pull/810",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FluidSynth/fluidsynth/security/advisories/GHSA-6fcq-pxhc-jxc9",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00027.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FluidSynth/fluidsynth/issues/808",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FluidSynth/fluidsynth/pull/810",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FluidSynth/fluidsynth/security/advisories/GHSA-6fcq-pxhc-jxc9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00027.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30048",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-29T17:15:09.060",
      "lastModified" : "2024-11-21T06:03:15.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read arbitrary files via the filePath parameter."
      }, {
        "lang" : "es",
        "value" : "El cruce de directorios en la función fileDownload en com/java2nb/common/controller/FileController.java en Novel-plus (?????-plus) 3.5.1 permite a los atacantes leer archivos arbitrarios a través del parámetro filePath"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:novel_boutique_house-plus_project:novel_boutique_house-plus:3.5.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AAEBD24-030A-47FD-8448-3686897BE3D4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/201206030/novel-plus/issues/39",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49724",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/201206030/novel-plus/issues/39",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.exploit-db.com/exploits/49724",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31417",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.090",
      "lastModified" : "2024-11-21T06:05:37.330",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12131."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.4-47270.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de inicialización apropiada de la memoria antes de acceder a ella.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12131"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.4-47270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31625EC-07FD-4A04-AFA0-708FEBC32152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-426/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-426/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31418",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.127",
      "lastModified" : "2024-11-21T06:05:37.443",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12221."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.4-47270.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de inicialización apropiada de la memoria antes de acceder a ella.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12221"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.4-47270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31625EC-07FD-4A04-AFA0-708FEBC32152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-429/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-429/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31419",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.163",
      "lastModified" : "2024-11-21T06:05:37.560",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4-47270. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12136."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.4-47270.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de inicialización apropiada de la memoria antes de acceder a ella.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12136"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.4-47270:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B31625EC-07FD-4A04-AFA0-708FEBC32152"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-427/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-427/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31420",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.197",
      "lastModified" : "2024-11-21T06:05:37.673",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.0-48950. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12220."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.1.0-48950.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de comprobación apropiada de la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región stack de la memoria de longitud fija.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12220"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.1.0-48950:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E16AC99-077D-41D6-A744-B2B933702E87"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-428/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-428/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31421",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.237",
      "lastModified" : "2024-11-21T06:05:37.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to delete arbitrary files in the context of the hypervisor. Was ZDI-CAN-12129."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales eliminar archivos arbitrarios en instalaciones afectadas de Parallels Desktop versión 16.1.1-49141.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de comprobación apropiada de una ruta proporcionada por el usuario antes de usarla en operaciones con archivos.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para eliminar archivos arbitrarios en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12129"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 3.2,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.1.1-49141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC68ADF-A03D-4959-9FD4-B5BC4009D5A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-425/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-425/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31422",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.280",
      "lastModified" : "2024-11-21T06:05:37.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the e1000e virtual device. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12527."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.1.1-49141.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del dispositivo virtual e1000e.&#xa0;El problema es debido a una falta de bloqueo apropiado al llevar a cabo operaciones en un objeto.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12527"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        }, {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.1.1-49141:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DC68ADF-A03D-4959-9FD4-B5BC4009D5A0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-430/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-430/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31423",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.317",
      "lastModified" : "2024-11-21T06:05:38.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12528."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Toolgate.&#xa0;El problema es debido a una falta de inicialización apropiada de la memoria antes de acceder a ella.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12528"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-908"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-431/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-431/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31424",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.353",
      "lastModified" : "2024-11-21T06:05:38.153",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Open Tools Gate component. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-12848."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Open Tools Gate.&#xa0;El problema es debido a una falta de comprobación apropiada de la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región heap de la memoria de longitud fija.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-12848"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-434/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-434/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31425",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.387",
      "lastModified" : "2024-11-21T06:05:38.273",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Parallels Tools component. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel on the target guest system. Was ZDI-CAN-12790."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.1.2-49151.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Parallels Tools.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en un desbordamiento de enteros antes de asignar un búfer.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del kernel en el sistema invitado objetivo.&#xa0;Fue ZDI-CAN-12790"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.1.2-49151:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7598AC8F-E6FE-4027-AE14-7DEEF15F72FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-432/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-432/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31426",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.427",
      "lastModified" : "2024-11-21T06:05:38.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.2-49151. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Parallels Tools component. The issue results from the lack of proper validation of user-supplied data, which can result in an integer overflow before allocating a buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the kernel on the target guest system. Was ZDI-CAN-12791."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 16.1.2-49151.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Parallels Tools.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en un desbordamiento de enteros antes de asignar un búfer.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del kernel en el sistema invitado objetivo.&#xa0;Fue ZDI-CAN-12791"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:16.1.2-49151:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7598AC8F-E6FE-4027-AE14-7DEEF15F72FB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-433/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-433/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31427",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.463",
      "lastModified" : "2024-11-21T06:05:38.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Open Tools Gate component. The issue results from the lack of proper locking when performing operations on an object. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13082."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código poco privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del componente Open Tools Gate.&#xa0;El problema es debido a una falta de bloqueo apropiado al lleva a cabo operaciones en un objeto.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-13082"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 4.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 1.9,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.4,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        }, {
          "lang" : "en",
          "value" : "CWE-667"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-435/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-435/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31428",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.497",
      "lastModified" : "2024-11-21T06:05:38.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE virtual device. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13186."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del dispositivo virtual IDE.&#xa0;El problema es debido a una falta de comprobación apropiada de la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región heap de la memoria de longitud fija.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-13186"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-436/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-436/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31429",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.537",
      "lastModified" : "2024-11-21T06:05:38.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE virtual device. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13187."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales escalar privilegios en las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del dispositivo virtual IDE.&#xa0;El problema es debido a una falta de comprobación apropiada de la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región heap de la memoria de longitud fija.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-13187"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 6.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-437/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-437/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31430",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.570",
      "lastModified" : "2024-11-21T06:05:38.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE virtual device. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13188."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del dispositivo virtual IDE.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un búfer asignado.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-13188"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-438/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-438/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31431",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.607",
      "lastModified" : "2024-11-21T06:05:39.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE virtual device. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13189."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del dispositivo virtual IDE.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un búfer asignado.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-13189"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-439/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-439/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31432",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.640",
      "lastModified" : "2024-11-21T06:05:39.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.5-47309. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the IDE virtual device. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the hypervisor. Was ZDI-CAN-13190."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes locales revelar información confidencial sobre las instalaciones afectadas de Parallels Desktop versión 15.1.5-47309.&#xa0;Un atacante primero debe obtener la capacidad de ejecutar código muy privilegiado en el sistema invitado objetivo para explotar esta vulnerabilidad.&#xa0;El fallo específico se presenta dentro del dispositivo virtual IDE.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una lectura más allá del final de un búfer asignado.&#xa0;Un atacante puede aprovechar esto en conjunto con otras vulnerabilidades para escalar privilegios y ejecutar código arbitrario en el contexto del hypervisor.&#xa0;Fue ZDI-CAN-13190"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.5,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:parallels:parallels_desktop:15.1.5-47309:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4E10BFA-233E-4788-A6B6-38DFE6FE2740"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-440/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://kb.parallels.com/en/125013",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-440/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31433",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.677",
      "lastModified" : "2024-11-21T06:05:39.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ARW files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated data structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12333."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foxit Studio Photo versión 3.6.6.931.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta dentro del análisis de archivos ARW.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una escritura más allá del final de una estructura de datos asignada.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Fue ZDI-CAN-12333"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_studio_photo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.6.933",
            "matchCriteriaId" : "BA6D2A18-AB52-4AB2-AC70-F66BA8BC74AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-476/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-476/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31434",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.717",
      "lastModified" : "2024-11-21T06:05:39.397",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JPM files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12377."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foxit Studio Photo versión 3.6.6.931.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta dentro del análisis de archivos JPM.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una escritura más allá del final de una estructura asignada.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Fue ZDI-CAN-12377"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_studio_photo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.6.933",
            "matchCriteriaId" : "BA6D2A18-AB52-4AB2-AC70-F66BA8BC74AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-477/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-477/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31435",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.750",
      "lastModified" : "2024-11-21T06:05:39.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CMP files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12331."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foxit Studio Photo versión 3.6.6.931.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta dentro del análisis de archivos CMP.&#xa0;El problema es debido a una falta de inicialización apropiada de la memoria antes de acceder a ella.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Fue ZDI-CAN-12331"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-457"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_studio_photo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.6.933",
            "matchCriteriaId" : "BA6D2A18-AB52-4AB2-AC70-F66BA8BC74AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-478/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-478/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31436",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.790",
      "lastModified" : "2024-11-21T06:05:39.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of SGI files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12376."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foxit Studio Photo versión 3.6.6.931.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta dentro del manejo de archivos SGI.&#xa0;El problema es debido a una falta de comprobación apropiada de la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región heap de la memoria.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Fue ZDI-CAN-12376"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_studio_photo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.6.933",
            "matchCriteriaId" : "BA6D2A18-AB52-4AB2-AC70-F66BA8BC74AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-479/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-479/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31437",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.827",
      "lastModified" : "2024-11-21T06:05:39.767",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of JP2 files. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated structure. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12384."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foxit Studio Photo versión 3.6.6.931.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta dentro del análisis de archivos JP2.&#xa0;El problema es debido a una falta de comprobación apropiada de los datos suministrados por el usuario, lo que puede resultar en una escritura más allá del final de una estructura asignada.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Fue ZDI-CAN-12384"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_studio_photo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.6.933",
            "matchCriteriaId" : "BA6D2A18-AB52-4AB2-AC70-F66BA8BC74AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-480/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-480/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31438",
      "sourceIdentifier" : "zdi-disclosures@trendmicro.com",
      "published" : "2021-04-29T17:15:09.860",
      "lastModified" : "2024-11-21T06:05:39.883",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Studio Photo 3.6.6.931. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of PSP files. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12443."
      }, {
        "lang" : "es",
        "value" : "Esta vulnerabilidad permite a atacantes remotos ejecutar código arbitrario en instalaciones afectadas de Foxit Studio Photo versión 3.6.6.931.&#xa0;Es requerida una interacción del usuario para explotar esta vulnerabilidad, ya que el objetivo debe visitar una página maliciosa o abrir un archivo malicioso.&#xa0;El fallo específico se presenta en el manejo de archivos PSP.&#xa0;El problema es debido a una falta de comprobación apropiada de la longitud de los datos suministrados por el usuario antes de copiarlos en un búfer en la región stack de la memoria de longitud fija.&#xa0;Un atacante puede aprovechar esta vulnerabilidad para ejecutar código en el contexto del proceso actual.&#xa0;Fue ZDI-CAN-12443"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "zdi-disclosures@trendmicro.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "zdi-disclosures@trendmicro.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:foxitsoftware:foxit_studio_photo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.6.933",
            "matchCriteriaId" : "BA6D2A18-AB52-4AB2-AC70-F66BA8BC74AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-481/",
        "source" : "zdi-disclosures@trendmicro.com",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.foxitsoftware.com/support/security-bulletins.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.zerodayinitiative.com/advisories/ZDI-21-481/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1256",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:08.840",
      "lastModified" : "2024-11-21T05:43:56.447",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files are overwritten. This vulnerability is due to insufficient validation of user input for the file path in a specific CLI command. An attacker could exploit this vulnerability by logging in to a targeted device and issuing a specific CLI command with crafted user input. A successful exploit could allow the attacker to overwrite arbitrary files on the file system of the affected device. The attacker would need valid user credentials on the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del software Cisco Firepower Threat Defense (FTD), podría permitir a un atacante autenticado local sobrescribir archivos en el sistema de archivos de un dispositivo afectado mediante el uso de técnicas de salto de directorios.&#xa0;Una explotación con éxito podría causar inestabilidad en el sistema si archivos importantes del sistema son sobrescritos.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de entrada del usuario para la ruta del archivo en un comando CLI específico.&#xa0;Un atacante podría explotar esta vulnerabilidad al iniciar sesión en un dispositivo de destino y emitir un comando CLI específico con la entrada del usuario.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir archivos arbitrarios en el sistema de archivos del dispositivo afectado.&#xa0;El atacante necesitaría credenciales de usuario válidas en el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        }, {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0",
            "matchCriteriaId" : "3C8BBB3D-8E5E-4285-AA16-DCA436119F4D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "F6642EEB-0BE6-4607-9B1E-96F2F715710F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10382",
        "source" : "psirt@cisco.com",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-file-overwrite-XknRjGdB",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://kc.mcafee.com/corporate/index?page=content&id=SB10382",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-file-overwrite-XknRjGdB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1369",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:08.887",
      "lastModified" : "2024-11-21T05:44:11.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the REST API of Cisco Firepower Device Manager (FDM) On-Box Software could allow an authenticated, remote attacker to gain read and write access to information that is stored on an affected device. This vulnerability is due to the improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by sending malicious requests that contain references in XML entities to an affected system. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information or causing a partial denial of service (DoS) condition on the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API REST del software integrado de Cisco Firepower Device Manager (FDM), podría permitir a un atacante remoto autenticado obtener acceso de lectura y escritura a la información almacenada en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a un manejo inapropiado de las entradas XML External Entity (XXE) al analizar determinados archivos XML.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones maliciosas que contengan referencias en entidades XML a un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante recuperar archivos del sistema local, resultando en la divulgación de información confidencial o causando una condición de denegación de servicio parcial (DoS) en el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_device_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.5.0.5",
            "matchCriteriaId" : "5C61FCFA-EF7D-4E55-A712-FCECD5E0A6E3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_device_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "A67E9A16-4061-443C-878E-1E4264CF6FBB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-xxe-zR7sxPfs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-xxe-zR7sxPfs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1402",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:08.923",
      "lastModified" : "2024-11-21T05:44:16.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the software-based SSL/TLS message handler of Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient validation of SSL/TLS messages when the device performs software-based SSL decryption. An attacker could exploit this vulnerability by sending a crafted SSL/TLS message through an affected device. SSL/TLS messages sent to an affected device do not trigger this vulnerability. A successful exploit could allow the attacker to cause a process to crash. This crash would then trigger a reload of the device. No manual intervention is needed to recover the device after the reload."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el controlador de mensajes SSL/TLS basado en software del software Cisco Firepower Threat Defense (FTD) podría permitir a un atacante remoto no autenticado activar una recarga de un dispositivo afectado, resultando en una condición de denegación de servicio (DoS).&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de los mensajes SSL/TLS cuando el dispositivo lleva a cabo el descifrado SSL basado en software.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un mensaje SSL/TLS diseñado por medio de un dispositivo afectado.&#xa0;Los mensajes SSL/TLS enviados a un dispositivo afectado no desencadenan esta vulnerabilidad.&#xa0;Una explotación con éxito podría permitir al atacante causar el bloqueo de un proceso.&#xa0;Este bloqueo podría entonces desencadenar una recarga del dispositivo.&#xa0;No es necesaria una intervención manual para recuperar el dispositivo después de la recarga"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.3.0",
            "versionEndExcluding" : "6.4.0",
            "matchCriteriaId" : "0B60D48C-19D8-4015-8D25-D3C0165C6080"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.0",
            "matchCriteriaId" : "B5432C87-A9AF-4CC8-8573-443562963519"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense_virtual:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A38E373E-438F-44F6-AABF-2C57142507EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5512-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "08F0F160-DAD2-48D4-B7B2-4818B2526F35"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5515-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "977D597B-F6DE-4438-AB02-06BE64D71EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5525-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB71EB29-0115-4307-A9F7-262394FD9FB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5545-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57179F60-E330-4FF0-9664-B1E4637FF210"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:asa_5555-x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5535C936-391B-4619-AA03-B35265FC15D7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE3880-4B85-4E23-9836-70875D5109F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727A02E8-40A1-4DFE-A3A2-91D628D3044F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F6546E-28F4-40DC-97D6-E0E023FE939B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3B0EC3-4654-4D90-9D41-7EC2AD1DDF99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D96810-5F79-4A83-B8CA-D015790FCF72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE2945-4975-4003-AE48-7E134E167A7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE7122A-5AA7-4ECD-B024-E27C9D0CFB7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976901BF-C52C-4F81-956A-711AF8A60140"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:isa_3000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9510E97A-FD78-43C6-85BC-223001ACA264"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-ssl-decrypt-dos-DdyLuK6c",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-ssl-decrypt-dos-DdyLuK6c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1445",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:08.967",
      "lastModified" : "2024-11-21T05:44:22.823",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to lack of proper input validation of the HTTPS request. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: This vulnerability affects only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Cisco Adaptive Security Appliance (ASA) y el software Firepower Threat Defense (FTD), podrían permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Estas vulnerabilidades son debido a una falta de comprobación de entrada apropiada de la petición HTTPS.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTPS diseñada hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el dispositivo afectado se recargue, resultando en una condición DoS.&#xa0;Nota: Esta vulnerabilidad afecta solo a configuraciones específicas de AnyConnect y WebVPN.&#xa0;Para obtener más información, consulte la sección Productos vulnerables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "04202164-FCC4-413E-90B5-01FE08AC6EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.1",
            "matchCriteriaId" : "599292E2-4F97-462D-93E0-7CCAEA7C5ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.7",
            "versionEndExcluding" : "9.8.4.34",
            "matchCriteriaId" : "94DC7008-9043-474E-A23C-535C5E34C668"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9",
            "versionEndExcluding" : "9.9.2.85",
            "matchCriteriaId" : "8A9BFFBC-F577-47CD-83E8-A6227B17D557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10",
            "versionEndExcluding" : "9.12.4.13",
            "matchCriteriaId" : "1C70E158-4028-4CA4-91CB-22E549CFBC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13",
            "versionEndExcluding" : "9.13.1.21",
            "matchCriteriaId" : "5B74C14F-C95B-4AF5-A255-1CA824AA7FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.14",
            "versionEndExcluding" : "9.14.2.8",
            "matchCriteriaId" : "282F4D3B-CCBB-484E-BDEE-C316637E2F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15",
            "versionEndExcluding" : "9.15.1.7",
            "matchCriteriaId" : "CE692449-D353-4726-82EF-4396E3336890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vpn-dos-fpBcpEcD",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vpn-dos-fpBcpEcD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1448",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.007",
      "lastModified" : "2024-11-21T05:44:23.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands with root privileges on the underlying operating system of an affected device that is running in multi-instance mode. This vulnerability is due to insufficient validation of user-supplied command arguments. An attacker could exploit this vulnerability by submitting crafted input to the affected command. A successful exploit could allow the attacker to execute commands on the underlying operating system with root privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del software Cisco Firepower Threat Defense (FTD), podría permitir a un atacante autenticado local ejecutar comandos arbitrarios con privilegios root en el sistema operativo subyacente de un dispositivo afectado que es ejecutado en modo multi-instance.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de los argumentos de los comandos suministrados por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una entrada diseñada al comando afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos en el sistema operativo subyacente con privilegios root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.0.10",
            "matchCriteriaId" : "53C69C8B-5A19-4613-8861-683CF21806B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.5.0.5",
            "matchCriteriaId" : "3ED0E59C-146C-494F-AD46-F6FB43F9C575"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.6.0",
            "versionEndExcluding" : "6.6.1",
            "matchCriteriaId" : "754010DE-2C33-4BA1-9567-90C46309B664"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CBC7F5-7767-43B6-9384-BE143FCDBD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957D64EB-D60E-4775-B9A8-B21CA48ED3B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A694AD51-9008-4AE6-8240-98B17AB527EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AE6DC0-2B03-4D36-9856-42530312CC46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DCEF22-ED20-4330-8502-EC2DD4C9838F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB2822B-B752-4CD9-A178-934957E306B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F4868A-6D62-479C-9C19-F9AABDBB6B24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65378F3A-777C-4AE2-87FB-1E7402F9EA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DAFDDA-718B-4B69-A524-B0CEB80FE960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmdinj-vWY5wqZT",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ftd-cmdinj-vWY5wqZT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1455",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.043",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del software Cisco Firepower Management Center (FMC), podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de entrada suministrada por el usuario mediante la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0.11",
            "matchCriteriaId" : "634D4E3D-4FAB-46BC-9D9D-E6AFCFB26B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "3B093C12-8118-45D4-B044-621E5228BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "4EF7D3CA-AA84-46D8-9386-C8672FCDB090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1456",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.080",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del software Cisco Firepower Management Center (FMC), podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de entrada suministrada por el usuario mediante la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0.11",
            "matchCriteriaId" : "634D4E3D-4FAB-46BC-9D9D-E6AFCFB26B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "3B093C12-8118-45D4-B044-621E5228BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "4EF7D3CA-AA84-46D8-9386-C8672FCDB090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1457",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.117",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del software Cisco Firepower Management Center (FMC), podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de entrada suministrada por el usuario mediante la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0.11",
            "matchCriteriaId" : "634D4E3D-4FAB-46BC-9D9D-E6AFCFB26B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "3B093C12-8118-45D4-B044-621E5228BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "4EF7D3CA-AA84-46D8-9386-C8672FCDB090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1458",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.157",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface. These vulnerabilities are due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit these vulnerabilities by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web del software Cisco Firepower Management Center (FMC), podrían permitir a un atacante remoto no autenticado conducir un ataque de tipo cross-site scripting (XSS) contra un usuario de la interfaz.&#xa0;Estas vulnerabilidades son debido a una comprobación insuficiente de entrada suministrada por el usuario mediante la interfaz de administración basada en web.&#xa0;Un atacante podría explotar estas vulnerabilidades al persuadir a un usuario de la interfaz para que haga clic en un enlace diseñado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.0.11",
            "matchCriteriaId" : "634D4E3D-4FAB-46BC-9D9D-E6AFCFB26B17"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "3B093C12-8118-45D4-B044-621E5228BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "4EF7D3CA-AA84-46D8-9386-C8672FCDB090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-xss-yT8LNSeA",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1476",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.197",
      "lastModified" : "2024-11-21T05:44:26.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient input validation of commands that are supplied by the user. An attacker could exploit this vulnerability by authenticating to a device and submitting crafted input for specific commands. A successful exploit could allow the attacker to execute commands on the underlying OS with root privileges. To exploit this vulnerability, an attacker must have valid administrator-level credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI del Software Cisco Adaptive Security Appliance (ASA) y el software Cisco Firepower Threat Defense (FTD), podría permitir a un atacante autenticado local ejecutar comandos arbitrarios en el sistema operativo (SO) subyacente de un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de entrada  de los comandos suministrados por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo y enviar una entrada diseñada para comandos específicos.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos en el sistema operativo subyacente con privilegios root.&#xa0;Para explotar esta vulnerabilidad, un atacante debe tener credenciales válidas de nivel de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "04202164-FCC4-413E-90B5-01FE08AC6EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "FDDF492B-BC61-4814-B05F-3F6CD07080F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13",
            "versionEndExcluding" : "9.13.1.21",
            "matchCriteriaId" : "5B74C14F-C95B-4AF5-A255-1CA824AA7FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.14",
            "versionEndExcluding" : "9.14.2.13",
            "matchCriteriaId" : "06071877-6E69-4440-9306-6410223218D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15",
            "versionEndExcluding" : "9.15.1.10",
            "matchCriteriaId" : "97985BC1-7D4F-465A-863B-9EAD980A4CF1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-cmd-inj-SELprvG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-cmd-inj-SELprvG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1477",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.233",
      "lastModified" : "2024-11-26T16:09:02.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in an access control mechanism of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to access services beyond the scope of their authorization. This vulnerability is due to insufficient enforcement of access control in the affected software. An attacker could exploit this vulnerability by directly accessing the internal services of an affected device. A successful exploit could allow the attacker to overwrite policies and impact the configuration and operation of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en un mecanismo de control de acceso del software Cisco Firepower Management Center (FMC), podría permitir a un atacante remoto autenticado acceder a servicios más allá del alcance de su autorización.&#xa0;Esta vulnerabilidad es debido a una aplicación insuficiente del control de acceso en el software afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad al acceder directamente a los servicios internos de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir las políticas y afectar la configuración y el funcionamiento del dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.0.12",
            "matchCriteriaId" : "15623423-7EBA-488F-8B44-63A97BEA5039"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "3B093C12-8118-45D4-B044-621E5228BB9F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:secure_firewall_management_center:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "4EF7D3CA-AA84-46D8-9386-C8672FCDB090"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-iac-pZDMQ4wC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fmc-iac-pZDMQ4wC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1488",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.273",
      "lastModified" : "2024-11-21T05:44:28.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the upgrade process of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to inject commands that could be executed with root privileges on the underlying operating system (OS). This vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by uploading a crafted upgrade package file to an affected device. A successful exploit could allow the attacker to inject commands that could be executed with root privileges on the underlying OS."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso de actualización del software Cisco Adaptive Security Appliance (ASA) y el software Cisco Firepower Threat Defense (FTD), podría permitir a un atacante autenticado local inyectar comandos que podrían ser ejecutados con privilegios root en el sistema operativo (SO) subyacente.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de entrada .&#xa0;Un atacante podría explotar esta vulnerabilidad al cargar un archivo de paquete de actualización diseñado a un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante inyectar comandos que podrían ser ejecutados con privilegios root en el sistema operativo subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "04202164-FCC4-413E-90B5-01FE08AC6EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "FDDF492B-BC61-4814-B05F-3F6CD07080F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13",
            "versionEndExcluding" : "9.13.1.21",
            "matchCriteriaId" : "5B74C14F-C95B-4AF5-A255-1CA824AA7FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.14",
            "versionEndExcluding" : "9.14.2.13",
            "matchCriteriaId" : "06071877-6E69-4440-9306-6410223218D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15",
            "versionEndExcluding" : "9.15.1.10",
            "matchCriteriaId" : "97985BC1-7D4F-465A-863B-9EAD980A4CF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE3880-4B85-4E23-9836-70875D5109F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727A02E8-40A1-4DFE-A3A2-91D628D3044F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F6546E-28F4-40DC-97D6-E0E023FE939B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3B0EC3-4654-4D90-9D41-7EC2AD1DDF99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D96810-5F79-4A83-B8CA-D015790FCF72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE2945-4975-4003-AE48-7E134E167A7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE7122A-5AA7-4ECD-B024-E27C9D0CFB7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976901BF-C52C-4F81-956A-711AF8A60140"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-cmdinj-TKyQfDcU",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-cmdinj-TKyQfDcU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1489",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.347",
      "lastModified" : "2024-11-21T05:44:28.167",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in filesystem usage management for Cisco Firepower Device Manager (FDM) Software could allow an authenticated, remote attacker to exhaust filesystem resources, resulting in a denial of service (DoS) condition on an affected device. This vulnerability is due to the insufficient management of available filesystem resources. An attacker could exploit this vulnerability by uploading files to the device and exhausting available filesystem resources. A successful exploit could allow the attacker to cause database errors and cause the device to become unresponsive to web-based management. Manual intervention is required to free filesystem resources and return the device to an operational state."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la administración del uso del sistema de archivos para el software Cisco Firepower Device Manager (FDM), podría permitir a un atacante remoto autenticado agotar los recursos del sistema de archivos, resultando en una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una administración insuficiente de los recursos del sistema de archivos disponibles.&#xa0;Un atacante podría explotar esta vulnerabilidad al cargar archivos en el dispositivo y agotando los recursos disponibles del sistema de archivos.&#xa0;Una explotación con éxito podría permitir al atacante causar errores en la base de datos y hacer que el dispositivo no responda a la administración basada en web.&#xa0;Es requerida una intervención manual para liberar recursos del sistema de archivos y devolver el dispositivo a un estado operativo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_device_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.4.0",
            "versionEndExcluding" : "6.4.0.12",
            "matchCriteriaId" : "503C619B-EDF2-4BBC-B69F-81BEBE7512EB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_device_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "8F30FB86-2C39-44B8-BC3F-CCA8EE8A6A34"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_device_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "75A78041-BAEA-4023-8B2D-F9090435465B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFE3880-4B85-4E23-9836-70875D5109F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "727A02E8-40A1-4DFE-A3A2-91D628D3044F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19F6546E-28F4-40DC-97D6-E0E023FE939B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_1150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB3B0EC3-4654-4D90-9D41-7EC2AD1DDF99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D96810-5F79-4A83-B8CA-D015790FCF72"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16FE2945-4975-4003-AE48-7E134E167A7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCE7122A-5AA7-4ECD-B024-E27C9D0CFB7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_2140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "976901BF-C52C-4F81-956A-711AF8A60140"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CBC7F5-7767-43B6-9384-BE143FCDBD7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4112:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "957D64EB-D60E-4775-B9A8-B21CA48ED3B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4115:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A694AD51-9008-4AE6-8240-98B17AB527EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38AE6DC0-2B03-4D36-9856-42530312CC46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71DCEF22-ED20-4330-8502-EC2DD4C9838F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4140:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DB2822B-B752-4CD9-A178-934957E306B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4145:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81F4868A-6D62-479C-9C19-F9AABDBB6B24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_4150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65378F3A-777C-4AE2-87FB-1E7402F9EA1B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:firepower_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DAFDDA-718B-4B69-A524-B0CEB80FE960"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-dos-nFES8xTN",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-fdm-dos-nFES8xTN",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1493",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.387",
      "lastModified" : "2024-11-21T05:44:28.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, remote attacker to cause a buffer overflow on an affected system. The vulnerability is due to insufficient boundary checks for specific data that is provided to the web services interface of an affected system. An attacker could exploit this vulnerability by sending a malicious HTTP request. A successful exploit could allow the attacker to cause a buffer overflow condition on the affected system, which could disclose data fragments or cause the device to reload, resulting in a denial of service (DoS) condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de servicios web del software Cisco Adaptive Security Appliance (ASA) y el software Cisco Firepower Threat Defense (FTD), podría permitir a un atacante remoto autenticado causar un desbordamiento del búfer en un sistema afectado.&#xa0;La vulnerabilidad es debido a comprobaciones de límites insuficientes para datos específicos que se proporcionan a la interfaz de servicios web de un sistema afectado.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de una petición HTTP maliciosa.&#xa0;Una explotación con éxito podría permitir al atacante causar una condición de desbordamiento de búfer en el sistema afectado, lo que podría revelar fragmentos de datos o hacer que el dispositivo se recargue, resultando en una condición de denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H",
            "baseScore" : 8.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:C",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 7.8,
          "acInsufInfo" : true,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.0.12",
            "matchCriteriaId" : "FAE65CB5-08E5-41B6-9AC0-02451C90E833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.3",
            "matchCriteriaId" : "D042ED9F-3702-4959-AAA0-D98684EB4556"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.1",
            "matchCriteriaId" : "599292E2-4F97-462D-93E0-7CCAEA7C5ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.8",
            "versionEndExcluding" : "9.8.4.34",
            "matchCriteriaId" : "17BDCF23-5836-4E95-A0E6-81334FE3F7BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9",
            "versionEndExcluding" : "9.9.2.85",
            "matchCriteriaId" : "8A9BFFBC-F577-47CD-83E8-A6227B17D557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10",
            "versionEndExcluding" : "9.12.4.13",
            "matchCriteriaId" : "1C70E158-4028-4CA4-91CB-22E549CFBC07"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13",
            "versionEndExcluding" : "9.13.1.21",
            "matchCriteriaId" : "5B74C14F-C95B-4AF5-A255-1CA824AA7FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.14",
            "versionEndExcluding" : "9.14.2.8",
            "matchCriteriaId" : "282F4D3B-CCBB-484E-BDEE-C316637E2F21"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15",
            "versionEndExcluding" : "9.15.1.7",
            "matchCriteriaId" : "CE692449-D353-4726-82EF-4396E3336890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-memc-dos-fncTyYKG",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-memc-dos-fncTyYKG",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1495",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.430",
      "lastModified" : "2024-11-21T05:44:28.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of specific HTTP header parameters. An attacker could exploit this vulnerability by sending crafted HTTP packets through an affected device. A successful exploit could allow the attacker to bypass a configured file policy for HTTP packets and deliver a malicious payload."
      }, {
        "lang" : "es",
        "value" : "Múltiples productos de Cisco están afectados por una vulnerabilidad en el motor de detección Snort que podría permitir a un atacante remoto no autenticado omitir una política de archivos configurada para HTTP.&#xa0;La vulnerabilidad es debido a un manejo incorrecto de parámetros específicos del encabezado HTTP.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de paquetes HTTP diseñados por medio de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante omitir una política de archivos configurada para paquetes HTTP y entregar una carga útil maliciosa"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-755"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "6.4.0.12",
            "matchCriteriaId" : "FAE65CB5-08E5-41B6-9AC0-02451C90E833"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "04202164-FCC4-413E-90B5-01FE08AC6EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "FDDF492B-BC61-4814-B05F-3F6CD07080F7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "16.12",
            "versionEndExcluding" : "16.12.5",
            "matchCriteriaId" : "D3BCB821-CD8E-4D1D-968E-D52715B4CDDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:snort:snort:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.9.17.1",
            "matchCriteriaId" : "3ABE8CC6-FFE8-48D2-B94A-C8AED78AA2D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.1",
            "versionEndExcluding" : "17.3.3",
            "matchCriteriaId" : "F3A8DECA-0833-4207-9EC7-DFC60A7EF1C3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "17.4",
            "versionEndExcluding" : "17.4.1",
            "matchCriteriaId" : "3CFEDAF8-A6E8-4F01-B6D5-5099107BF77F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1100-4g\\/6g_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6F668B9-2C1D-4306-8286-35E67D0F67C7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1101_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5EB8A757-7888-4AC2-BE44-B89DB83C6C77"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1109_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B80890A8-E3D3-462C-B125-9E9BC6525B02"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0547E196-5991-4C33-823A-342542E9DFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:111x_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "802CBFC1-8A2F-4BF7-A1D3-00622C33BE16"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1120_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFE0FC1-EEBC-42F0-88B0-4AF5B76DDD97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:1160_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D916389F-54DB-44CB-91DD-7CE3C7059350"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:3000_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B8C4D97-A430-45FB-9EF5-B6E4DBA1BD31"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4221_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C8AED7C-DDA3-4C29-BB95-6518C02C551A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4331_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5419CB9F-241F-4431-914F-2659BE27BEA5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4431_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5720462A-BE6B-4E84-A1A1-01E80BBA86AD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:4461_integrated_services_router:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8B60888-6E2B-494E-AC65-83337661EE7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c8200-1n-4t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCF17101-9EF9-47BB-B966-0FA9B71AEEFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c8200l-1n-4t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2F0C218-B0FF-4BEC-B76F-1F4BAA6D0960"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E7E8914-7B25-4097-8B22-6928C1F03D5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-1n1s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B207857B-C483-47DF-9FC7-6A05B866BF60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-4t2x:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD26746A-80D1-4C48-BF77-E9F7EEEF7EA7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8300-2n2s-6t:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDB16CCE-1E89-4707-86C1-97F2FB5B62B9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:catalyst_8500l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04AB61E9-0148-495E-BD21-64D52DE60A6C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-bp-KfDdcQhc",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "psirt@cisco.com"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/02/msg00011.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-http-fp-bp-KfDdcQhc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5354",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1501",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.463",
      "lastModified" : "2024-11-21T05:44:29.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the SIP inspection engine of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a crash and reload of an affected device, resulting in a denial of service (DoS) condition.The vulnerability is due to a crash that occurs during a hash lookup for a SIP pinhole connection. An attacker could exploit this vulnerability by sending crafted SIP traffic through an affected device. A successful exploit could allow the attacker to cause a crash and reload of the affected device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el motor de inspección SIP del Software Cisco Adaptive Security Appliance (ASA) y el software Cisco Firepower Threat Defense (FTD), podría permitir a un atacante remoto no autenticado causar un bloqueo y la recarga de un dispositivo afectado, resultando en una denegación de servicio ( DoS). La vulnerabilidad es debido a un bloqueo que ocurre durante una búsqueda de hash para una conexión SIP pinhole.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de tráfico SIP diseñado a través de un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar un bloqueo y recargar el dispositivo afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-613"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.2",
            "versionEndExcluding" : "6.4.0.12",
            "matchCriteriaId" : "F27F5475-6A35-41D8-AF91-CD49CFDBC192"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "04202164-FCC4-413E-90B5-01FE08AC6EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.2",
            "matchCriteriaId" : "FDDF492B-BC61-4814-B05F-3F6CD07080F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.8",
            "versionEndExcluding" : "9.8.4.34",
            "matchCriteriaId" : "17BDCF23-5836-4E95-A0E6-81334FE3F7BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9",
            "versionEndExcluding" : "9.9.2.85",
            "matchCriteriaId" : "8A9BFFBC-F577-47CD-83E8-A6227B17D557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10",
            "versionEndExcluding" : "9.12.4.18",
            "matchCriteriaId" : "13C4CAAF-7E9E-4D91-AF3D-9792CE47FDAF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13",
            "versionEndExcluding" : "9.13.1.21",
            "matchCriteriaId" : "5B74C14F-C95B-4AF5-A255-1CA824AA7FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.14",
            "versionEndExcluding" : "9.14.2.13",
            "matchCriteriaId" : "06071877-6E69-4440-9306-6410223218D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15",
            "versionEndExcluding" : "9.15.1.15",
            "matchCriteriaId" : "9D2794F2-BC8F-42CC-910A-203BE7B3475F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-sipdos-GGwmMerC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-sipdos-GGwmMerC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1504",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-04-29T18:15:09.500",
      "lastModified" : "2024-11-21T05:44:30.027",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. These vulnerabilities are due to lack of proper input validation of the HTTPS request. An attacker could exploit these vulnerabilities by sending a crafted HTTPS request to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition. Note: This vulnerability affects only specific AnyConnect and WebVPN configurations. For more information, see the Vulnerable Products section."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en el software Cisco Adaptive Security Appliance (ASA) y el software Firepower Threat Defense (FTD), podrían permitir a un atacante remoto no autenticado causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Estas vulnerabilidades son debido a una falta de comprobación de entrada apropiada de la petición HTTPS.&#xa0;Un atacante podría explotar estas vulnerabilidades mediante el envío de una petición HTTPS diseñada hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el dispositivo afectado se recargue, resultando en una condición DoS.&#xa0;Nota: Esta vulnerabilidad afecta solo a configuraciones específicas de AnyConnect y WebVPN.&#xa0;Para obtener más información, consulte la sección Productos vulnerables"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.5.0",
            "versionEndExcluding" : "6.6.4",
            "matchCriteriaId" : "04202164-FCC4-413E-90B5-01FE08AC6EEC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:firepower_threat_defense:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.7.0",
            "versionEndExcluding" : "6.7.0.1",
            "matchCriteriaId" : "599292E2-4F97-462D-93E0-7CCAEA7C5ED8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.7",
            "versionEndExcluding" : "9.8.4.35",
            "matchCriteriaId" : "D22BC1F6-4020-409B-B00B-D9560167724F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.9",
            "versionEndExcluding" : "9.9.2.85",
            "matchCriteriaId" : "8A9BFFBC-F577-47CD-83E8-A6227B17D557"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.10",
            "versionEndExcluding" : "9.12.4.10",
            "matchCriteriaId" : "74A15137-2788-4924-8CAC-93AE228F8B74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.13",
            "versionEndExcluding" : "9.13.1.21",
            "matchCriteriaId" : "5B74C14F-C95B-4AF5-A255-1CA824AA7FDE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.14",
            "versionEndExcluding" : "9.14.2.4",
            "matchCriteriaId" : "250E5443-1B48-4BD6-8315-B232EA46FBF0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15",
            "versionEndExcluding" : "9.15.1.7",
            "matchCriteriaId" : "CE692449-D353-4726-82EF-4396E3336890"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vpn-dos-fpBcpEcD",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-asa-ftd-vpn-dos-fpBcpEcD",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21388",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T18:15:09.540",
      "lastModified" : "2024-11-21T05:48:15.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "systeminformation is an open source system and OS information library for node.js. A command injection vulnerability has been discovered in versions of systeminformation prior to 5.6.4. The issue has been fixed with a parameter check on user input. Please upgrade to version >= 5.6.4. If you cannot upgrade, be sure to check or sanitize service parameters that are passed to si.inetLatency(), si.inetChecksite(), si.services(), si.processLoad() and other commands. Only allow strings, reject any arrays. String sanitation works as expected."
      }, {
        "lang" : "es",
        "value" : "systemminformation es un sistema de código abierto y una biblioteca de información de SO para node.js.&#xa0;Se ha detectado una vulnerabilidad de inyección de comandos en systeminformation versiones de anteriores a 5.6.4.&#xa0;El problema ha sido corregido con una comprobación de parámetros en la entrada del usuario.&#xa0;Por favor actualice a  las versiones posteriores a 5.6.4 e incluyéndola.&#xa0;Si no puede actualizar, asegúrese de comprobar o sanear los parámetros de servicio que son pasados a si.inetLatency (), si.inetChecksite(), si.services(), si.processLoad() y otros comandos.&#xa0;Solo permita cadenas, rechace cualquier arreglo.&#xa0;El saneamiento de cuerdas funciona como se esperaba"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:H",
            "baseScore" : 8.9,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:systeminformation:systeminformation:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "5.6.4",
            "matchCriteriaId" : "2AA615B0-8C40-4213-8F73-1CAC8D0BF980"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/01ef56cd5824ed6da1c11b37013a027fdef67524",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/0be6fcd575c05687d1076d5cd6d75af2ebae5a46",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/7922366d707de7f20995fc8e30ac3153636bf35f",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-jff2-qjw8-5476",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/systeminformation",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/01ef56cd5824ed6da1c11b37013a027fdef67524",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/0be6fcd575c05687d1076d5cd6d75af2ebae5a46",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/commit/7922366d707de7f20995fc8e30ac3153636bf35f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-jff2-qjw8-5476",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/systeminformation",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1080",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:08.907",
      "lastModified" : "2024-11-21T05:43:33.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which certain input data is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior 8.7)."
      }, {
        "lang" : "es",
        "value" : "El software NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU), en la que determinados datos de la entrada no se comprobaban, lo que puede conllevar a una divulgación de información, manipulación de datos o denegación de servicio.&#xa0;Esto afecta a vGPU versión 12.x (versiones anteriores a la 12.2), versiones 11.x (versiones anteriores a la 11.4) y versión 8.x (versiones anteriores a la 8.7)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.7",
            "matchCriteriaId" : "3797FFB1-321C-4264-B6FA-B69F598BFC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1081",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:08.943",
      "lastModified" : "2024-11-21T05:43:33.580",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior 8.7)."
      }, {
        "lang" : "es",
        "value" : "El software NVIDIA vGPU contiene una vulnerabilidad en el controlador de modo de kernel invitado y el administrador de Virtual GPU (plugin vGPU), en el que la longitud de la entrada no es comprobada, lo que puede conllevar a una divulgación de información, manipulación de datos o denegación de servicio.&#xa0;Esto afecta a vGPU versión 12.x (anteriores a 12.2), versión 11.x (anteriores a 11.4) y versión 8.x (anteriores a 8.7)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.7",
            "matchCriteriaId" : "3797FFB1-321C-4264-B6FA-B69F598BFC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1082",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:08.977",
      "lastModified" : "2024-11-21T05:43:33.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)"
      }, {
        "lang" : "es",
        "value" : "El software NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU), en la que no es comprobada una longitud de la entrada, lo que puede conllevar a una divulgación de información, manipulación de datos o denegación de servicio.&#xa0;vGPU versiones 12.x (anteriores a 12.2), versión 11.x (anteriores a 11.4) y versión 8.x (anterior a 8.7)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.7",
            "matchCriteriaId" : "3797FFB1-321C-4264-B6FA-B69F598BFC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1083",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:09.007",
      "lastModified" : "2024-11-21T05:43:33.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU software contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data, or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4)."
      }, {
        "lang" : "es",
        "value" : "El software NVIDIA vGPU contiene una vulnerabilidad en el controlador del modo kernel invitado y el Virtual GPU Manager (plugin vGPU), en el que la longitud de la entrada no es comprobada, lo que puede conllevar a una divulgación de información, manipulación de datos o denegación de servicio.&#xa0;Esto afecta a vGPU versión 12.x (anteriores a 12.2) y versión 11.x (anteriores a 11.4)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1284"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1084",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:09.043",
      "lastModified" : "2024-11-21T05:43:33.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU driver contains a vulnerability in the guest kernel mode driver and Virtual GPU Manager (vGPU plugin), in which an input length is not validated, which may lead to information disclosure, tampering of data or denial of service. This affects vGPU version 12.x (prior to 12.2) and version 11.x (prior to 11.4)."
      }, {
        "lang" : "es",
        "value" : "El controlador NVIDIA vGPU contiene una vulnerabilidad en el controlador del modo kernel invitado y Virtual GPU Manager (plugin vGPU), en el que la longitud de la entrada no es comprobada, lo que puede conllevar a una alteración de los datos o denegación de servicio. Esto afecta a vGPU versión 12.x (versiones anteriores a la 12.2) y versiones 11.x (versiones anteriores a la 11.4)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1085",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:09.073",
      "lastModified" : "2024-11-21T05:43:34.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where there is the potential to write to a shared memory location and manipulate the data after the data has been validated, which may lead to denial of service and escalation of privileges and information disclosure but attacker doesn't have control over what information is obtained. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)."
      }, {
        "lang" : "es",
        "value" : "El controlador NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU), donde se presenta la posibilidad de escribir en una ubicación de memoria compartida y manipular los datos después de que los datos se presentan han sido validados, lo que puede conllevar a una denegación de servicio y la escalada de privilegios y la divulgación de información, pero el atacante no tiene control sobre la información que se obtiene. Esto afecta a vGPU versión 12.x (anteriores a 12.2), versión 11.x (anteriores a 11.4) y versión 8.x (anteriores a 8.7)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.7",
            "matchCriteriaId" : "3797FFB1-321C-4264-B6FA-B69F598BFC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1086",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:09.103",
      "lastModified" : "2024-11-21T05:43:34.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where it allows guests to control unauthorized resources, which may lead to integrity and confidentiality loss or information disclosure. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)."
      }, {
        "lang" : "es",
        "value" : "El controlador NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU) donde permite a invitados controlar recursos no autorizados, lo que puede conllevar a una pérdida de integridad y confidencialidad o a una divulgación de información.&#xa0;Esto afecta a vGPU versión 12.x (anteriores a 12.2), versión 11.x (anteriores a 11.4) y versión 8.x (anteriores a 8.7)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.7",
            "matchCriteriaId" : "3797FFB1-321C-4264-B6FA-B69F598BFC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1087",
      "sourceIdentifier" : "psirt@nvidia.com",
      "published" : "2021-04-29T19:15:09.137",
      "lastModified" : "2024-11-21T05:43:34.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NVIDIA vGPU driver contains a vulnerability in the Virtual GPU Manager (vGPU plugin), which could allow an attacker to retrieve information that could lead to a Address Space Layout Randomization (ASLR) bypass. This affects vGPU version 12.x (prior to 12.2), version 11.x (prior to 11.4) and version 8.x (prior to 8.7)."
      }, {
        "lang" : "es",
        "value" : "El controlador NVIDIA vGPU contiene una vulnerabilidad en Virtual GPU Manager (plugin vGPU), que podría permitir a un atacante recuperar información que podría conllevar a una omisión de Address Space Layout Randomization (ASLR).&#xa0;Esto afecta a vGPU versión 12.x (versiones anteriores a la 12.2), versiones 11.x (versiones anteriores a la 11.4) y versión 8.x (versiones anteriores a la 8.7)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@nvidia.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0",
            "versionEndExcluding" : "8.7",
            "matchCriteriaId" : "3797FFB1-321C-4264-B6FA-B69F598BFC15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:nutanix:ahv:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A64905FE-AC41-4804-9F9F-0B24E7323590"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "11.0",
            "versionEndExcluding" : "11.4",
            "matchCriteriaId" : "307BA20A-8302-4D50-850C-F78779FE47D5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nvidia:virtual_gpu_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.2",
            "matchCriteriaId" : "762561CE-9DB3-4100-BB92-ED35B267FB30"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:citrix:hypervisor:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7AE5C32-E060-44BA-8C13-3D73204191EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_kernel-based_virtual_machine:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06C8B1C5-6401-45F9-8D3E-47E32067F428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:vmware:vsphere:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E4A22C5-B3E1-4106-997C-D1C845F2C1EE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "psirt@nvidia.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://nvidia.custhelp.com/app/answers/detail/a_id/5172",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29468",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T21:15:08.550",
      "lastModified" : "2024-11-21T06:01:10.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Cygwin Git is a patch set for the git command line tool for the cygwin environment. A specially crafted repository that contains symbolic links as well as files with backslash characters in the file name may cause just-checked out code to be executed while checking out a repository using Git on Cygwin. The problem will be patched in the Cygwin Git v2.31.1-2 release. At time of writing, the vulnerability is present in the upstream Git source code; any Cygwin user who compiles Git for themselves from upstream sources should manually apply a patch to mitigate the vulnerability. As mitigation users should not clone or pull from repositories from untrusted sources. CVE-2019-1354 was an equivalent vulnerability in Git for Visual Studio."
      }, {
        "lang" : "es",
        "value" : "Cygwin Git es un conjunto de parches para la herramienta de línea de comandos git para el entorno cygwin.&#xa0;Un repositorio especialmente diseñado que contiene enlaces simbólicos, así como archivos con caracteres de backslash en el nombre del archivo, puede hacer que se ejecute el código recién extraído al comprobar un repositorio usando Git en Cygwin.&#xa0;El problema se parcheará en Cygwin Git versión v2.31.1-2.&#xa0;En el momento de escribir este artículo, la vulnerabilidad está presente aguas arriba del código fuente de Git;&#xa0;Cualquier usuario de Cygwin que compile Git por sí mismo desde fuentes ascendentes debe aplicar manualmente un parche para mitigar la vulnerabilidad.&#xa0;Como mitigación, los usuarios no deben clonar ni extraer de repositorios de fuentes que no sean confiables.&#xa0;CVE-2019-1354 era una vulnerabilidad equivalente en Git para Visual Studio."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cygwin:git:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.31.1-1",
            "matchCriteriaId" : "966B34C6-5223-4E8C-B286-069B97E5FEAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cygwin.com/pipermail/cygwin-announce/2021-April/010018.html",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/me-and/Cygwin-Git/blob/main/check-backslash-safety.patch",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/me-and/Cygwin-Git/security/advisories/GHSA-rmp3-wq55-f557",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/git/CA+kUOa=juEdBMVr_gyTKjz7PkPt2DZHkXQyzcQmAWCsEHC_ssw%40mail.gmail.com/T/#u",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://cygwin.com/pipermail/cygwin-announce/2021-April/010018.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/me-and/Cygwin-Git/blob/main/check-backslash-safety.patch",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/me-and/Cygwin-Git/security/advisories/GHSA-rmp3-wq55-f557",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lore.kernel.org/git/CA+kUOa=juEdBMVr_gyTKjz7PkPt2DZHkXQyzcQmAWCsEHC_ssw%40mail.gmail.com/T/#u",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29484",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-29T21:15:08.590",
      "lastModified" : "2024-11-21T06:01:14.060",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0 has left sites vulnerable to untrusted users gaining access to Ghost Admin. Attackers can gain access by getting logged in users to click a link containing malicious code. Users do not need to enter credentials and may not know they've visited a malicious site. Ghost(Pro) has already been patched. We can find no evidence that the issue was exploited on Ghost(Pro) prior to the patch being added. Self-hosters are impacted if running Ghost a version between 4.0.0 and 4.3.2. Immediate action should be taken to secure your site. The issue has been fixed in 4.3.3, all 4.x sites should upgrade as soon as possible. As the endpoint is unused, the patch simply removes it. As a workaround blocking access to /ghost/preview can also mitigate the issue."
      }, {
        "lang" : "es",
        "value" : "Ghost es un CMS Node.js. Un endpoint sin uso agregado durante el desarrollo de la versión 4.0.0 ha dejado los sitios vulnerables a que usuarios no confiables que obtienen acceso a Ghost Admin. Los atacantes pueden conseguir acceso al hacer que unos usuarios que tengan iniciada la sesión hagan clic en un enlace que contenga código malicioso. Los usuarios no necesitan introducir sus credenciales y es posible que no sepan que han visitado un sitio malicioso. Ghost(Pro) ya ha sido parcheado. No hemos encontrado pruebas de que el problema se haya explotado en Ghost(Pro) antes de que se agregara el parche. Los  autohospedadores están afectados si ejecutan Ghost en una versión entre 4.0.0 y 4.3.2. Se deben tomar medidas inmediatas para proteger su sitio. El problema ha sido corregido en 4.3.3, todos los sitios 4.x deberían actualizarse lo antes posible. Como el endpoint sin uso, el parche simplemente lo elimina. Como solución alternativa, bloquear el acceso a /ghost/preview también puede mitigar el problema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ghost:ghost:*:*:*:*:*:node.js:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.3.3",
            "matchCriteriaId" : "23DB22EA-9BED-4114-AD2E-CDD95FBA9D42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/ghost-admin-takeover",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.ghost.org/t/critical-security-update-available-for-ghost-4-x/22290",
        "source" : "security-advisories@github.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/ghost",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/ghost-admin-takeover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://forum.ghost.org/t/critical-security-update-available-for-ghost-4-x/22290",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/TryGhost/Ghost/security/advisories/GHSA-9fgx-q25h-jxrg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/ghost",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31919",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T03:15:07.517",
      "lastModified" : "2024-11-21T06:06:30.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the rkyv crate before 0.6.0 for Rust. When an archive is created via serialization, the archive content may contain uninitialized values of certain parts of a struct."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate rkyv versiones anteriores a 0.6.0 para Rust.&#xa0;Cuando es creado un archivo por medio de una serialización, el contenido del archivo puede contener valores no inicializados de determinadas partes de una estructura."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-909"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rkyv_project:rkyv:*:*:*:*:*:rust:*:*",
            "versionEndExcluding" : "0.6.0",
            "matchCriteriaId" : "D2C66DA7-51DD-415E-8A29-815867AEDC67"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0054.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0054.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31870",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T06:15:07.190",
      "lastModified" : "2024-11-21T06:06:23.677",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in klibc before 2.0.9. Multiplication in the calloc() function may result in an integer overflow and a subsequent heap buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en klibc versiones anteriores a 2.0.9.&#xa0;Una multiplicación en la función calloc() puede resultar en un desbordamiento de enteros y un posterior desbordamiento del búfer de la pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klibc_project:klibc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "2FF3DF47-F57D-4639-9500-9F755F54DF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=292650f04c2b5348b4efbad61fb014ed09b4f3f2",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=292650f04c2b5348b4efbad61fb014ed09b4f3f2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31871",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T06:15:07.287",
      "lastModified" : "2024-11-21T06:06:23.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in klibc before 2.0.9. An integer overflow in the cpio command may result in a NULL pointer dereference on 64-bit systems."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en klibc versiones anteriores a 2.0.9.&#xa0;Un desbordamiento de enteros en el comando cpio puede resultar en una desreferencia del puntero NULL en sistemas de 64 bits."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klibc_project:klibc:*:*:*:*:*:*:x64:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "A21954BD-4F83-4E8A-B396-F920FC41AD9E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=2e48a12ab1e30d43498c2d53e878a11a1b5102d5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=2e48a12ab1e30d43498c2d53e878a11a1b5102d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31872",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T06:15:07.313",
      "lastModified" : "2024-11-21T06:06:23.997",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in klibc before 2.0.9. Multiple possible integer overflows in the cpio command on 32-bit systems may result in a buffer overflow or other security impact."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en klibc versiones anteriores a 2.0.9.&#xa0;Múltiples desbordamientos de enteros posibles en el comando cpio en sistemas de 32 bits pueden resultar en un desbordamiento del búfer u otro impacto en la seguridad."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klibc_project:klibc:*:*:*:*:*:x86:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "FF639C25-F2EE-43CE-9BFE-90137D24CBC3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=9b1c91577aef7f2e72c3aa11a27749160bd278ff",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=9b1c91577aef7f2e72c3aa11a27749160bd278ff",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31873",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T06:15:07.343",
      "lastModified" : "2024-11-21T06:06:24.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in klibc before 2.0.9. Additions in the malloc() function may result in an integer overflow and a subsequent heap buffer overflow."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en klibc versiones anteriores a 2.0.9.&#xa0;Las adiciones en la función malloc() pueden resultar en un desbordamiento de enteros y un posterior desbordamiento del búfer de la pila."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:klibc_project:klibc:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.9",
            "matchCriteriaId" : "2FF3DF47-F57D-4639-9500-9F755F54DF79"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=a31ae8c508fc8d1bca4f57e9f9f88127572d5202",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/huolinjue/klibc/commit/a31ae8c508fc8d1bca4f57e9f9f88127572d5202",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/04/30/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/libs/klibc/klibc.git/commit/?id=a31ae8c508fc8d1bca4f57e9f9f88127572d5202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/huolinjue/klibc/commit/a31ae8c508fc8d1bca4f57e9f9f88127572d5202",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://kernel.org/pub/linux/libs/klibc/2.0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00025.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.zytor.com/archives/klibc/2021-April/004593.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20326",
      "sourceIdentifier" : "cna@mongodb.com",
      "published" : "2021-04-30T09:15:07.597",
      "lastModified" : "2024-11-21T05:46:23.007",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A user authorized to performing a specific type of find query may trigger a denial of service. This issue affects MongoDB Server v4.4 versions prior to 4.4.4."
      }, {
        "lang" : "es",
        "value" : "Un usuario autorizado para llevar a cabo un tipo específico de consulta de búsqueda puede desencadenar una denegación de servicio.&#xa0;Este problema afecta a: MongoDB Inc. MongoDB Server versiones v4.4 anteriores a la 4.4.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cna@mongodb.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cna@mongodb.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mongodb:mongodb:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.4.0",
            "versionEndExcluding" : "4.4.4",
            "matchCriteriaId" : "E65DD489-2A15-4B99-87CC-D27C78DF0853"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://jira.mongodb.org/browse/SERVER-53929",
        "source" : "cna@mongodb.com",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://jira.mongodb.org/browse/SERVER-53929",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26807",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T11:15:07.410",
      "lastModified" : "2024-11-21T05:56:50.740",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "GalaxyClient version 2.0.28.9 loads unsigned DLLs such as zlib1.dll, libgcc_s_dw2-1.dll and libwinpthread-1.dll from PATH, which allows an attacker to potentially run code locally through unsigned DLL loading."
      }, {
        "lang" : "es",
        "value" : "GalaxyClient versión 2.0.28.9, carga archivos DLL sin firmar como las bibliotecas zlib1.dll, libgcc_s_dw2-1.dll y libwinpthread-1.dll a partir de PATH, lo que permite a un atacante potencialmente ejecutar código de forma local por medio de una carga de DLL sin firmar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-426"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gog:galaxy:2.0.28.9:*:*:*:*:windows:*:*",
            "matchCriteriaId" : "A704026C-1CBD-438A-BEC0-68D2937F0F13"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://illuminati.services/2021/04/29/cve-2021-26807-gog-galaxy-v2-0-35-dll-load-order-hijacking/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.gog.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://illuminati.services/2021/04/29/cve-2021-26807-gog-galaxy-v2-0-35-dll-load-order-hijacking/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.gog.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20266",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-04-30T12:15:07.500",
      "lastModified" : "2024-11-21T05:46:14.593",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in RPM's hdrblobInit() in lib/header.c. This flaw allows an attacker who can modify the rpmdb to cause an out-of-bounds read. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se detectó un fallo en RPM en la función hdrblobInit() en el archivo lib/header.c.&#xa0;Este fallo permite a un atacante que puede modificar el rpmdb causar una lectura fuera de límites.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:rpm:rpm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.16.1.3",
            "matchCriteriaId" : "E210A7F5-C9AD-41DB-8E5A-2D48615DF02B"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1927741",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-43",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1927741",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TMGXO3W6DHPO62GJ4VVF5DEUX5DRUR5K/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VHRPNBCRPDJHHQE3MBPSZK4H7X2IM7AC/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-43",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28959",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T13:15:07.470",
      "lastModified" : "2024-11-21T06:00:26.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code execution."
      }, {
        "lang" : "es",
        "value" : "Zoho ManageEngine Eventlog Analyzer versiones hasta 12147, es vulnerable al salto de directorio no autenticado por medio de una entrada en un archivo ZIP.&#xa0;Esto conlleva a una ejecución de código remota."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.1.4",
            "matchCriteriaId" : "D2F75F95-CF32-458C-9CE0-894CFAB78B06"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.1.4:-:*:*:*:*:*:*",
            "matchCriteriaId" : "B5B8AC3F-AAB3-44BC-A89D-2C3D8DE12354"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.1.4:12141:*:*:*:*:*:*",
            "matchCriteriaId" : "ACFD1173-F12C-4218-9F3C-28F6099E3BE8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.1.4:12145:*:*:*:*:*:*",
            "matchCriteriaId" : "BB7893F8-40B7-41E1-AB1B-93D6EA82DF4A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:zohocorp:manageengine_eventlog_analyzer:12.1.4:12146:*:*:*:*:*:*",
            "matchCriteriaId" : "284715B5-556F-495E-A44C-0C1E8A5B89B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.manageengine.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/eventlog/features-new.html#release",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.manageengine.com/products/eventlog/features-new.html#release",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31231",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T13:15:07.547",
      "lastModified" : "2024-11-21T06:05:20.887",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Alertmanager in Grafana Enterprise Metrics before 1.2.1 and Metrics Enterprise 1.2.1 has a local file disclosure vulnerability when experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list."
      }, {
        "lang" : "es",
        "value" : "Alertmanager en Grafana Enterprise Metrics versiones anteriores a 1.2.1 y Metrics Enterprise versión1.2.1, presenta una vulnerabilidad de divulgación de archivos locales cuando es usado experimental.alertmanager.enable-api.&#xa0;El archivo de contraseña de autenticación básica HTTP se puede usar como un vector de ataque para enviar cualquier contenido de archivo por medio de un webhook.&#xa0;Las plantillas de alertmanager pueden ser usado como vector de ataque para enviar cualquier contenido de archivo porque alertmanager puede cargar cualquier archivo de texto especificado en la lista de plantillas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:enterprise_metrics:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "4BB20F01-714A-4510-9DCF-531232178BB1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:grafana:enterprise_metrics:*:*:*:*:enterprise:*:*:*",
            "versionEndExcluding" : "1.2.1",
            "matchCriteriaId" : "8504FF5A-86A0-4C01-AE56-E1BCB5AB485F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.grafana.com/c/security-announcements",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/metrics-enterprise/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/metrics-enterprise/latest/downloads/#v113----april-27-2021",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/metrics-enterprise/latest/downloads/#v121----april-27-2021",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.grafana.com/c/security-announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/metrics-enterprise/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/metrics-enterprise/latest/downloads/#v113----april-27-2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://grafana.com/docs/metrics-enterprise/latest/downloads/#v121----april-27-2021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31232",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T13:15:07.577",
      "lastModified" : "2024-11-21T06:05:21.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Alertmanager in CNCF Cortex before 1.8.1 has a local file disclosure vulnerability when -experimental.alertmanager.enable-api is used. The HTTP basic auth password_file can be used as an attack vector to send any file content via a webhook. The alertmanager templates can be used as an attack vector to send any file content because the alertmanager can load any text file specified in the templates list."
      }, {
        "lang" : "es",
        "value" : "Alertmanager en CNCF Cortex versiones anteriores a 1.8.1, presenta una vulnerabilidad de divulgación de archivos locales cuando es usado -experimental.alertmanager.enable-api.&#xa0;El archivo de contraseña de autenticación básica HTTP se puede usar como un vector de ataque para enviar cualquier contenido de archivo por medio de un webhook.&#xa0;Las plantillas de alertmanager pueden ser usados como vector de ataque para enviar cualquier contenido de archivo porque alertmanager puede cargar cualquier archivo de texto especificado en la lista de plantillas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:linuxfoundation:cortex:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.8.1",
            "matchCriteriaId" : "47A89AC7-C9EF-49FB-89F3-0920864F1471"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://community.grafana.com/c/security-announcements",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cortexproject/cortex",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cortexproject/cortex/pull/4129/files",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.cncf.io/g/cortex-users/message/50",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://community.grafana.com/c/security-announcements",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cortexproject/cortex",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/cortexproject/cortex/pull/4129/files",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.cncf.io/g/cortex-users/message/50",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20515",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-04-30T16:15:07.587",
      "lastModified" : "2024-11-21T05:46:42.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM Informix Dynamic Server 14.10 is vulnerable to a stack based buffer overflow, caused by improper bounds checking. A local privileged user could overflow a buffer and execute arbitrary code on the system or cause a denial of service condition. IBM X-Force ID: 198366."
      }, {
        "lang" : "es",
        "value" : "IBM Informix Dynamic Server versión 14.10, es vulnerable a un desbordamiento del búfer en la región stack de la memoria, causado por una comprobación de límites inapropiada.&#xa0;Un usuario privilegiado local podría desbordar un búfer y ejecutar código arbitrario en el sistema o causar una condición de denegación de servicio.&#xa0; IBM X-Force ID: 198366."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:informix_dynamic_server:14.10:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B33D65F4-09CB-4C6C-8D0D-D9EA513F4E07"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:hp:hp-ux:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F480AA32-841A-4E68-9343-B2E7548B0A0C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:ibm:aix:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E492C463-D76E-49B7-A4D4-3B499E422D89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:oracle:solaris:-:*:*:*:*:*:-:*",
            "matchCriteriaId" : "F5027746-8216-452D-83C5-2F8E9546F2A5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198366",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6448568",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/198366",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6448568",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21534",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T18:15:07.390",
      "lastModified" : "2024-11-21T05:48:32.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain access to sensitive information via the local API."
      }, {
        "lang" : "es",
        "value" : "Dell Hybrid Client versiones anteriores a 1.5, contienen una vulnerabilidad de exposición de información.&#xa0;Un atacante local no autenticado puede explotar esta vulnerabilidad para conseguir acceso a información confidencial por medio de la API local."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:hybrid_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "BD43EA9B-ABF1-40F2-924B-1102A4660175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21535",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T18:15:07.430",
      "lastModified" : "2024-11-21T05:48:32.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain root level access to the system."
      }, {
        "lang" : "es",
        "value" : "Dell Hybrid Client versiones anteriores a 1.5, contienen una falta de autenticación para una vulnerabilidad de función crítica.&#xa0;Un atacante local no autenticado puede explotar esta vulnerabilidad para conseguir acceso de nivel root al sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:hybrid_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "BD43EA9B-ABF1-40F2-924B-1102A4660175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21536",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T18:15:07.463",
      "lastModified" : "2024-11-21T05:48:32.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to register the client to a server in order to view sensitive information."
      }, {
        "lang" : "es",
        "value" : "Dell Hybrid Client versiones anteriores a 1.5, contienen una vulnerabilidad de exposición de información.&#xa0;Un atacante local no autenticado puede explotar esta vulnerabilidad para registrar al cliente en un servidor a fin de visualizar información confidencial."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:hybrid_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "BD43EA9B-ABF1-40F2-924B-1102A4660175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21537",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T18:15:07.497",
      "lastModified" : "2024-11-21T05:48:32.867",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to view and exfiltrate sensitive information on the system."
      }, {
        "lang" : "es",
        "value" : "Dell Hybrid Client versiones anteriores a 1.5, contienen una vulnerabilidad de exposición de información.&#xa0;Un atacante local no autenticado puede explotar esta vulnerabilidad para visualizar y exfiltrar información confidencial en el sistema."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:hybrid_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5",
            "matchCriteriaId" : "BD43EA9B-ABF1-40F2-924B-1102A4660175"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29486",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-30T18:15:07.530",
      "lastModified" : "2024-11-21T06:01:14.300",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "cumulative-distribution-function is an open source npm library used which calculates statistical cumulative distribution function from data array of x values. In versions prior to 2.0.0 apps using this library on improper data may crash or go into an infinite-loop. In the case of a nodejs server-app using this library to act on invalid non-numeric data, the nodejs server may crash. This may affect other users of this server and/or require the server to be rebooted for proper operation. In the case of a browser app using this library to act on invalid non-numeric data, that browser may crash or lock up. A flaw enabling an infinite-loop was discovered in the code for evaluating the cumulative-distribution-function of input data. Although the documentation explains that numeric data is required, some users may confuse an array of strings like [\"1\",\"2\",\"3\",\"4\",\"5\"] for numeric data [1,2,3,4,5] when it is in fact string data. An infinite loop is possible when the cumulative-distribution-function is evaluated for a given point when the input data is string data rather than type `number`. This vulnerability enables an infinite-cpu-loop denial-of-service-attack on any app using npm:cumulative-distribution-function v1.0.3 or earlier if the attacker can supply malformed data to the library. The vulnerability could also manifest if a data source to be analyzed changes data type from Arrays of number (proper) to Arrays of string (invalid, but undetected by earlier version of the library). Users should upgrade to at least v2.0.0, or the latest version. Tests for several types of invalid data have been created, and version 2.0.0 has been tested to reject this invalid data by throwing a `TypeError()` instead of processing it. Developers using this library may wish to adjust their app's code slightly to better tolerate or handle this TypeError. Apps performing proper numeric data validation before sending data to this library should be mostly unaffected by this patch. The vulnerability can be mitigated in older versions by ensuring that only finite numeric data of type `Array[number]` or `number` is passed to `cumulative-distribution-function` and its `f(x)` function, respectively."
      }, {
        "lang" : "es",
        "value" : "cumulative-distribution-function es una biblioteca npm de código abierto usada que calcula la función statistical cumulative distribution a partir de una matriz de datos de valores x. En versiones anteriores a la 2.0.0, las aplicaciones que utilizan esta biblioteca con datos malformados pueden presentar un fallo o entrar en un bucle infinito. En el caso de una aplicación de servidor de nodejs que use esta biblioteca para actuar sobre datos no numéricos no válidos, el servidor de nodejs puede bloquearse. Esto puede afectar a otros usuarios de este servidor y/o requerir que el servidor sea reiniciado para que funcione apropiadamente. En el caso de una aplicación de navegador que utilice esta biblioteca para actuar sobre datos no numéricos no válidos, ese navegador puede bloquearse o suspenderse. Se detectó un fallo que permite un bucle infinito en el código para evaluar la cumulative-distribution-function de los datos de la entrada. Aunque la documentación explica que se requieren datos numéricos, algunos usuarios pueden confundir una matriz de cadenas como [\"1\",\"2\",\"3\",\"4\",\"5\"] para datos numéricos [1,2,3,4,5] cuando es en efecto una cadena de datos. Un bucle infinito es posible cuando la cumulative-distribution-function es evaluada para un punto específico cuando el dato de la entrada es una cadena de datos en vez de un tipo “number”. Esta vulnerabilidad habilita un ataque de denegación de servicio en el bucle cpu infinito en cualquier aplicación que utilice npm: cumulative-distribution-function versiones v1.0.3 o anteriores si el atacante puede suministrar datos malformados a la biblioteca. La vulnerabilidad también podría manifestarse si una fuente de datos a analizar cambia el tipo de datos de Matrices de números (propiamente dichos) a Matrices de cadenas (no válidas, pero no detectadas por una versión anterior de la biblioteca). Los usuarios deben actualizar al menos a la versión v2.0.0 o la última versión. Se han creado pruebas para varios tipos de datos no válidos, y se ha probado la versión 2.0.0 para rechazar estos datos no válidos lanzando un “Typebug()” en lugar de procesarlos. Los desarrolladores que utilizan esta biblioteca pueden desear ajustar ligeramente el código de su aplicación para tolerar o manejar mejor este Typebug. Las aplicaciones que llevan a cabo una comprobación de datos numérica apropiada antes de enviar datos a esta biblioteca no deberían estar afectadas en su mayoría por este parche. La vulnerabilidad puede ser mitigada en versiones anteriores asegurándose de que solo se pasen datos numéricos finitos de tipo “Array[number]” o “number” a la \"cumulative-distribution-function\" y su función f(x), respectivamente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        }, {
          "lang" : "en",
          "value" : "CWE-835"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cumulative-distribution-function_project:cumulative-distribution-function:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "2.0.0",
            "matchCriteriaId" : "5AA93801-1297-4AA6-90FB-F655A0E459E3"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/DrPaulBrewer/cumulative-distribution-function/issues/7",
        "source" : "security-advisories@github.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrPaulBrewer/cumulative-distribution-function/pull/8",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrPaulBrewer/cumulative-distribution-function/security/advisories/GHSA-58qp-5328-v7mh",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/cumulative-distribution-function",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrPaulBrewer/cumulative-distribution-function/issues/7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrPaulBrewer/cumulative-distribution-function/pull/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/DrPaulBrewer/cumulative-distribution-function/security/advisories/GHSA-58qp-5328-v7mh",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/cumulative-distribution-function",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29463",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-30T19:15:07.143",
      "lastModified" : "2024-11-21T06:01:09.907",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. An out-of-bounds read was found in Exiv2 versions v0.27.3 and earlier. The out-of-bounds read is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to cause a denial of service by crashing Exiv2, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una utilidad de línea de comandos y una biblioteca C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen.&#xa0;Se encontró una lectura fuera de límites en Exiv2 versiones v0.27.3 y anteriores.&#xa0;La lectura fuera de límites es activada cuando se usa Exiv2 para escribir metadatos en un archivo de imagen diseñado.&#xa0;Un atacante podría explotar potencialmente la vulnerabilidad para causar una denegación de servicio al bloquear Exiv2, si puede engañar a la víctima para que ejecute Exiv2 en un archivo de imagen diseñado.&#xa0;Tome en cuenta que este bug solo es activado al escribir los metadatos, que es una operación Exiv2 que es usado con menos frecuencia que leer los metadatos.&#xa0;Por ejemplo, para desencadenar el bug en la aplicación de línea de comandos Exiv2, es necesario agregar un argumento de línea de comando adicional como \"insert\".&#xa0;El bug se corrigió en la versión v0.27.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.27.4",
            "matchCriteriaId" : "0A049EBD-7A7E-458F-9ABD-F6626DDEABB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-5p8g-9xf3-gfrr",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3HKXR6JOVKMBE4HY4FDXNVZGNCQG6T3/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDMZTVQAZSMLPTDVDYLBHAAF7I5QXVYQ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Exiv2/exiv2/commit/783b3a6ff15ed6f82a8f8e6c8a6f3b84a9b04d4b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-5p8g-9xf3-gfrr",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3HKXR6JOVKMBE4HY4FDXNVZGNCQG6T3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDMZTVQAZSMLPTDVDYLBHAAF7I5QXVYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29464",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-04-30T19:15:07.187",
      "lastModified" : "2024-11-21T06:01:10.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. A heap buffer overflow was found in Exiv2 versions v0.27.3 and earlier. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `insert`. The bug is fixed in version v0.27.4."
      }, {
        "lang" : "es",
        "value" : "Exiv2 es una utilidad de línea de comandos y una biblioteca C++ para leer, escribir, eliminar y modificar los metadatos de archivos de imagen.&#xa0;Se encontró un desbordamiento del búfer de la memoria en Exiv2 versiones v0.27.3 y anteriores.&#xa0;El desbordamiento de la pila es activada cuando se usa Exiv2 para escribir metadatos en un archivo de imagen diseñado.&#xa0;Un atacante podría explotar potencialmente la vulnerabilidad para conseguir una ejecución del código, si puede engañar a la víctima para ejecutar Exiv2 en un archivo de imagen diseñado.&#xa0;Tome en cuenta que este bug solo es activado al escribir los metadatos, que es una operación Exiv2 que es usado con menos frecuencia que leer los metadatos.&#xa0;Por ejemplo, para desencadenar el bug en la aplicación de línea de comandos Exiv2, es necesario agregar un argumento de línea de comando adicional como \"insert\".&#xa0;El bug se corrigió en la versión v0.27.4."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-122"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exiv2:exiv2:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "0.27.4",
            "matchCriteriaId" : "0A049EBD-7A7E-458F-9ABD-F6626DDEABB9"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-jgm9-5fw5-pw9p",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3HKXR6JOVKMBE4HY4FDXNVZGNCQG6T3/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDMZTVQAZSMLPTDVDYLBHAAF7I5QXVYQ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/Exiv2/exiv2/commit/f9308839198aca5e68a65194f151a1de92398f54",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Exiv2/exiv2/security/advisories/GHSA-jgm9-5fw5-pw9p",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K3HKXR6JOVKMBE4HY4FDXNVZGNCQG6T3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NDMZTVQAZSMLPTDVDYLBHAAF7I5QXVYQ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202312-06",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31926",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T20:15:09.363",
      "lastModified" : "2024-11-21T06:06:31.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "AMP Application Deployment Service in CubeCoders AMP 2.1.x before 2.1.1.2 allows a remote, authenticated user to open ports in the local system firewall by crafting an HTTP(S) request directly to the applicable API endpoint (despite not having permission to make changes to the system's network configuration)."
      }, {
        "lang" : "es",
        "value" : "AMP Application Deployment Service en CubeCoders AMP versiones 2.1.x anteriores a 2.1.1.2, permite a un usuario autenticado remoto abrir puertos en el firewall del sistema local al crear una petición HTTP(S) directamente en el endpoint de la API correspondiente (a pesar de no tener permiso para llevar a cabo cambios a la configuración de red del sistema)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cubecoders:amp:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.1.0",
            "versionEndExcluding" : "2.1.1.2",
            "matchCriteriaId" : "A96FE9F0-6B33-4347-8666-8D9C190A49B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/CubeCoders/AMP/issues/443",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/CubeCoders/AMP/issues/443",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21227",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.387",
      "lastModified" : "2024-11-21T05:47:49.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de datos en V8 en Google Chrome versiones anteriores a 90.0.4430.93, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1199345",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1199345",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21228",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.417",
      "lastModified" : "2024-11-21T05:47:49.213",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient policy enforcement in extensions in Google Chrome prior to 90.0.4430.93 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension."
      }, {
        "lang" : "es",
        "value" : "La aplicación de políticas insuficiente en extensions de Google Chrome versiones anteriores a 90.0.4430.93, permitía a un atacante que convenció a un usuario de instalar una extensión maliciosa para omitir restricciones de navegación por medio de una Chrome Extension diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1139156",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1139156",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21229",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.447",
      "lastModified" : "2024-11-21T05:47:49.337",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "La Interfaz de Usuario de seguridad incorrecta en downloads en Google Chrome en Android versiones anteriores a 90.0.4430.93, permitía a un atacante remoto llevar a cabo una suplantación de dominio por medio de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-346"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:google:android:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8B9FEC8-73B6-43B8-B24E-1F7C20D91D26"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1198165",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1198165",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21230",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.477",
      "lastModified" : "2024-11-21T05:47:49.457",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Type confusion in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una confusión de tipos en V8 en Google Chrome versiones anteriores a 90.0.4430.93, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-843"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1198705",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1198705",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21231",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.510",
      "lastModified" : "2024-11-21T05:47:49.570",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Una comprobación insuficiente de datos en V8 en Google Chrome versiones anteriores a 90.0.4430.93, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1198696",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1198696",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21232",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.537",
      "lastModified" : "2024-11-21T05:47:49.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un uso de la memoria previamente liberada en Dev Tools en Google Chrome versiones anteriores a 90.0.4430.93, permitía a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175058",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1175058",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21233",
      "sourceIdentifier" : "chrome-cve-admin@google.com",
      "published" : "2021-04-30T21:15:08.567",
      "lastModified" : "2024-11-21T05:47:49.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page."
      }, {
        "lang" : "es",
        "value" : "Un desbordamiento del búfer de la pila en ANGLE en Google Chrome en Windows versiones anteriores a 90.0.4430.93, permitía a un atacante remoto explotar potencialmente la corrupción de la pila por medio de una página HTML diseñada."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "90.0.4430.93",
            "matchCriteriaId" : "4DDD2401-6267-4B1E-BA94-6D79037D5E42"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2572D17-1DE6-457B-99CC-64AFD54487EA"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1182937",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "chrome-cve-admin@google.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "chrome-cve-admin@google.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop_26.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://crbug.com/1182937",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202104-08",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.debian.org/security/2021/dsa-4911",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21507",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.597",
      "lastModified" : "2024-11-21T05:48:30.070",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account."
      }, {
        "lang" : "es",
        "value" : "Dell EMC Networking X-Series versiones anteriores a 3.0.1.8 y Dell EMC PowerEdge VRTX Module, versiones de firrmware anteriores a 2.0.0.82, contienen una vulnerabilidad de Cifrado de Contraseña Débil.&#xa0;Un atacante remoto no autenticado podría explotar potencialmente esta vulnerabilidad, conllevando a una divulgación de determinadas credenciales de usuario.&#xa0;El atacante puede usar las credenciales expuestas para acceder al sistema vulnerable con privilegios de la cuenta comprometida."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-261"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-326"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1008p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "797B281A-1F97-45EA-B63B-310C631E5300"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1008p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D29913E0-EB40-4088-845E-478859BE9AA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1018p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "CDA3F68D-0C01-4235-8A6C-317D7FAF4EC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1018p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B86EE4BF-6DA7-4F74-9116-FCC93A5D0C8B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1026p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "DE3522DC-9259-4B4B-BD11-B6106C5F4C8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1026p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "470280E0-8C95-40E1-B523-F6D8A998FDA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1052p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "A657AA7A-4462-4AEF-A377-57B99066B142"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1052p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BCA777B-BA3F-4585-8F42-D3EF3F3E805D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x4012_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "0013FB8E-D762-4D5A-929E-C4FF1064A122"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x4012:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44113AAD-07FF-45DB-BDCF-A21BF483E286"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:r1-2401_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0.82",
            "matchCriteriaId" : "D5F70190-8D9F-4A81-AF65-0559346960AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:r1-2401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D1BA0CC-6EC3-4B4D-BC40-EAF3B1CD54C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:r1-2210_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.0.0.82",
            "matchCriteriaId" : "1CC4E63C-90E4-4606-9953-7FB8242E83E4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:r1-2210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C987205B-1645-41F7-8F0C-10ADF28B6106"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1008_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "600B25AD-39D3-4A94-88DC-BEDBEC32E490"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34519BF-43D5-4D05-984F-EF4F584B5756"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1018_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "5B705EFB-0224-4719-B77D-FFD86FA99B37"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66BE7D70-2B8F-4B94-A9F2-E2CD89CE1762"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1026_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "0DC0ADD8-7AFE-41EA-B30B-32629E364355"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1026:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACB73FAE-5682-42FA-A423-23B1FC193244"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:x1052_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.1.8",
            "matchCriteriaId" : "CD4C67D4-0009-4FF0-AEE5-D3ACA36E3796"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:x1052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A4CE96-3213-4BBA-8C31-8CFB3001BCC1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185252",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185252",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21530",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.637",
      "lastModified" : "2024-11-21T05:48:32.020",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege."
      }, {
        "lang" : "es",
        "value" : "Dell OpenManage Enterprise-Modular (OME-M) versiones anteriores a 1.30.00, contiene una vulnerabilidad de omisión de seguridad.&#xa0;Un usuario malicioso autenticado con pocos privilegios puede explotar la vulnerabilidad para escapar del entorno restringido y conseguir acceso a información confidencial en el sistema, resultando en una divulgación de información y elevación de privilegios."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H",
            "baseScore" : 8.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:openmanage_enterprise-modular:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.30.00",
            "matchCriteriaId" : "3713C80A-C46C-4B5C-B2A9-47471C00D3ED"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185205",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21531",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.673",
      "lastModified" : "2024-11-21T05:48:32.150",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions."
      }, {
        "lang" : "es",
        "value" : "Dell Unisphere para PowerMax versiones anteriores a 9.2.1.6, contienen una vulnerabilidad de Omisión de Autorización.&#xa0;Un usuario malicioso local autenticado con role de monitor puede explotar esta vulnerabilidad para llevar a cabo acciones no autorizadas."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-669"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0.15",
            "matchCriteriaId" : "BC3DAEF1-0C50-4683-ADD8-DFF2A82CA9B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:solutions_enabler:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.1.6",
            "matchCriteriaId" : "D1A1B910-6302-4097-8AEB-CD3DA665A5B2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0.15",
            "matchCriteriaId" : "1A6E2D9A-1E3A-4671-8D11-7A0C51C3CFBB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:solutions_enabler_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.0",
            "versionEndExcluding" : "9.2.1.1",
            "matchCriteriaId" : "F854B320-C194-4FA9-B972-EFFE909E9005"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0.26",
            "matchCriteriaId" : "EAFA10BE-64D3-40D9-BA46-867A8345E90B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndIncluding" : "9.2.1.6",
            "matchCriteriaId" : "A57086A5-CF0C-4DCC-86D5-3159133CFF74"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.1.0.26",
            "matchCriteriaId" : "716AFCCC-1F9E-4C34-A02C-5924EF32BA23"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unisphere_for_powermax_virtual_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.2.1.0",
            "versionEndExcluding" : "9.2.1.6",
            "matchCriteriaId" : "040B6E33-2F65-474F-9412-C9A4BBFD15FE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:powermax_os:5978:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43696C46-48E8-43E4-9387-77CE1B2BD401"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000184565",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000184565",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21539",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.707",
      "lastModified" : "2024-11-21T05:48:33.110",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC through the web interface."
      }, {
        "lang" : "es",
        "value" : "Dell EMC iDRAC9 versiones anteriores a 4.40.00.00, contiene una vulnerabilidad de condición de carrera Time-of-check Time-of-use (TOCTOU).&#xa0;Un atacante autenticado remoto podría explotar potencialmente esta vulnerabilidad para alcanzar privilegios elevados cuando un usuario con privilegios más elevados accede simultáneamente a iDRAC a través de la interfaz web."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:H/Au:S/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "NETWORK",
            "accessComplexity" : "HIGH",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-367"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.00.00",
            "matchCriteriaId" : "5E9ED974-1468-4B8B-B82E-5E0340C2601B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21540",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.740",
      "lastModified" : "2024-11-21T05:48:33.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to overwrite configuration information by injecting arbitrarily large payload."
      }, {
        "lang" : "es",
        "value" : "Dell EMC iDRAC9 versiones anteriores a 4.40.00.00, contiene una vulnerabilidad de desbordamiento en la región stack de la memoria.&#xa0;Un atacante autenticado remoto podría explotar potencialmente esta vulnerabilidad para sobrescribir la información de configuración al inyectar una carga útil arbitrariamente grande."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-121"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.00.00",
            "matchCriteriaId" : "5E9ED974-1468-4B8B-B82E-5E0340C2601B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21541",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.780",
      "lastModified" : "2024-11-21T05:48:33.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application."
      }, {
        "lang" : "es",
        "value" : "Dell EMC iDRAC9 versiones anteriores a 4.40.00.00, contiene una vulnerabilidad de tipo cross-site scripting basada en DOM.&#xa0;Un atacante remoto no autenticado podría explotar potencialmente esta vulnerabilidad engañando al usuario de la aplicación víctima para que suministre un código HTML o JavaScript malicioso al entorno DOM en el navegador.&#xa0;A continuación, el navegador web ejecuta el código malicioso en el contexto de la aplicación web vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.00.00",
            "matchCriteriaId" : "5E9ED974-1468-4B8B-B82E-5E0340C2601B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21542",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.820",
      "lastModified" : "2024-11-21T05:48:33.500",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generating a certificate. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "Dell EMC iDRAC9 versiones anteriores a 4.40.10.00, contienen múltiples vulnerabilidades de tipo cross-site scripting almacenado.&#xa0;Un usuario malicioso autenticado remoto con altos privilegios podría explotar estas vulnerabilidades para almacenar código HTML o JavaScript malicioso por medio de múltiples afectaciones mientras genera un certificado.&#xa0;Cuando los usuarios víctimas acceden a los datos enviados a través de sus navegadores, el navegador web ejecuta el código malicioso en el contexto de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.00.00",
            "matchCriteriaId" : "5E9ED974-1468-4B8B-B82E-5E0340C2601B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21543",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.860",
      "lastModified" : "2024-11-21T05:48:33.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected parameters. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application."
      }, {
        "lang" : "es",
        "value" : "Dell EMC iDRAC9 versiones anteriores a 4.40.00.00, contienen múltiples vulnerabilidades de tipo cross-site scripting almacenado.&#xa0;Un usuario malicioso autenticado remoto con privilegios elevados podría explotar estas vulnerabilidades para almacenar código HTML o JavaScript malicioso por medio de múltiples parámetros afectados.&#xa0;Cuando los usuarios víctimas acceden a los datos enviados por medio de sus navegadores, el navegador web ejecuta el código malicioso en el contexto de la aplicación vulnerable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.00.00",
            "matchCriteriaId" : "5E9ED974-1468-4B8B-B82E-5E0340C2601B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21544",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.900",
      "lastModified" : "2024-11-21T05:48:33.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user."
      }, {
        "lang" : "es",
        "value" : "Dell EMC iDRAC9 versiones anteriores a 4.40.00.00, contiene una vulnerabilidad de autenticación inapropiada.&#xa0;Un usuario malicioso autenticado remoto con privilegios elevados podría explotar potencialmente esta vulnerabilidad para manipular el campo username en la sección comment y establecer el valor para cualquier usuario."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 2.7,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-602"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.40.00.00",
            "matchCriteriaId" : "5E9ED974-1468-4B8B-B82E-5E0340C2601B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185293",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21547",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-04-30T21:15:08.937",
      "lastModified" : "2024-11-21T05:48:34.163",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user."
      }, {
        "lang" : "es",
        "value" : "Dell EMC Unity, UnityVSA y Unity XT versiones anteriores a 5.0.7.0.5.008 contienen una vulnerabilidad de almacenamiento de contraseña de texto plano cuando Dell Upgrade Readiness Utility es ejecutado en el sistema.&#xa0;Las credenciales del Administrador de Unisphere son almacenadas en texto plano.&#xa0;Un usuario malicioso local con altos privilegios puede usar la contraseña expuesta para conseguir acceso con los privilegios de un usuario comprometido."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unity_operating_environment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.7.0.5.008",
            "matchCriteriaId" : "15F2B715-190D-460B-AABB-B922B2C4AE53"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unity_xt_operating_environment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.7.0.5.008",
            "matchCriteriaId" : "8F115C9A-4D1C-44E2-AD74-AAE75EEB74BC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:unityvsa_operating_environment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.0.7.0.5.008",
            "matchCriteriaId" : "21AA0A02-5341-469E-9715-5AEF4BFEFA42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185484",
        "source" : "security_alert@emc.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185484",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31933",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T21:15:09.000",
      "lastModified" : "2024-11-21T06:06:32.513",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames (e.g., .phar or .pht). A remote authenticated administrator is able to upload a file containing arbitrary PHP code into specific directories via main/inc/lib/fileUpload.lib.php directory traversal to achieve PHP code execution."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de ejecución de código remota en Chamilo versiones hasta 1.11.14, debido a un saneamiento de la entrada inapropiado de un parámetro utilizado para la carga de archivos y al filtrado inapropiado de extensiones de archivo para determinados nombres de archivo (por ejemplo, .phar o .pht).&#xa0;Un administrador autenticado remoto puede cargar un archivo que contiene código PHP arbitrario en directorios específicos por medio del salto del directorio en el archivo main/inc/lib/fileUpload.lib.php para alcanzar una ejecución de código PHP."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@mitre.org",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-706"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:chamilo:chamilo:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.14",
            "matchCriteriaId" : "3F377513-C59E-4FD6-97E5-47B4474F5FA9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chamilo/chamilo-lms/commit/229302139e8d23bf6862183cf219b967f6e2fbc1",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-48-2021-04-17-Critical-impact-high-risk-Remote-Code-Execution",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162572/Chamilo-LMS-1.11.14-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://github.com/chamilo/chamilo-lms/commit/229302139e8d23bf6862183cf219b967f6e2fbc1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/chamilo/chamilo-lms/commit/f65d065061a77bb2e84f73217079ce3998cf3453",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://support.chamilo.org/projects/1/wiki/Security_issues#Issue-48-2021-04-17-Critical-impact-high-risk-Remote-Code-Execution",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31792",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T22:15:07.723",
      "lastModified" : "2024-11-21T06:06:13.777",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field"
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS en la página client account en SuiteCRM versiones anteriores al 7.11.19, permite a un atacante inyectar JavaScript por medio del campo name."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.11.19",
            "matchCriteriaId" : "71D85420-ACFA-4591-B7FC-1DAD33C77835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://chris-forbes.github.io/CVE-2021-31792",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/salesagility/SuiteCRM",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://chris-forbes.github.io/CVE-2021-31792",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/salesagility/SuiteCRM",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31934",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T22:15:07.753",
      "lastModified" : "2024-11-21T06:06:32.700",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite 7.10.4 and earlier allows XSS via a crafted contact object (payload in the position or company field) that is mishandled in the App Suite UI on a smartphone."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones 7.10.4 y anteriores permiten un ataque de tipo XSS por medio de un objeto de contacto diseñado (carga útil en el campo position o company) que es manejado inapropiadamente en la Interfaz de Usuario App Suite en un teléfono inteligente."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.4",
            "matchCriteriaId" : "9451471A-06E1-456C-8B82-ADEB746B97C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31935",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-04-30T22:15:07.780",
      "lastModified" : "2024-11-21T06:06:32.850",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "OX App Suite 7.10.4 and earlier allows XSS via a crafted distribution list (payload in the common name) that is mishandled in the scheduling view."
      }, {
        "lang" : "es",
        "value" : "OX App Suite versiones 7.10.4 y anteriores permiten un ataque de tipo XSS por medio de una lista de distribución diseñada (carga útil en el nombre común) que es manejada inapropiadamente en la vista de programación."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-xchange:open-xchange_appsuite:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "7.10.4",
            "matchCriteriaId" : "9451471A-06E1-456C-8B82-ADEB746B97C7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://packetstormsecurity.com/files/162406/OX-App-Suite-OX-Guard-SSRF-DoS-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory", "VDB Entry" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28359",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-05-02T08:15:06.703",
      "lastModified" : "2024-11-21T05:59:35.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"origin\" parameter passed to some of the endpoints like '/trigger' was vulnerable to XSS exploit. This issue affects Apache Airflow versions <1.10.15 in 1.x series and affects 2.0.0 and 2.0.1 and 2.x series. This is the same as CVE-2020-13944 & CVE-2020-17515 but the implemented fix did not fix the issue completely. Update to Airflow 1.10.15 or 2.0.2. Please also update your Python version to the latest available PATCH releases of the installed MINOR versions, example update to Python 3.6.13 if you are on Python 3.6. (Those contain the fix for CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336)."
      }, {
        "lang" : "es",
        "value" : "El parámetro \"origin\" pasado a algunos de los endpoints como \"/trigger\" era vulnerable a una explotación de tipo XSS.&#xa0;Este problema afecta a Apache Airflow versiones anteriores a 1.10.15 en la serie 1.x y afecta a las series 2.0.0 y 2.0.1 y 2.x.&#xa0;Es lo mismo que CVE-2020-13944 y CVE-2020-17515, pero la corrección implementada no corrigió el problema por completo.&#xa0;Actualice a Airflow versiones 1.10.15 o 2.0.2.&#xa0;Actualice también su versión de Python a las últimas versiones de PATCH disponibles de las versiones MINOR instaladas, ejemplo de actualización a Python versión 3.6.13 si está en Python versión 3.6.&#xa0;(Estos contienen la corrección para CVE-2021-23336 https://nvd.nist.gov/vuln/detail/CVE-2021-23336)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.0.0",
            "versionEndExcluding" : "1.10.15",
            "matchCriteriaId" : "0B64ECBE-6E1A-458B-B339-D66BAC124B11"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:airflow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.0",
            "versionEndExcluding" : "2.0.2",
            "matchCriteriaId" : "498AB796-B84E-4682-BF15-16905DD626AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E",
        "source" : "security@apache.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E",
        "source" : "security@apache.org"
      }, {
        "url" : "https://lists.apache.org/thread.html/ra8ce70088ba291f358e077cafdb14d174b7a1ce9a9d86d1b332d6367%40%3Cusers.airflow.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/rc005f4de9d9b0ba943ceb8ff5a21a5c6ff8a9df52632476698d99432%40%3Cannounce.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31996",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T07:15:07.577",
      "lastModified" : "2024-11-21T06:06:40.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in the algorithmica crate through 2021-03-07 for Rust. There is a double free in merge_sort::merge()."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en la crate algorithmica hasta el 07-03-2021 para Rust.&#xa0;Se presenta una doble liberación en la función merge_sort::merge()."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-415"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:algorithmica_project:algorithmica:*:*:*:*:*:rust:*:*",
            "versionEndIncluding" : "2021-03-07",
            "matchCriteriaId" : "8E44A2D9-AFEB-420F-B8D2-C76755D9EF17"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0053.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://rustsec.org/advisories/RUSTSEC-2021-0053.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25631",
      "sourceIdentifier" : "security@documentfoundation.org",
      "published" : "2021-05-03T12:15:07.417",
      "lastModified" : "2024-11-21T05:55:10.970",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the LibreOffice 7-1 series in versions prior to 7.1.2, and in the 7-0 series in versions prior to 7.0.5, the denylist can be circumvented by manipulating the link so it doesn't match the denylist but results in ShellExecute attempting to launch an executable type."
      }, {
        "lang" : "es",
        "value" : "En la serie LibreOffice 7-1 en versiones anteriores a 7.1.2, y en la serie 7-0 en versiones anteriores a 7.0.5, la denylist puede ser omitida al manipular el enlace para que no coincida con la denylist pero resulte en ShellExecute intentando iniciar un tipo ejecutable."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "baseScore" : 9.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.6,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@documentfoundation.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-184"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.0",
            "versionEndExcluding" : "7.0.5",
            "matchCriteriaId" : "37496EEC-C63C-46DE-92F2-A29DECF95EE2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:libreoffice:libreoffice:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.1.2",
            "matchCriteriaId" : "BA884385-2527-4F68-9FD5-67ECD9A89F42"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://positive.security/blog/url-open-rce#open-libreoffice",
        "source" : "security@documentfoundation.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.libreoffice.org/about-us/security/advisories/cve-2021-25631/",
        "source" : "security@documentfoundation.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://positive.security/blog/url-open-rce#open-libreoffice",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.libreoffice.org/about-us/security/advisories/cve-2021-25631/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28860",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T12:15:07.467",
      "lastModified" : "2024-11-21T06:00:20.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Node.js mixme, prior to v0.5.1, an attacker can add or alter properties of an object via '__proto__' through the mutate() and merge() functions. The polluted attribute will be directly assigned to every object in the program. This will put the availability of the program at risk causing a potential denial of service (DoS)."
      }, {
        "lang" : "es",
        "value" : "En Node.js mixme, antes de la versión v0.5.1, un atacante puede agregar o alterar las propiedades de un objeto por medio de \"__proto__\" por medio de las funciones mutate() y merge(). El atributo contaminado se asignará directamente a cada objeto del programa. Esto pondrá en riesgo la disponibilidad del programa y provocará una potencial denegación de servicio (DoS)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:adaltas:mixme:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.5.1",
            "matchCriteriaId" : "D3B742DF-38E8-406C-BA55-3238A57DC138"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://nodejs.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/adaltas/node-mixme/commit/cfd5fbfc32368bcf7e06d1c5985ea60e34cd4028",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/adaltas/node-mixme/issues/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/adaltas/node-mixme/security/advisories/GHSA-79jw-6wg7-r9g4",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0005/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/~david",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://nodejs.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory", "URL Repurposed" ]
      }, {
        "url" : "https://github.com/adaltas/node-mixme/commit/cfd5fbfc32368bcf7e06d1c5985ea60e34cd4028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/adaltas/node-mixme/issues/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/adaltas/node-mixme/security/advisories/GHSA-79jw-6wg7-r9g4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/~david",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29369",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T12:15:07.503",
      "lastModified" : "2024-11-21T06:01:00.523",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The gnuplot package prior to version 0.1.0 for Node.js allows code execution via shell metacharacters in Gnuplot commands."
      }, {
        "lang" : "es",
        "value" : "El paquete gnuplot versiones anteriores 0.1.0 para Node.js permite una ejecución de código por medio de metacaracteres de shell en los comandos Gnuplot."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gnuplot_project:gnuplot:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "0.1.0",
            "matchCriteriaId" : "2C15ED18-E3D2-4FEE-8DB8-344904DBA2B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40rkesters/gnuplot",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/rkesters/gnuplot/commit/23671d4d3d28570fb19a936a6328bfac742410de",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/%40rkesters/gnuplot",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29238",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T14:15:07.563",
      "lastModified" : "2024-11-21T06:00:51.367",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CODESYS Automation Server before 1.16.0 allows cross-site request forgery (CSRF)."
      }, {
        "lang" : "es",
        "value" : "CODESYS Automation Server versiones anteriores a  1.16.0, permite un ataque de tipo cross-site request forgery (CSRF)."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:automation_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.16.0",
            "matchCriteriaId" : "3D643BE9-C260-42CD-A082-BF08D38C2350"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14638&token=30b75ee95d0d94527894dfd8cdc5432575a8eff8&download=",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14638&token=30b75ee95d0d94527894dfd8cdc5432575a8eff8&download=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29239",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T14:15:07.600",
      "lastModified" : "2024-11-21T06:00:51.517",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CODESYS Development System 3 before 3.5.17.0 displays or executes malicious documents or files embedded in libraries without first checking their validity."
      }, {
        "lang" : "es",
        "value" : "CODESYS Development System versiones 3 anteriores a 3.5.17.0, muestra o ejecuta documentos maliciosos o archivos insertados en bibliotecas sin comprobar primero su validez."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-345"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "4FB937AD-5DBA-4C0D-87A4-C6E141AA0A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14639&token=fa836f8bd4a2184aa9323a639ca9f2aaf1538412&download=",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14639&token=fa836f8bd4a2184aa9323a639ca9f2aaf1538412&download=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29241",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T14:15:07.633",
      "lastModified" : "2024-11-21T06:00:51.853",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CODESYS Gateway 3 before 3.5.16.70 has a NULL pointer dereference that may result in a denial of service (DoS)."
      }, {
        "lang" : "es",
        "value" : "CODESYS Gateway versiones 3 anteriores a 3.5.16.70 tiene una derivación de puntero NULL que puede resultar en una denegación de servicio (DoS)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-476"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.0.1.0",
            "matchCriteriaId" : "C182D390-3A29-4048-805B-F00AF40E7353"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.0.1.0",
            "matchCriteriaId" : "4FE1E73E-5A65-4C33-973D-B5E4D997AC7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.0.1.0",
            "matchCriteriaId" : "94EF5004-D1D7-449D-9D99-92FC273FFF1F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.0.1.0",
            "matchCriteriaId" : "7E9AF0BE-05EC-4411-802B-331EA6B0E54E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.16.0",
            "matchCriteriaId" : "83B749C0-A553-42AB-AFCF-91F990BAA765"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.16.0",
            "matchCriteriaId" : "C13DE019-B415-4373-8FC2-54A2898F50EA"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.0.1.0",
            "matchCriteriaId" : "763C9946-EFD7-469C-9D40-4186FE650F6F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.16.70",
            "matchCriteriaId" : "035E43A5-7350-4B06-B3AA-40DD3A673BA7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.16.70",
            "matchCriteriaId" : "B35F55F6-2032-4F5A-AC3A-76835C043D7E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.16.70",
            "matchCriteriaId" : "02017CB2-3E3C-4F89-B1DA-C8E8213BC8C8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "FFBA19D6-9436-4E14-B9D3-28B82CB0321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.16.70",
            "matchCriteriaId" : "671DF92A-D4CB-44E4-B4FD-781D3561FDAB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7553ae3be25e22f741db783b31e14799&download=",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14637&token=8dbd75ae7553ae3be25e22f741db783b31e14799&download=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29242",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T14:15:07.667",
      "lastModified" : "2024-11-21T06:00:52.023",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "CODESYS Control Runtime system before 3.5.17.0 has improper input validation. Attackers can send crafted communication packets to change the router's addressing scheme and may re-route, add, remove or change low level communication packages."
      }, {
        "lang" : "es",
        "value" : "El sistema CODESYS Control Runtime versiones anteriores a 3.5.17.0, presenta una comprobación inapropiada de entrada.&#xa0;Los atacantes pueden enviar paquetes de comunicación diseñados para cambiar el esquema de direccionamiento del enrutador y pueden redireccionar, agregar, eliminar o cambiar paquetes de comunicación de bajo nivel."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 7.3,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_beaglebone_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "5EA5176A-EC2A-4D06-A180-CE7204DBAF92"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_empc-a\\/imx6_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "089B01CE-0023-44E9-8149-95A9C8BFC544"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_iot2000_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "150D1F73-22B1-4B41-97A0-B02EF5CE92A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_linux_arm_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "11A71DCF-8007-4693-BD0F-22FCD0FC0C62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_linux_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "6ADB2C58-D545-451E-BE60-7B989E9EBCEF"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_pfc100_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "6C535337-0082-4C76-B9E9-E0F9EA4D1E36"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_pfc200_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "ADCF1EDB-6FED-4421-BF16-A14EE6EB0505"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_plcnext_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "9DB284A7-76D5-4BD1-972B-751AC0B378D8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_raspberry_pi_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "BA3C058E-AE70-4E64-B3A0-60DED7A26B18"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_for_wago_touch_panels_600_sl:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "67D475FB-BF84-4EEE-B096-8B81C2ED36A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_rte:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "64A83FD0-A545-459B-860F-70DE8E4A69DC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_rte:*:*:*:*:*:beckhoff_cx:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "9BFCCFA4-A803-4B5E-BAD5-C26A6FE33A4C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_runtime_system_toolkit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "0224CA62-8670-4135-9A50-5E523D89CB25"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:control_win:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "25458B55-414D-4CB4-BD51-4E4D101BB24A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:windows:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "E331194D-C80D-4C81-A332-9F67F6425FD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:edge_gateway:*:*:*:*:*:linux:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "4.1.0.0",
            "matchCriteriaId" : "FFBA19D6-9436-4E14-B9D3-28B82CB0321D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:embedded_target_visu_toolkit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "A59EBA23-C9F0-4A7A-9483-2EB9377023CE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:gateway:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "E3954149-77D5-4FEE-B236-578D0ED18592"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:hmi:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "A39C361B-514B-423C-B917-2E13935DF1A9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:opc_server:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "E59EF90A-4580-41AD-8DAB-1259C766E230"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:plchandler:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "242B0BB4-1E48-4CD1-AFF3-F96561D2A885"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:remote_target_visu_toolkit:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "74AB840C-88D7-47CA-8716-0C0F6ABEE8E2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:safety_sil:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "FEF5325B-B72B-46BB-9DCB-F8054621DA6D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:simulation_runtime:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "61972DA3-9423-4C13-98E3-F287BD414A59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14640&token=623b6fceb0579ef0f7505e29beefa5b3f8ac7873&download=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21264",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-03T16:15:07.510",
      "lastModified" : "2024-11-21T05:47:53.340",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. A bypass of CVE-2020-26231 (fixed in 1.0.470/471 and 1.1.1) was discovered that has the same impact as CVE-2020-26231 & CVE-2020-15247. An authenticated backend user with the `cms.manage_pages`, `cms.manage_layouts`, or `cms.manage_partials` permissions who would **normally** not be permitted to provide PHP code to be executed by the CMS due to `cms.enableSafeMode` being enabled is able to write specific Twig code to escape the Twig sandbox and execute arbitrary PHP. This is not a problem for anyone that trusts their users with those permissions to normally write & manage PHP within the CMS by not having `cms.enableSafeMode` enabled, but would be a problem for anyone relying on `cms.enableSafeMode` to ensure that users with those permissions in production do not have access to write & execute arbitrary PHP. Issue has been patched in Build 472 (v1.0.472) and v1.1.2. As a workaround, apply https://github.com/octobercms/october/commit/f63519ff1e8d375df30deba63156a2fc97aa9ee7 to your installation manually if unable to upgrade to Build 472 or v1.1.2."
      }, {
        "lang" : "es",
        "value" : "October es una plataforma CMS gratuita, de código abierto y autohosteada basada en Laravel PHP Framework. Se detectó una omisión de CVE-2020-26231 (corregido en las versiones 1.0.470/471 y 1.1.1) que tiene el mismo impacto que CVE-2020-26231 y CVE-2020-15247. Un usuario de back-end autenticado con los permisos \"cms.manage_pages\", \"cms.manage_layouts\" o \"cms.manage_partials\" que **normalmente** no podría proporcionar código PHP para ser ejecutado por el CMS debido a \"cms.enableSafeMode\" que está habilitado es capaz de escribir código Twig específico para escapar del sandbox Twig y ejecutar PHP arbitrario. Esto no es un problema para cualquiera que confíe a sus usuarios con esos permisos para escribir y administrar PHP normalmente dentro del CMS al no tener habilitado \"cms.enableSafeMode\", pero sería un problema para cualquiera que confíe en \"cms.enableSafeMode\" para asegurarse de que los usuarios con esos permisos en producción no tienen acceso para escribir y ejecutar PHP arbitrario. El problema se corrigió en la compilación 472 (v1.0.472) y v1.1.2. Como solución alternativa, aplique https://github.com/octobercms/october/commit/f63519ff1e8d375df30deba63156a2fc97aa9ee7 a su instalación manualmente si no puede actualizar a la compilación 472 o v1.1.2."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L",
            "baseScore" : 5.2,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.1,
          "impactScore" : 3.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.4,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.471",
            "matchCriteriaId" : "C6BF448C-7017-428E-B9BF-40069ACD3990"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:octobercms:october:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.1.0",
            "versionEndIncluding" : "1.1.1",
            "matchCriteriaId" : "54A99E29-0CD5-4577-85A2-CD5A38FB58B8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/octobercms/october/security/advisories/GHSA-fcr8-6q7r-m4wg",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/octobercms/october/security/advisories/GHSA-fcr8-6q7r-m4wg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32020",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-03T22:15:08.697",
      "lastModified" : "2024-11-21T06:06:43.763",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory."
      }, {
        "lang" : "es",
        "value" : "El kernel en Amazon Web Services FreeRTOS versiones anteriores a 10.4.3, presenta una comprobación insuficiente de límites durante la administración de la memoria de la pila"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:amazon:freertos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.4.3",
            "matchCriteriaId" : "6F5312AF-71BB-4289-BAB4-CE5931098CCD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/FreeRTOS/FreeRTOS-Kernel/commit/c7a9a01c94987082b223d3e59969ede64363da63",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31164",
      "sourceIdentifier" : "security@apache.org",
      "published" : "2021-05-04T07:15:07.803",
      "lastModified" : "2024-11-21T06:05:12.827",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Apache Unomi prior to version 1.5.5 allows CRLF log injection because of the lack of escaping in the log statements."
      }, {
        "lang" : "es",
        "value" : "Apache Unomi versiones anteriores a 1.5.5, permite la inyección de registros CRLF debido a una falta de escape en las sentencias de registro"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@apache.org",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-93"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apache:unomi:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.5.5",
            "matchCriteriaId" : "B3B79510-E504-4FC0-BB9E-59F0ECE5653F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://unomi.apache.org/security/cve-2021-31164",
        "source" : "security@apache.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://unomi.apache.org/security/cve-2021-31164",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23343",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-05-04T09:15:07.703",
      "lastModified" : "2024-11-21T05:51:32.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "All versions of package path-parse are vulnerable to Regular Expression Denial of Service (ReDoS) via splitDeviceRe, splitTailRe, and splitPathRe regular expressions. ReDoS exhibits polynomial worst-case time complexity."
      }, {
        "lang" : "es",
        "value" : "Todas las versiones del paquete path-parse son vulnerables a una Denegación de Servicio de Expresiones Regulares (ReDoS) por medio de las expresiones regulares splitDeviceRe, splitTailRe y splitPathRe.&#xa0;ReDoS exhibe complejidad de tiempo polinomial en el peor de los casos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:path-parse_project:path-parse:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.7",
            "matchCriteriaId" : "13FD88B8-F6CD-4F23-9EFD-1940227D6329"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jbgutierrez/path-parse/issues/8",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6a32cb3eda3b19096ad48ef1e7aa8f26e005f2f63765abb69ce08b85%40%3Cdev.myfaces.apache.org%3E",
        "source" : "report@snyk.io"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279028",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jbgutierrez/path-parse/issues/8",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.apache.org/thread.html/r6a32cb3eda3b19096ad48ef1e7aa8f26e005f2f63765abb69ce08b85%40%3Cdev.myfaces.apache.org%3E",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279028",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-PATHPARSE-1077067",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-23383",
      "sourceIdentifier" : "report@snyk.io",
      "published" : "2021-05-04T09:15:07.753",
      "lastModified" : "2024-11-21T05:51:36.913",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The package handlebars before 4.7.7 are vulnerable to Prototype Pollution when selecting certain compiling options to compile templates coming from an untrusted source."
      }, {
        "lang" : "es",
        "value" : "El package handlebars versiones anteriores a 4.7.7, son vulnerables a una Contaminación de Prototipos al seleccionar determinadas opciones de compilación para agrupar plantillas que provienen de una fuente no confiable"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "report@snyk.io",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "baseScore" : 5.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1321"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:handlebarsjs:handlebars:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "4.7.7",
            "matchCriteriaId" : "D57084A5-784A-4392-AF0D-6EB14CF4B573"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:e-series_performance_analyzer:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8DB06-590A-4008-B0AB-FCD1401C77C6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427",
        "source" : "report@snyk.io",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0007/",
        "source" : "report@snyk.io",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1279031",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1279032",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279030",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029",
        "source" : "report@snyk.io",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0007/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARS-1279031",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-1279032",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1279030",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://snyk.io/vuln/SNYK-JS-HANDLEBARS-1279029",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29240",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-04T12:15:16.617",
      "lastModified" : "2024-11-21T06:00:51.667",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Package Manager of CODESYS Development System 3 before 3.5.17.0 does not check the validity of packages before installation and may be used to install CODESYS packages with malicious content."
      }, {
        "lang" : "es",
        "value" : "El Administrador de Paquetes de CODESYS Development System 3 versiones anteriores a 3.5.17.0, no comprueba la validez de los paquetes antes de la instalación y puede ser usado para instalar paquetes CODESYS con contenido malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codesys:development_system:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0",
            "versionEndExcluding" : "3.5.17.0",
            "matchCriteriaId" : "4FB937AD-5DBA-4C0D-87A4-C6E141AA0A1A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14636&token=1ce7e6e4cbe4651989ede418450d7c82e972bdf2&download=",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14636&token=1ce7e6e4cbe4651989ede418450d7c82e972bdf2&download=",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.codesys.com/security/security-reports.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22547",
      "sourceIdentifier" : "cve-coordination@google.com",
      "published" : "2021-05-04T13:15:07.427",
      "lastModified" : "2024-11-21T05:50:18.583",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading the Google Cloud IoT Device SDK for Embedded C used to 1.0.3 or greater."
      }, {
        "lang" : "es",
        "value" : "En IoT Devices SDK, se presenta una implementación de calloc() que no contiene una comprobación de longitud.&#xa0;Un atacante podría pasar objetos de memoria más grandes que el búfer y ajustarse para tener un búfer más pequeño que el requerido, permitiendo al atacante acceder a las otras partes de la pila.&#xa0;Recomendamos actualizar Google Cloud IoT Device SDK para Embedded C usado para versiones 1.0.3 o superiores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve-coordination@google.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "cve-coordination@google.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-120"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:google:cloud_iot_device_sdk_for_embedded_c:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.3",
            "matchCriteriaId" : "4F040FF7-2D7C-482D-90C6-2D16B0BA78BB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/blob/master/RELEASE-NOTES.md",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/pull/119",
        "source" : "cve-coordination@google.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/blob/master/RELEASE-NOTES.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/GoogleCloudPlatform/iot-device-sdk-embedded-c/pull/119",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3154",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-04T14:15:08.963",
      "lastModified" : "2024-11-21T06:21:00.757",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue was discovered in SolarWinds Serv-U before 15.2.2. Unauthenticated attackers can retrieve cleartext passwords via macro Injection. NOTE: this had a distinct fix relative to CVE-2020-35481."
      }, {
        "lang" : "es",
        "value" : "Se detectó un problema en SolarWinds Serv-U versiones anteriores a 15.2.2.&#xa0;Los atacantes no autenticados pueden recuperar contraseñas de texto sin cifrar por medio de la inyección de macros.&#xa0;NOTA: esto tenía una solución distinta en relación con CVE-2020-35481"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-74"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.2.2",
            "matchCriteriaId" : "B87891C6-CFA7-42B6-9EB8-B313B08D6266"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-2_release_notes.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-2_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21551",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-05-04T16:15:07.867",
      "lastModified" : "2025-10-28T14:05:36.670",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required."
      }, {
        "lang" : "es",
        "value" : "El controlador Dell dbutil_2_3.sys, contiene una vulnerabilidad de control de acceso insuficiente que puede conllevar a una escalada de privilegios, denegación de servicio o divulgación de información.&#xa0;Es requerido un acceso de usuario autenticado local"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.0,
          "impactScore" : 6.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2022-03-31",
      "cisaActionDue" : "2022-04-21",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Dell dbutil Driver Insufficient Access Control Vulnerability",
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-782"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:dell:dbutil:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3",
            "matchCriteriaId" : "2BFE61FD-9349-4AFA-847C-B1047D55770C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_14:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BDD0F0-B3D1-45DC-B1CA-24F17C291B71"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_17_51m_r2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB791FAB-8E62-4BA1-AC0D-D8F22E13861B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_area_51:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61BA47E8-DC8C-465B-AC52-956A003B80C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_asm100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C3128DD-9A90-4863-A693-A6D5E46B797E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_asm100r2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70AED9B9-FC76-41B0-AC24-2B51FF1E1EBC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_m14xr2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E33ACF-06D0-4F77-91D6-BD3F7A8B1363"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_m15_r4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B084185F-1C0D-47D9-9F72-A79095462428"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_m17xr4:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CA3FE0D-2ECB-49F7-A2A3-8C7927CF61D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:alienware_m18xr2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50DAADE9-D885-4C56-BCB5-FFAB10083A12"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:canvas_27:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B2B43435-21BA-4C2E-B8A0-E6BC90FC0F89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:cheng_ming_3967:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF88AED3-7C7B-4CAC-8D17-9A5427821E37"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chengming_3967:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA1096BA-28A8-4B1A-A5C7-1704A12E7636"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chengming_3977:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67FCCE7C-BAC7-43F2-B328-C3AFD80B6AF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chengming_3980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9EDA1826-CCB2-48A6-B78E-CB608ED71B91"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chengming_3988:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83A9845-DBEB-4D97-A9F3-71D0262D4A6F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chengming_3990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F67DFB1E-0B6A-40A4-8F4C-7623E6841E98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:chengming_3991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8E9396F-11FC-43BC-BE74-B5FA7954A0CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:dock_wd15:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F66DCD8A-17AA-4DB7-9AD1-46E04916EE66"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:dock_wd19:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15124DF5-16F4-45FD-94CB-9DBBDA9D7944"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:embedded_box_pc_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7B2BE27-F109-4B11-8E8B-732A1AE3CC2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g15_5510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE6C4737-DAD8-4921-B65C-8D11669B730D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g3_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79C0E8D8-FE8F-4718-8837-8C8FCACDB095"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g3_3579:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F440E47-2C2A-4EA2-A799-649A23145D51"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g3_3779:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "598A90E5-C7AE-4901-BD33-375F88CF09C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g5_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3B49A7E9-EA33-4614-B91D-465D32407BE3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g5_5090:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2544FF74-2830-4B7C-BE87-064B971C19D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g5_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81A8617F-56B1-4998-98CC-FA8C1D3DE011"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g5_5587:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4274911B-43DC-4827-AB0D-314ACCE5B26A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g5_5590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9AA2CC-6E81-4987-A888-E82D2949EF3C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g7_7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7B6CD4-5129-46B5-8C72-6CE584F7FE9B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g7_7588:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "269CF69F-0633-461A-A265-AB9728C40DA3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g7_7590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "331F9E85-4F7F-4C28-A403-EE8D8476FC5E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g7_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20046D13-2EE4-438C-8C98-089D018ADD44"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:g7_7790:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE3DF41E-0328-4AE0-B755-8B6269185BE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:gaming_g3_3590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53C50B8-3D5A-4FD5-AB09-8F8C3F6FCC1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_11-3162:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23306D1-BA32-4393-AEDD-89AD7BDB475D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_1122:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "221FCB0D-A3C9-4687-8396-A84DCC1506AF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_1210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E39817A8-8EBF-48B0-A174-1F2C19A47FE0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_13_5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D500CCE0-993C-4D7C-BA82-D2D267055221"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_14-3452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A6EC204-002B-48DD-9C9A-5DBD1536F5E0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_14-5459:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "693781ED-61DF-4C57-AE29-01E830BF6728"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_14_5468:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DF4EEAE-C141-4F2D-9C53-5F7E08CEB3BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_14_7460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D57A8381-FCF3-4653-B641-7AA5C94424FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_14_gaming_7466:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BF2668D-A070-4FA8-B6C2-9932512B48C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_14_gaming_7467:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C11C44D0-3531-4609-96F5-CB2332FE970F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15-3552:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FF1CA8-5833-4698-90A6-B0E6B8DF1AE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15-5559:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ABBB826A-CEB8-490D-BF71-DA407589DC7E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15-5565:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F055B37-7173-4DA6-8E67-126A8C5268F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_5566:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCFD749-F8FE-46B3-84E4-83F737E20550"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_5567:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2DDB8068-4B68-4D28-B7BB-D83C69C99065"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_5582_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF1426F3-1D02-4415-AB63-A96701135529"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_7560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BA89918-D451-47C5-82F8-BF5112B3C1CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_7572:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C474333D-9864-49F9-959F-7F73C74ABBF3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_gaming_7566:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91C84D56-6932-4606-88CD-DC8712F3C11A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_gaming_7567:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37596285-E4B9-4329-A711-FDD5E162DD05"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15_gaming_7577:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CDC0DD5-5B55-4B0D-A7A9-8AC4FC742CA4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_1545:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F833B1D9-E7C0-49AC-9BD3-A2C95CD22E06"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_1564:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A47378B-4DE8-428B-8648-32E90EC1A97A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_15z:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C929623-1D34-4CE4-8F15-D1077389B54C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_17-5759:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89C39459-99B9-426F-994F-2F19359B09B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_17_5767:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F63BA91A-974C-4B24-A091-FE177675AB32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_20-3052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD8323A0-1591-4CE8-8B20-05E11007F2F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_2330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D2295D7-EB51-441A-B22F-354E71CA63EE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_24-3452:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCC9A56F-450F-45D4-A604-23ED1B9E07CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_24-3455:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D81DB78C-FCCC-4620-BB02-21AAF9AEB54C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_24-5475:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CB3DC16-EA71-43F6-853C-430C8C08DFA2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3043:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF34E99D-51E6-4B22-B6EB-165C32368102"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3048:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89D9E1D5-CE39-46C0-8D80-AE09E9ABDCC2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3147:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74F6D5DC-6A40-4528-80E6-B6CD4E13D006"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3157:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F330408-80F1-4243-87E4-3EA0FFF81894"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3168:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB6ECB48-07E8-4B2A-B2EE-10AFD253445C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "520AF4C4-C348-4FB6-9F4C-F43AAA00CCE4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3268:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C032B99E-E74F-4064-9A41-9A1D8579E9E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9AEBD419-DA8D-4E42-82F1-6CD82FF7FD73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3437:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C739DF9-C010-43B8-84C0-4D83869ECD6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3442:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C84C80C-76B9-423D-908E-875B110CC9A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDF44E32-D9D5-4BDB-AB69-F476CEE06083"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6606A288-CF9B-4BB6-9DC9-C73AD5C0FAF7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3471:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "322317E7-B2CA-428F-A441-EC4F40E4E16F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6042A01C-7F09-4755-A0AA-03476C48DAC0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3481:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82624B4C-8B81-4293-B323-E39EF4C7446D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38D1CF38-33AB-4938-B099-FA60DBEB7A10"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3493:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8DDD1B6-04D2-48CC-9CB8-559D648DD17D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545AAE79-546D-4AA0-B1F9-EF24AB01CFD3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEDB4BFA-A1C8-4694-B410-9646DACC7E30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F16CA89-FCA4-474D-AFDA-F08231206E7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3537:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7126850-CCA2-4CF2-806E-371F2F744C45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3542:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D38626A-7BB5-4F29-B1D9-9DC3F755744E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8620DB8-82BE-4799-A98E-F2DF7AB3E167"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35EEA72D-94E6-4AB1-83F7-4625681B482E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3581:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD9DAC31-8634-4D35-922A-616D966DC761"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3583:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19338A85-279E-43A6-8250-AE8D02C30346"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3584:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F2CF2850-1C50-4AF4-A9F1-E23A9B963FFE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FCA387F-3C3B-409C-B056-C42B0F98856A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3593:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E97105-F800-47FB-B5F9-1F6D80BF7EC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3646:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E90C7FBE-8A7F-4949-9290-E5B4BD048188"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3647:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD7F2508-9F83-4186-8A60-42336F5FBAAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63B5EC81-897C-4294-9B87-E96B1DF4AE9D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3656:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EF6614-2134-48AA-9513-51CADEF66C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06E76A77-E526-496E-8612-C4973DB05476"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD1FCF7B-E38E-4E86-93FB-F5E985EDEC25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3671:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C41220-EE21-4C3B-BEB2-F3A763DAEB25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3780:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D448145A-3F54-4EFA-B37F-E498F93C3F4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3781:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE61F5A3-CC20-4604-9903-8C6A83CEAB2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3790:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A24DAE59-DE41-4AE0-9FC5-FC33DF7A608A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3793:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFE0A634-BC88-4214-BE69-14E609AA2151"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3847:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "534A46FC-DD6F-41AA-A993-50C47D4208FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2DA9B9D-61DB-4F61-9CA8-2C11ECACAB80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3881:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC5C6CE0-7C16-4C1E-A68D-41734A34EE19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_3891:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AACCBF67-FAE8-4069-9C69-496C05800F7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4DC00A25-2106-47EB-BC4B-1BE882AEF023"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B71BAF6-D87F-4B46-B786-464EB0614A93"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5323:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25B86E0E-D14D-4F73-BBED-F9F523A8FA09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5348:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDCE8388-B114-46D7-9826-31A31D07710D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF0ECBD8-7889-423F-8CD0-0CB46F15F101"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97536AF8-4648-4B29-B658-CA7E4998B16D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5400_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6419DD36-2021-45F4-8742-8917852BB063"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5400_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C53FB43-C16F-4F01-B540-D34A55D1CC0E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5F3CCF-1542-4441-BCEE-434C5F8D8D1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD2093F8-84E0-41C5-A4F8-2D928E892DA8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5406_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A54A9E1-2907-4C34-84C5-6845C7C5F900"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5408:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A6BC9F04-7E3E-4E5D-A1AC-80AED4DCF7BF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5409:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2163D58E-1B2C-4A5F-B2AA-3B6B41D73849"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5423:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A09A31B-31F8-4E1D-8E73-158A586764EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5443:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEDD0AFB-1C3F-405A-8812-2AB45CD8D224"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5448:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3B944AC-E048-48A0-95A0-16AB53BB34C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B8F925B-4D9C-4578-989A-2046363623EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5481_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26ED2743-9AC6-42DB-B97D-D417F0FCC1C5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5482:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A949966-CD03-48FC-B3FD-ABB924CFBCF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5485_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67AF4B93-4EF4-441A-B337-2679036ECF42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96210A31-E71B-4330-91A8-1FC51B31CDFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5490_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CEF2570-6B09-4C23-8C60-A5EE25F2A759"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5491_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0CDAE1D-00B9-41C7-9E11-1D3451616EAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5491_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "342C1726-CB87-4D7A-8A7F-BD342E8C875D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5493:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5523FCFA-FE19-4218-9FFD-9F99CFC9F6ED"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5494:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB7900B-EF7A-4CB5-A5AA-31BA5FC6F189"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5498:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5CC31973-8FAE-4B9A-B4EA-09F108A64FBD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C332988B-6771-47A7-9B17-F0435D269AF6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDEFE664-624C-46BF-A206-63863918F185"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5508:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AECB4588-B026-424F-BE6F-10AD791F11A8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5509:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34013CBF-0C0B-4A95-AA02-49A5C2DB7EE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "112FB9E6-94EB-466A-9B3D-5B98C8E23E2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6E8593C-C758-4C42-BA52-F5C1FAFAADCD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5537:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF5A920B-058E-46C1-BC3B-57BAFDF30CCF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5543:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22A9F819-A83E-40BD-9561-AEB8F55D7B9F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1FA7934-D113-42B3-8EB9-4A7F688FC4E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70FA90D2-6A18-4D7E-ACE9-4DC16355FB95"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5576:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFE4E4F7-C5F0-41B3-9B0D-5F2D2BAECAD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5577:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A03CB68-BFAC-470E-9E61-AC34622E8B55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0402872-3BBB-49B6-9868-9BBEB6D58324"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5583:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B7D2EDD-6654-4929-9890-25CD69D46E00"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5584:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23E51148-A3F1-4303-8121-11FE246CC9CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D631AC1-55C7-4075-9C9C-80936CF8F8EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5591_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A91A6AE7-FF91-42DC-A84A-99F9F8895191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5593:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BE41514-E3C4-4163-873F-4B167C0A966D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5594:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05AF708-5D88-4C7F-8A2C-386B83AFB1DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5598:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F132B46-AA74-4474-8F33-56C074FD768D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5676:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0ECB9193-BF92-4A99-B1AA-02BD3C727DD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96ABA2F0-ADFA-41E7-A89F-B0C3707C4A59"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5749:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "593BE114-96DD-43AE-B752-A60A55BA7C1C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_5770:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "446F85CB-1752-4C2D-AC6C-CD70AC9734CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_580s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "284A682E-0EC1-4EF9-813A-5C6A27C9FCFA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "817D531E-3D9D-48D5-86B0-98C349DBB719"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D314EF3F-388B-49B9-83A4-ED73FA851399"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_660s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8734AC26-C839-41C6-9DB5-0F52874DF246"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3886944-BD6C-4B7E-9008-0BD0D48BA4FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7300_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B23C9A78-9C41-4450-A062-22A649D5A2CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7306_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CA96A1D-2D7C-41CE-872E-CA6122178A42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7359:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A523B22-2A24-4C00-B183-17277D276B34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7368:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3A570D8-A9BE-4659-A992-4C7C7B0D9356"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359576AF-ADB5-4363-92E9-BD1858C55035"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7386:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A309CA69-6340-4971-88D9-06FA297BD79B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F19B632-A9E9-4698-B26F-7E5C7E5003AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16791B3E-6AEC-4F66-8C14-F2AFBC71112C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7391_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C60CA2A-7C0D-4303-A9FA-002F174E40FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCE42ED-EBC0-4EE6-834C-F26B51532648"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7437:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8DE6AFA-7C64-452E-95CC-68DA33E3EC3E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7472:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F358875-D321-4744-B581-08F63121EFCC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84EFAEA2-9C26-44A2-83B8-DB6D5C158740"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "549752BA-96AC-44AA-9475-BA407396D577"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7500_2-in-1_black:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80488BFB-A247-4094-AD45-1EAD307464CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7500_2-in-1_silver:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77601155-CAD6-4344-A6A4-2BE9F072EE7F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8877DD5-AE9A-452D-AF5F-9E59B9D6DF99"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7506_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AEC2DAA4-BBA4-45E3-B159-3FE6D16B1582"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "632FF07B-B56D-4298-BF84-5CE4F3F82DD8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7537:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AF7230B-D53D-481D-A1D3-F338E030E166"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7548:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D907D1B1-8E1B-4D8D-9BA4-5945B784BE80"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7558:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3E7F364-3799-42BD-AE84-78292A62D517"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7559:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75A02B79-EEBE-4889-B545-BBC42152CD29"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FAD0E06-C2F4-4F21-BDE2-3379D35C823A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7586:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F56A819-2DA6-41D8-A096-419C54F5B745"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5323421-C5F4-4253-8C5F-F904C08E637D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7590_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91F7F88A-BCCE-4FE8-9CF4-A01F67CE1AD4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7591:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807295DE-B0A2-4DE8-9AF7-479D59A473FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7591_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D83418B-CE3B-48FD-90A9-F269D608F8D2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D312406-A010-4049-B49E-3B7BF3420386"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7706_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91CDEE19-3895-421E-9E1E-513C46D324B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD4F8F45-ACF0-4025-9950-981BCFB28E96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7737:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28AACE0C-34E3-4AEF-AB0B-F61395DDB931"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7746:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F772D3A-5FE7-4728-94FE-DE568CE418C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7786:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69679DBF-3940-48BA-9FA5-953A09E09539"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7790:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2442FB-1089-4AA1-91D1-9D9ED1B36BB6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_7791:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E5632C0-5606-44AC-A2A8-481CC01D705D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_one_19:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB54594-2029-4496-98D5-FFADA97D1C9E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:inspiron_one_2020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96CE9519-965F-4212-B0E8-661714A76DE2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_12_7285:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2F482E-9753-487D-B943-DB34CFEFA2AE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_12_rugged_extreme_7214:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCD30F80-7517-4255-872F-558ABC9C3CE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_12_rugged_tablet_7212:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ECF21A32-7199-41D5-A9C4-51CB09F69C5F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_14_rugged_5414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BB16B9E-5786-412E-B73F-C334CAD96CAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_14_rugged_extreme_7404:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B4ACD9F-0520-4AA7-AEA7-ECE66F3BF27F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_14_rugged_extreme_7414:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73C6914E-1943-4F8C-B3AB-0C448B0C9E2A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3120:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BA58AE06-C0CA-4385-8DCA-4354D9B77383"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1572D80-7941-47A4-8515-38EE39908A19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3160:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7655AF2-66FB-4938-BE95-6FF4B53EC8E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3180:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "895D6AD5-908B-489C-95D7-874914192722"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3189:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A72CD347-8420-4309-82A4-BC8F79DC04AB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3190:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B4CC5BE-E3CB-4874-BAC6-3D37F1130EDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3190_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC8C54F3-D4F2-434C-B656-CF8D41DAF55C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEECB432-D5CF-4F26-905A-21B45BA4B9F3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "399D6E0E-73DB-459C-836F-23E438D2387D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "753308E6-AA09-4A33-AE68-57DE73B5A369"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3310_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2918A3FF-8A16-4797-8DC6-99EE686D13CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52B5397C-6646-4EF5-894A-156AB6704295"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B845B0CA-5865-49B4-923C-724DB650BD32"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8494F070-7280-47CD-A750-183C7EB3E03F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2F30B90-E9E9-46CD-BFB0-459FC8723ADD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD65603-294E-4164-98A5-118FE450F5D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE43298D-12EA-4D98-8025-ABB7BCD1FFF0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCAC1D0B-6099-40E1-A8A4-493478569B5C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31C78A9B-65B4-4213-9A96-4E57CFA5B195"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C087B85D-2F09-49E5-8BE9-DE724B7D5BFB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10419F2B-8A07-4C4E-BA88-5465137EC10E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3460_wyse_tc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CEEFFF4E-7F10-4CF2-BFB3-CEA4328B9C76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB10D00C-D600-4DE6-A0AB-DEB9C4FCC436"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04009AD7-3BE3-4C94-8DBE-FD72879BD916"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3480_mobile_thin_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F23617BE-7027-4FD3-A9B1-C78D312CB11B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "393619AF-08ED-42B7-A0CF-B30AF00245A3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D518DFF0-ECB7-423B-990B-B1055AF976D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13CF7C33-6088-40DE-89D8-CB958C06F3D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C8FB1C2-A4B9-496F-927E-90D8B0085741"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A95D40B-D42C-449E-915C-83A21EEA496B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A13B996-2556-4899-8B7D-E3B1470445E9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3351403-5904-480C-B9E1-6A2DF39B7431"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_3590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1B63755-2294-4DDA-B307-9E1722440F4D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5175:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F69BD502-6FBA-4075-A427-2C0C546B3843"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5179:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CE04752-0600-46B5-B7CF-74E160C8FC3F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5200:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDF8914A-289C-46CF-AD36-C7B9B24314CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D77B20B-6FDB-4CB4-96CB-5A311891D13B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CD444B0-06AC-4115-9BD1-F65BF4E0D73E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5280_mobile_thin_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CE657AD-58ED-4E96-90F5-CE235D5D722E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5285:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4CC433AB-F63C-46B7-B208-33A65E400CC4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5285_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "484907B2-9719-42BE-B946-6E6E5BDD873A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5288:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B91BC7B8-1B63-4EE2-B855-93677363124C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5289:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0DE99B6-291B-4AAB-BBF2-A0ADE238FCDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62EA01E4-0ADF-4863-9AE3-A9995581201E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5290_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEB2E9C0-3EF7-4910-82A2-558AE08DC55C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01DB6216-3CF6-46C5-9592-4BACCF04130A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5300_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "184C0853-8EE9-4CDE-94E1-A1CA0CA0518D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF8738FA-CC10-45DD-AF56-54983844490C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5310_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3450591B-8A2D-406A-97BE-6ACBB06BC1A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9F1715-604A-4787-AED0-7ADE6D0464C6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EA6BB99C-65CE-43D8-8034-F9844285747E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7B6DD44-0D01-4737-A01A-FD5AA95D9809"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3EA011CD-DD28-42E2-92C8-6B48BDEC08B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5411:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5A8645F-E50A-4041-ACD2-B93D325E3AAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7F6900-A1E1-4167-84FE-D1E8D70DF33F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3DAF60D4-BDA2-43ED-802D-CE3ACB548693"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B3453B1A-9C28-4007-94FF-FF3C52D65B39"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5488:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3501A531-C8ED-4139-8AEC-48DABD80B006"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D53A797-D418-49C3-9FE6-C53C7ACF7982"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5491:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CACFA198-F3B1-4D9A-8A7B-7E678931DABE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5495:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81726C4A-05FA-48B3-AB22-0DF5BEF5BA18"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F5EDBEF3-D117-4F6C-8373-FC744D327128"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18ED69A2-0B53-4B77-B65C-D6E291F17165"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35D7DBE7-4BD8-49F6-B844-F9F5CDE5BF76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5511:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C8D607D-A84D-439B-8CAE-1A2D0876EF69"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2AC36F7-FC4B-4CA4-91F3-8337C8F34681"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FD13310-CCC0-490C-A959-42EF8EC41232"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB98E18A-D2C1-4522-A814-A1AA2C26F86D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AC395D9-DA6C-45B5-85E5-7906FE487EBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_5591:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03543212-F226-48F9-971C-F33D9EE5442E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7200_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEFCB976-EE09-4CD8-A927-47DA1840A2E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7210_2_in_1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "980072FB-7334-4D77-AD4C-BCB5799CC8CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7275:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8235A82F-173D-4C3E-B280-D702EA42E2EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7280:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D5D3133-9388-49CF-A85D-2247A4DD9C4C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7285:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F15F433-B614-402F-90AC-805AFA0FA340"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "359A2878-C996-4FD2-9AB6-B33531E2F630"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DE30AD4-D03C-441A-A42F-9A488B5B86B4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFEDD8F7-2EF0-4A6F-9F51-60100D317BF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C96134C6-3187-4DE4-8598-428C3544EFFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B51432C0-5E02-4101-BC43-A0F18A6A2772"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "82234546-AF33-45FC-BF50-2AA8FD38A5A1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1786B67-E621-4B2B-848A-B0F442719E94"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7389:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0952C9F6-0AB7-4DEA-B6AA-76159A2F7C42"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D8C3716-4E1C-4D32-BC94-81D7FB838FFC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7390_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C127AF83-FC01-4774-9ADC-7DFA02C8237B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF84D171-D235-4705-9F4E-84189DB64798"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7400_2in1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC3E95BE-8145-4136-B354-5B77E01E66A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D3B023F-99A9-49EF-90F9-13D83CA69293"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B9C08D4-AA20-4EB9-8FDF-615E60BA3B88"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA90466D-6AE9-4030-ACFF-033E75A39CBD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AD9A87-7D62-4566-A1B8-E843176E2E38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C726402A-F84C-49F6-8F18-2340E74F1CB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_9410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE3F01FD-FC66-4DA7-A041-976B0AFA370A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_9510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4A3C6284-3A69-4388-842C-6AC3CD3A7706"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB6D4199-F0CF-4D9D-85F9-BA1256B2B3FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03CC0927-8E28-4143-82EC-31C0D1CB695E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF8AC659-863C-4734-B65C-216986E8D64E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B3358A6-B686-422E-9C25-010B863245E4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BA8273A-F00A-42BF-96FA-E2A2180FA134"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA4F743C-D715-433B-9F00-6712D0713A92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214B56CD-52D0-4BED-B3A5-E7C602E6C95B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e5570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F62DF33-04FD-40FE-9ECD-BB6F23673D83"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEE945ED-C1C0-4A1E-A404-E1CA9C3D2778"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F1FB1F6-C904-4816-9172-698FD60900E5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A3A47B0-3824-4309-A26F-1CF0100C9DFF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6330:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "035EF4E7-8323-489B-96BF-11C419834ED2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C8BDA3B-87C6-4F47-B396-CEA8DBBF640F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6430_atg:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A1A940A-5765-4D70-834D-8FC0DC564487"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63FF50DE-51F1-4080-9FC2-DA704FCDBB55"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FE6E5C6-92D1-469E-B96A-9BCFF6777418"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e6540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F337B91-FDCA-4B9A-9553-FCCCDDD14FEA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7240:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5C22F2D-A59A-4F58-8CC8-CE0F7D8CD3AC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4EF8D1-6886-4DC6-9FAB-D57E4B32D22B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C322F9F-6E7E-44E5-9E65-6CB71236A485"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7270_mobile_thin_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39C535D6-E133-432F-AA1D-1C92D48CF0E7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7270_wyse_tc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E53EAC0-C607-4633-AA18-6BE80E377FC3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39BE47D9-E59D-4473-8A70-00FC446B6663"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3251782A-482E-4861-A76F-BFA6FE5092CE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_e7470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA38826D-FEF8-4058-9FA8-6E2E6B504AE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_rugged_5420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C4CF1B5-7E5D-46A6-A8D1-D86DB5389560"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_rugged_5424:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41CCF0D3-6985-4EDB-8B77-3FBC33779068"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_rugged_7424:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE5447E-E1C3-42A6-A7F5-10D475FECAD0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_rugged_extreme_7424:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CAD319B-8534-443E-A8EA-55B5C82C9361"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_rugged_extreme_tablet_7220:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2788C26D-7B71-4C67-876E-F4646B01A214"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_rugged_extreme_tablet_7220ex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C9B34FB-8AAE-4CAE-AF91-769580687472"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:latitude_xt3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "258431D4-53E8-4513-8342-6B87E2C4172F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EA22B0C-088B-4454-A33F-1C0A91F59608"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F32B68E-B359-4FCE-9CFC-20CCDBA3C7A2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3011_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240BD607-AEF3-4261-8A81-F244FAB06DD9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4780468-3D7B-4E94-B115-499770E6B891"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3030_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5903C33-173C-4FB4-A1DA-A26D4DC4A516"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB620A3B-E840-40C5-9109-CAC5C91B7A34"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3046:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7780D311-43C0-422A-AAF6-56750E5ED7DA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8D8EDD-C74F-4FA1-ACA0-6983CF786CEA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3050_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1800145-904B-4A9A-BE62-02426AE394DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C84B357-B810-4431-B229-ADBF766D988F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "240AE36D-A7E9-46EF-A0C4-15E86B3D63A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0175705A-13B6-44D6-9F7A-CC32F0A68A03"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3090_ultra:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F34E557A-A8D2-4764-BE75-419844CF2F0B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3240_all-in-one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A828BF7F-1DFA-4E0F-BC38-AF28EEB1C08F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_3280_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "807F9ED8-8D8E-44E4-AAEC-A461FA5B7CC1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D6466F-AE2F-42DB-8AB0-C21CEC5EE991"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86CC4D03-5AC1-437B-96CF-D20CC77A9AB9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93A865CE-6BEF-4741-8DD2-A3B555B9D9A4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40119709-6CDB-4FA8-AF07-8A2CCAFC8C1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5055_a-serial:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69FA72CE-5D3A-41EC-9478-8AC6AD569040"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5055_ryzen_apu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "417ABF32-4364-4E6D-A301-FFEA9F246316"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5055_ryzen_cpu:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF4FF940-5FB5-435B-82CE-CA088EAB473E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EB26A4C-FFB2-425C-B4E6-4E376F979994"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E246B558-D04C-45C4-9795-7B9E58FA9AE8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16234A2E-A3E0-487D-8415-2B5295E91CD6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5250_all-in-one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32DA34FD-ACBA-4465-A7B9-D4EEE8DAF69E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5260_all-in-one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE8463FA-3444-4DF9-8CAC-0E8021340220"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5270_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "812EA3ED-513D-4335-B37B-5E04663F700C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_5480_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4EDA85BD-F78E-4406-A3F7-9440F0DDD1CA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "652076FC-8122-4CDF-A15F-523FDB3BD44A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84533BD1-3A0B-463D-A3CB-0B3DE816235E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DA1CE7-7AD4-4FC9-9130-D1AB179E6BAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7050:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3F8E0A1-FA9A-4B6B-9877-65B7BEE8D9FD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7060:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CA379B4-8FE9-447D-AE62-6AFD698BE57B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B67634FD-A401-47D0-8F87-1AEA94238C2F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7070_ultra:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C493C060-57D6-4BBA-81D8-617B8E078DE7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7071:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87CAB5AE-89FA-4E2A-BE0B-2282E2B56654"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7080:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8D3BF8-D39B-4137-AC10-79037CD2B1EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7090_ultra:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDA19F9C-B92A-45EA-AE74-32C34BBCEC38"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7440_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "542A60EE-07E8-43CD-B6DE-B4D55EE461C1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7450_all-in-one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94C009D0-F008-441F-B19F-586FDB1E5777"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7460_all-in-one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98C4E803-DA3B-4F15-9BD3-990FC52201E1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7480_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C18C627-75FD-42A0-B5FD-AC8D966C5308"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7760_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07DFC7F0-8131-4E02-9376-5678C2ACED54"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7770_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D93B48A-C9FE-48DF-9896-13FF92582F43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_7780_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C6AC82-7B4F-45AA-B207-226F01DCF543"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_780:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26AA38ED-44CA-40D8-8991-0837CB7E43D3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_790:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A06EBB8E-4A7D-42D9-B8D9-0D7DD1C948CD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_9010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E7B8A3C-8C52-4AEB-8E9E-4258278D1C60"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_9020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FB61039-6055-4798-870D-7F1BB6A2F9E8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_9030_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C92E7E3F-6A73-4A3A-ADBA-F4291637F2BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBAA411-C42E-44E3-818F-3A951F2ECED7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_fx130:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "85C57C7D-E4B2-47D9-9E59-2060F48667EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_fx170:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE2D7E3E-9F85-46CD-90C9-E9E6671FFBE5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_xe2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF7C25C2-F3F7-4A3C-888E-EECC9E8741E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:optiplex_xe3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1ED511-F76B-4329-850E-8A5D7395F8FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_17_m5750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32047BDA-6B4F-4928-A521-6036656AE263"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3240_cff:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41312A25-C60D-4929-B498-A78C36C06A46"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3420_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC83315E-5529-4A4B-8A1A-212345995573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3430_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C92E715-ECB9-4D38-B5CD-DD0A56B78C96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3430_xl:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB52A881-13C4-44C4-98D0-A4F3F3007475"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3431_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44519A43-1645-47F7-86DA-4DFA5743C193"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3440:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35195BD5-3038-42F8-ABEF-E4B8220FABE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DB69A94-BA02-4393-B256-68E34AD50110"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52677DF4-9C49-45DA-AECA-CDE168A77B27"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED4A7A76-AA0B-4F5C-9797-2DAE0D52A749"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6E64C4D-04A7-448C-A87D-66CC8F74B4BD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3541:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA67FEED-A4C5-41E2-B523-E7BD2A0DA19E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "015CB358-E0AF-4989-B4AC-2100814EF131"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3551:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "44961E7D-2003-4DC1-80D8-045A2A35C279"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F6518B-DDE1-4167-80EE-B0F9B480BF17"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3620_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "88922FD3-80E6-4D3C-A7EB-4F5DBCB26B8C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3630_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07F05370-BA22-4711-8D02-9D888108E164"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B84F6196-564F-4D1C-9C3D-E9E422DA4749"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3930_rack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BEC8FAE-1E4E-48A1-8570-5F7A6FE67701"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_3930_xl_rack:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8D285ED-95D9-4D23-A81A-BA78D052366A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE40F051-53DE-451C-ABFC-2695771A96DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBBFE522-7630-4BED-9B2C-2AC12CA693DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F71189EF-0E04-4A17-8B22-B51C533F8D4E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5530_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30622F6E-2F6D-482B-AA1E-65DA4A4B1679"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676C75C4-1830-482C-B577-02B5E9B9A8C2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "953AC008-D651-4905-B07F-07CA83BD3932"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5720_aio:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2B639A5-8322-4065-850E-F5DA959E453B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5820_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C2EC78F-36B6-4B73-96C9-EDC94F4CF4B2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_5820_xl_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC1655C3-D394-4C58-9DE5-93C41C49E15F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7510:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "659D0E86-F188-4A23-BBFD-A12B71EA5F73"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73DD5C64-A10A-42F9-8F31-EF27A85E2A89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC7B2C87-ABAE-4935-B160-843B35556055"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7540:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3400683A-24F0-494E-89CC-782769F0A643"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A134E41A-5CAE-4380-AD5D-37C5DD87650B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "551C8B0E-06F8-4ECD-A4FB-8756D579B377"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7720:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41B4E127-666D-4F61-9F5B-F8D3E8645054"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "947CB46C-18CE-42D3-ADEB-82750EC6937B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "91E8171B-5C5A-4019-A68F-AE8A3C2E0608"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8224EBE9-B645-47A7-AEB2-563EA91B4D43"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7820_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0C0F26-863C-4704-BA18-D484817010F7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7820_xl_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "278DCC27-592A-49D8-9238-4C42E742042A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7920_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DD977B9-8060-479B-9406-3B66D49C539E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_7920_xl_tower:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4321E45F-2959-4C8B-9DD5-332027B7EE1F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_m4600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C87C4A99-BB00-42B3-8D93-9BA5F536F9CC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_m4700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2397295B-3895-4306-A5CD-B12F551933CF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_m6600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A249CFC-2473-45C7-A68D-4AF6345B28FF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_m6700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6A99E3B1-0921-4B3C-B7FB-EEAB36C0FA28"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_r5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA2F8AB-C9BB-4093-B8BE-2431F4FA417C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t1700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB7F6D32-12D1-424A-851C-4E6BC43E5B70"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F66A357-C847-4E7A-81E8-0777EF984C6E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t3600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F45C5133-08F5-4F21-A720-94CE74306156"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t3610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CF503CF-5183-4D86-8977-60B28FC7B7E3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t5500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143E5BA6-0C6A-4C93-A649-D8E062959EF1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t5600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A5B5792-B91A-4019-9FF4-4D3FC63007F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t5610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E8E78147-23A6-494F-8EF0-28126AE4BD30"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t5810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C071F560-C13C-4D36-A7A1-63C9A919712D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE040702-C863-4049-9B99-7D11FBD57F09"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t7600:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E0BFD8E3-158A-4768-B961-D99BB48D2DBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t7610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7D0DDD3-6753-4160-93CB-0B8E32E70F92"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t7810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D30A1AE0-49D9-4285-B013-7E863B25D052"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:precision_t7910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84B43CA8-0F28-498B-8471-26A610C39958"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:thunderbolt_dock_tb16:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "599DAEAA-C0D1-4242-8386-4629B92473A7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:thunderbolt_dock_tb18dc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5D832C4-B6A0-44B1-B76D-A74AC17013FE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_13_5370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E5174E9-0257-4907-8671-FD6527A6301C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_14-3446:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9473D486-4AE2-4F46-B48C-E79CD48C12BB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_14-5459:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4DCB431-0DA8-41FF-A66F-4D529C3A692B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_14_3458:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15F39161-4AF7-4865-908F-D71650DEBD96"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_14_5468:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E027DED5-A7E7-42BA-B3B0-CE8FB56A9854"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_14_5471:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "35FE1C01-C25E-4AFE-B901-7B1E61F9CCBE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_1450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B17CC3C3-7B2F-4CA1-94AD-E9BC346DADE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_15_3561:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3B9B077-BD1E-4D12-9506-A10BF6B49D3D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_15_5568:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C56A340-C06B-4129-A876-5DB471BA0172"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_15_7570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BF1A9C6-0BB8-4DBC-8736-B2BE7FC0D212"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_15_7580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "089423B4-E489-4AAD-ABFA-4961DFC26C97"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_1550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "196A0153-CEB8-44F3-80C1-312DFC847147"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_20_3052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F192BC33-5DAE-4772-9358-A6C60C2F45EF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_20_3055:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C526DED-D5CC-40E2-B44D-AD86AF63DD1E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_220s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D5CC3F3-FF7E-4DBC-9AB5-82C755EF588B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_230:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BD36D8-338A-417E-B37F-F65909557D5D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_2521:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7BBC34B-EE85-46EA-8616-F058F8E54627"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41DCB542-2F30-4113-83E5-B272019176E2"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_270:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC29B251-6B21-4AA2-925B-E786EE8BADA6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_270s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97B2999D-BD1D-4E92-93AC-CFF58AEC829C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10EAFA7C-5876-4145-A2DA-4C985441640F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9F7A326-0F81-4E47-970E-E286FC1AF55C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3252:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50944671-5067-46C2-959E-D6C056B74CAF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3267:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "055E575D-79A3-4052-8A59-CBE183998389"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3268:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76431D60-6BFC-4B08-AB1B-9B8EF2F9D68B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9259DBE3-15F8-4B6A-BB13-E237CBED3AB5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32E6F198-9779-46C5-967F-88C2FD7BC2FC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BB108A7-399E-4AF6-9A33-1213F871A2F8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3471:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A2E3E2F-11C1-4F1F-A144-D6282ACC284C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1FB4F9B4-B4B2-4247-9E5D-0FB872C79CE9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3481:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF874282-F528-4355-B172-22C90482EC78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F0B5B80-8A41-4573-99B2-12AA7FA0D518"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3491:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D55677-B8B2-4E95-8360-218031E94A45"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22E04CAA-9B25-48E6-B3A0-D34D8DF48A7A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95BAE528-C4F5-4FD6-995B-54FDB53D27F0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8250E5AB-36A5-4636-A7C3-46832DFBCD5A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "860A978D-7914-4E0A-9CF9-55B68E5630F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3581:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02AAC7DD-0091-4272-90DE-D02E9AF0AFAB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3583:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACA4553E-BFC0-4DCC-825C-93CA7E690DB7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3584:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DED6DD1-EAF5-43CA-8F29-80EF4B4DF18C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25D3ECD7-0A36-4236-AAEC-625226631424"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3591:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFB31340-0E5E-4E60-89A3-9836A4D26CEA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0248B861-9A85-4163-ABCF-EE986203A951"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3667:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE6B6BF7-C554-4688-B7E4-835A7E2011F5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3668:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05B16623-5270-4F14-A284-CF1B37FD422A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3669:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "059A976C-0D2B-46C9-9009-10574F9C09F1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "275EF2AF-EAD2-4A9D-AA73-C1BB271A6191"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3671:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7954F192-B82D-44F6-AD48-E2D350A7F792"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3681:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FF05395-1792-462A-BA85-256E7F951776"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3690:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "676B04B8-54F0-4B9D-AE68-8BED256D62C4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3800:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22BA921B-6844-4C70-8D9B-AA0C95991056"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3881:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B41F1157-1E5B-4C47-8BFF-4A42B0D59187"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3888:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F07B8A8-BDA4-4C0F-A412-2E3DBB33C24D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E26BC11D-1A8C-416E-8349-9C839C92AF78"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE646340-F910-47AD-87F9-027EF4B34EF8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3900g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03947049-6AC7-4A2F-9182-3C7421013018"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3901:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "41808F8E-1591-40B4-8DE4-C0D79E34EAAE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3902:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5672E76-31AA-4B5C-A289-F352856C3EF4"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_3905:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB1866AD-37AD-4102-A6C4-A67B7F578DDF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15CED424-DA3B-4CC4-B48F-0A0E5F69F8B6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5090:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89616540-0DE7-456B-ADCD-2461EA1BD94E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB526CD4-92E5-4369-8EC1-BE74DC30C297"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64AEC33C-5110-43BC-9AAF-4F7D2EDE1F21"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4B510D-DFB7-4470-8BEC-0858E14E7339"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288D40F5-9545-4C79-AF41-8D32CD1CF07F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5401:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E30E708F-E413-4009-99E5-4041399390C3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5402:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D61966-94CE-40C9-A16C-0F2356485EAC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE4C6321-4C80-4610-A2BB-876468FDC0DB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAF2723F-9BE4-42BC-BDAF-22A72436A909"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5481:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B90DAA0-3F83-46CB-8D58-541E30761E89"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5490:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E5B6C82-53EE-4D51-8B6E-C59B0141E777"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5491:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "750F875E-21C7-4F7F-88F1-FA50B43CEC48"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5501:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "350FAB2C-A168-44E7-A464-14EBD6F3C1EB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5502:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE0FA29A-7C7F-475D-AAF3-01EBE1458573"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5581:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DA8B6A9-030B-4684-A92F-E69F781881D8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00F485E8-7121-4DD0-B2E5-655CABEA268A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5591:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C34FCA8-1794-4978-94CA-9D1F0F3263B8"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03863424-A27F-4717-974B-F2617132CC19"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_5890:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00334301-73F3-465A-B612-4A6EB6A96DDB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63887A2-0A76-4CAD-A1D8-6896B1AC3768"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:vostro_7590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1C014D9C-0835-49F0-9493-7BECD1C4A189"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:wyse_5070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F53D34DB-897A-430E-B05A-856EF03EC63E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:wyse_5470:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C5B29FE-A8DC-4F6D-A370-0BB2A921D0B7"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:wyse_5470_all-in-one:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13B6A8AA-E424-4F07-B0F7-4418DCBEAD7D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:wyse_7040_thin_client:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05EA389F-39B8-4E4E-8FF6-96C05185C630"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_12_9250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3E83D8EC-D6EF-4F83-8B17-1A9986B27DE1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_7390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAF1F0A4-F99B-4A36-A1E6-14D6CFC57A2E"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_7390_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86E3311C-A971-4794-A08D-88EC3A4EC272"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9300:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01156707-85B0-4580-92DB-4158658C9C6B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "851DDAD4-4AF8-4B03-8E92-6D1D2DB81B57"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42741723-FB73-4E2A-B3FE-E301CCB08A98"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9310_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66B71475-5212-44B4-81BB-0F0D2CC816FB"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9343:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01BA6BB7-FB6E-413B-8576-D0B79C5A943F"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573AF858-3312-4470-AC6B-72E466C93859"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9365_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2B6E3AA-A803-4CD8-9305-2BE3EEEEF9B3"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "353FAC21-3AC5-4563-BEE7-7C5DCB1C7C76"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_13_9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12578E6A-CC34-42BF-997E-63DB8BA23290"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_15_9500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3425631-E9E5-447E-AED9-1A3C46FD843C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_15_9560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "014B75C1-F12E-4ED0-9273-2861D98491D0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_15_9570:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56E733D8-57BC-4CF5-AD40-B08A8B848C14"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_15_9575_2-in-1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "129C0F2A-F75C-4C60-9A6C-63B96AF08CDD"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_17_9700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9CCAAEC8-7A39-403F-979F-AB8302E8385B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_27_7760:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1912106A-C139-4CE9-AF8B-20E6DA92EA7B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_7590:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9F5E46E-1839-4FCA-88EF-A06208973C1A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_8700:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39983CB1-D623-4347-990F-D1D03A9813BC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_8900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09872A5-50B3-4E8A-A623-48DC381F344B"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_8940:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A77F8441-44E2-4BAC-8854-95DE4FBBAA2D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_9350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "019583AE-F1FD-4BC1-B844-E37567A954DE"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_9530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69D3909C-0FCB-48F7-852D-8B316D226A87"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_9550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3A23D13-1EFB-432F-B06B-571BD93929B1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:xps_one_2710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "912F0A3A-CF3D-402F-ACD0-8B583A05B611"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html",
        "source" : "security_alert@emc.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html",
        "source" : "security_alert@emc.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mitigation", "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-21551",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29477",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-04T16:15:07.910",
      "lastModified" : "2024-11-21T06:01:13.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis version 6.0 or newer could be exploited using the `STRALGO LCS` command to corrupt the heap and potentially result with remote code execution. The problem is fixed in version 6.2.3 and 6.0.13. An additional workaround to mitigate the problem without patching the redis-server executable is to use ACL configuration to prevent clients from using the `STRALGO LCS` command."
      }, {
        "lang" : "es",
        "value" : "Redis es una estructura de datos en memoria de código abierto (con licencia BSD) almacenado, utilizado como base de datos, caché y agente de mensajes.&#xa0;Un bug de desbordamiento de enteros en Redis versión 6.0 o más reciente podría ser explotada usando el comando \"STRALGO LCS\" para corromper la pila y potencialmente resultar en una ejecución de código remota.&#xa0;El problema se corrigió en las versiones 6.2.3 y 6.0.13.&#xa0;Una solución alternativa para mitigar el problema sin parchear el ejecutable redis-server es usar la configuración de ACL para impedir que los clientes usen el comando \"STRALGO LCS\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndExcluding" : "6.0.13",
            "matchCriteriaId" : "BDA8BE6C-F067-4CDB-AA28-C105276D210E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.3",
            "matchCriteriaId" : "F1824F70-1A06-4908-A7A8-A3CDC6B17EB3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-vqxj-26vj-996g",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHWOF7CBVUGDK3AN6H3BN3VNTH2TDUZZ/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SN7INTZFE34MIQJO7WDDTIY5LIBGN6GI/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://redis.io/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-vqxj-26vj-996g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BHWOF7CBVUGDK3AN6H3BN3VNTH2TDUZZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SN7INTZFE34MIQJO7WDDTIY5LIBGN6GI/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://redis.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29478",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-04T16:15:07.953",
      "lastModified" : "2024-11-21T06:01:13.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Redis is an open source (BSD licensed), in-memory data structure store, used as a database, cache, and message broker. An integer overflow bug in Redis 6.2 before 6.2.3 could be exploited to corrupt the heap and potentially result with remote code execution. Redis 6.0 and earlier are not directly affected by this issue. The problem is fixed in version 6.2.3. An additional workaround to mitigate the problem without patching the `redis-server` executable is to prevent users from modifying the `set-max-intset-entries` configuration parameter. This can be done using ACL to restrict unprivileged users from using the `CONFIG SET` command."
      }, {
        "lang" : "es",
        "value" : "Redis es una estructura de datos en memoria de código abierto (con licencia BSD) almacenado, utilizado como base de datos, caché y agente de mensajes.&#xa0;Un bug de desbordamiento de enteros en Redis versiones 6.2 anteriores a 6.2.3, podría ser explotada para corromper la pila y potencialmente resultar en una ejecución de código remota.&#xa0;Redis versiones 6.0 y anteriores no están directamente afectadas por este problema.&#xa0;El problema es corregido en la versión 6.2.3.&#xa0;Una solución alternativa para mitigar el problema sin parchear el ejecutable \"redis-server\" es impedir que los usuarios modifiquen el parámetro de configuración \"set-max-intset-entries\".&#xa0;Esto puede realizarse usando la ACL para restringir que los usuarios no privilegiados usen el comando \"CONFIG SET\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redislabs:redis:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.2.0",
            "versionEndExcluding" : "6.2.3",
            "matchCriteriaId" : "F1824F70-1A06-4908-A7A8-A3CDC6B17EB3"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-qh52-crrg-44g3",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://redis.io/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-20",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/redis/redis/security/advisories/GHSA-qh52-crrg-44g3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BPWBIZXA67JFIB63W2CNVVILCGIC2ME5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EZJ6JGQ2ETZB2DWTQSGCOGG7EF3ILV4V/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://redis.io/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202107-20",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26804",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-04T17:15:07.627",
      "lastModified" : "2024-11-21T05:56:50.460",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure Permissions in Centreon Web versions 19.10.18, 20.04.8, and 20.10.2 allows remote attackers to bypass validation by changing any file extension to \".gif\", then uploading it in the \"Administration/ Parameters/ Images\" section of the application."
      }, {
        "lang" : "es",
        "value" : "Los permisos no seguros en Centreon Web versiones 19.10.18, 20.04.8 y 20.10.2, permiten a atacantes remotos omitir la comprobación al cambiar cualquier extensión de archivo a \".gif\" y luego cargándola en la sección de la aplicación \"Administration/ Parameters/ Images\""
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon_web:19.10.18:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5C8D069-02D8-4FF2-9F42-B665EF576040"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon_web:20.04.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21174697-5045-44A8-935E-D80C3ABE0E48"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:centreon:centreon_web:20.10.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA252808-DB35-4D56-AACF-EEB2C76BDB01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://medium.com/%40pedro.ferreira.phf/vulnerability-affecting-some-versions-of-centreon-2b34bd6dc621",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25179",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T03:15:07.283",
      "lastModified" : "2024-11-21T05:54:30.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "SolarWinds Serv-U before 15.2 is affected by Cross Site Scripting (XSS) via the HTTP Host header."
      }, {
        "lang" : "es",
        "value" : "SolarWinds Serv-U versiones anteriores a 15.2, está afectado por una vulnerabilidad de tipo Cross Site Scripting (XSS) por medio del encabezado HTTP Host"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:solarwinds:serv-u_file_server:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "15.2",
            "matchCriteriaId" : "CD1CF4B3-08F1-459F-B1F4-8501F252EC23"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2_release_notes.htm",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matrix",
        "source" : "cve@mitre.org",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/gm4tr1x",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/in/gabrielegristina",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2_release_notes.htm",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/matrix",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Not Applicable", "Third Party Advisory" ]
      }, {
        "url" : "https://twitter.com/gm4tr1x",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.linkedin.com/in/gabrielegristina",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25319",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2021-05-05T09:15:07.880",
      "lastModified" : "2024-11-21T05:54:44.467",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Incorrect Default Permissions vulnerability in the packaging of virtualbox of openSUSE Factory allows local attackers in the vboxusers groupu to escalate to root. This issue affects: openSUSE Factory virtualbox version 6.1.20-1.1 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de permisos predeterminados incorrectos en el paquete de virtualbox de openSUSE Factory, permite a atacantes locales en el grupo de vboxusers escalar a root.&#xa0;Este problema afecta a: openSUSE Factory virtualbox versión 6.1.20-1.1 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:opensuse:factory:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.1.20-1.1",
            "matchCriteriaId" : "301393D8-6044-4713-B242-EA11119CDB99"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182918",
        "source" : "meissner@suse.de",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1182918",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-25317",
      "sourceIdentifier" : "meissner@suse.de",
      "published" : "2021-05-05T10:15:08.133",
      "lastModified" : "2024-11-21T05:54:44.187",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Incorrect Default Permissions vulnerability in the packaging of cups of SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Manager Server 4.0, SUSE OpenStack Cloud Crowbar 9; openSUSE Leap 15.2, Factory allows local attackers with control of the lp users to create files as root with 0644 permissions without the ability to set the content. This issue affects: SUSE Linux Enterprise Server 11-SP4-LTSS cups versions prior to 1.3.9. SUSE Manager Server 4.0 cups versions prior to 2.2.7. SUSE OpenStack Cloud Crowbar 9 cups versions prior to 1.7.5. openSUSE Leap 15.2 cups versions prior to 2.2.7. openSUSE Factory cups version 2.3.3op2-2.1 and prior versions."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de Permisos Predeterminados Incorrectos en el paquete de cups de SUSE Linux Enterprise Server versión 11-SP4-LTSS, SUSE Manager Server versión 4.0, SUSE OpenStack Cloud Crowbar versión 9;&#xa0;openSUSE Leap versión 15.2, Factory permite a atacantes locales con control de los usuarios lp crear archivos como root con permisos 0644 sin la capacidad de configurar el contenido.&#xa0;Este problema afecta a: cups de SUSE Linux Enterprise Server 11-SP4-LTSS versiones anteriores a 1.3.9.&#xa0;cups de Versiones de SUSE Manager Server 4.0 versiones anteriores a 2.2.7.&#xa0;cups de SUSE OpenStack Cloud Crowbar 9 versiones anteriores a 1.7.5.&#xa0;cups de openSUSE Leap 15.2 versiones anteriores a 2.2.7.&#xa0;cups de openSUSE Factory versión 2.3.3op2-2.1 y versiones anteriores"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "meissner@suse.de",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 3.3,
            "baseSeverity" : "LOW",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "meissner@suse.de",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-276"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.3.9",
            "matchCriteriaId" : "BBA9434A-422D-4A29-BEEE-F22A4F0A009D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp4:*:*:ltss:*:*:*",
            "matchCriteriaId" : "7B84C8D3-0B59-40DC-881D-D016A422E8CC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.7",
            "matchCriteriaId" : "90FDBEA0-97A9-49D1-B8EB-30E71C762103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:suse:manager_server:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51136B38-5715-49B3-BD8D-91F90632247D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.7.5",
            "matchCriteriaId" : "CE74AE32-F7BA-41B3-92FD-B2F5C24C1089"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:suse:openstack_cloud_crowbar:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B631400C-0A5A-45A3-9DFA-B419E83D324E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:cups:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2.2.7",
            "matchCriteriaId" : "90FDBEA0-97A9-49D1-B8EB-30E71C762103"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B009C22E-30A4-4288-BCF6-C3E81DEAF45A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:suse:cups:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "2.3.3op2-2.1",
            "matchCriteriaId" : "87BA20B7-2A6B-48A5-80D0-FC5CA3E9A54B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:opensuse:factory:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E29492E1-43D8-43BF-94E3-26A762A66FAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1184161",
        "source" : "meissner@suse.de",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/",
        "source" : "meissner@suse.de"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/",
        "source" : "meissner@suse.de"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/",
        "source" : "meissner@suse.de"
      }, {
        "url" : "https://bugzilla.suse.com/show_bug.cgi?id=1184161",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GWPGZLT3U776Q5YPPSA6LGFWWBDWBVH3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H74BP746O5NNVCBUTLLZYAFBPESFVECV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S37IDQGHTORQ3Z6VRDQIGBYVOI27YG47/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31800",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T11:15:07.397",
      "lastModified" : "2024-11-21T06:06:15.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list and write to arbitrary files via ../ directory traversal. This could potentially be abused to achieve arbitrary code execution by replacing /etc/shadow or an SSH authorized key."
      }, {
        "lang" : "es",
        "value" : "Se presentan múltiples vulnerabilidades de salto de ruta en el archivo smbserver.py en Impacket versiones hasta 0.9.22.&#xa0;Un atacante que se conecta a una instancia de smbserver en ejecución puede enumerar y escribir en archivos arbitrarios por medio de un salto de directorio ../.&#xa0;Esto podría potencialmente ser abusado para lograr una ejecución de código arbitraria al reemplazar /etc/shadow o una clave SSH autorizada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:secureauth:impacket:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.9.22",
            "matchCriteriaId" : "075A5E4D-3FA0-4BD1-9F79-427792DF7108"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2008",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2958",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L3485",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L876",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c94e5fdd85bcdd2f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPXDPWCAPVX3UWYZ3N2T5OLBSBBUHJP6/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRV2C5DATXBHG6TF6CEEX54KZ75THQS3/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UF56LYB27LHEIFJTFHU3M75NMNNK2SCG/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2008",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L2958",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L3485",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/blob/cb6d43a677c338db930bc4e9161620832c1ec624/impacket/smbserver.py#L876",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/commit/49c643bf66620646884ed141c94e5fdd85bcdd2f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/SecureAuthCorp/impacket/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IPXDPWCAPVX3UWYZ3N2T5OLBSBBUHJP6/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KRV2C5DATXBHG6TF6CEEX54KZ75THQS3/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UF56LYB27LHEIFJTFHU3M75NMNNK2SCG/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T13:15:07.583",
      "lastModified" : "2024-11-21T06:00:52.343",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server through 1.0.7.0 uses a weak method Next to produce pseudo-random values to generate a legacy API key."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones hasta 1.0.7.0, usa un método débil Next para producir valores pseudoaleatorios para generar una clave API heredada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-338"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7.0",
            "matchCriteriaId" : "5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29246",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T13:15:07.650",
      "lastModified" : "2024-11-21T06:00:52.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution. The attacker must craft a malicious plugin file with special characters to upload the file outside of the restricted directory."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones hasta 1.0.7.0, sufre un salto de directorio, permitiendo a un atacante con privilegios de administrador lograr una ejecución de código.&#xa0;El atacante debe crear un archivo plugin malicioso con caracteres especiales para cargar el archivo fuera del directorio restringido"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7.0",
            "matchCriteriaId" : "5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29247",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T13:15:07.677",
      "lastModified" : "2024-11-21T06:00:52.647",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the HTTPOnly flag for a cookie."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones hasta 1.0.7.0, podría permitir a un atacante remoto obtener información confidencial, causado por un fallo para ajustar el flag HTTPOnly para una cookie"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7.0",
            "matchCriteriaId" : "5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29248",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T13:15:07.707",
      "lastModified" : "2024-11-21T06:00:52.787",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server through 1.0.7.0 could allow a remote attacker to obtain sensitive information, caused by failure to set the Secure flag for a cookie."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones hasta 1.0.7.0, podría permitir a un atacante remoto obtener información confidencial, causada por un fallo en el ajuste de la Secure flag para una cookie"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-311"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7.0",
            "matchCriteriaId" : "5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29250",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T13:15:07.787",
      "lastModified" : "2024-11-21T06:00:53.067",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "BTCPay Server through 1.0.7.0 suffers from a Stored Cross Site Scripting (XSS) vulnerability within the POS Add Products functionality. This enables cookie stealing."
      }, {
        "lang" : "es",
        "value" : "BTCPay Server versiones hasta 1.0.7.0, sufre una vulnerabilidad de tipo Cross Site Scripting (XSS) almacenado dentro de la funcionalidad POS Add Products.&#xa0;Esto permite el robo de cookies"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:btcpayserver:btcpay_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.7.0",
            "matchCriteriaId" : "5050DF6F-E9D9-411A-94E4-8B3C96EDB32C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.btcpayserver.org/vulnerability-disclosure-v1-0-7-0/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/btcpayserver/btcpayserver/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20254",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-05-05T14:15:07.883",
      "lastModified" : "2024-11-21T05:46:13.203",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in samba. The Samba smbd file server must map Windows group identities (SIDs) into unix group ids (gids). The code that performs this had a flaw that could allow it to read data beyond the end of the array in the case where a negative cache entry had been added to the mapping cache. This could cause the calling code to return those values into the process token that stores the group membership for a user. The highest threat from this vulnerability is to data confidentiality and integrity."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en samba.&#xa0;El servidor de archivos smbd de Samba debe asignar Windows group identities (SIDs) a unix group ids (gids).&#xa0;El código que lleva a cabo esto tenía un fallo que podría permitirle leer datos más allá del final de la matriz en el caso de que se hubiera agregado una entrada de caché negativa a la caché de mapeo.&#xa0;Esto podría causar que el código de llamada devuelva esos valores al token de proceso que almacena la pertenencia al grupo de un usuario.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad e integridad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N",
            "baseScore" : 4.9,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.8,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.6.0",
            "versionEndExcluding" : "4.12.15",
            "matchCriteriaId" : "B84DE447-47C2-4AFB-867C-20D372058366"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.13.0",
            "versionEndExcluding" : "4.13.8",
            "matchCriteriaId" : "1B8AF688-C755-4E0A-A80E-D74BF89678D6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.14.0",
            "versionEndExcluding" : "4.14.4",
            "matchCriteriaId" : "145DC5A1-4F1B-41BC-8B13-CB270B960BA0"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1949442",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EP2VJ73OVBPVSOSTVOMGIEQA3MWF6F7/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZAF6L2M6CNAJ2YYYGXPWETTW5YLCWTVT/",
        "source" : "secalert@redhat.com"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-22",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0001/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2021-20254.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1949442",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00023.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3EP2VJ73OVBPVSOSTVOMGIEQA3MWF6F7/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZAF6L2M6CNAJ2YYYGXPWETTW5YLCWTVT/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-22",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210430-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.samba.org/samba/security/CVE-2021-20254.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31517",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-05-05T15:15:08.427",
      "lastModified" : "2024-11-21T06:05:50.470",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31518."
      }, {
        "lang" : "es",
        "value" : "Trend Micro Home Network Security versiones 6.5.599 y anteriores, es susceptible a una vulnerabilidad de análisis de archivos que podría permitir a un atacante explotar la vulnerabilidad y causar una denegación de servicio en el dispositivo.&#xa0;Esta vulnerabilidad es similar, pero no idéntica a CVE-2021-31518"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:home_network_security:*:*:*:en:*:*:*:*",
            "versionEndIncluding" : "6.5.599",
            "matchCriteriaId" : "D2A6C520-2F92-4DD2-85C0-110BA87E5792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:home_network_security:*:*:*:ja:*:*:*:*",
            "versionEndIncluding" : "6.5.599",
            "matchCriteriaId" : "1DD965FE-1066-4C12-BB31-FC5B536A8050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:home_network_security:*:*:*:zh:*:*:*:*",
            "versionEndIncluding" : "6.5.599",
            "matchCriteriaId" : "F53D6A33-030D-44C0-9E05-98BF50B7F1E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10312",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31518",
      "sourceIdentifier" : "security@trendmicro.com",
      "published" : "2021-05-05T15:15:08.460",
      "lastModified" : "2024-11-21T06:05:50.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Trend Micro Home Network Security 6.5.599 and earlier is vulnerable to a file-parsing vulnerability which could allow an attacker to exploit the vulnerability and cause a denial-of-service to the device. This vulnerability is similar, but not identical to CVE-2021-31517."
      }, {
        "lang" : "es",
        "value" : "Trend Micro Home Network Security versiones 6.5.599 y anteriores, es susceptible a una vulnerabilidad de análisis de archivos que podría permitir a un atacante explotar la vulnerabilidad y causar una denegación de servicio en el dispositivo.&#xa0;Esta vulnerabilidad es similar, pero no idéntica a CVE-2021-31517"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:home_network_security:*:*:*:en:*:*:*:*",
            "versionEndIncluding" : "6.5.599",
            "matchCriteriaId" : "D2A6C520-2F92-4DD2-85C0-110BA87E5792"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:home_network_security:*:*:*:ja:*:*:*:*",
            "versionEndIncluding" : "6.5.599",
            "matchCriteriaId" : "1DD965FE-1066-4C12-BB31-FC5B536A8050"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trendmicro:home_network_security:*:*:*:zh:*:*:*:*",
            "versionEndIncluding" : "6.5.599",
            "matchCriteriaId" : "F53D6A33-030D-44C0-9E05-98BF50B7F1E0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10312",
        "source" : "security@trendmicro.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://helpcenter.trendmicro.com/en-us/article/TMKA-10312",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31542",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T15:15:08.483",
      "lastModified" : "2024-11-21T06:05:52.810",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names."
      }, {
        "lang" : "es",
        "value" : "En Django versiones 2.2 anteriores a 2.2.21, versiones 3.1 anteriores a 3.1.9 y versiones 3.2 anteriores a 3.2.1, MultiPartParser, UploadedFile y FieldFile, permitían un salto de directorio por medio de archivos cargados con nombres de archivo cuidadosamente diseñados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "2.2.21",
            "matchCriteriaId" : "13443AFD-6FA0-487D-8C84-068829D44AD0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.9",
            "matchCriteriaId" : "D90DC9B2-CDD1-41E6-8745-29CDFE00CE1A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.1",
            "matchCriteriaId" : "B014E657-30B7-4174-BAF4-F7C92435900A"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/3",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/3.2/releases/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/django/django/commit/04ac1624bdc2fa737188401757cf95ced122d26d",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/django/django/commit/25d84d64122c15050a0ee739e859f22ddab5ac48",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://github.com/django/django/commit/c98f446c188596d4ba6de71d1b77b4a6c5c2a007",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00005.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0001/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/may/04/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/3.2/releases/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/django/django/commit/04ac1624bdc2fa737188401757cf95ced122d26d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/django/django/commit/25d84d64122c15050a0ee739e859f22ddab5ac48",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/django/django/commit/c98f446c188596d4ba6de71d1b77b4a6c5c2a007",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00005.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B4SQG2EAF4WCI2SLRL6XRDJ3RPK3ZRDV/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0001/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/may/04/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20397",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-05-05T16:15:07.853",
      "lastModified" : "2024-11-21T05:46:31.043",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar SIEM 7.3 and 7.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196017."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar SIEM versiones 7.3 y 7.4, es vulnerable a un ataque de tipo cross-site scripting.&#xa0;Esta vulnerabilidad permite a usuarios insertar código JavaScript arbitrario en la interfaz de usuario web, alterando así la funcionalidad prevista que puede conllevar a la divulgación de credenciales dentro de una sesión confiable.&#xa0;IBM X-Force ID: 196017"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.3",
            "matchCriteriaId" : "22384D51-798F-4006-B826-DD80A57E9A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.2",
            "matchCriteriaId" : "B1382DF3-F3E0-458D-B3E7-53BAC3D370E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4BDE03-4F44-4DC9-A8D2-FDF52FE79108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2210BF7E-0A1E-4B5A-987B-5687495177F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "74657D19-83C7-4545-A9EA-A331AC3148A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_3:*:*:*:*:*:*",
            "matchCriteriaId" : "894B299D-26EA-4AC1-AD96-EDA0D1201380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_4:*:*:*:*:*:*",
            "matchCriteriaId" : "EB125CAB-9CA3-4FAE-84AA-14014E3B1944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_5:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEB9087-8F33-4C13-AC54-931FDF2F7BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4FAEEB-6882-49C8-807B-4312DC701FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_7:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9321D7-3E9E-4530-A234-861907D8FB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD9893A-B195-452C-940B-CF934F2B36B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:fix_pack_1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0D61D2-C551-40B9-AC79-E3A8091D35E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:fix_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "665B3E75-83C8-4F1B-8FEC-7EE148A5BEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196017",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6449688",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196017",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6449688",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20401",
      "sourceIdentifier" : "psirt@us.ibm.com",
      "published" : "2021-05-05T16:15:07.887",
      "lastModified" : "2024-11-21T05:46:31.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "IBM QRadar SIEM 7.3 and 7.4 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 196075."
      }, {
        "lang" : "es",
        "value" : "IBM QRadar SIEM versiones 7.3 y 7.4, contiene credenciales embebidas, como una contraseña o clave criptográfica, que usa para su propia autenticación entrante, comunicación saliente a componentes externos o cifrado de datos internos.&#xa0;IBM X-Force ID: 196075"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@us.ibm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.4,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-798"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.3.3",
            "matchCriteriaId" : "22384D51-798F-4006-B826-DD80A57E9A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.4.0",
            "versionEndExcluding" : "7.4.2",
            "matchCriteriaId" : "B1382DF3-F3E0-458D-B3E7-53BAC3D370E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:-:*:*:*:*:*:*",
            "matchCriteriaId" : "7E4BDE03-4F44-4DC9-A8D2-FDF52FE79108"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_1:*:*:*:*:*:*",
            "matchCriteriaId" : "2210BF7E-0A1E-4B5A-987B-5687495177F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "74657D19-83C7-4545-A9EA-A331AC3148A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_3:*:*:*:*:*:*",
            "matchCriteriaId" : "894B299D-26EA-4AC1-AD96-EDA0D1201380"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_4:*:*:*:*:*:*",
            "matchCriteriaId" : "EB125CAB-9CA3-4FAE-84AA-14014E3B1944"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_5:*:*:*:*:*:*",
            "matchCriteriaId" : "BBEB9087-8F33-4C13-AC54-931FDF2F7BAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_6:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4FAEEB-6882-49C8-807B-4312DC701FA1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.3.3:fix_pack_7:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9321D7-3E9E-4530-A234-861907D8FB00"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:-:*:*:*:*:*:*",
            "matchCriteriaId" : "3AD9893A-B195-452C-940B-CF934F2B36B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:fix_pack_1:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0D61D2-C551-40B9-AC79-E3A8091D35E0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ibm:qradar_security_information_and_event_manager:7.4.2:fix_pack_2:*:*:*:*:*:*",
            "matchCriteriaId" : "665B3E75-83C8-4F1B-8FEC-7EE148A5BEFD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196075",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6449682",
        "source" : "psirt@us.ibm.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/196075",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "VDB Entry", "Vendor Advisory" ]
      }, {
        "url" : "https://www.ibm.com/support/pages/node/6449682",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29100",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-05-05T16:15:07.987",
      "lastModified" : "2024-11-21T06:00:43.017",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted input. An attacker could exploit this vulnerability to gain arbitrary code execution under security context of the user running ArcGIS Earth by inducing the user to upload a crafted file to an affected system."
      }, {
        "lang" : "es",
        "value" : "Se presenta una vulnerabilidad de salto de ruta en Esri ArcGIS Earth versiones 1.11.0 y anteriores, que permite la creación de archivos arbitrarios en un sistema afectado por medio de una entrada diseñada.&#xa0;Un atacante podría explotar esta vulnerabilidad para obtener una ejecución de código arbitraria en el contexto de seguridad del usuario que ejecuta ArcGIS Earth al inducir al usuario a cargar un archivo diseñado en un sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_earth:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.11.0",
            "matchCriteriaId" : "03AC9A3B-CEE4-477F-80A0-4516C882307B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-earth/administration/arcgis-earth-security-update",
        "source" : "psirt@esri.com",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/arcgis-earth/administration/arcgis-earth-security-update",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29489",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-05T16:15:08.023",
      "lastModified" : "2024-11-21T06:01:14.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Highcharts JS is a JavaScript charting library based on SVG. In Highcharts versions 8 and earlier, the chart options structure was not systematically filtered for XSS vectors. The potential impact was that content from untrusted sources could execute code in the end user's browser. The vulnerability is patched in version 9. As a workaround, implementers who are not able to upgrade may apply DOMPurify recursively to the options structure to filter out malicious markup."
      }, {
        "lang" : "es",
        "value" : "Highcharts JS es una biblioteca de gráficos de JavaScript basada en SVG.&#xa0;En Highcharts versiones 8 y anteriores, la estructura de opciones de gráficos no se filtraba sistemáticamente para vectores de tipo XSS.&#xa0;El impacto potencial fue que el contenido de fuentes no confiables podría ejecutar código en el navegador del usuario final.&#xa0;La vulnerabilidad está parcheada en versión 9. Como solución alternativa, los implementadores que no son capaces de actualizar pueden aplicar DOMPurify de forma recursiva a la estructura de opciones para filtrar el marcado malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L",
            "baseScore" : 7.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:highcharts:highcharts:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.0.0",
            "matchCriteriaId" : "07FC10C8-AE4A-442B-B2C1-823AC711BF23"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1BE6C1F-2565-4E97-92AA-16563E5660A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5735E553-9731-4AAC-BCFF-989377F817B3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFB1169-41A0-4A86-8E4F-FDA9730B1E94"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/highcharts/highcharts/security/advisories/GHSA-8j65-4pcq-xq95",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0005/",
        "source" : "security-advisories@github.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/highcharts/highcharts/security/advisories/GHSA-8j65-4pcq-xq95",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32055",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-05T16:15:08.117",
      "lastModified" : "2024-11-21T06:06:46.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Mutt 1.11.0 through 2.0.x before 2.0.7 (and NeoMutt 2019-10-25 through 2021-05-04) has a $imap_qresync issue in which imap/util.c has an out-of-bounds read in situations where an IMAP sequence set ends with a comma. NOTE: the $imap_qresync setting for QRESYNC is not enabled by default."
      }, {
        "lang" : "es",
        "value" : "Mutt versiones 1.11.0 hasta 2.0.x versiones anteriores a 2.0.7 (y NeoMutt versiones del 25-10-2019 hasta 04-05-2021) presenta un problema de $imap_qresync en donde el archivo imap/util.c presenta una lectura fuera de límites en situaciones en las que un ajuste de secuencias IMAP termina con una coma.&#xa0;NOTA: la configuración $ imap_qresync para QRESYNC no está habilitada por defecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "baseScore" : 9.1,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:P",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-125"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mutt:mutt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1.11.0",
            "versionEndExcluding" : "2.0.7",
            "matchCriteriaId" : "A023CC31-DEB4-452F-9EF7-7A7DC0083991"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:neomutt:neomutt:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20191025",
            "versionEndIncluding" : "20210504",
            "matchCriteriaId" : "1168F82B-A165-425B-A417-57F8225F7C21"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20210503/000036.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/neomutt/neomutt/commit/fa1db5785e5cfd9d3cd27b7571b9fe268d2ec2dc",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/7c4779ac24d2fb68a2a47b58c7904118f40965d5",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-05",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://lists.mutt.org/pipermail/mutt-announce/Week-of-Mon-20210503/000036.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/neomutt/neomutt/commit/fa1db5785e5cfd9d3cd27b7571b9fe268d2ec2dc",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/muttmua/mutt/-/commit/7c4779ac24d2fb68a2a47b58c7904118f40965d5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202105-05",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24255",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:07.863",
      "lastModified" : "2024-11-21T05:52:41.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Essential Addons for Elementor Lite WordPress Plugin before 4.5.4 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, both via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress Essential Addons for Elementor Lite versiones 4.5.4 presentan dos widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por parte de usuarios menos privilegiados, como contribuyentes, ambos por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpdeveloper:essential_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.5.4",
            "matchCriteriaId" : "3A7C6E5B-747A-41E7-ABCA-1AADE37BDD4A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/7fb708da-e8c4-4455-b4f9-c4ad72f877da",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7fb708da-e8c4-4455-b4f9-c4ad72f877da",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24256",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:07.903",
      "lastModified" : "2024-11-21T05:52:42.000",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Elementor – Header, Footer & Blocks Template” WordPress Plugin before 1.5.8 has two widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Elementor - Header, Footer &amp; Blocks Template\" versiones anteriores a 1.5.8, presenta dos widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por parte de usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brainstormforce:elementor_-_header\\,_footer_\\&_blocks_template:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.8",
            "matchCriteriaId" : "3C5E70AD-4616-4795-96F9-9262E9610729"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/a9412fed-aed3-4931-a504-1a86f876892e",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/a9412fed-aed3-4931-a504-1a86f876892e",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24257",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:07.943",
      "lastModified" : "2024-11-21T05:52:42.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Premium Addons for Elementor” WordPress Plugin before 4.2.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Premium Addons for Elementor\" versiones anteriores a 4.2.8, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:leap13:premium_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "4.2.8",
            "matchCriteriaId" : "B5E900BE-B22E-472F-8ECD-114742C3AE70"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/4ad8314e-1cbe-4642-b4ee-aac2060f9a25",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/4ad8314e-1cbe-4642-b4ee-aac2060f9a25",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24258",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:07.980",
      "lastModified" : "2024-11-21T05:52:42.250",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Elements Kit Lite and Elements Kit Pro WordPress Plugins before 2.2.0 have a number of widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "Los Plugins de WordPress Elements Kit Lite y Elements Kit Pro versiones anteriores a 2.2.0, presentan una serie de widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por parte de usuarios menos privilegiados, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpmet:elements_kit_elementor_addons:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "63E5555E-05A4-4E90-B697-92B4C1400AB6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/47b47b86-899b-4de3-8a3c-2d5d1774298f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/47b47b86-899b-4de3-8a3c-2d5d1774298f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24259",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.017",
      "lastModified" : "2024-11-21T05:52:42.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Elementor Addon Elements” WordPress Plugin before 1.11.2 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Elementor Addon Elementsâ\" versiones anteriores a 1.11.2, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:webtechstreet:elementor_addon_elements:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.11.2",
            "matchCriteriaId" : "FEBE4389-D132-4A04-BAF7-D61E140CAAEF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0719063f-7743-4a34-94b9-f67fd98e5990",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0719063f-7743-4a34-94b9-f67fd98e5990",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24260",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.057",
      "lastModified" : "2024-11-21T05:52:42.497",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Livemesh Addons for Elementor” WordPress Plugin before 6.8 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Livemesh Addons for Elementor\" versiones anteriores a 6.8, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:livemeshelementor:addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "6.8",
            "matchCriteriaId" : "9626888F-BD48-41B4-BA59-A6DCAD11B741"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fa6c7c7c-1027-4fa9-bb55-07ae2bb7f021",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fa6c7c7c-1027-4fa9-bb55-07ae2bb7f021",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24261",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.093",
      "lastModified" : "2024-11-21T05:52:42.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “HT Mega – Absolute Addons for Elementor Page Builder” WordPress Plugin before 1.5.7 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \" HT Mega - Absolute Addons for Elementor Page Builder\" versiones anteriores a 1.5.7, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:ht_mega:*:*:*:*:free:wordpress:*:*",
            "versionEndExcluding" : "1.5.7",
            "matchCriteriaId" : "D8BD7F89-D07C-4AB9-A655-8822A19CE7F1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0377705d-29e9-47db-a5bb-8acaf311a38f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0377705d-29e9-47db-a5bb-8acaf311a38f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24262",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.127",
      "lastModified" : "2024-11-21T05:52:42.770",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “WooLentor – WooCommerce Elementor Addons + Builder” WordPress Plugin before 1.8.6 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"WooLentor - WooCommerce Elementor Addons + Builder\" versiones anteriores a 1.8.6, presenta un widget que es vulnerable a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hasthemes:woolentor_-_woocommerce_elementor_addons_\\+_builder:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.8.6",
            "matchCriteriaId" : "461B4A94-6420-4985-9EC3-A41AC97A453B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/d6d16357-2bc3-4053-8274-d0275026e56b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/d6d16357-2bc3-4053-8274-d0275026e56b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24263",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.167",
      "lastModified" : "2024-11-21T05:52:42.890",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Elementor Addons – PowerPack Addons for Elementor” WordPress Plugin before 2.3.2 for WordPress has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Elementor Addons - PowerPack Addons for Elementor\" versiones anteriores a 2.3.2, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:ideabox:powerpack_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.2",
            "matchCriteriaId" : "9FD693A9-0269-4764-A789-E51E11F8AB35"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/48876006-b00f-49b7-80a1-b1d6dc2f4eec",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/48876006-b00f-49b7-80a1-b1d6dc2f4eec",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24264",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.207",
      "lastModified" : "2024-11-21T05:52:43.013",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Image Hover Effects – Elementor Addon” WordPress Plugin before 1.3.4 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Image Hover Effects - Elementor Addon\" versiones anteriores a 1.3.4, presenta un widget que es vulnerable a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:blocksera:image_hover_effects:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "7A7DB592-7980-4922-8FF7-7C3039AAED89"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/7fd89a49-fbb0-4308-836b-1f12dc585b1f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/7fd89a49-fbb0-4308-836b-1f12dc585b1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24265",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.250",
      "lastModified" : "2024-11-21T05:52:43.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Rife Elementor Extensions & Templates” WordPress Plugin before 1.1.6 has a widget that is vulnerable to stored Cross-Site Scripting(XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Rife Elementor Extensions &amp; Templates\" versiones anteriores a 1.1.6, presenta un widget que es vulnerable a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:apollo13themes:rife_elementor_extensions_\\&_templates:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.1.6",
            "matchCriteriaId" : "D1DDD8D8-E5BF-4D03-A925-09C4CD036700"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/9f4771dc-80b5-49ff-9f64-bf6c36f76863",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/9f4771dc-80b5-49ff-9f64-bf6c36f76863",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24266",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.290",
      "lastModified" : "2024-11-21T05:52:43.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “The Plus Addons for Elementor Page Builder Lite” WordPress Plugin before 2.0.6 has four widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"The Plus Addons for Elementor Page Builder Lite\" versiones anteriores a 2.0.6, presenta cuatro widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios cpn menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:posimyth:the_plus_addons_for_elementor_page_builder_lite:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.6",
            "matchCriteriaId" : "91C55A83-61BF-4EB3-8702-827CB7DFCD2A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/78014ddd-1cc2-4723-8194-4bf478888578",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/78014ddd-1cc2-4723-8194-4bf478888578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24267",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.327",
      "lastModified" : "2024-11-21T05:52:43.390",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “All-in-One Addons for Elementor – WidgetKit” WordPress Plugin before 2.3.10 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"All-in-One Addons for Elementor - WidgetKit\" versiones anteriores a 2.3.10, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:themesgrove:all-in-one_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.3.10",
            "matchCriteriaId" : "9F34BB4E-2EE2-44BC-ACA8-BABCA018670E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/0c96f3a1-d192-481f-9035-5393f4aadc19",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/0c96f3a1-d192-481f-9035-5393f4aadc19",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24268",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.363",
      "lastModified" : "2024-11-21T05:52:43.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “JetWidgets For Elementor” WordPress Plugin before 1.0.9 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin \"JetWidgets For Elementor\" WordPress versiones anteriores a 1.0.9, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:crocoblock:jetwidgets_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.0.9",
            "matchCriteriaId" : "2B8A32E4-A31B-4A71-AAB4-B73B06E56B07"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/68ecb965-2a9d-4e67-b069-c3dbfb14016b",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/68ecb965-2a9d-4e67-b069-c3dbfb14016b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24269",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.400",
      "lastModified" : "2024-11-21T05:52:43.630",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Sina Extension for Elementor” WordPress Plugin before 3.3.12 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Sina Extension for Elementor\" versiones anteriores a 3.3.12, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:sinaextra:sina_extension_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "3.3.12",
            "matchCriteriaId" : "B0B94259-24A7-4352-A96B-B1FFB7334187"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/df953a91-f1d8-42e9-8966-f2012d4f97c9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/df953a91-f1d8-42e9-8966-f2012d4f97c9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24270",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.437",
      "lastModified" : "2024-11-21T05:52:43.747",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “DeTheme Kit for Elementor” WordPress Plugin before 1.5.5.5 has a widget that is vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"DeTheme Kit for Elementor\" de WordPress versiones anteriores a 1.5.5.5, presenta un widget que es vulnerable a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:detheme:dethemekit_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.5.5.5",
            "matchCriteriaId" : "A4FBD39E-3F44-40DE-BB9D-AA81ABCB7ACA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/67967784-18b6-4e41-9597-3a4c051f3978",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/67967784-18b6-4e41-9597-3a4c051f3978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24271",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.473",
      "lastModified" : "2024-11-21T05:52:43.873",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Ultimate Addons for Elementor” WordPress Plugin before 1.30.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El Plugin de WordPress \"Ultimate Addons for Elementor\" versiones anteriores a 1.30.0, presenta varios widgets que son vulnerables a un ataque de tipo Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los contribuyentes, todo por medio de un método similar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:brainstormforce:ultimate_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.30.0",
            "matchCriteriaId" : "6C095EC3-BBF7-478C-9DF0-8FAC9AB0DCEB"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/1ce8e188-6ded-413e-b4d1-bf80258acf79",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1ce8e188-6ded-413e-b4d1-bf80258acf79",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24272",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.510",
      "lastModified" : "2024-11-21T05:52:44.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The fitness calculators WordPress plugin before 1.9.6 add calculators for Water intake, BMI calculator, protein Intake, and Body Fat and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as change the calculator headers. Due to the lack of sanitisation, this could also lead to a Stored Cross-Site Scripting issue"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress fitness calculators versiones anteriores a 1.9.6, agrega calculadoras para la ingesta de agua, la calculadora BMI, la ingesta de proteínas y la Grasa Corporal y la falta de comprobación de CSRF, permite a atacantes hacer que los usuarios registrados lleven a cabo acciones no deseadas, como cambiar los encabezados de la calculadora.&#xa0;Debido a la falta de saneamiento, esto también podría conllevar a un problema de tipo Stored Cross-Site Scripting almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:codeinitiator:fitness_calculators:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.9.6",
            "matchCriteriaId" : "99F5FAC1-8963-40F1-B932-CAFB05E7684D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164261/WordPress-Fitness-Calculators-1.9.5-Cross-Site-Request-Forgery.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e643040b-1f3b-4c13-8a20-acfd069dcc4f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164261/WordPress-Fitness-Calculators-1.9.5-Cross-Site-Request-Forgery.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e643040b-1f3b-4c13-8a20-acfd069dcc4f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24273",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.547",
      "lastModified" : "2024-11-21T05:52:44.137",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The “Clever Addons for Elementor” WordPress Plugin before 2.1.0 has several widgets that are vulnerable to stored Cross-Site Scripting (XSS) by lower-privileged users such as contributors, all via a similar method."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress \"Clever Addons for Elementor\" anterior a la versión 2.1.0 tiene varios widgets que son vulnerables al Cross-Site Scripting (XSS) almacenado por usuarios con menos privilegios, como los colaboradores, todo ello a través de un método similar."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cleversoft:clever_addons_for_elementor:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.1.0",
            "matchCriteriaId" : "A32AF199-20A4-45C7-85B4-D2BFB13AC6F4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/70ddb3fd-d819-4d85-9f8b-1451a3e3e5a6",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/70ddb3fd-d819-4d85-9f8b-1451a3e3e5a6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.wordfence.com/blog/2021/04/recent-patches-rock-the-elementor-ecosystem/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24274",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.583",
      "lastModified" : "2024-11-21T05:52:44.247",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Ultimate Maps by Supsystic versiones anteriores a 1.2.5, no saneaba el parámetro tab de su página options antes de generarlo en un atributo, conllevando a un problema de tipo Cross-Site Scripting reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supsystic:ultimate_maps:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.2.5",
            "matchCriteriaId" : "04EAC6C9-97FA-4CAE-8FA4-92BC97D3AE50"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164316/WordPress-Ultimate-Maps-1.2.4-Cross-Site-Scripting.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/200a3031-7c42-4189-96b1-bed9e0ab7c1d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164316/WordPress-Ultimate-Maps-1.2.4-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/200a3031-7c42-4189-96b1-bed9e0ab7c1d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24275",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.623",
      "lastModified" : "2024-11-21T05:52:44.380",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue"
      }, {
        "lang" : "es",
        "value" : "El plugin Popup de Supsystic WordPress versiones anteriores a 1.10.5, no saneaba el parámetro tab de su página options antes de mostrarlo en un atributo, conllevando a un problema de tipo Cross-Site Scripting reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supsystic:popup:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.10.5",
            "matchCriteriaId" : "A47C4C2D-643D-45E2-B98A-AE9EF02416F7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164311/WordPress-Popup-1.10.4-Cross-Site-Scripting.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/efdc76e0-c14a-4baf-af70-9d381107308f",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164311/WordPress-Popup-1.10.4-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/efdc76e0-c14a-4baf-af70-9d381107308f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24276",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.660",
      "lastModified" : "2024-11-21T05:52:44.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue"
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Contact Form by Supsystic versiones anteriores a 1.7.15, no saneaba el parámetro  tab de su página options antes de generarlo en un atributo, conllevando a un problema de tipo Cross-Site Scripting reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:supsystic:contact_form:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.7.15",
            "matchCriteriaId" : "700BC97B-6852-4A1F-92A5-1306A7FF84F0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/164308/WordPress-Contact-Form-1.7.14-Cross-Site-Scripting.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1301123c-5e63-432a-ab90-3221ca532d9c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/164308/WordPress-Contact-Form-1.7.14-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/1301123c-5e63-432a-ab90-3221ca532d9c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24293",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-05T19:15:08.697",
      "lastModified" : "2024-11-21T05:52:46.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In the eCommerce module of the NextGEN Gallery Pro WordPress plugin before 3.1.11, there is an action to call get_cart_items via photocrati_ajax , after that the settings[shipping_address][name] is able to inject malicious javascript."
      }, {
        "lang" : "es",
        "value" : "En el módulo eCommerce del plugin NextGEN Gallery Pro WordPress versiones anteriores a 3.1.11, se presenta una acción para llamar a get_cart_items por medio de photocrati_ajax, después de eso, la settings[shipping_address][name] es capaz de inyectar javascript malicioso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagely:nextgen_gallery:*:*:*:*:pro:wordpress:*:*",
            "versionEndExcluding" : "3.1.11",
            "matchCriteriaId" : "5A35D393-861A-42E8-9F12-88CF51E8A672"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/5e1a4725-3d20-44b0-8a35-bbf4263957f7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagely.com/wordpress-gallery-plugin/nextgen-pro/changelog/",
        "source" : "contact@wpscan.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5e1a4725-3d20-44b0-8a35-bbf4263957f7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.imagely.com/wordpress-gallery-plugin/nextgen-pro/changelog/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29101",
      "sourceIdentifier" : "psirt@esri.com",
      "published" : "2021-05-05T19:15:08.737",
      "lastModified" : "2024-11-21T06:00:43.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to perform directory traversal attacks and read arbitrary files on the system."
      }, {
        "lang" : "es",
        "value" : "ArcGIS GeoEvent Server versiones 10.8.1 y anteriores, presenta una vulnerabilidad de salto de ruta de directorio de solo lectura que podría permitir a un atacante remoto no autenticado llevar a cabo ataques de salto de directorio y leer archivos arbitrarios en el sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@esri.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 8.6,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.0
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@esri.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-23"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:esri:arcgis_geoevent_server:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "10.8.1",
            "matchCriteriaId" : "CE3D4BE2-3782-4ABF-BCE8-9E068DC05571"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1",
        "source" : "psirt@esri.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.esri.com/arcgis-blog/products/ext-server-geoevent/administration/arcgis-geoevent-server-security-update-2021-patch-1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31411",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-05-05T19:15:08.777",
      "lastModified" : "2024-11-21T06:05:36.923",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insecure temporary directory usage in frontend build functionality of com.vaadin:flow-server versions 2.0.9 through 2.5.2 (Vaadin 14.0.3 through Vaadin 14.5.2), 3.0 prior to 6.0 (Vaadin 15 prior to 19), and 6.0.0 through 6.0.5 (Vaadin 19.0.0 through 19.0.4) allows local users to inject malicious code into frontend resources during application rebuilds."
      }, {
        "lang" : "es",
        "value" : "Un uso de directorio temporal no seguro en la funcionalidad frontend build de com.vaadin:flow-server versiones 2.0.9 hasta  2.5.2 (Vaadin versiones 14.0.3 hasta Vaadin 14.5.2), versiones 3.0 anteriores 6.0 (Vaadin versiones 15 anteriores a 19) y versiones 6.0 .0 hasta 6.0.5 (Vaadin versiones 19.0.0 hasta 19.0.4), permite a usuarios locales inyectar código malicioso en los recursos frontend durante la reconstrucción de la aplicación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-379"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.0.9",
            "versionEndExcluding" : "2.5.3",
            "matchCriteriaId" : "5BDE9ACA-7666-444D-8615-A164C0E0A8A4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndIncluding" : "5.0.0",
            "matchCriteriaId" : "2CA90E82-620F-46C0-AB1F-05804328BB54"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:flow:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "6.0.0",
            "versionEndIncluding" : "6.0.6",
            "matchCriteriaId" : "B5DCFE72-3FCF-4ED7-A8B3-A0DBE48AE3A5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "14.0.3",
            "versionEndExcluding" : "14.5.3",
            "matchCriteriaId" : "B77BD429-7BB9-454A-A2B2-71081416E416"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "15.0.0",
            "versionEndExcluding" : "19.0.5",
            "matchCriteriaId" : "5B1E8A6A-57AD-41FA-8768-9B60C356E78B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/flow/pull/10640",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31411",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/flow/pull/10640",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31411",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1275",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:09.817",
      "lastModified" : "2024-11-21T05:43:59.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o conseguir acceso a información confidencial, o permitir a un atacante local autenticado alcanzar escalar privilegios o conseguir acceso no autorizado a la aplicación.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "54C73222-E3AC-45B5-8659-539D82DCB8C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1284",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:09.857",
      "lastModified" : "2024-11-21T05:44:00.237",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based messaging service interface of Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to bypass authentication and authorization and modify the configuration of an affected system. To exploit this vulnerability, the attacker must be able to access an associated Cisco SD-WAN vEdge device. This vulnerability is due to insufficient authorization checks. An attacker could exploit this vulnerability by sending crafted HTTP requests to the web-based messaging service interface of an affected system. A successful exploit could allow the attacker to gain unauthenticated read and write access to the affected vManage system. With this access, the attacker could access information about the affected vManage system, modify the configuration of the system, or make configuration changes to devices that are managed by the system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de servicio de mensajería basada en web de Cisco SD-WAN vManage Software podría permitir a un atacante adyacente no autenticado omitir la autenticación y autorización y modificar la configuración de un sistema afectado.&#xa0;Para explotar esta vulnerabilidad, el atacante debe poder acceder a un dispositivo Cisco SD-WAN vEdge asociado.&#xa0;Esta vulnerabilidad es debido a controles de autorización insuficientes.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones HTTP diseñadas para la interfaz del servicio de mensajería basada en web de un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante obtener acceso de lectura y escritura no autenticada al sistema vManage afectado.&#xa0;Con este acceso, el atacante podría acceder a información sobre el sistema vManage afectado, modificar la configuración del sistema, o hacer cambios de la configuración para dispositivos que son administrados por el sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 5.8,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "E6F0246B-3913-42E8-85D8-9FD746D0E1AF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-auth-bypass-65aYqcS2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdw-auth-bypass-65aYqcS2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1363",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:09.890",
      "lastModified" : "2024-11-21T05:44:11.093",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM &amp; Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted parameters. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain data or modify data that is stored in the underlying database."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service, podría permitir a un atacante remoto autenticado conducir ataques de inyección SQL en un sistema afectado.&#xa0;Estas vulnerabilidades son debidas a una comprobación inapropiada de los parámetros enviados por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades al autenticarse en la aplicación y enviar peticiones maliciosas a un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante obtener datos o modificar los datos almacenados en la base de datos subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "89F8D854-583A-48D4-98C2-659E68D2D737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "211822F9-04D8-49F4-BB92-B5F740AAB2D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-inj-ereCOKjR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-inj-ereCOKjR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1365",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:09.920",
      "lastModified" : "2024-11-21T05:44:11.357",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco Unified Communications Manager IM &amp; Presence Service could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. These vulnerabilities are due to improper validation of user-submitted parameters. An attacker could exploit these vulnerabilities by authenticating to the application and sending malicious requests to an affected system. A successful exploit could allow the attacker to obtain data or modify data that is stored in the underlying database."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco Unified Communications Manager IM &amp; amp;&#xa0;Presence Service, podría permitir a un atacante remoto autenticado conducir ataques de inyección SQL en un sistema afectado.&#xa0;Estas vulnerabilidades son debidas a una comprobación inapropiada de los parámetros enviados por el usuario.&#xa0;Un atacante podría explotar estas vulnerabilidades al autenticarse en la aplicación y enviar peticiones maliciosas para un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante obtener datos o modificar los datos almacenados en la base de datos subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "10.5",
            "versionEndExcluding" : "11.5\\(1\\)su9",
            "matchCriteriaId" : "89F8D854-583A-48D4-98C2-659E68D2D737"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "12.0",
            "versionEndExcluding" : "12.5\\(1\\)su4",
            "matchCriteriaId" : "211822F9-04D8-49F4-BB92-B5F740AAB2D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-inj-ereCOKjR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imp-inj-ereCOKjR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1397",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:09.950",
      "lastModified" : "2024-11-21T05:44:15.633",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Software could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of the parameters in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. This vulnerability is known as an open redirect attack, which is used in phishing attacks to get users to visit malicious sites without their knowledge."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web del software Cisco Integrated Management Controller (IMC), podría permitir a un atacante remoto no autenticado redirija a un usuario a una página web maliciosa.&#xa0;Esta vulnerabilidad es debido a una comprobación inapropiada de la entrada de los parámetros en una petición HTTP.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario para que haga clic en un vínculo diseñado.&#xa0;Una explotación con éxito podría permitir al atacante redirigir a un usuario a un sitio web malicioso.&#xa0;Esta vulnerabilidad es conocida como un ataque de redireccionamiento abierto, que es usado en ataques de phishing para que los usuarios visiten sitios maliciosos sin su conocimiento"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:N",
            "baseScore" : 5.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-601"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:integrated_management_controller:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.2\\(12.4\\)",
            "matchCriteriaId" : "8804FC02-F5DC-467F-AC53-C9E968537E98"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ucs_manager:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(3b\\)",
            "matchCriteriaId" : "FA1B9BD7-4050-4F99-9412-F3E673FED790"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:encs_5100_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2",
            "matchCriteriaId" : "6CF04641-9D9A-4FFC-B3AA-A8A4042EB2C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:encs_5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678F3A32-372A-441E-8115-95181FBAF628"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:encs_5400_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.4.2",
            "matchCriteriaId" : "247817B4-D34D-4ED5-8236-E7C36542538C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:encs_5400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01AE8153-6C23-46AB-BEAA-A6F27FDFEED7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c220_m6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "EBB0B1A7-87BD-4594-8F8C-D89E0DF460EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c220_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "297A607F-E8CE-4943-BA92-B53585BA683E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c225_m6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "A3E0DB28-6093-40BE-BD71-9E9A35F4C107"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c225_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3346CA68-1977-429F-BEF6-7CD165298852"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c240_m6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "D90D18EE-2EC0-4C14-A679-6542ACBC81E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c240_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7301A230-B65F-40FB-A4D0-6D9D9B65F4E3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c245_m6_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "1216C5A1-F429-40E9-B0E1-8ED45ED81B48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c245_m6:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A05B60-6E96-4DF8-A607-CC712D0D0A9E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c125_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "4929AAEB-E6BF-43EB-8C0A-64B4ED82A3B7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c125_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "773F05F8-CF38-4CC8-9FC8-528789073FB2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c220_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "FC1BE6F7-B0D0-4224-BB37-E024F2C9715F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c220_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB5FBE2F-1920-48DC-8377-A4AD8202C123"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c240_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "C4E9CCA0-1128-48FF-8C97-EF1139C9438E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c240_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4570063-4744-4CF0-AC99-14693E639191"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c480_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "DBB8527A-86C1-4413-AC52-3CB7D72FE120"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c480_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5717A4D4-9CBB-4A7B-A974-76CABB54B2E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:c480_ml_m5_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.1\\(2f\\)",
            "matchCriteriaId" : "533C38A4-64FF-42CA-9649-2FAE80D12CED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:c480_ml_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB191A5-B7D8-49C3-9CE9-F5CBD506D4C8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e140s_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "727956AA-0627-46B7-8394-E8A218E2A84D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e140s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEC2FF1-D0AB-49B1-AB28-D912384F5540"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e140d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "4E10DD81-5526-4C8A-841F-2561740A0457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e140d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7BA377-87BD-4330-9A69-0356A4AEE457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e160d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "47BEB922-330E-4A84-8079-0AD69E0D25D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e160d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A9C58E-5148-4671-BA3A-3A7216EC421B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e160s-m3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "05C2C217-1A58-44CF-8934-05A27DA3650C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e160s-m3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0E6AAD9-824C-4126-8347-2FF1895E6D33"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e180d-m3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "EA106E3B-870C-442A-AB69-E749196E6A57"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e180d-m3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "155D990F-C7DA-48DD-92CC-18542DBBE572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e1120d-m3_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "13F12356-BDF4-4EE0-8E85-532BD826D67E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e1120d-m3:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF77273F-73C0-40EB-BB4E-75269D46F074"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e140s-m2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "EE53EC1B-A239-41BD-A2F6-76F499EA3397"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e140s-m2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "757958F5-F58C-4128-B128-D989A56ACA34"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e160d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "47BEB922-330E-4A84-8079-0AD69E0D25D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e160d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A9C58E-5148-4671-BA3A-3A7216EC421B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e180d-m2_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "C5F0CBEF-1CA7-49D8-B7E2-5EDD2B3FB925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e180d-m2:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB3E47EB-9C60-4A06-956A-46B5D2E46239"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e140s-m1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "1D49F74E-A2BD-4C55-A236-AEB3E479416D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e140s-m1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94805A53-CCA0-4737-939F-1157F557770C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e140d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "4E10DD81-5526-4C8A-841F-2561740A0457"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e140d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD7BA377-87BD-4330-9A69-0356A4AEE457"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e140dp_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "EF97AF37-C12A-452F-AD50-581CD5122BBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e140dp:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE387668-61D1-459D-9871-C23252EF67D2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e160d_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "47BEB922-330E-4A84-8079-0AD69E0D25D7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e160d:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A9C58E-5148-4671-BA3A-3A7216EC421B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs-e160dp-m1_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.2\\(11.5\\)",
            "matchCriteriaId" : "8FDCFE0D-CAF5-4520-AE7B-25F0B66BD7FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs-e160dp-m1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67C1D42D-CEFF-4B66-B211-DAEA94D21F6D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:ucs_s3260_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "4.0\\(2o\\)",
            "matchCriteriaId" : "DF6CC866-6832-4F8F-B0B3-6D1A09E2F89B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:ucs_s3260:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FDC8A69-0914-44C1-8AEA-262E0A285C81"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-openred-zAYrU6d2",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-imc-openred-zAYrU6d2",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1400",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:09.983",
      "lastModified" : "2024-11-21T05:44:16.120",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de determinados  Wireless Access Points de Cisco Small Business 100, 300, and 500 Series, podrían permitir a un atacante remoto autenticado conseguir información confidencial o inyectar comandos arbitrarios en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap125_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1",
            "matchCriteriaId" : "FA84E503-E035-44D6-8742-02953CFA6A70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECA8468-5D7D-46DD-A967-E7EDA5FE8D4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.17",
            "matchCriteriaId" : "AA272A22-8CDA-4F6A-B39F-40CF3FE25500"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3B7126-28E1-42F8-98CF-0EC156BE68D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap150_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2.4",
            "matchCriteriaId" : "21FF39B7-E738-4892-9F94-12EE46E0323A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB01CB7-C5BB-49D6-85A7-CECED514C7CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap351_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.17",
            "matchCriteriaId" : "75164093-946B-49B5-922E-EBBA56A9088A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9917176-E908-4110-A641-FED1DFF41C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap361_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2.4",
            "matchCriteriaId" : "3CCE33DA-DB97-4C04-BB34-3757FAF4592C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap361:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49477A11-78C3-4EEA-899E-5E4623D38068"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap581_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1",
            "matchCriteriaId" : "A274C297-CB27-460B-9177-F11326B31CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap581:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C857E391-3C62-4F37-BD86-7184F79B89B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN71263107/index.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN71263107/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1401",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.017",
      "lastModified" : "2024-11-21T05:44:16.263",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of certain Cisco Small Business 100, 300, and 500 Series Wireless Access Points could allow an authenticated, remote attacker to obtain sensitive information from or inject arbitrary commands on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de determinados Wireless Access Points de Cisco Small Business 100, 300, y 500 Series, podrían permitir a un atacante remoto autenticado conseguir información confidencial o inyectar comandos arbitrarios en un dispositivo afectado.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap125_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1",
            "matchCriteriaId" : "FA84E503-E035-44D6-8742-02953CFA6A70"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EECA8468-5D7D-46DD-A967-E7EDA5FE8D4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap131_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.17",
            "matchCriteriaId" : "AA272A22-8CDA-4F6A-B39F-40CF3FE25500"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap131:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B3B7126-28E1-42F8-98CF-0EC156BE68D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap150_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2.4",
            "matchCriteriaId" : "21FF39B7-E738-4892-9F94-12EE46E0323A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB01CB7-C5BB-49D6-85A7-CECED514C7CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap351_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.2.17",
            "matchCriteriaId" : "75164093-946B-49B5-922E-EBBA56A9088A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9917176-E908-4110-A641-FED1DFF41C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap361_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.1.2.4",
            "matchCriteriaId" : "3CCE33DA-DB97-4C04-BB34-3757FAF4592C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap361:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49477A11-78C3-4EEA-899E-5E4623D38068"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:wap581_firmware:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "1.0.3.1",
            "matchCriteriaId" : "A274C297-CB27-460B-9177-F11326B31CB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:wap581:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C857E391-3C62-4F37-BD86-7184F79B89B7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://jvn.jp/en/jp/JVN71263107/index.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://jvn.jp/en/jp/JVN71263107/index.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sb-wap-multi-ZAfKGXhF",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1421",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.047",
      "lastModified" : "2024-11-21T05:44:19.547",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, local attacker to perform a command injection attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to a configuration command. An attacker could exploit this vulnerability by including malicious input during the execution of this command. A successful exploit could allow a non-privileged attacker authenticated in the restricted CLI to execute arbitrary commands on the underlying operating system (OS) with root privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco Enterprise NFV Infrastructure Software (NFVIS), podría permitir a un atacante local autenticado llevar a cabo un ataque de inyección de comandos en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por un usuario para un comando de configuración.&#xa0;Un atacante podría explotar esta vulnerabilidad si incluye información maliciosa durante la ejecución de este comando.&#xa0;Una explotación con éxito podría permitir a un atacante no privilegiado autenticado en la CLI restringida ejecutar comandos arbitrarios en el sistema operativo (SO) subyacente con privilegios de root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:enterprise_nfv_infrastructure_software:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.5.1",
            "matchCriteriaId" : "26D085CB-F98C-4452-A4E2-F53A8B5C5D02"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-cmdinj-DkFjqg2j",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-nfvis-cmdinj-DkFjqg2j",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1426",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.083",
      "lastModified" : "2024-11-21T05:44:20.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los procesos de instalación, desinstalación y actualización de Cisco AnyConnect Secure Mobility Client para Windows, podrían permitir a un atacante local autenticado secuestrar archivos DLL o ejecutables que son usados por la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en un dispositivo afectado con privilegios SYSTEM.&#xa0;Para explotar estas vulnerabilidades, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.06037",
            "matchCriteriaId" : "4946199D-6CD5-4E9B-8EB1-8B05C823F9BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1427",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.117",
      "lastModified" : "2024-11-21T05:44:20.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los procesos de instalación, desinstalación y actualización de Cisco AnyConnect Secure Mobility Client para Windows, podrían permitir a un atacante local autenticado secuestrar archivos DLL o ejecutables que son usados por la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en un dispositivo afectado con privilegios SYSTEM.&#xa0;Para explotar estas vulnerabilidades, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.06037",
            "matchCriteriaId" : "4946199D-6CD5-4E9B-8EB1-8B05C823F9BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1428",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.153",
      "lastModified" : "2024-11-21T05:44:20.490",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los procesos de instalación, desinstalación y actualización de Cisco AnyConnect Secure Mobility Client para Windows, podrían permitir a un atacante local autenticado secuestrar archivos DLL o ejecutables que son usadas por la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en un dispositivo afectado con privilegios SYSTEM.&#xa0;Para explotar estas vulnerabilidades, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.10.00093",
            "matchCriteriaId" : "7AD8DAF4-A2D9-4067-BE3D-AA695B10468F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1429",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.190",
      "lastModified" : "2024-11-21T05:44:20.610",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los procesos de instalación, desinstalación y actualización de Cisco AnyConnect Secure Mobility Client para Windows, podrían permitir a un atacante local autenticado secuestrar archivos DLL o ejecutables que son usadas por la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en un dispositivo afectado con privilegios SYSTEM.&#xa0;Para explotar estas vulnerabilidades, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.10.00093",
            "matchCriteriaId" : "7AD8DAF4-A2D9-4067-BE3D-AA695B10468F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1430",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.223",
      "lastModified" : "2024-11-21T05:44:20.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los procesos de instalación, desinstalación y actualización de Cisco AnyConnect Secure Mobility Client para Windows, podrían permitir a un atacante local autenticado secuestrar archivos DLL o ejecutables que son usadas por la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en un dispositivo afectado con privilegios SYSTEM.&#xa0;Para explotar estas vulnerabilidades, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.06037",
            "matchCriteriaId" : "4946199D-6CD5-4E9B-8EB1-8B05C823F9BE"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1438",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.257",
      "lastModified" : "2024-11-21T05:44:21.870",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco Wide Area Application Services (WAAS) Software could allow an authenticated, local attacker to gain access to sensitive information on an affected device. The vulnerability is due to improper input validation and authorization of specific commands that a user can execute within the CLI. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a specific set of commands. A successful exploit could allow the attacker to read arbitrary files that they originally did not have permissions to access."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el software Cisco Wide Area Application Services (WAAS) podría permitir a un atacante local autenticado conseguir acceso a información confidencial en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación inapropiada de la entrada y una autorización de comandos específicos que un usuario puede ejecutar dentro de la CLI.&#xa0;Un atacante podría explotar esta vulnerabilidad al autenticarse en un dispositivo afectado y emitir un ajuste específico de comandos.&#xa0;Una explotación con éxito podría permitir al atacante leer archivos arbitrarios a los que originalmente no tenían permiso para acceder"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-668"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:wide_area_application_services:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.4.5a",
            "matchCriteriaId" : "DC36443D-923A-4C3F-8383-287FF1559F47"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-waas-infdisc-Twb4EypK",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-waas-infdisc-Twb4EypK",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1447",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.293",
      "lastModified" : "2024-11-21T05:44:23.117",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the user account management system of Cisco AsyncOS for Cisco Content Security Management Appliance (SMA) could allow an authenticated, local attacker to elevate their privileges to root. This vulnerability is due to a procedural flaw in the password generation algorithm. An attacker could exploit this vulnerability by enabling specific Administrator-only features and connecting to the appliance through the CLI with elevated privileges. A successful exploit could allow the attacker to execute arbitrary commands as root and access the underlying operating system. To exploit this vulnerability, the attacker must have valid Administrator credentials."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el sistema de administración de cuentas de usuario de Cisco AsyncOS para Cisco Content Security Management Appliance (SMA) podría permitir a un atacante local autenticado elevar sus privilegios a root.&#xa0;Esta vulnerabilidad es debido a un fallo de procedimiento en el algoritmo de generación de contraseñas.&#xa0;Un atacante podría explotar esta vulnerabilidad habilitando funciones específicas solo para administradores y conectándose al dispositivo por medio de la CLI con privilegios elevados.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos arbitrarios como root y acceder al sistema operativo subyacente.&#xa0;Para explotar esta vulnerabilidad, el atacante debe tener credenciales de administrador válidas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-269"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.8.1-002",
            "matchCriteriaId" : "DB1F5E8F-451A-42F0-8C26-6ECD3C6D778D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "13.0.0-249",
            "versionEndExcluding" : "13.8.1-068",
            "matchCriteriaId" : "4E7D2727-2E2A-4EBC-B11E-3B5CB4FB3630"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-priv-esc-JJ8zxQsC",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sma-priv-esc-JJ8zxQsC",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1468",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.327",
      "lastModified" : "2024-11-21T05:44:25.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o conseguir acceso a información confidencial, o permitir a un atacante local autenticado alcanzar escalar privilegios o conseguir acceso no autorizado a la aplicación.&#xa0;Para mayor información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "54C73222-E3AC-45B5-8659-539D82DCB8C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1478",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.360",
      "lastModified" : "2024-11-21T05:44:26.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Java Management Extensions (JMX) component of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition on an affected system. This vulnerability is due to an unsecured TCP/IP port. An attacker could exploit this vulnerability by accessing the port and restarting the JMX process. A successful exploit could allow the attacker to cause a DoS condition on an affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el componente Java Management Extensions (JMX) de Cisco Unified Communications Manager (Unified CM) y Cisco Unified Communications Manager Session Management Edition (Unified CM SME) podría permitir a un atacante remoto autenticado causar una condición de denegación de servicio (DoS) en un sistema afectado.&#xa0;Esta vulnerabilidad es debido a un puerto TCP/IP no seguro.&#xa0;Un atacante podría explotar esta vulnerabilidad al acceder al puerto y reiniciando el proceso JMX.&#xa0;Una explotación con éxito podría permitir al atacante causar una condición de DoS en un sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:hosted_collaboration_mediation_fulfillment:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "12.6",
            "matchCriteriaId" : "BDFAA0D9-FC4F-412C-8DB3-A7803F56A788"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:-:*:*:*",
            "versionEndExcluding" : "12.6",
            "matchCriteriaId" : "A311E432-42C2-408C-91AA-FC21BAFD0C65"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:unified_communications_manager:*:*:*:*:session_management:*:*:*",
            "versionEndExcluding" : "12.6",
            "matchCriteriaId" : "0DB6097F-AB54-4768-96F1-AC232A2CAF01"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-dos-OO4SRYEf",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ucm-dos-OO4SRYEf",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1486",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.397",
      "lastModified" : "2024-11-21T05:44:27.800",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to enumerate user accounts. This vulnerability is due to the improper handling of HTTP headers. An attacker could exploit this vulnerability by sending authenticated requests to an affected system. A successful exploit could allow the attacker to compare the HTTP responses that are returned by the affected system to determine which accounts are valid user accounts."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco SD-WAN vManage Software, podría permitir a un atacante remoto no autenticado enumerar las cuentas de usuario.&#xa0;Esta vulnerabilidad es debido al manejo inapropiado de los encabezados HTTP.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de peticiones autenticadas a un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante comparar las respuestas HTTP que son devueltas por el sistema afectado para determinar qué cuentas son cuentas de usuario válidas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-203"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "54C73222-E3AC-45B5-8659-539D82DCB8C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-enumeration-64eNnDKy",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-enumeration-64eNnDKy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1490",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.430",
      "lastModified" : "2024-11-21T05:44:28.290",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco AsyncOS for Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the interface of an affected device. This vulnerability is due to improper validation of user-supplied input in the web-based management interface. An attacker could exploit this vulnerability by persuading a user to retrieve a crafted file that contains malicious payload and upload it to the affected device. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco AsyncOS para Cisco Web Security Appliance (WSA), podría permitir a un atacante remoto no autenticado llevar a cabo un ataque de tipo Cross-Site Scripting (XSS) contra un usuario de la interfaz de un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación inapropiada de la entrada suministrada por el usuario en la interfaz de administración basada en web.&#xa0;Un atacante podría explotar esta vulnerabilidad al persuadir a un usuario de que recupere un archivo diseñado que contenga una carga útil maliciosa y cargar en el dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script arbitrario en el contexto de la interfaz afectada o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "3886764B-E329-4953-AB67-AA5629CCED3C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-xss-mVjOWchB",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-wsa-xss-mVjOWchB",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1496",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.467",
      "lastModified" : "2024-11-21T05:44:28.950",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the install, uninstall, and upgrade processes of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated, local attacker to hijack DLL or executable files that are used by the application. A successful exploit could allow the attacker to execute arbitrary code on an affected device with SYSTEM privileges. To exploit these vulnerabilities, the attacker must have valid credentials on the Windows system. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en los procesos de instalación, desinstalación y actualización de Cisco AnyConnect Secure Mobility Client para Windows, podrían permitir a un atacante local autenticado secuestrar archivos DLL o ejecutables que utiliza la aplicación.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código arbitrario en un dispositivo afectado con privilegios SYSTEM.&#xa0;Para explotar estas vulnerabilidades, el atacante debe tener credenciales válidas en el sistema Windows.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-378"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-427"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:windows:*:*",
            "versionEndExcluding" : "4.9.03022",
            "matchCriteriaId" : "6DFE2E98-E1B3-4218-A423-A8C5B1DD0491"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-code-exec-jR3tWTA6",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1497",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.500",
      "lastModified" : "2025-10-28T13:53:41.230",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco HyperFlex HX, podrían permitir a un atacante remoto no autenticado llevar a cabo ataques de inyección de comandos contra un dispositivo afectado.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco HyperFlex HX Installer Virtual Machine Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0\\(2e\\)",
            "matchCriteriaId" : "17BC381C-F6CD-4B90-B4AE-8544966ECCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.5\\(2a\\)",
            "matchCriteriaId" : "D125A3BA-3182-4E44-92CB-E46CA2D5292D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_af_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5AFDE1-3A3B-4AF8-A425-492558B0B2EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_all_nvme_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CAFBEF-82AC-425C-B659-7856C2ADC7DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_edge_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B38E0BA-D320-406B-8739-6218B96DFD24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E19D6AF-E190-463D-B359-BB02362490D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4440219-AA2A-4AA3-B780-2F2DB62D0100"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c_af_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF775A8-5A2C-42B7-B26C-85921D803A25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5009EC3A-40C9-44B0-8E5E-599657F819FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162976/Cisco-HyperFlex-HX-Data-Platform-Command-Execution.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162976/Cisco-HyperFlex-HX-Data-Platform-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1497",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1498",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.537",
      "lastModified" : "2025-10-28T13:58:25.420",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en la interfaz de administración basada en web de Cisco HyperFlex HX, podrían permitir a un atacante remoto no autenticado llevar a cabo ataques de inyección de comandos contra un dispositivo afectado.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2021-11-03",
      "cisaActionDue" : "2021-11-17",
      "cisaRequiredAction" : "Apply updates per vendor instructions.",
      "cisaVulnerabilityName" : "Cisco HyperFlex HX Data Platform Command Injection Vulnerability",
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-77"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0\\(2e\\)",
            "matchCriteriaId" : "17BC381C-F6CD-4B90-B4AE-8544966ECCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.5\\(2a\\)",
            "matchCriteriaId" : "D125A3BA-3182-4E44-92CB-E46CA2D5292D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_af_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5AFDE1-3A3B-4AF8-A425-492558B0B2EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_all_nvme_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CAFBEF-82AC-425C-B659-7856C2ADC7DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_edge_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B38E0BA-D320-406B-8739-6218B96DFD24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E19D6AF-E190-463D-B359-BB02362490D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4440219-AA2A-4AA3-B780-2F2DB62D0100"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c_af_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF775A8-5A2C-42B7-B26C-85921D803A25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5009EC3A-40C9-44B0-8E5E-599657F819FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162976/Cisco-HyperFlex-HX-Data-Platform-Command-Execution.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162976/Cisco-HyperFlex-HX-Data-Platform-Command-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-rce-TjjNrkpR",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-1498",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1499",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.567",
      "lastModified" : "2024-11-21T05:44:29.350",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the upload function. An attacker could exploit this vulnerability by sending a specific HTTP request to an affected device. A successful exploit could allow the attacker to upload files to the affected device with the permissions of the tomcat8 user."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco HyperFlex HX Data Platform, podría permitir a un atacante remoto no autenticado cargar archivos en un dispositivo afectado.&#xa0;Esta vulnerabilidad es debido a una falta de autenticación para la función upload.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío una petición HTTP específica hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante cargar archivos al dispositivo afectado con los permisos del usuario tomcat8"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.0\\(2e\\)",
            "matchCriteriaId" : "17BC381C-F6CD-4B90-B4AE-8544966ECCE6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:hyperflex_hx_data_platform:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.5",
            "versionEndExcluding" : "4.5\\(2a\\)",
            "matchCriteriaId" : "D125A3BA-3182-4E44-92CB-E46CA2D5292D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_af_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D5AFDE1-3A3B-4AF8-A425-492558B0B2EA"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_all_nvme_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43CAFBEF-82AC-425C-B659-7856C2ADC7DF"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_edge_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B38E0BA-D320-406B-8739-6218B96DFD24"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx220c_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E19D6AF-E190-463D-B359-BB02362490D1"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4440219-AA2A-4AA3-B780-2F2DB62D0100"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c_af_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EFF775A8-5A2C-42B7-B26C-85921D803A25"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:hyperflex_hx240c_m5:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5009EC3A-40C9-44B0-8E5E-599657F819FA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/163203/Cisco-HyperFlex-HX-Data-Platform-File-Upload-Remote-Code-Execution.html",
        "source" : "psirt@cisco.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-upload-KtCK8Ugz",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/163203/Cisco-HyperFlex-HX-Data-Platform-File-Upload-Remote-Code-Execution.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-hyperflex-upload-KtCK8Ugz",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1505",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.603",
      "lastModified" : "2024-11-21T05:44:30.143",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o conseguir acceso a información confidencial, o permitir a un atacante local autenticado alcanzar escalar privilegios o conseguir acceso no autorizado a la aplicación.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "54C73222-E3AC-45B5-8659-539D82DCB8C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1506",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.633",
      "lastModified" : "2024-11-21T05:44:30.267",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o conseguir acceso a información confidencial, o permitir a un atacante local autenticado alcanzar escalar privilegios o conseguir acceso no autorizado a la aplicación.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "54C73222-E3AC-45B5-8659-539D82DCB8C8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1507",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.663",
      "lastModified" : "2024-11-21T05:44:30.383",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in an API of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the application web-based interface. This vulnerability exists because the API does not properly validate user-supplied input. An attacker could exploit this vulnerability by sending malicious input to the API. A successful exploit could allow the attacker to execute arbitrary script code in the context of the web-based interface or access sensitive, browser-based information."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en una API de Cisco SD-WAN vManage Software, podría permitir a un atacante remoto autenticado llevar a cabo un ataque de tipo Cross-Site Scripting almacenados (XSS) contra los usuarios de la interfaz basada en web de la aplicación.&#xa0;Esta vulnerabilidad se presenta porque la API no comprueba apropiadamente la entrada proporcionada por el usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío información maliciosa a la API.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar código script de comandos arbitrario en el contexto de la interfaz basada en web o acceder a información confidencial basada en el navegador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N",
            "baseScore" : 6.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.1,
          "impactScore" : 2.7
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "1CBC28B1-78A8-49FA-88AF-01EC2A252367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-xss-eN75jxtW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-vmanage-xss-eN75jxtW",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1508",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.693",
      "lastModified" : "2024-11-21T05:44:30.507",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to execute arbitrary code or gain access to sensitive information, or allow an authenticated, local attacker to gain escalated privileges or gain unauthorized access to the application. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vManage Software, podrían permitir a un atacante remoto no autenticado ejecutar código arbitrario o conseguir acceso a información confidencial, o permitir a un atacante local autenticado alcanzar escalar privilegios o conseguir acceso no autorizado a la aplicación.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "19.2.99",
            "matchCriteriaId" : "C071AFF9-C3A8-4C34-8F9F-6D4C2BBCF32E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.3",
            "matchCriteriaId" : "E5B44703-E7B2-4E34-BCB4-7FE91E2F07C1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-4TbynnhZ",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1509",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.723",
      "lastModified" : "2024-11-21T05:44:30.627",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vEdge Software, podrían permitir a un atacante ejecutar código arbitrario como usuario root o causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C",
            "baseScore" : 8.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 6.8,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "7BFED2F3-4C18-4BE5-9F97-2CFCE37E7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "B89D5AE2-3ED3-4C57-AF93-E9750D38F029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE3B3E4-CE46-454C-B7A1-2A42657C7035"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "50C849A5-EBF4-4CD7-93AE-503C3E0B7A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "834192CC-585D-445E-B2AD-D73E9CDF3FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D905B3F-094C-472C-AAAD-A4129282E942"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019975D-3A45-4522-9CB9-F4258C371DF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "829BA8C4-8E99-4338-817B-9F9FF37105BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "6375DFCF-2EEB-482B-AAD4-8FAB8F03C9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7DE9EC-0075-4655-A888-A4ED3DB002A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "200199EC-2819-4DE0-828C-0F56790CA1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "104BBAE4-C7C1-4E5A-A540-AF679FCE1CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E03BDAC-9DF0-444D-B5C8-483892B31982"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061A302C-8D35-4E80-93DA-916DA7E90C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "E479E1A4-0F80-4FDC-8F9F-9E23A885179A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "584863D2-B181-4CDF-8266-EEBA56A5AA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADF97B2-33D0-4A28-BDFC-CBD3A235EF5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AF13E-4463-478B-AA94-97406A80CB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "4288CD57-CDEE-4B03-8163-7CDDE7767914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "50C0D971-E2C4-4048-A08F-0A5D437866F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E998DFA-CE7F-4954-AB06-CBB15317C6A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356861D-E6CA-4973-9597-629507E8C07E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "430D9FAC-36E8-4AB0-85F2-88D7EF1F6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "DDBBDE43-BBAE-431B-AF56-73D9CC8743F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D58D17-951F-446E-8004-A489E3A9725E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94999112-9EAA-4707-B002-F867D7628C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1510",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.753",
      "lastModified" : "2024-11-21T05:44:30.783",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vEdge Software, podrían permitir a un atacante ejecutar código arbitrario como usuario root o causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "7BFED2F3-4C18-4BE5-9F97-2CFCE37E7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "B89D5AE2-3ED3-4C57-AF93-E9750D38F029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE3B3E4-CE46-454C-B7A1-2A42657C7035"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "50C849A5-EBF4-4CD7-93AE-503C3E0B7A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "834192CC-585D-445E-B2AD-D73E9CDF3FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D905B3F-094C-472C-AAAD-A4129282E942"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019975D-3A45-4522-9CB9-F4258C371DF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "829BA8C4-8E99-4338-817B-9F9FF37105BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "6375DFCF-2EEB-482B-AAD4-8FAB8F03C9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7DE9EC-0075-4655-A888-A4ED3DB002A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "200199EC-2819-4DE0-828C-0F56790CA1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "104BBAE4-C7C1-4E5A-A540-AF679FCE1CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E03BDAC-9DF0-444D-B5C8-483892B31982"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061A302C-8D35-4E80-93DA-916DA7E90C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "E479E1A4-0F80-4FDC-8F9F-9E23A885179A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "584863D2-B181-4CDF-8266-EEBA56A5AA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADF97B2-33D0-4A28-BDFC-CBD3A235EF5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AF13E-4463-478B-AA94-97406A80CB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "4288CD57-CDEE-4B03-8163-7CDDE7767914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "50C0D971-E2C4-4048-A08F-0A5D437866F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E998DFA-CE7F-4954-AB06-CBB15317C6A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356861D-E6CA-4973-9597-629507E8C07E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "430D9FAC-36E8-4AB0-85F2-88D7EF1F6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "DDBBDE43-BBAE-431B-AF56-73D9CC8743F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D58D17-951F-446E-8004-A489E3A9725E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94999112-9EAA-4707-B002-F867D7628C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1511",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.783",
      "lastModified" : "2024-11-21T05:44:30.937",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Multiple vulnerabilities in Cisco SD-WAN vEdge Software could allow an attacker to execute arbitrary code as the root user or cause a denial of service (DoS) condition on an affected device. For more information about these vulnerabilities, see the Details section of this advisory."
      }, {
        "lang" : "es",
        "value" : "Múltiples vulnerabilidades en Cisco SD-WAN vEdge Software, podrían permitir a un atacante ejecutar código arbitrario como usuario root o causar una condición de denegación de servicio (DoS) en un dispositivo afectado.&#xa0;Para obtener más información sobre estas vulnerabilidades, consulte la sección Detalles de este aviso"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "7BFED2F3-4C18-4BE5-9F97-2CFCE37E7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "B89D5AE2-3ED3-4C57-AF93-E9750D38F029"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDE3B3E4-CE46-454C-B7A1-2A42657C7035"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "50C849A5-EBF4-4CD7-93AE-503C3E0B7A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "834192CC-585D-445E-B2AD-D73E9CDF3FED"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D905B3F-094C-472C-AAAD-A4129282E942"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019975D-3A45-4522-9CB9-F4258C371DF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "829BA8C4-8E99-4338-817B-9F9FF37105BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "6375DFCF-2EEB-482B-AAD4-8FAB8F03C9C0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF7DE9EC-0075-4655-A888-A4ED3DB002A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "200199EC-2819-4DE0-828C-0F56790CA1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "104BBAE4-C7C1-4E5A-A540-AF679FCE1CD2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E03BDAC-9DF0-444D-B5C8-483892B31982"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061A302C-8D35-4E80-93DA-916DA7E90C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "E479E1A4-0F80-4FDC-8F9F-9E23A885179A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "584863D2-B181-4CDF-8266-EEBA56A5AA85"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BADF97B2-33D0-4A28-BDFC-CBD3A235EF5F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AF13E-4463-478B-AA94-97406A80CB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "4288CD57-CDEE-4B03-8163-7CDDE7767914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "50C0D971-E2C4-4048-A08F-0A5D437866F8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E998DFA-CE7F-4954-AB06-CBB15317C6A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356861D-E6CA-4973-9597-629507E8C07E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "772B02D0-4C02-4C27-AAA4-AF0BAF00A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "430D9FAC-36E8-4AB0-85F2-88D7EF1F6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "DDBBDE43-BBAE-431B-AF56-73D9CC8743F7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:19.2.99:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0D58D17-951F-446E-8004-A489E3A9725E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94999112-9EAA-4707-B002-F867D7628C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-buffover-MWGucjtO",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1512",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.817",
      "lastModified" : "2024-11-21T05:44:31.073",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. An attacker could exploit this vulnerability by issuing that command with specific parameters. A successful exploit could allow the attacker to overwrite the content in any arbitrary files that reside on the underlying host file system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI de Cisco SD-WAN Software, podría permitir a un atacante local autenticado sobrescribir archivos arbitrarios en el sistema de archivos subyacente de un sistema afectado.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de los parámetros de la entrada proporcionados por el usuario de un comando CLI específico.&#xa0;Un atacante podría explotar esta vulnerabilidadal al emitir  ese comando con parámetros específicos.&#xa0;Una explotación con éxito podría permitir al atacante sobrescribir el contenido de cualquier archivo arbitrario que resida en el sistema de archivos del host subyacente"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-552"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "19.2",
            "versionEndExcluding" : "19.2.3",
            "matchCriteriaId" : "3FB1FC04-6D73-42F5-9809-EF03C1394F75"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "3366F4EC-9DCD-44F8-8430-1B3BA7A9B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.4.6",
            "matchCriteriaId" : "37F7EB56-340D-46CE-BA4C-34FAE6843830"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.2",
            "matchCriteriaId" : "9E4006C4-164F-44EA-84BD-C0BBA5EBD59F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300CB6ED-1ECC-4007-A522-06C07B83ED55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vsmart_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF370668-127C-409B-83FE-293B830D4FB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86317BCD-C9A3-41A3-9BEB-EDAD5428B0DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D2D470-F97D-4B59-ACBA-866049389EF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019975D-3A45-4522-9CB9-F4258C371DF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2036EAF7-2541-4C35-B1C4-9E0957272FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1693BEA9-3FCA-4B96-8CB2-E43BA56A9CCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90003391-8A4D-4A7E-8D1B-AC1700D4CEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061A302C-8D35-4E80-93DA-916DA7E90C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5725A7-6EA8-405E-B1AF-7C787DD6728B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AF13E-4463-478B-AA94-97406A80CB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050982D6-BB38-44D0-B67E-73DE9E7567AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356861D-E6CA-4973-9597-629507E8C07E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE4E07-253D-44FD-93A4-3750603B44AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7851F-3E72-4677-B907-CF777EBED2FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A4CEAC-97A4-4A0A-BEF1-B015FBE4E6FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94999112-9EAA-4707-B002-F867D7628C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfile-7Qhd9mCn",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-arbfile-7Qhd9mCn",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1513",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.850",
      "lastModified" : "2024-11-21T05:44:31.207",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the vDaemon process of Cisco SD-WAN Software could allow an unauthenticated, remote attacker to cause a device to reload, resulting in a denial of service (DoS) condition. This vulnerability is due to insufficient handling of malformed packets. An attacker could exploit this vulnerability by sending crafted traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el proceso vDaemon de Cisco SD-WAN Software, podría permitir a un atacante remoto no autenticado causar la recarga de un dispositivo, resultando en una condición de denegación de servicio (DoS).&#xa0;Esta vulnerabilidad es debido al manejo insuficiente de paquetes malformados.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío tráfico diseñado hacia un dispositivo afectado.&#xa0;Una explotación con éxito podría permitir al atacante causar que el dispositivo se recargue, resultando en una condición de DoS"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 7.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "8782BEB0-5880-4DF8-A0E3-A8F45437E121"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "05AFD69C-BB2C-43E0-89CF-FDA00B8F4CB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "300CB6ED-1ECC-4007-A522-06C07B83ED55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vsmart_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF370668-127C-409B-83FE-293B830D4FB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "86317BCD-C9A3-41A3-9BEB-EDAD5428B0DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D2D470-F97D-4B59-ACBA-866049389EF1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019975D-3A45-4522-9CB9-F4258C371DF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2036EAF7-2541-4C35-B1C4-9E0957272FAD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1693BEA9-3FCA-4B96-8CB2-E43BA56A9CCA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "90003391-8A4D-4A7E-8D1B-AC1700D4CEDC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061A302C-8D35-4E80-93DA-916DA7E90C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D5725A7-6EA8-405E-B1AF-7C787DD6728B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AF13E-4463-478B-AA94-97406A80CB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "050982D6-BB38-44D0-B67E-73DE9E7567AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356861D-E6CA-4973-9597-629507E8C07E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "61DE4E07-253D-44FD-93A4-3750603B44AC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7851F-3E72-4677-B907-CF777EBED2FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32A4CEAC-97A4-4A0A-BEF1-B015FBE4E6FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94999112-9EAA-4707-B002-F867D7628C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dos-Ckn5cVqW",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-dos-Ckn5cVqW",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1514",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.887",
      "lastModified" : "2024-11-21T05:44:31.353",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to inject arbitrary commands to be executed with Administrator privileges on the underlying operating system. This vulnerability is due to insufficient input validation on certain CLI commands. An attacker could exploit this vulnerability by authenticating to the device and submitting crafted input to the CLI. The attacker must be authenticated as a low-privileged user to execute the affected commands. A successful exploit could allow the attacker to execute commands with Administrator privileges."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la CLI de Cisco SD-WAN Software, podría permitir a un atacante local autenticado inyectar comandos arbitrarios para que sean ejecutados con privilegios de administrador en el Sistema Operativo subyacente.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la entrada en determinados comandos de la CLI.&#xa0;Un atacante podría explotar esta vulnerabilidad si se autentica en el dispositivo y envía una entrada diseñada a la CLI.&#xa0;El atacante debe estar autenticado como un usuario poco privilegiado para ejecutar los comandos afectados.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos con privilegios de administrador"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV30" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.0",
            "vectorString" : "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N",
            "baseScore" : 4.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 2.5
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "294BFF76-0352-4778-B6DA-3F8D5C69B5EE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "3366F4EC-9DCD-44F8-8430-1B3BA7A9B95F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "C2D155FE-14C5-4658-A5D4-974DCE7FED4F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:catalyst_sd-wan_manager:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "BE2C4782-DD4D-4113-A367-13DA609AD5F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "DBCB1ED4-B8F6-454A-A50E-1E6C5799A38B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "52660B0F-9951-4720-9243-C04D19E1C900"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "43CB0C13-B19C-4716-9079-E3187C6A8F60"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "5CBDDA10-0C6A-4AE2-A79D-6ACE91BCE422"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vbond_orchestrator:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "3079495E-BB87-48EF-92F2-5C0DFBBDFB2D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "CA56832C-0BA7-49F8-B03D-F7A8DDBA2D76"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "E9F385B4-A7C9-4964-9A2F-9B246C2A4219"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "35D792D2-7C42-4E49-A024-7D8F10A5CD03"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "89290824-9E80-4DA6-B943-500A9DC80EF4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "57361E3C-D8AD-4971-8015-96B8910B847D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vsmart_controller_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "E6B61FD2-6C23-4A1A-AED4-CAD54D0715C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vsmart_controller:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF370668-127C-409B-83FE-293B830D4FB4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "7E03063D-9DB6-4D3A-8FFF-C530635371CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "43E988F6-8D4D-4E75-9C43-31E92AA3F85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "0C67D65F-5DBD-4DCE-84CF-F1F2FBA4A250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "7BFED2F3-4C18-4BE5-9F97-2CFCE37E7A2E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "B89D5AE2-3ED3-4C57-AF93-E9750D38F029"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AAB4DD-1C45-412F-84AA-C056A0BBFB9A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "BBF226AE-FF8F-4203-8DAC-438E82AEC85A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "1AD6B70F-1356-4AB4-A8DB-6BB3BAD854A6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "669F7796-2CBF-42BF-91C4-F861DF09D4B7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "50C849A5-EBF4-4CD7-93AE-503C3E0B7A05"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_1000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "834192CC-585D-445E-B2AD-D73E9CDF3FED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F019975D-3A45-4522-9CB9-F4258C371DF6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "9A5A7F2E-0B61-4C4C-AE1F-BAFB735DA905"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "1158B505-4DAC-42BB-A9E5-533BCA7545F4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "427DC9A5-3374-440C-A797-DC7BBCCCB13D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "12136AD8-9113-46B9-B6A9-0C330ABB05B9"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "632EBFCA-132A-4AC9-A244-7D6EBCAEAC16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0811E0B5-889E-451E-B754-A8FEE32BDFA2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "2E77822B-DEF3-44C3-9AFE-A406ECD26EE5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "9A4C603C-9858-4048-AA20-7C7F7BB84DBD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "A51AE026-39C0-400B-8E78-21ACBF6D560F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "829BA8C4-8E99-4338-817B-9F9FF37105BE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100m_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "6375DFCF-2EEB-482B-AAD4-8FAB8F03C9C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36973815-F46D-4ADA-B9DF-BCB70AC60BD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "646D2962-5FB3-45E1-B743-CFDF6219742B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "B55B533F-0942-4848-A823-8D17BD9C70AC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "04BBF912-56A4-4B0D-AEDE-3B4A66E46DC6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "200199EC-2819-4DE0-828C-0F56790CA1B4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_100wm_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "104BBAE4-C7C1-4E5A-A540-AF679FCE1CD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_100wm:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "061A302C-8D35-4E80-93DA-916DA7E90C06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "66F09F72-2D64-4952-8ED1-5B1D8817B065"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "28170198-23CE-48F9-8502-3C0F51EDCB33"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "48758B17-6BB7-45BB-AB83-36AF55238250"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "E479E1A4-0F80-4FDC-8F9F-9E23A885179A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_2000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "584863D2-B181-4CDF-8266-EEBA56A5AA85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "140AF13E-4463-478B-AA94-97406A80CB86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "5488D32F-808B-4327-8C57-13F270C02C1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "7B559B94-0730-4F3D-90AB-E71D2E684C19"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "2090A040-270A-4BD1-8430-603C709F64E8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "4288CD57-CDEE-4B03-8163-7CDDE7767914"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_5000_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "50C0D971-E2C4-4048-A08F-0A5D437866F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_5000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1356861D-E6CA-4973-9597-629507E8C07E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "7F1B097C-09B1-4DC6-B0F9-92E01C415DF3"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "2FA95C6C-72C5-4DDF-B036-5AB2900C9C71"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "C8123987-EAD3-47D2-AD9F-167A1D52AEF7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "25953689-6E4F-477A-A251-54C1D8ED8880"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge-100b_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "3414238A-002E-48F7-82DE-FE4122B1A10A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge-100b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07E7851F-3E72-4677-B907-CF777EBED2FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "18.3",
            "matchCriteriaId" : "83F5CAE4-CB80-441B-928D-86C13570AA1B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.1",
            "versionEndExcluding" : "20.1.1",
            "matchCriteriaId" : "DC788143-279B-4325-988A-5FBAA4B438CC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.3",
            "versionEndExcluding" : "20.3.1",
            "matchCriteriaId" : "2FBE16B1-8E2A-4DF8-B362-86874FAC1F0C"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.4",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "430D9FAC-36E8-4AB0-85F2-88D7EF1F6B7A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:vedge_cloud_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "20.5",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "DDBBDE43-BBAE-431B-AF56-73D9CC8743F7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:vedge_cloud:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94999112-9EAA-4707-B002-F867D7628C49"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-QVszVUPy",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-privesc-QVszVUPy",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1515",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.920",
      "lastModified" : "2024-11-21T05:44:31.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in Cisco SD-WAN vManage Software could allow an unauthenticated, adjacent attacker to gain access to sensitive information. This vulnerability is due to improper access controls on API endpoints when Cisco SD-WAN vManage Software is running in multi-tenant mode. An attacker with access to a device that is managed in the multi-tenant environment could exploit this vulnerability by sending a request to an affected API endpoint on the vManage system. A successful exploit could allow the attacker to gain access to sensitive information that may include hashed credentials that could be used in future attacks."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en Cisco SD-WAN vManage Software, podría permitir a un atacante adyacente no autenticado conseguir acceso a información confidencial.&#xa0;Esta vulnerabilidad es debido a controles de acceso incorrectos en los endpoints de la API cuando Cisco SD-WAN vManage Software se ejecuta en modo multi-tenant.&#xa0;Un atacante con acceso a un dispositivo administrado en el entorno de multi-tenant podría explotar esta vulnerabilidad mediante el envío una petición hacia un endpoint de la API afectado en el sistema vManage.&#xa0;Una explotación con éxito podría permitir al atacante obtener acceso a información confidencial que puede incluir credenciales hash que podrían ser usados en futuros ataques"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 3.3,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.5,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-284"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.4.1",
            "matchCriteriaId" : "E88ABD08-4911-4D55-B2EA-6F9DFDFD54CA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-9VZO4gfU",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sd-wan-vmanage-9VZO4gfU",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1516",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.953",
      "lastModified" : "2024-11-21T05:44:31.637",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), and Cisco Web Security Appliance (WSA) could allow an authenticated, remote attacker to access sensitive information on an affected device. The vulnerability exists because confidential information is included in HTTP requests that are exchanged between the user and the device. An attacker could exploit this vulnerability by looking at the raw HTTP requests that are sent to the interface. A successful exploit could allow the attacker to obtain some of the passwords that are configured throughout the interface."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco AsyncOS Software para Cisco Content Security Management Appliance (SMA), Cisco Email Security Appliance (ESA), y Cisco Web Security Appliance (WSA), podría permitir a un atacante remoto autenticado acceder a información confidencial. en un dispositivo afectado.&#xa0;La vulnerabilidad se presenta porque la información confidencial es incluída en las peticiones HTTP que son intercambiadas entre el usuario y el dispositivo.&#xa0;Un atacante podría explotar esta vulnerabilidad al observar las peticiones HTTP sin procesar que son enviadas a la interfaz.&#xa0;Una explotación con éxito podría permitir al atacante obtener algunas de las contraseñas que están configuradas en toda la interfaz"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-540"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:content_security_management_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F22A698-F34C-44C0-9911-0840A2E7E163"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:email_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "678C2C6F-6D46-4BBE-A902-7AD031D8EBA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:web_security_appliance:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7C2555C-7E97-475F-9EDC-027B51A40708"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:cisco:asyncos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "14.0",
            "matchCriteriaId" : "71D9CB16-8225-4935-91A9-C0EA9A4305BD"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ironport_web_security_appliance:13.6.2-023:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FC801CD-44BA-4026-9FA4-A40A9D821E52"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ironport_web_security_appliance:14.0.0-090:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD0CF884-1313-446F-BFDA-A690C5F6D495"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ironport_web_security_appliance:14.0.0-133:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D06C6D3F-483C-4735-B488-1A11DC372B5E"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ironport_web_security_appliance:14.0.0-292:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7FF3FE1-6DE5-4CD5-A864-1E136D059926"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:ironport_web_security_appliance:14.0.0-300:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E601B03B-DF17-4F0B-A2DA-415FDC581931"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-gY2AEz2H",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-wsa-sma-info-gY2AEz2H",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1519",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:10.987",
      "lastModified" : "2024-11-21T05:44:32.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the interprocess communication (IPC) channel of Cisco AnyConnect Secure Mobility Client Software could allow an authenticated, local attacker to overwrite VPN profiles on an affected device. The vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafted IPC message to the AnyConnect process. A successful exploit could allow the attacker to modify VPN profile files. To exploit this vulnerability, the attacker must have valid credentials on the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el canal de comunicación entre procesos (IPC) de Cisco AnyConnect Secure Mobility Client Software, podría permitir a un atacante local autenticado sobrescribir los perfiles de VPN en un dispositivo afectado.&#xa0;La vulnerabilidad es debido a una comprobación insuficiente de la entrada suministrada por un usuario.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío un mensaje IPC diseñado al proceso AnyConnect.&#xa0;Una explotación con éxito podría permitir al atacante modificar los archivos de perfil de VPN.&#xa0;Para explotar esta vulnerabilidad, el atacante debe tener credenciales válidas en el sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 4.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-20"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:anyconnect_secure_mobility_client:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.10.00093",
            "matchCriteriaId" : "A44524DC-AC2B-47F4-A2A6-4835529ADA77"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-profile-AggMUCDg",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-anyconnect-profile-AggMUCDg",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1520",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:11.027",
      "lastModified" : "2024-11-21T05:44:32.147",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the internal message processing of Cisco RV340, RV340W, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an authenticated, local attacker to run arbitrary commands with root privileges on the underlying operating system (OS). This vulnerability exists because an internal messaging service does not properly sanitize input. An attacker could exploit this vulnerability by first authenticating to the device and then sending a crafted request to the internal service. A successful exploit could allow the attacker to run arbitrary commands with root privileges on the underlying OS. To exploit this vulnerability, the attacker must have valid Administrator credentials for the device."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en el procesamiento interno de mensajes de Cisco RV340, RV340W, RV345, y RV345P Dual WAN Gigabit VPN Routers, podría permitir a un atacante local autenticado ejecutar comandos arbitrarios con privilegios root en el Sistema Operativo (SO) subyacente.&#xa0;Esta vulnerabilidad se presenta porque un servicio de mensajería interna no sanea apropiadamente la entrada.&#xa0;Un atacante podría explotar esta vulnerabilidad si se autentica primero en el dispositivo y luego envía una petición diseñada hacia el servicio interno.&#xa0;Una explotación con éxito podría permitir al atacante ejecutar comandos arbitrarios con privilegios root en el Sistema Operativo subyacente.&#xa0;Para explotar esta vulnerabilidad, el atacante debe tener credenciales de administrador válidas para el dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-123"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "DB20DECC-5D66-4E87-8E19-AFCE0EC2538B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2A4411AC-2A74-4315-BA6B-D7E1AA538BDB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv340w_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "F1D3E083-7BC2-485B-82CD-CE3DE176A047"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv340w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21E55019-F969-4ACD-A6C8-1D2EE05F8EE4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "504FBEF9-DCC1-4EE2-9F04-14E38141A03C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E91E68B-CBE9-462E-82D4-6F588B8E84E8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:rv345p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.03.21",
            "matchCriteriaId" : "9C7C3346-DD1A-41CC-BB4D-F42CCE75A928"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:rv345p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5120BAB7-FB3A-481E-9ECD-48341846AFBD"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-34x-privesc-GLN8ZAQE",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-rv-34x-privesc-GLN8ZAQE",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1521",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:11.063",
      "lastModified" : "2024-11-21T05:44:32.287",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the Cisco Discovery Protocol implementation for Cisco Video Surveillance 8000 Series IP Cameras could allow an unauthenticated, adjacent attacker to cause an affected IP camera to reload. This vulnerability is due to missing checks when processing Cisco Discovery Protocol messages. An attacker could exploit this vulnerability by sending a malicious Cisco Discovery Protocol packet to an affected IP camera. A successful exploit could allow the attacker to cause the affected IP camera to reload unexpectedly, resulting in a denial of service (DoS) condition. Note: Cisco Discovery Protocol is a Layer 2 protocol. To exploit this vulnerability, an attacker must be in the same broadcast domain as the affected device (Layer 2 adjacent)."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la implementación de Cisco Discovery para Cisco Video Surveillance 8000 Series IP Cameras, podría permitir a un atacante adyacente no autenticado causar la recarga de una cámara IP afectada.&#xa0;Esta vulnerabilidad es debido a la falta de comprobaciones al procesar mensajes Cisco Discovery Protocol.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío de un paquete de Cisco Discovery Protocol malicioso hacia una cámara IP afectada.&#xa0;Una explotación con éxito podría permitir al atacante hacer que la cámara IP afectada se recargue inesperadamente, resultando en una condición de denegación de servicio (DoS).&#xa0;Nota: El protocolo Cisco Discovery Protocol es un protocolo de Capa 2.&#xa0;Para explotar esta vulnerabilidad, un atacante debe estar en el mismo dominio de transmisión que el dispositivo afectado (capa 2 adyacente)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:C",
            "baseScore" : 6.1,
            "accessVector" : "ADJACENT_NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 6.5,
          "impactScore" : 6.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8400_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "607AF637-E7DF-4081-A794-840BA525E9D2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8400:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D53CC453-3532-443D-85C7-48888B4C1D65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8000p_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "C47BF42C-39F6-4741-834F-676AB19836EB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8000p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C942DFAC-3E07-42A6-8126-1A2E8D9C1B9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8020_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "63AEB8A0-BFF9-46B7-B454-8DB8453F555C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EED87A3F-9180-4441-9482-7BABBE9D89F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8030_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "4DADE470-E7D4-4D18-A4E1-04F412EC9823"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "545241D1-2C87-4490-B3B1-E446CEEC47BE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8070_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "472B0B04-BB34-42DC-8550-8D05A008E99B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B90910E3-06CA-4012-AE91-354F800EDC4A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8620_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "2A4DB01E-C8C7-401A-B770-F5E8A1DC9D2D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "499A6E92-C012-4BE2-B6A3-F64441776ED8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8630_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "1A65CACB-965D-4BA5-9558-2DD8D9572C29"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "203DE6A1-AB08-4FF8-B8AB-2157D3692FB5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:video_surveillance_8930_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.0.9-11",
            "matchCriteriaId" : "B58B4F52-C105-45E9-839D-6DB0375F202B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:cisco:video_surveillance_8930:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4CAF501-A194-44C4-95F8-1397BD879011"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcameras-dos-fc3F6LzT",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-ipcameras-dos-fc3F6LzT",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1530",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:11.097",
      "lastModified" : "2024-11-21T05:44:33.597",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the web-based management interface of Cisco BroadWorks Messaging Server Software could allow an authenticated, remote attacker to access sensitive information or cause a partial denial of service (DoS) condition on an affected system. This vulnerability is due to improper handling of XML External Entity (XXE) entries when parsing certain XML files. An attacker could exploit this vulnerability by uploading a crafted XML file that contains references to external entities. A successful exploit could allow the attacker to retrieve files from the local system, resulting in the disclosure of sensitive information, or cause the application to consume available resources, resulting in a partial DoS condition on an affected system. There are workarounds that address this vulnerability."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración basada en web de Cisco BroadWorks Messaging Server Software, podría permitir a un atacante remoto autenticado acceder a información confidencial o causar una condición de denegación de servicio parcial (DoS) en un sistema afectado.&#xa0;Esta vulnerabilidad es debido al manejo inapropiado de las entradas XML External Entity (XXE) al analizar determinados archivos XML.&#xa0;Un atacante podría explotar esta vulnerabilidad al cargar un archivo XML diseñado que contiene referencias a entidades externas.&#xa0;Una explotación con éxito podría permitir al atacante recuperar archivos del sistema local, resultando en una divulgación de información confidencial, o hacer que la aplicación consumiera los recursos disponibles, resultando en una condición de DoS parcial en un sistema afectado.&#xa0;Hay soluciones alternativas que abordan esta vulnerabilidad"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.5
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-611"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:broadworks_messaging_server:22.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8332AB81-BD31-4296-BB48-3EDB695617B9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bwms-xxe-uSLrZgKs",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-bwms-xxe-uSLrZgKs",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1532",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:11.130",
      "lastModified" : "2024-11-21T05:44:33.877",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation of command arguments. An attacker could exploit this vulnerability by sending a crafted command request to the xAPI. A successful exploit could allow the attacker to read the contents of any file that is located on the device filesystem."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la API de endpoint de video (xAPI) de Cisco TelePresence Collaboration Endpoint (CE) Software y Cisco RoomOS Software, podría permitir a un atacante remoto autenticado leer archivos arbitrarios del sistema operativo subyacente.&#xa0;Esta vulnerabilidad es debido a una comprobación insuficiente de la ruta de los argumentos de los comandos.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío una petición de comando diseñada a la xAPI.&#xa0;Una explotación con éxito podría permitir al atacante leer el contenido de cualquier archivo que se encuentre en el sistema de archivos del dispositivo"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "9.14.6",
            "matchCriteriaId" : "8692F2C5-ACDB-4A1A-8028-44002A2F7137"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:telepresence_collaboration_endpoint:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "9.15.0.11",
            "versionEndExcluding" : "9.15.3",
            "matchCriteriaId" : "867DDF02-4215-4733-9BEA-E9875791F020"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:cisco:roomos:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.3.1",
            "matchCriteriaId" : "269D651A-67F8-4338-B76F-7FC3CC7A6F8C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tp-rmos-fileread-pE9sL3g",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-tp-rmos-fileread-pE9sL3g",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1535",
      "sourceIdentifier" : "psirt@cisco.com",
      "published" : "2021-05-06T13:15:11.167",
      "lastModified" : "2024-11-21T05:44:34.160",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A vulnerability in the cluster management interface of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to view sensitive information on an affected system. To be affected by this vulnerability, the Cisco SD-WAN vManage Software must be in cluster mode. This vulnerability is due to the absence of authentication for sensitive information in the cluster management interface. An attacker could exploit this vulnerability by sending a crafted request to the cluster management interface of an affected system. A successful exploit could allow the attacker to allow the attacker to view sensitive information on the affected system."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad en la interfaz de administración de clúster de Cisco SD-WAN vManage Software, podría permitir a un atacante remoto no autenticado visualizar información confidencial en un sistema afectado.&#xa0;Para estar afectado por esta vulnerabilidad, Cisco SD-WAN vManage Software debe estar en modo de clúster.&#xa0;Esta vulnerabilidad es debido a la ausencia de autenticación de información confidencial en la interfaz de administración del clúster.&#xa0;Un atacante podría explotar esta vulnerabilidad mediante el envío una petición diseñada a la interfaz de administración del clúster de un sistema afectado.&#xa0;Una explotación con éxito podría permitir al atacante visualizar información confidencial en el sistema afectado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "psirt@cisco.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "psirt@cisco.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-497"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:cisco:sd-wan_vmanage:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "20.5.1",
            "matchCriteriaId" : "1CBC28B1-78A8-49FA-88AF-01EC2A252367"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanageinfdis-LKrFpbv",
        "source" : "psirt@cisco.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-sdwan-vmanageinfdis-LKrFpbv",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21505",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-05-06T13:15:11.200",
      "lastModified" : "2024-11-21T05:48:29.847",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges."
      }, {
        "lang" : "es",
        "value" : "Dell EMC Integrated System for Microsoft Azure Stack Hub, versiones 1906-2011, contiene una cuenta iDRAC predeterminada sin documentar.&#xa0;Un atacante remoto no autenticado, con el conocimiento de las credenciales predeterminadas, podría potencialmente explotar esto para iniciar sesión en el sistema y obtener privilegios de root"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.0,
            "baseSeverity" : "HIGH",
            "attackVector" : "ADJACENT_NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.1,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-255"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-1188"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_integrated_system_for_microsoft_azure_stack_hub_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "1906",
            "versionEndIncluding" : "2011",
            "matchCriteriaId" : "2E4929FE-C6B2-4281-860C-C7CB1F44D37C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:dell:emc_integrated_system_for_microsoft_azure_stack_hub:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31CF53E-FFEF-4AF2-BFE0-A6B52F5DFCBC"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000186008/dsa-2021-020-dell-emc-integrated-system-for-microsoft-azure-stack-hub-security-update-for-an-idrac-undocumented-account-vulnerability",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/en-us/000186008/dsa-2021-020-dell-emc-integrated-system-for-microsoft-azure-stack-hub-security-update-for-an-idrac-undocumented-account-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21527",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-05-06T13:15:11.237",
      "lastModified" : "2024-11-21T05:48:31.623",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "Dell PowerScale OneFS versión 8.1.0-9.1.0, contienen una neutralización inapropiada de elementos especiales utilizados en una vulnerabilidad de comando del Sistema Operativo.&#xa0;Esta vulnerabilidad puede permitir a un usuario autenticado con privilegios ISI_PRIV_LOGIN_SSH o ISI_PRIV_LOGIN_CONSOLE escalar privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F8E149-ACF8-4BED-83F0-363E3DED47BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9E9789-7B7C-43CF-8129-12F3958478E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185978",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-21550",
      "sourceIdentifier" : "security_alert@emc.com",
      "published" : "2021-05-06T13:15:11.267",
      "lastModified" : "2024-11-21T05:48:34.590",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability can allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges."
      }, {
        "lang" : "es",
        "value" : "Dell EMC PowerScale OneFS versión 8.1.0-9.1.0, contienen una neutralización inapropiada de elementos especiales utilizados en una vulnerabilidad de comando del Sistema Operativo.&#xa0;Esta vulnerabilidad puede permitir a un usuario autenticado con privilegios ISI_PRIV_LOGIN_SSH o ISI_PRIV_LOGIN_CONSOLE escalar privilegios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security_alert@emc.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.0,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.2
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security_alert@emc.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E104E616-5403-40ED-BB02-185B3B872469"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.1.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "575793FB-6E18-4A7F-B689-EA4FB7904DFE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B02079AB-D410-4CD2-8E70-BCFEAB5DEFA0"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FF89B320-6D5A-4E46-A1FA-FCDB31F325C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76F8E149-ACF8-4BED-83F0-363E3DED47BB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F9E9789-7B7C-43CF-8129-12F3958478E6"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.dell.com/support/kbdoc/000185978",
        "source" : "security_alert@emc.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.dell.com/support/kbdoc/000185978",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22211",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-05-06T13:15:11.300",
      "lastModified" : "2024-11-21T05:49:43.123",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7. GitLab Dependency Proxy, under certain circumstances, can impersonate a user resulting in possibly incorrect access handling."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 13.7.&#xa0;GitLab Dependency Proxy, bajo determinadas circunstancias, puede hacerse pasar por un usuario, resultando en un manejo de acceso incorrecto"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 3.1,
            "baseSeverity" : "LOW",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.6,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "33DCAA9F-36B8-4CA8-85AF-36C602F86A2F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.7.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "5471243B-9BBA-41CD-9E39-0AD8417AEE81"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "6CF968F1-8F8D-49D6-995C-DC8366063DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "41CC3DA4-3515-4564-87F7-47478EB3DF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "CB870D06-315A-452D-B09C-9FDB8D426C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "811F3205-355F-463B-A050-7BA2010304E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22211.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/298847",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22211.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/298847",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24178",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.333",
      "lastModified" : "2024-11-21T05:52:32.107",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 suffered from Cross-Site Request Forgery issues, allowing an attacker to make a logged in administrator add, edit or delete form fields, which could also lead to Stored Cross-Site Scripting issues."
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory Plugin Easy Listing Directories para WordPress versiones anteriores a 5.11.1, sufría problemas de tipo Cross-Site Request Forgery, permitiendo a un atacante hacer que un administrador que haya iniciado sesión agregue, edite o elimine campos de formulario, lo que también podría conllevar a problemas de tipo Cross-Site Scripting Almacenado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.11.1",
            "matchCriteriaId" : "D612DCCB-A478-4E37-8A9B-FE81D0603805"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/700f3b04-8298-447c-8d3c-4581880a63b5",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/700f3b04-8298-447c-8d3c-4581880a63b5",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24179",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.370",
      "lastModified" : "2024-11-21T05:52:32.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator import files. As the plugin also did not validate uploaded files, it could lead to RCE."
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory Plugin Easy Listing Directories para WordPress versiones anteriores a 5.11, sufría un problema de tipo Cross-Site Request Forgery, permitiendo a un atacante hacer que un administrador iniciara sesión en la importación de archivos.&#xa0;Como el plugin tampoco validó los archivos cargados, podría conllevar a RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.11",
            "matchCriteriaId" : "4ED2C02A-5012-4337-802C-A281BDE07854"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c0a5cdde-732a-432a-86c2-776df5d130a7",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c0a5cdde-732a-432a-86c2-776df5d130a7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24214",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.400",
      "lastModified" : "2024-11-21T05:52:36.557",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can be exploited with the default configuration."
      }, {
        "lang" : "es",
        "value" : "El plugin OpenID Connect Generic Client WordPress versiones 3.8.0 y 3.8.1, no saneó el error de inicio de sesión cuando se devolvió al formulario de inicio de sesión, conllevando a un problema de tipo Cross-Site Scripting reflejado.&#xa0;Este problema no requiere autenticación y puede ser explotado con la configuración predeterminada"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daggerhartlab:openid_connect_generic_client:3.8.0:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "A7065E71-4C5D-4C77-B50D-577BAB25E284"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:daggerhartlab:openid_connect_generic_client:3.8.1:*:*:*:*:wordpress:*:*",
            "matchCriteriaId" : "592B60EE-D611-439F-9653-1D71DCFDA375"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/31cf0dfb-4025-4898-a5f4-fc7115565a10",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24236",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.430",
      "lastModified" : "2024-11-21T05:52:39.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by using a valid image Content-Type along with a PHP filename and code, leading to RCE."
      }, {
        "lang" : "es",
        "value" : "El plugin Imagements de WordPress versiones hasta 1.2.5, permite que las imágenes sean cargadas en los comentarios, sin embargo, solo comprueba el Content-Type en la petición para prohibir archivos peligrosos.&#xa0;Esto permite a atacantes no autenticados cargar archivos arbitrarios mediante el uso de una  imagen válida Content-Type junto con un código y nombre de archivo PHP, conllevando a RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:imagements_project:imagements:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.2.5",
            "matchCriteriaId" : "066E9AE2-0E54-435F-9A9C-903726CC4CAF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/8f24e74f-60e3-4100-9ab2-ec31b9c9cdea",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24243",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.463",
      "lastModified" : "2024-11-21T05:52:40.407",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.6 did not have capability checks nor sanitization, allowing low privilege users (subscriber+) to call it and set XSS payloads, which will be triggered in all backend pages."
      }, {
        "lang" : "es",
        "value" : "Una acción AJAX registrada por el plugin WPBakery Page Builder (Visual Composer) Clipboard WordPress versiones anteriores a 4.5.6, no tenía capacidad de comprobación ni saneamiento, permitiendo a usuarios con privilegios bajos (suscriptor+) llamarlo y configurar cargas útiles XSS, que serán activadas en todas las páginas backend"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpbakery_page_builder_clipboard_project:wpbakery_page_builder_clipboard:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.6",
            "matchCriteriaId" : "DA5DA268-C3CD-4D6E-A011-F7DB802030F5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/visual-composer-clipboard/8897711",
        "source" : "contact@wpscan.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3bc0733a-b949-40c9-a5fb-f56814fc4af3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://codecanyon.net/item/visual-composer-clipboard/8897711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/3bc0733a-b949-40c9-a5fb-f56814fc4af3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24244",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.497",
      "lastModified" : "2024-11-21T05:52:40.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An AJAX action registered by the WPBakery Page Builder (Visual Composer) Clipboard WordPress plugin before 4.5.8 did not have capability checks, allowing low privilege users, such as subscribers, to update the license options (key, email)."
      }, {
        "lang" : "es",
        "value" : "Una acción AJAX registrada por el plugin WPBakery Page Builder (Visual Composer) Clipboard WordPress versiones anteriores a 4.5.8, no tenía verificaciones de capacidad, permitiendo a usuarios con privilegios bajos, como los suscriptores, actualizar las opciones de licencia (clave, correo electrónico)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wpbakery_page_builder_clipboard_project:wpbakery_page_builder_clipboard:*:*:*:*:*:wordpress:*:*",
            "versionStartIncluding" : "4.5.0",
            "versionEndExcluding" : "4.5.8",
            "matchCriteriaId" : "558234C3-50D8-4F60-B5D9-7FD92298EB8F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://codecanyon.net/item/visual-composer-clipboard/8897711",
        "source" : "contact@wpscan.com",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://codecanyon.net/item/visual-composer-clipboard/8897711",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/354b98d8-46a1-4189-b347-198701ea59b9",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24245",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.530",
      "lastModified" : "2024-11-21T05:52:40.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a reflected Cross-Site Scripting issue."
      }, {
        "lang" : "es",
        "value" : "El plugin Stop Spammers WordPress versiones anteriores a 2021.9, no escapó de la entrada del usuario al bloquear peticiones (como hacer coincidir una palabra de spam), emitiéndolo en un atributo después de sanearlo para eliminar etiquetas HTML, lo cual no es suficiente y conlleva a un problema de tipo Cross-Site Scripting Reflejado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:trumani:stop_spammers:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2021.9",
            "matchCriteriaId" : "58F6E4AB-287C-44C6-BEC1-C46E260BE1DA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://packetstormsecurity.com/files/162623/WordPress-Stop-Spammers-2021.8-Cross-Site-Scripting.html",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5e7accd6-08dc-4c6e-9d19-73e2d7e97735",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://packetstormsecurity.com/files/162623/WordPress-Stop-Spammers-2021.8-Cross-Site-Scripting.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/5e7accd6-08dc-4c6e-9d19-73e2d7e97735",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24246",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.563",
      "lastModified" : "2024-11-21T05:52:40.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues"
      }, {
        "lang" : "es",
        "value" : "El plugin Workscout Core WordPress versiones anteriores a 1.3.4, utilizado por el Tema WorkScout, no saneaba los mensajes de chat enviados por medio de la acción workscout_send_message_chat AJAX, conllevando a problemas de tipo Cross-Site Scripting Almacenados y Cross-Frame Scripting"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purethemes:workscout:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "2.0.33",
            "matchCriteriaId" : "82D7C34A-B4FB-404C-85BF-F85D6AB014E7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:purethemes:workscout_core:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "1.3.4",
            "matchCriteriaId" : "AC793014-6634-4B1A-9873-849AE359E110"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-WorkScout-WordPress-Theme-v2.0.33.txt",
        "source" : "contact@wpscan.com"
      }, {
        "url" : "https://wpscan.com/vulnerability/2365a9d0-f6f4-4602-9804-5af23d0cb11d",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://m0ze.ru/vulnerability/%5B2021-02-10%5D-%5BWordPress%5D-%5BCWE-79%5D-WorkScout-WordPress-Theme-v2.0.33.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://wpscan.com/vulnerability/2365a9d0-f6f4-4602-9804-5af23d0cb11d",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24247",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.600",
      "lastModified" : "2024-11-21T05:52:40.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboard and are lacking any sanitisation. As a result, any registered user, such as subscriber, can leave an XSS payload in the plugin settings, which will be triggered by any user visiting them, and could allow for privilege escalation. The vendor decided to close the plugin."
      }, {
        "lang" : "es",
        "value" : "La configuración del plugin Contact Form Check Tester WordPress versiones hasta 1.0.2, es visible para todos los usuarios registrados en el tablero y carece de saneamiento.&#xa0;Como resultado, cualquier usuario registrado, como el suscriptor, puede dejar una carga útil XSS en la configuración del plugin, que será activada por cualquier usuario que los visite y podría permitir una escalada de privilegios.&#xa0;El proveedor decidió cerrar el plugin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:mooveagency:contact_form_check_tester:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.0.2",
            "matchCriteriaId" : "A4420B59-71C6-49AC-8522-B86B27F41EFF"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e2990a7a-d4f0-424e-b01d-ecf67cf9c9f3",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e2990a7a-d4f0-424e-b01d-ecf67cf9c9f3",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24248",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.633",
      "lastModified" : "2024-11-21T05:52:41.030",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.1 did not properly check for imported files, forbidding certain extension via a blacklist approach, allowing administrator to import an archive with a .php4 inside for example, leading to RCE"
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory - Easy Listing Directories para WordPress versiones anteriores a 5.11.1, no comprobaba apropiadamente los archivos importados, lo que prohibía determinadas extensiones por medio de un enfoque de blacklist, permitiendo al administrador importar un archivo con un .php4 adentro, por ejemplo, conllevando a un RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.11.1",
            "matchCriteriaId" : "D612DCCB-A478-4E37-8A9B-FE81D0603805"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ca886a34-cd2b-4032-9de1-8089b5cf3001",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24249",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.663",
      "lastModified" : "2024-11-21T05:52:41.140",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator export files, which could then be downloaded by the attacker to get access to PII, such as email, home addresses etc"
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory Plugin Easy Listing Directories para WordPress versiones anteriores a 5.11.2, sufría un problema de tipo Cross-Site Request Forgery, permitiendo a un atacante hacer un registro archivos de exportación de administrador, que luego podían ser descargados por el atacante para obtener acceso a PII, como correo electrónico, direcciones de casa, etc"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.11.2",
            "matchCriteriaId" : "FE88485D-4F43-4427-A08D-FDDF35699346"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/fc4cf749-34ef-43b8-a529-5065d698ab81",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/fc4cf749-34ef-43b8-a529-5065d698ab81",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24250",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.697",
      "lastModified" : "2024-11-21T05:52:41.270",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from lack of sanitisation in the label of the Form Fields, leading to Authenticated Stored Cross-Site Scripting issues across various pages of the plugin."
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory Plugin Easy Listing Directories para WordPress versiones anteriores a 5.11.2, sufrió de falta de saneamiento en la etiqueta de los Campos de Formulario, conllevando a problemas de tipo Cross-Site Scripting Almacenado y Autenticado en varias páginas del plugin"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 5.4,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.11.2",
            "matchCriteriaId" : "FE88485D-4F43-4427-A08D-FDDF35699346"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/e23bf712-d891-4df7-99cc-9ef64f19f685",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/e23bf712-d891-4df7-99cc-9ef64f19f685",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24251",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.727",
      "lastModified" : "2024-11-21T05:52:41.393",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Business Directory Plugin – Easy Listing Directories for WordPress WordPress plugin before 5.11.2 suffered from a Cross-Site Request Forgery issue, allowing an attacker to make a logged in administrator update arbitrary payment history, such as change their status (from pending to completed to example)"
      }, {
        "lang" : "es",
        "value" : "El plugin Business Directory: Easy Listing Directories para WordPress  versiones anteriores a 5.11.2, sufría un problema de tipo Cross-Site Request Forgery, permitiendo a un atacante hacer que un administrador iniciado sesión actualizara el historial de pagos arbitrario, como cambiar su estado (de pendiente para completar por ejemplo)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strategy11:business_directory_plugin_-_easy_listing_directories:*:*:*:*:*:wordpress:*:*",
            "versionEndExcluding" : "5.11.1",
            "matchCriteriaId" : "D612DCCB-A478-4E37-8A9B-FE81D0603805"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://wpscan.com/vulnerability/c9911236-4af3-4557-9bc0-217face534e1",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/c9911236-4af3-4557-9bc0-217face534e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24252",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.757",
      "lastModified" : "2024-11-21T05:52:41.510",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Event Banner WordPress plugin through 1.3 does not verify the uploaded image file, allowing admin accounts to upload arbitrary files, such as .exe, .php, or others executable, leading to RCE. Due to the lack of CSRF check, the issue can also be used via such vector to achieve the same result, or via a LFI as authorisation checks are missing (but would require WP to be loaded)"
      }, {
        "lang" : "es",
        "value" : "El plugin Event Banner WordPress versiones hasta 1.3, no verifica el archivo de imagen cargado, permitiendo que las cuentas de administrador cargar archivos arbitrarios, como .exe, .php u otros ejecutables, conllevando a RCE.&#xa0;Debido a una falta de comprobación CSRF, el problema también  puede ser utilizado por medio de dicho vector para lograr el mismo resultado, o por medio de un LFI, ya que faltan las comprobaciones de autorización (pero requeriría WP que sea cargado)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wp-eventmanager:event_banner:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "1.3",
            "matchCriteriaId" : "E4FC3FEA-DDF9-4E75-A976-377415AE54B4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/Event%20Banner.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/91e81c6d-f24d-4f87-bc13-746715af8f7c",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/Event%20Banner.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/91e81c6d-f24d-4f87-bc13-746715af8f7c",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24253",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.797",
      "lastModified" : "2024-11-21T05:52:41.640",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Classyfrieds WordPress plugin through 3.8 does not properly check the uploaded file when an authenticated user adds a listing, only checking the content-type in the request. This allows any authenticated user to upload arbitrary PHP files via the Add Listing feature of the plugin, leading to RCE."
      }, {
        "lang" : "es",
        "value" : "El plugin de WordPress Classyfrieds versiones hasta 3.8, no comprueba apropiadamente el archivo cargado cuando un usuario autenticado agrega una lista, solo comprueba el tipo de contenido en la petición.&#xa0;Esto permite a cualquier usuario autenticado cargar archivos PHP arbitrarios por medio de la funcionalidad Add Listing del plugin, conllevando a RCE"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:classyfrieds_project:classyfrieds:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "3.8",
            "matchCriteriaId" : "D251A002-D427-44BC-8818-4EA539DD059F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ee42c233-0ff6-4b27-a5ec-ad3246bef079",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/classyfrieds.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/ee42c233-0ff6-4b27-a5ec-ad3246bef079",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-24254",
      "sourceIdentifier" : "contact@wpscan.com",
      "published" : "2021-05-06T13:15:11.833",
      "lastModified" : "2024-11-21T05:52:41.750",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The College publisher Import WordPress plugin through 0.1 does not check for the uploaded CSV file to import, allowing high privilege users to upload arbitrary files, such as PHP, leading to RCE. Due to the lack of CSRF check, the issue could also be exploited via a CSRF attack."
      }, {
        "lang" : "es",
        "value" : "El plugin College publisher Import WordPress versiones hasta 0.1, no comprueba el archivo CSV cargado para importar, permitiendo a usuarios muy privilegiados cargar archivos arbitrarios, como PHP, que conllevan a RCE.&#xa0;Debido a una falta de comprobación CSRF, el problema también podría ser explotado mediante un ataque CSRF"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "contact@wpscan.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:college_publisher_import_project:college_publisher_import:*:*:*:*:*:wordpress:*:*",
            "versionEndIncluding" : "0.1",
            "matchCriteriaId" : "1BE5515A-A526-41FC-89C7-3937A92D5C7B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/College%20Puglisher%20Import.md",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bb3e56dd-ae2e-45c2-a6c9-a59ae5fc1dc4",
        "source" : "contact@wpscan.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jinhuang1102/CVE-ID-Reports/blob/master/College%20Puglisher%20Import.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://wpscan.com/vulnerability/bb3e56dd-ae2e-45c2-a6c9-a59ae5fc1dc4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-26543",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.417",
      "lastModified" : "2024-11-21T05:56:26.973",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The \"gitDiff\" function in Wayfair git-parse <=1.0.4 has a command injection vulnerability. Clients of the git-parse library are unlikely to be aware of this, so they might unwittingly write code that contains a vulnerability. The issue has been resolved in version 1.0.5."
      }, {
        "lang" : "es",
        "value" : "La función \"gitDiff\" en Wayfair git-parse versiones anteriores o iguales a 1.0.4 tiene una vulnerabilidad de inyección de comandos. Los clientes de la biblioteca git-parse probablemente no sean conscientes de ello, por lo que podrían escribir involuntariamente código que contenga una vulnerabilidad. El problema se ha resuelto en la versión 1.0.5."
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:wayfair:git-parse:*:*:*:*:*:node.js:*:*",
            "versionEndExcluding" : "1.0.5",
            "matchCriteriaId" : "707BCAF2-DCF3-45E1-AF3D-DAC1BBFAF9C2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4302",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/git-parse",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://advisory.checkmarx.net/advisory/CX-2020-4302",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.npmjs.com/package/git-parse",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27216",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.447",
      "lastModified" : "2024-11-21T05:57:36.940",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Exim 4 before 4.94.2 has Execution with Unnecessary Privileges. By leveraging a delete_pid_file race condition, a local user can delete arbitrary files as root. This involves the -oP and -oPX options."
      }, {
        "lang" : "es",
        "value" : "Exim 4 versiones anteriores a 4.94.2, presenta una Ejecución con Privilegios Innecesarios.&#xa0;Al aprovechar una condición de carrera delete_pid_file, un usuario local puede eliminar archivos arbitrarios como root.&#xa0;Esto involucra las opciones -oP y -oPX"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 6.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.0,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:M/Au:N/C:N/I:C/A:C",
            "baseScore" : 6.3,
            "accessVector" : "LOCAL",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.4,
          "impactScore" : 9.2,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-362"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:exim:exim:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "4.94.2",
            "matchCriteriaId" : "B5CF6C18-D9DF-449C-899D-26D2FFA3689E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28007-LFDIR.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      }, {
        "url" : "https://www.exim.org/static/doc/security/CVE-2020-qualys/CVE-2020-28007-LFDIR.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29490",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-06T13:15:12.493",
      "lastModified" : "2024-11-21T06:01:14.790",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter. This issue potentially exposes both internal and external HTTP servers or other resources available via HTTP `GET` that are visible from the Jellyfin server. The vulnerability is patched in version 10.7.3. As a workaround, disable external access to the API endpoints `/Items/*/RemoteImages/Download`, `/Items/RemoteSearch/Image` and `/Images/Remote` via reverse proxy, or limit to known-friendly IPs."
      }, {
        "lang" : "es",
        "value" : "Jellyfin es un sistema multimedia de software libre que proporciona multimedia desde un servidor dedicado a los dispositivos del usuario final por medio de múltiples aplicaciones.&#xa0;Las versiones anteriores a 10.7.3 son vulnerables a ataques de tipo Server-Side Request Forgery (SSRF) no autenticado por medio del parámetro imageUrl.&#xa0;Este problema expone potencialmente a los servidores HTTP internos y externos u otros recursos disponibles por medio de HTTP \"GET\" que son visibles desde el servidor Jellyfin.&#xa0;La vulnerabilidad está parcheada en la versión 10.7.3.&#xa0;Como solución alternativa, deshabilite el acceso externo a los endpoints de la API \"/Items/*/RemoteImages/Download\", \"/Items/RemoteSearch/Image\" y \"/Images/Remote\" por medio de un proxy inverso, o limite de las direcciones IP amigables conocidas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N",
            "baseScore" : 5.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:jellyfin:jellyfin:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "10.7.3",
            "matchCriteriaId" : "A58E0E46-82A4-4613-BF98-FC0BCD1AF44F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-rgjw-4fwc-9v96",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/jellyfin/jellyfin/security/advisories/GHSA-rgjw-4fwc-9v96",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29491",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-06T13:15:12.533",
      "lastModified" : "2023-11-07T03:32:38.597",
      "vulnStatus" : "Rejected",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-28860. Reason: This candidate is a reservation duplicate of CVE-2021-28860. Notes: All CVE users should reference CVE-2021-28860 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage"
      } ],
      "metrics" : { },
      "references" : [ ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29921",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.573",
      "lastModified" : "2025-11-03T22:15:48.057",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Python before 3,9,5, the ipaddress library mishandles leading zero characters in the octets of an IP address string. This (in some situations) allows attackers to bypass access control that is based on IP addresses."
      }, {
        "lang" : "es",
        "value" : "En Python antes de la versiones 3,9,5, la biblioteca ipaddress maneja mal los caracteres cero iniciales en los octetos de una cadena de direcciones IP. Esto (en algunas situaciones) permite a los atacantes eludir el control de acceso que se basa en las direcciones IP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.8.12",
            "matchCriteriaId" : "AECFC6AC-5ECE-45F8-97F2-6D8D33C49F80"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.0",
            "versionEndExcluding" : "3.9.5",
            "matchCriteriaId" : "91FD0AF9-B011-4238-8CF1-BDEA0399AF82"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_automated_test_suite:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98FB24DB-AF91-48D0-9CA5-C8250D183FD5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_binding_support_function:1.11.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10323322-F6C0-4EA7-9344-736F7A80AA5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:communications_cloud_native_core_network_slice_selection_function:1.8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AA09838-BF13-46AC-BB97-A69F48B73A8A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:20.3.2:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "C21EB1C3-3251-4B99-9D5F-E4E089E2EC62"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:graalvm:21.1.0:*:*:*:enterprise:*:*:*",
            "matchCriteriaId" : "CA0CBB5F-6CA5-4DFC-97A3-05643F8885DB"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:oracle:zfs_storage_appliance_kit:8.8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3E503FB-6279-4D4A-91D8-E237ECF9D2B0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugs.python.org/issue36384",
        "source" : "cve@mitre.org",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.python.org/3/library/ipaddress.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/blob/63298930fb531ba2bb4f23bc3b915dbf1e17e9e1/Misc/NEWS.d/3.8.0a4.rst",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/12577",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/25099",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-014.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-02",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0003/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sick.codes/sick-2021-014",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.python.org/issue36384",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://docs.python.org/3/library/ipaddress.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/blob/63298930fb531ba2bb4f23bc3b915dbf1e17e9e1/Misc/NEWS.d/3.8.0a4.rst",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/12577",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/python/cpython/pull/25099",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/sickcodes/security/blob/master/advisories/SICK-2021-014.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2024/12/msg00000.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://python-security.readthedocs.io/vuln/ipaddress-ipv4-leading-zeros.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://security.gentoo.org/glsa/202305-02",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210622-0003/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://sick.codes/sick-2021-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com//security-alerts/cpujul2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuapr2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujan2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpujul2022.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.oracle.com/security-alerts/cpuoct2021.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31245",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.607",
      "lastModified" : "2024-11-21T06:05:21.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "omr-admin.py in openmptcprouter-vps-admin 0.57.3 and earlier compares the user provided password with the original password in a length dependent manner, which allows remote attackers to guess the password via a timing attack."
      }, {
        "lang" : "es",
        "value" : "omr-admin.py en openmptcprouter-vps-admin versiones 0.57.3 y anteriores compara la contraseña proporcionada por el usuario con la contraseña original de una manera dependiente de la longitud, lo cual permite a atacantes remotos adivinar la contraseña por medio de un ataque de sincronización"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "HIGH",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:openmptcprouter:openmptcprouter:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "0.57.3",
            "matchCriteriaId" : "36EFDA32-B68E-4E5A-9CB9-275FB3565E7E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/Ysurac/openmptcprouter-vps-admin",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ysurac/openmptcprouter-vps-admin/commit/a01cbc8c3d3b8bb7720bf3ff234671b4c0e1859c#diff-b89ee68e63302a732d4bde35eb04a205b06f1611147e139642356f173195ab80",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/d3crypt/timing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openmptcprouter.com/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/Ysurac/openmptcprouter-vps-admin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/Ysurac/openmptcprouter-vps-admin/commit/a01cbc8c3d3b8bb7720bf3ff234671b4c0e1859c#diff-b89ee68e63302a732d4bde35eb04a205b06f1611147e139642356f173195ab80",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://medium.com/d3crypt/timing-attack-on-openmptcprouter-vps-admin-authentication-cve-2021-31245-12dd92303e1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://www.openmptcprouter.com/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31409",
      "sourceIdentifier" : "security@vaadin.com",
      "published" : "2021-05-06T13:15:12.633",
      "lastModified" : "2024-11-21T06:05:36.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unsafe validation RegEx in EmailValidator component in com.vaadin:vaadin-compatibility-server versions 8.0.0 through 8.12.4 (Vaadin versions 8.0.0 through 8.12.4) allows attackers to cause uncontrolled resource consumption by submitting malicious email addresses."
      }, {
        "lang" : "es",
        "value" : "Una comprobación no segura RegEx en el componente EmailValidator en com.vaadin:vaadin-compatibility-server versiones 8.0.0 hasta 8.12.4, (Vaadin versiones 8.0.0 hasta 8.12.4) permite a atacantes causar un consumo de recursos no controlado mediante el envío de direcciones de correo electrónico maliciosas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security@vaadin.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security@vaadin.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-400"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:vaadin:vaadin:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "8.0.0",
            "versionEndIncluding" : "8.12.4",
            "matchCriteriaId" : "BC3E374E-B6E2-4608-AF87-3CB540D9EA9F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/vaadin/framework/issues/12240",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/framework/pull/12241",
        "source" : "security@vaadin.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31409",
        "source" : "security@vaadin.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/framework/issues/12240",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/vaadin/framework/pull/12241",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://vaadin.com/security/cve-2021-31409",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31532",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.667",
      "lastModified" : "2024-11-21T06:05:51.807",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "NXP LPC55S6x microcontrollers (0A and 1B), i.MX RT500 (silicon rev B1 and B2), i.MX RT600 (silicon rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicon rev 0A, 1B), LPC55S1x, LPC551x (silicon rev 0A) and LPC55S0x, LPC550x (silicon rev 0A) include an undocumented ROM patch peripheral that allows unsigned, non-persistent modification of the internal ROM."
      }, {
        "lang" : "es",
        "value" : "Microcontroladores NXP LPC55S6x (0A y 1B), i.MX RT500 (silicio rev B1 y B2), i. MX RT600 (silicio rev A0, B0), LPC55S6x, LPC55S2x, LPC552x (silicio rev 0A, 1B), LPC55S1x, LPC551x (silicio rev 0A) y LPC55S0x, LPC550x (silicio rev 0A) incluyen un periférico de parcheo de ROM no documentado que permite la modificación sin firma y no persistente de la ROM interna"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s69jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C01C4752-62DA-432C-A802-F9478F06CAAF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s69jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAD0A6CB-74C5-4D26-A8AD-33BED194D6A5"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s69jbd100:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E045483A-280E-4A52-AB78-AB646C5D1AE3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s66jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B09DE32B-7CA7-4737-AF06-90B864A50A85"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s66jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01FE85F9-561D-40D4-BA58-53E4709EBAB0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s66jbd100:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3790AA82-3918-4697-BAAF-7AD09A79D77C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s69jev98_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25C0290C-529A-42C8-AF2E-B26462E3824C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s69jev98:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A23F037B-E7D1-4BAC-AB4B-09CD8F8F77F6"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s69jev98:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37881CE5-1909-48D0-9BED-4031E520DE0F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpcs66jev98_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "267460F6-E63B-4B62-AD1F-2445CD90F011"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpcs66jev98:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E95E7987-A8BB-4194-8850-5607E5BCE2EC"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpcs66jev98:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "680C23F3-A50D-427F-8560-A512AE01ECD4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s69jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18444119-AF09-496A-A3EF-9417DE557916"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s69jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4C7E243-8350-437B-A287-F874C39353C0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s69jbd64:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B72B96A2-11BB-491F-908D-9744B64B83AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpcs66jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70132218-3326-40B3-AC85-4679CF7A87F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpcs66jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "22DEEEC1-0213-4D06-96AE-F636CFDCE77C"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpcs66jbd64:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62BE7068-1ADF-48BF-B87F-4C704A1161FA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_rt500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A1A7E9E-9B0A-48CB-BD8D-DD700920DCA6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_rt500:b1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39D87D58-5444-4D80-BCBB-34C9F0AEDF6A"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_rt500:b2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6E595E45-0858-471F-B1AC-81761977966F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:i.mx_rt600_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2C26E5AD-E6B3-44A3-910E-EFC4F6F6B94D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_rt600:a0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF5618FA-901B-448A-9A2D-86430F08707D"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:i.mx_rt600:b0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6B6B59D-9C34-4A27-8567-37E50F82854E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s28_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CCAACEE-6A62-46BF-96A3-0EE2584828C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s28:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F88B2385-8C4B-4A98-9255-2D99234A13C9"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s28:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "59AC6614-A200-4545-91ED-D105CA38249C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s26_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "473FED2F-64C5-4D95-AB32-FD0E00CAA919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s26:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "794BBCDF-C65B-4B5E-9DCE-6277B0706E82"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s26:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29528CB4-B0B9-4CF1-80DB-E2FFFC225262"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5528_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3407A7AB-16F5-4665-8629-6196D8D228B6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5528:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1F1DB2CD-8F26-4AF1-B85E-39E26666F0A0"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5528:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C442D5D4-A570-47AE-9BF7-218A2DA81A21"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5526_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA772B1E-9936-40BD-974F-D181BE6763E5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5526:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "228ED399-9C9C-4405-965E-1EF7FF55B906"
          }, {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5526:1b:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D23F0069-812A-4AA5-8A18-B35E8E996DD2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s16jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8DA850-A3E9-4E2A-AA33-FCA8ED6AA800"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s16jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C5796D8-5009-4C6F-92A0-D8C418967EE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s16jev98_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7210AB3-E010-4B8B-AC2C-7BF93D2DAABA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s16jev98:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D214191-EF7A-48D9-94CF-123523716EA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s16jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C482AFCA-581A-4CEE-B54B-9A9CB85D709A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s16jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F945B88A-EAAF-486E-86BD-8D6C6529607A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s14jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FDB619D-729E-4B94-8F73-06DA57C4B428"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s14jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FD9463A7-7B4A-4E1B-873C-72A80ED05DDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc55s14jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B93246FF-501C-4162-A978-C9B99A4169D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc55s14jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE36A31D-5ADB-455E-96E0-6A42ABBBCE7A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5516jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48623257-530E-4FE4-ABDB-1DBD826BB870"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5516jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C02E13E7-9C52-43EE-B25D-F299B3165990"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5516jev98_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1BA31AE2-362F-42E0-ADB1-8B4E722B4E19"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5516jev98:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B5BAC590-3D4D-4796-B03D-3A9A89FEBA1E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5516jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50390641-708D-4724-B52B-B5E515A03B9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5516jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F44502F-A383-4106-ADDE-CC2C694A3AA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5514jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "152F6782-A179-465F-A430-90E1CAF0A87A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5514jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8150A237-B3B9-4B63-AEFF-3A74138EE8B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5514jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1237E77E-4E08-47F2-A6E2-D9159F32429D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5514jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B26333DB-B724-4CA2-915F-AE5F017D99AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5512jbd100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5ABFA071-EB5F-4041-B0A2-C7BEA7BAF1FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5512jbd100:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D2A7874-E35A-483E-9389-1258E4B85BCD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nxp:lpc5512jbd64_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "343A3A84-E70D-48F8-8B20-7340DB918BEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nxp:lpc5512jbd64:0a:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E99A86-7BAC-4B3E-8785-389F0DE262A7"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://oxide.computer/blog/lpc55/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nxp.com",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://oxide.computer/blog/lpc55/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.nxp.com",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31616",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.693",
      "lastModified" : "2024-11-21T06:06:02.100",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.1.0 allow a stack buffer overflow via crafted messages. The overflow in ethereum_extractThorchainSwapData() in ethereum.c can circumvent stack protections and lead to code execution. The vulnerable interface is reachable remotely over WebUSB."
      }, {
        "lang" : "es",
        "value" : "Unas comprobaciones insuficiente de longitud en el firmware ShapeShift KeepKey versiones anteriores a 7.1.0, permiten un desbordamiento del búfer de la pila por medio de mensajes diseñados.&#xa0;El desbordamiento en la función ethereum_extractThorchainSwapData() en el archivo ethereum.c puede omitir las protecciones de la pila y conllevar a una ejecución de código.&#xa0;La interfaz vulnerable es accesible de forma remota por medio de WebUSB"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:shapeshift:keepkey_firmware:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.0.3",
            "versionEndExcluding" : "7.1.0",
            "matchCriteriaId" : "BD9316A0-067E-435A-8186-4F8D828D67F4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:shapeshift:keepkey:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "663CE48F-F657-40AA-8954-EADA31C9DFB1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.inhq.net/posts/keepkey-CVE-2021-31616/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keepkey/keepkey-firmware/commit/e49d45594002d4d3fbc1f03488e6dfc0a0a65836",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keepkey/keepkey-firmware/releases/tag/v7.1.0",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://shapeshift.com/library/keepkey-important-update-issued-april-4-required",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://blog.inhq.net/posts/keepkey-CVE-2021-31616/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keepkey/keepkey-firmware/commit/e49d45594002d4d3fbc1f03488e6dfc0a0a65836",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/keepkey/keepkey-firmware/releases/tag/v7.1.0",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://shapeshift.com/library/keepkey-important-update-issued-april-4-required",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32062",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T13:15:12.723",
      "lastModified" : "2024-11-21T06:06:47.080",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MS_MAP_NO_PATH and MS_MAP_PATTERN restrictions that are intended to control the locations from which a mapfile may be loaded (with MapServer CGI)."
      }, {
        "lang" : "es",
        "value" : "MapServer versiones anteriores a 7.0.8, 7.1.xy versiones 7.2.x anteriores a 7.2.3, 7.3.xy versiones 7.4.x anteriores a 7.4.5, y 7.5.x y versiones 7.6.x anteriores a 7.6.3, no aplica apropiadamente las restricciones MS_MAP_NO_PATH y MS_MAP_PATTERN que son destinadas a controlar las ubicaciones desde las que un mapfile puede ser cargado (con MapServer CGI)"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "7.0.8",
            "matchCriteriaId" : "91AFEB95-C85E-4C20-8A1A-1C0F54EEBF96"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.1.0",
            "versionEndExcluding" : "7.2.3",
            "matchCriteriaId" : "E1D5061F-90C3-4799-A4E6-0FB480B9327D"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.3.0",
            "versionEndExcluding" : "7.4.5",
            "matchCriteriaId" : "F7BDBC3C-D91A-46A1-9901-BC8143E2ABAC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:osgeo:mapserver:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "7.5.0",
            "versionEndExcluding" : "7.6.3",
            "matchCriteriaId" : "41AD3312-0BCC-4A1B-912F-2351A2CB497D"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNORAZCJ7AIPJFUY6WGLYIA3QVPWFXFY/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVWUC4EOW5WZAZGPLRTZS5QXNUEBPQ5/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-0.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-2.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-4.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-6.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FNORAZCJ7AIPJFUY6WGLYIA3QVPWFXFY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYVWUC4EOW5WZAZGPLRTZS5QXNUEBPQ5/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-0.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-2.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-4.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://mapserver.org/development/changelog/changelog-7-6.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3501",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-05-06T13:15:12.840",
      "lastModified" : "2024-11-21T06:21:41.670",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en el kernel de Linux en versiones anteriores a 5.12.&#xa0;El valor de internal.ndata, en la API de KVM, es asignado a un índice de matriz, que puede ser actualizado por un proceso de usuario en cualquier momento, lo que podría conllevar a una escritura fuera de límites.&#xa0;La mayor amenaza de esta vulnerabilidad es la integridad de los datos y la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.12",
            "matchCriteriaId" : "40362FFA-6C99-41DB-AC04-5B835E7DE052"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CBF9BCF3-187F-410A-96CA-9C47D3ED6924"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv:8:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5CB3640-F55B-4127-875A-2F52D873D179"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time_for_nfv_tus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6B0DA79-DF12-4418-B075-F048C9E2979A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux_for_real_time_tus:8.4:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5C5860E-9FEB-4259-92FD-A85911E2F99E"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BBD7A51-0590-4DDF-8249-5AFA8D645CB6"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB28F9AF-3D06-4532-B397-96D7E4792503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:netapp:cloud_backup:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C2089EE-5D7F-47EC-8EA5-0F69790564C4"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:solidfire_baseboard_management_controller_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB9B8171-F6CA-427D-81E0-6536D3BBFA8D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6770B6C3-732E-4E22-BF1C-2D2FD610061C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F9C8C20-42EB-4AB5-BD97-212DEB070C43"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FFF7106-ED78-49BA-9EC5-B889E3685D53"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E63D8B0F-006E-4801-BF9D-1C001BBFB4F9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "56409CEC-5A1E-4450-AA42-641E459CC2AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B06F4839-D16A-4A61-9BB5-55B13F41E47F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h300e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "108A2215-50FB-4074-94CF-C130FA14566D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h300e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AFC73CE-ABB9-42D3-9A71-3F5BC5381E0E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h500e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32F0B6C0-F930-480D-962B-3F4EFDCC13C7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h500e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "803BC414-B250-4E3A-A478-A3881340D6B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h700e_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FEB3337-BFDE-462A-908B-176F92053CEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h700e:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "736AEAE9-782B-4F71-9893-DED53367E102"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0B4AD8A-F172-4558-AEC6-FF424BA2D912"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8497A4C9-8474-4A62-8331-3FE862ED4098"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:netapp:h410c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "234DEFE0-5CE5-4B0A-96B8-5D227CB8ED31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:netapp:h410c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDDF61B7-EC5C-467C-B710-B89F502CD04F"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1950136",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0008/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1950136",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=04c4f2ee3f68c9a4bf1653d15f1a9a435ae33f7a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210618-0008/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22206",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-05-06T14:15:07.943",
      "lastModified" : "2024-11-21T05:49:42.533",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting all versions starting from 11.6. Pull mirror credentials are exposed that allows other maintainers to be able to view the credentials in plain-text,"
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a todas las versiones a partir de la 11.6.&#xa0;Las credenciales de Pull Mirror están expuestas, permitiendo que otros mantenedores sean capaz de visualizar las credenciales en texto plano"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "CHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.3,
          "impactScore" : 4.0
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.9,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.2,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-312"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "7E4895C6-9D65-409B-9236-A906C92E518B"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "11.6.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "FD0C29D1-5D48-43DE-B0CD-129C407A4675"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "6CF968F1-8F8D-49D6-995C-DC8366063DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "41CC3DA4-3515-4564-87F7-47478EB3DF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "CB870D06-315A-452D-B09C-9FDB8D426C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "811F3205-355F-463B-A050-7BA2010304E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22206.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/230864",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/928074",
        "source" : "cve@gitlab.com",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22206.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/230864",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://hackerone.com/reports/928074",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22208",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-05-06T14:15:07.983",
      "lastModified" : "2024-11-21T05:49:42.780",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab affecting versions starting with 13.5 up to 13.9.7. Improper permission check could allow the change of timestamp for issue creation or update."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab que afecta a las versiones que comienzan con 13.5 hasta 13.9.7.&#xa0;Una comprobación inapropiada de permisos podría permitir el cambio de la marca de tiempo para la creación o actualización de problemas"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N",
            "baseScore" : 4.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "4F9BD936-EA52-4482-AECD-F40C34C90E5F"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.5.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "000CBC82-0447-4454-B24D-DF805404E5C9"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22208.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/301212",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22208.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/301212",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22209",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-05-06T14:15:08.017",
      "lastModified" : "2024-11-21T05:49:42.893",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.8. GitLab was not properly validating authorisation tokens which resulted in GraphQL mutation being executed."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 13.8.&#xa0;GitLab no estaba comprobando apropiadamente los tokens de autorización, lo cual resultó en la ejecución de la mutación GraphQL"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "91AE019D-FED5-413F-A9A8-760FFB33F446"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.8.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "AAA04573-1A26-43B0-8B4C-E6807C87F1CD"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "6CF968F1-8F8D-49D6-995C-DC8366063DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "41CC3DA4-3515-4564-87F7-47478EB3DF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "CB870D06-315A-452D-B09C-9FDB8D426C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "811F3205-355F-463B-A050-7BA2010304E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22209.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/327155",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22209.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/327155",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-22210",
      "sourceIdentifier" : "cve@gitlab.com",
      "published" : "2021-05-06T14:15:08.053",
      "lastModified" : "2024-11-21T05:49:43.010",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.2. When querying the repository branches through API, GitLab was ignoring a query parameter and returning a considerable amount of results."
      }, {
        "lang" : "es",
        "value" : "Se ha detectado un problema en GitLab CE/EE que afecta a todas las versiones a partir de la 13.2.&#xa0;Al consultar las ramas del repositorio por medio de API, GitLab ignoraba un parámetro de consulta y devolvía una cantidad considerable de resultados"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "cve@gitlab.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
            "baseScore" : 5.3,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 1.4
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-770"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.2.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "FE5FFF9D-8164-4089-845D-2A31EDD42BDC"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.2.0",
            "versionEndExcluding" : "13.9.7",
            "matchCriteriaId" : "F6C18AE0-8C12-417C-9CC2-010E1529D0D7"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "6CF968F1-8F8D-49D6-995C-DC8366063DA8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.10.0",
            "versionEndExcluding" : "13.10.4",
            "matchCriteriaId" : "41CC3DA4-3515-4564-87F7-47478EB3DF27"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:community:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "CB870D06-315A-452D-B09C-9FDB8D426C89"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:*",
            "versionStartIncluding" : "13.11.0",
            "versionEndExcluding" : "13.11.2",
            "matchCriteriaId" : "811F3205-355F-463B-A050-7BA2010304E5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22210.json",
        "source" : "cve@gitlab.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/322500",
        "source" : "cve@gitlab.com",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/cves/-/blob/master/2021/CVE-2021-22210.json",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://gitlab.com/gitlab-org/gitlab/-/issues/322500",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28128",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T14:15:08.417",
      "lastModified" : "2024-11-21T05:59:08.400",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gains access to a valid session can use this to take over an account by changing the password."
      }, {
        "lang" : "es",
        "value" : "En Strapi versiones versiones hasta 3.6.0, el panel de administración permite el cambio de la propia contraseña sin ingresar la contraseña actual.&#xa0;Un atacante que consigue acceso a una sesión válida puede usar esto para apoderarse de una cuenta al cambiar la contraseña"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-640"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "3.6.0",
            "matchCriteriaId" : "A0CF9A9D-4E22-4BFB-9D9D-A781FCA2216E"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://strapi.io/changelog",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-008.txt",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/strapi/strapi/releases",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://strapi.io/changelog",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-008.txt",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-20204",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-05-06T15:15:07.907",
      "lastModified" : "2024-11-21T05:46:07.527",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap memory corruption problem (use after free) can be triggered in libgetdata v0.10.0 when processing maliciously crafted dirfile databases. This degrades the confidentiality, integrity and availability of third-party software that uses libgetdata as a library. This vulnerability may lead to arbitrary code execution or privilege escalation depending on input/skills of attacker."
      }, {
        "lang" : "es",
        "value" : "Se puede desencadenar un problema de corrupción de la memoria de la pila (usar de la memoria previamente liberada) en libgetdata versión v0.10.0, cuando se procesan bases de datos de archivos de directorio diseñadas maliciosamente.&#xa0;Esto degrada la confidencialidad, integridad y disponibilidad del software de terceros que usa libgetdata como biblioteca.&#xa0;Esta vulnerabilidad puede conllevar a una ejecución de código arbitrario o una escalada de privilegios según la entrada y habilidades del atacante"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:getdata_project:getdata:0.10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CA7DB29-3B46-4048-8C25-DF09C5CA4EAC"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80E516C0-98A4-4ADE-B69F-66A772E2BAAA"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1956348",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00015.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43JTGEMYMCTHD3LHFD7ENBNSWCNBCYEY/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GB7T7DW7XRPJOUE25ZE7GF244FPCHBWY/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OE23HBLIVKVPOQ5MVADWPOCFMREVF4QZ/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1956348",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/05/msg00015.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/43JTGEMYMCTHD3LHFD7ENBNSWCNBCYEY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GB7T7DW7XRPJOUE25ZE7GF244FPCHBWY/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OE23HBLIVKVPOQ5MVADWPOCFMREVF4QZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-30473",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T15:15:07.943",
      "lastModified" : "2024-11-21T06:03:59.453",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap."
      }, {
        "lang" : "es",
        "value" : "El archivo aom_image.c en libaom en AOMedia versiones anteriores al 07-04-2021, libera memoria que no se encuentra en la pila"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-763"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:aomedia:aomedia:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-04-07",
            "matchCriteriaId" : "E18F20DC-7244-4FC0-B750-185C7ED97542"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://aomedia.googlesource.com/aom/+/4efe20e99dcd9b6f8eadc8de8acc825be7416578",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/aomedia/issues/detail?id=2998",
        "source" : "cve@mitre.org",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCI33HXH6YSOGC2LPE2REQLMIDH6US4/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-32",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5490",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://aomedia.googlesource.com/aom/+/4efe20e99dcd9b6f8eadc8de8acc825be7416578",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://bugs.chromium.org/p/aomedia/issues/detail?id=2998",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Permissions Required", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCI33HXH6YSOGC2LPE2REQLMIDH6US4/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.gentoo.org/glsa/202401-32",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://www.debian.org/security/2023/dsa-5490",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32030",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T15:15:07.973",
      "lastModified" : "2025-11-10T14:41:07.340",
      "vulnStatus" : "Analyzed",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access to the administrator interface. This relates to handle_request in router/httpd/httpd.c and auth_check in web_hook.o. An attacker-supplied value of '\\0' matches the device's default value of '\\0' in some situations. Note: All versions of Lyra Mini and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability, Consumers can mitigate this vulnerability by disabling the remote access features from WAN."
      }, {
        "lang" : "es",
        "value" : "La aplicación de administrador en los dispositivos ASUS GT-AC2900 versiones anteriores a 3.0.0.4.386.42643, permite una omisión de autenticación cuando es procesada la entrada remota de un usuario no autenticado, conllevando a un acceso no autorizado a la interfaz de administrador.&#xa0;Esto se relaciona con la función handle_request en el archivo router/httpd/httpd.c y auth_check en web_hook.o.&#xa0;Un valor proporcionado por el atacante de \"\\0\" coincide con el valor predeterminado del dispositivo de \"\\0\" en algunas situaciones"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        }, {
          "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "cisaExploitAdd" : "2025-06-02",
      "cisaActionDue" : "2025-06-23",
      "cisaRequiredAction" : "Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",
      "cisaVulnerabilityName" : "ASUS Routers Improper Authentication Vulnerability",
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      }, {
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:lyra_mini_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.384.46630",
            "matchCriteriaId" : "EDC24A96-81AB-4F93-951F-4BE291CF4817"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:lyra_mini:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16CD4EE9-D898-47E2-8A86-A0716CDB03A3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:asus:gt-ac2900_firmware:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.0.0.4.386.42643",
            "matchCriteriaId" : "5B364172-2986-4983-91BF-047F59D140DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:asus:gt-ac2900:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B581C286-7C47-42BF-8876-243285409374"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.asus.com/us/supportonly/lyra%20mini/helpdesk_bios/",
        "source" : "cve@mitre.org",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.atredis.com/blog/2021/4/30/asus-authentication-bypass",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit" ]
      }, {
        "url" : "https://github.com/atredispartners/advisories/blob/master/ATREDIS-2020-0010.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link", "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.asus.com/Networking-IoT-Servers/WiFi-Routers/ASUS-Gaming-Routers/RT-AC2900/HelpDesk_BIOS/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product" ]
      }, {
        "url" : "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-32030",
        "source" : "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "tags" : [ "US Government Resource" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28149",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T16:15:07.330",
      "lastModified" : "2024-11-21T05:59:11.227",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.g., ../../etc/passwd) This can be carried out with a web browser by changing the file name accordingly. Upon visiting log_download.cgi?type=../../etc/passwd and logging in, the web server will allow a download of the contents of the /etc/passwd file."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Hongdian H8922 versión 3.0.5, permiten un Salto de Directorio.&#xa0;El manejador de exportación de registros /log_download.cgi no comprueba la entrada del usuario y permite a un atacante remoto con privilegios mínimos descargar cualquier archivo del dispositivo sustituyendo ../ (por ejemplo, ../../etc/passwd). con un navegador web cambiando el nombre del archivo en consecuencia.&#xa0;Al visitar log_download.cgi?type=../../etc/passwd e iniciar sesión, el servidor web permitirá una descarga del contenido del archivo /etc/passwd"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-22"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hongdian:h8922_firmware:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D748F6D1-B686-4DB3-8FCF-FCB6909CF34A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hongdian:h8922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0011B27F-4F9D-422E-8A75-0D12618239B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28150",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T16:15:07.360",
      "lastModified" : "2024-11-21T05:59:11.373",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Hongdian H8922 versión 3.0.5, permiten al usuario invitado sin privilegios leer cli.conf (con la contraseña de administrador y otros datos confidenciales) por medio del archivo /backup2.cgi"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-425"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hongdian:h8922_firmware:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D748F6D1-B686-4DB3-8FCF-FCB6909CF34A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hongdian:h8922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0011B27F-4F9D-422E-8A75-0D12618239B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28151",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T16:15:07.390",
      "lastModified" : "2024-11-21T05:59:11.520",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Hongdian H8922 versión 3.0.5, permiten una inyección de comandos del sistema operativo por medio de metacaracteres de shell en el campo ip-address (también se conoce como Destination) para el comando ping tools.cgi, al que puede ser accesible con el nombre de usuario guest y la contraseña guest"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C",
            "baseScore" : 9.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 8.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hongdian:h8922_firmware:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D748F6D1-B686-4DB3-8FCF-FCB6909CF34A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hongdian:h8922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0011B27F-4F9D-422E-8A75-0D12618239B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28152",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T16:15:07.417",
      "lastModified" : "2024-11-21T05:59:11.663",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Hongdian H8922 3.0.5 devices have an undocumented feature that allows access to a shell as a superuser. To connect, the telnet service is used on port 5188 with the default credentials of root:superzxmn."
      }, {
        "lang" : "es",
        "value" : "Los dispositivos Hongdian H8922 versión 3.0.5, presentan una función no documentada que permite el acceso a un shell como superusuario.&#xa0;Para conectarse, el servicio telnet es usado en el puerto 5188 con las credenciales predeterminadas root:superzxmn"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-287"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:hongdian:h8922_firmware:3.0.5:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D748F6D1-B686-4DB3-8FCF-FCB6909CF34A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:hongdian:h8922:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0011B27F-4F9D-422E-8A75-0D12618239B2"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "http://en.hongdian.com/Products/Details/H8922",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Vendor Advisory" ]
      }, {
        "url" : "https://ssd-disclosure.com/ssd-advisory-hongdian-h8922-multiple-vulnerabilities/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31829",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T16:15:07.493",
      "lastModified" : "2024-11-21T06:06:18.613",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "kernel/bpf/verifier.c in the Linux kernel through 5.12.1 performs undesirable speculative loads, leading to disclosure of stack content via side-channel attacks, aka CID-801c6058d14a. The specific concern is not protecting the BPF stack area against speculative loads. Also, the BPF stack can contain uninitialized data that might represent sensitive information previously operated on by the kernel."
      }, {
        "lang" : "es",
        "value" : "El archivo kernel/bpf/verifier.c en el kernel de Linux versiones hasta 5.12.1, lleva a cabo cargas especulativas no deseadas, conllevando a una divulgación del contenido de la pila por medio de ataques side-channel, también se conoce como CID-801c6058d14a.&#xa0;La preocupación específica no es proteger el área de la pila de BPF contra cargas especulativas.&#xa0;Además, la pila de BPF puede contener datos no inicializados que pueden representar información confidencial previamente operada por el kernel"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 5.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-863"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.12.1",
            "matchCriteriaId" : "7FEF5211-1B06-496D-B0CA-942039A106BE"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36D96259-24BD-44E2-96D9-78CE1D41F956"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E460AA51-FCDA-46B9-AE97-E6676AA5E194"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/4",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/801c6058d14a82179a7ee17a4b532cac6fad067f",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VWCZ6LJLENL2C3URW5ICARTACXPFCFN2/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4X2G5YAPYJGI3PFEZZNOTRYI33GOCCZ/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZI7OBCJQDNWMKLBP6MZ5NV4EUTDAMX6Q/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/04/4",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/801c6058d14a82179a7ee17a4b532cac6fad067f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VWCZ6LJLENL2C3URW5ICARTACXPFCFN2/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y4X2G5YAPYJGI3PFEZZNOTRYI33GOCCZ/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZI7OBCJQDNWMKLBP6MZ5NV4EUTDAMX6Q/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32052",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T16:15:07.520",
      "lastModified" : "2024-11-21T06:06:46.180",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used). If an application uses values with newlines in an HTTP response, header injection can occur. Django itself is unaffected because HttpResponse prohibits newlines in HTTP headers."
      }, {
        "lang" : "es",
        "value" : "En Django 2.2 versiones anteriores a 2.2.22, 3.1 versiones anteriores a 3.1.10 y 3.2 versiones anteriores a 3.2.2 (con Python 3.9.5+), URLValidator no prohíbe nuevas líneas y pestañas (a menos que sea usado el campo URLField form).&#xa0;Si una aplicación usa valores con nuevas líneas en una respuesta HTTP, puede ocurrir una inyección de encabezado.&#xa0;Django en sí no está afectado porque HttpResponse prohíbe las nuevas líneas en los encabezados HTTP"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "2.2",
            "versionEndExcluding" : "2.2.22",
            "matchCriteriaId" : "ED7CB1DC-4D83-4D30-8778-D3DC95D636A8"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.1",
            "versionEndExcluding" : "3.1.10",
            "matchCriteriaId" : "4F5F0697-2B95-41DA-BDAE-CAE64BFF11D2"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:djangoproject:django:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.2",
            "versionEndExcluding" : "3.2.2",
            "matchCriteriaId" : "CCDAA914-CAC5-4F6F-AAC7-B586115EA2EE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:a:python:python:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.9.5",
            "matchCriteriaId" : "B6A6F7D1-9BD9-46A1-81FA-3FCE1B4CCFC5"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A930E247-0B43-43CB-98FF-6CE7B8189835"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/06/1",
        "source" : "cve@mitre.org",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/3.2/releases/security/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/",
        "source" : "cve@mitre.org"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0002/",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/may/06/security-releases/",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "http://www.openwall.com/lists/oss-security/2021/05/06/1",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://docs.djangoproject.com/en/3.2/releases/security/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://groups.google.com/forum/#%21forum/django-announce",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZVKYPHR3TKR2ESWXBPOJEKRO2OSJRZUE/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210611-0002/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.djangoproject.com/weblog/2021/may/06/security-releases/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-3507",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-05-06T16:15:07.547",
      "lastModified" : "2024-11-21T06:21:42.607",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A heap buffer overflow was found in the floppy disk emulator of QEMU up to 6.0.0 (including). It could occur in fdctrl_transfer_handler() in hw/block/fdc.c while processing DMA read data transfers from the floppy drive to the guest system. A privileged guest user could use this flaw to crash the QEMU process on the host resulting in DoS scenario, or potential information leakage from the host memory."
      }, {
        "lang" : "es",
        "value" : "Se encontró un desbordamiento del búfer de pila en el emulador de disquete de QEMU versiones hasta 6.0.0 (incluyéndola).&#xa0;Podría ocurrir en la función fdctrl_transfer_handler() en el archivo hw/block/fdc.c mientras son procesados transferencias de datos de lectura DMA desde la unidad de disquete al sistema invitado.&#xa0;Un usuario invitado privilegiado podría usar este fallo para bloquear el proceso QEMU en el host, resultando en un escenario de DoS o una posible filtración de información de la memoria del host"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "LOW"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:P",
            "baseScore" : 3.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-119"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "6.0.0",
            "matchCriteriaId" : "B002BA5C-F99C-460E-A53C-F61A813DD689"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "07B237A9-69A3-4A9C-9DA0-4E06BD37AE73"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*",
            "matchCriteriaId" : "053C1B35-3869-41C2-9551-044182DE0A64"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*",
            "matchCriteriaId" : "3AA08768-75AF-4791-B229-AE938C780959"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1951118",
        "source" : "secalert@redhat.com",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0005/",
        "source" : "secalert@redhat.com",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1951118",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://security.netapp.com/advisory/ntap-20210528-0005/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31793",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T17:15:08.113",
      "lastModified" : "2024-11-21T06:06:13.920",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An issue exists on NightOwl WDB-20-V2 WDB-20-V2_20190314 devices that allows an unauthenticated user to gain access to snapshots and video streams from the doorbell. The binary app offers a web server on port 80 that allows an unauthenticated user to take a snapshot from the doorbell camera via the /snapshot URI."
      }, {
        "lang" : "es",
        "value" : "Se presenta un problema en los dispositivos NightOwl WDB-20-V2 WDB-20-V2_20190314, que permite a un usuario no autenticado conseguir acceso a snapshots y video streams desde el doorbell.&#xa0;La aplicación binaria ofrece un servidor web en el puerto 80 que permite a un usuario no autenticado tomar una instantánea de la camera doorbell por medio del URI /snapshot"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:nightowlsp:wdb-20_firmware:20190314:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9DFD761D-77C3-4509-A0D3-686C5188F5AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:nightowlsp:wdb-20:v2:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D16A0F-9B12-4CAB-8BE1-22E8CC45814B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://cloud.binary.ninja/embed/f4400a22-c438-403a-bf2a-939ca44a4f6b",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/tj-oconnor/16a4116050bbcb4717315f519b944f1f",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://cloud.binary.ninja/embed/f4400a22-c438-403a-bf2a-939ca44a4f6b",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://gist.github.com/tj-oconnor/16a4116050bbcb4717315f519b944f1f",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31916",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-05-06T17:15:08.143",
      "lastModified" : "2024-11-21T06:06:30.307",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An out-of-bounds (OOB) memory write flaw was found in list_devices in drivers/md/dm-ioctl.c in the Multi-device driver module in the Linux kernel before 5.12. A bound check failure allows an attacker with special user (CAP_SYS_ADMIN) privilege to gain access to out-of-bounds memory leading to a system crash or a leak of internal kernel information. The highest threat from this vulnerability is to system availability."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo de escritura de la memoria fuera de límites (OOB) en la función list_devices en el archivo drivers/md/dm-ioctl.c en el módulo de controlador Multi-device en el kernel de Linux versiones anteriores a 5.12.&#xa0;Un fallo de comprobación limitada permite a un atacante con privilegios de usuario especial (CAP_SYS_ADMIN) conseguir acceso a la memoria fuera de límites, conllevando a un bloqueo del sistema o una filtración de información interna del kernel.&#xa0;La mayor amenaza de esta vulnerabilidad es la disponibilidad del sistema"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.7,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:C",
            "baseScore" : 6.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 8.5,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-787"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "5.12",
            "matchCriteriaId" : "40362FFA-6C99-41DB-AC04-5B835E7DE052"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "142AD0DD-4CF3-4D74-9442-459CE3347E3A"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F4CFF558-3C47-480D-A2F0-BABF26042943"
          } ]
        } ]
      }, {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEECE5FC-CACF-4496-A3E7-164736409252"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946965",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a",
        "source" : "secalert@redhat.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2021/q1/268",
        "source" : "secalert@redhat.com",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1946965",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/torvalds/linux/commit/4edbe1d7bcffcd6269f3b5eb63f710393ff2ec7a",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00019.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://lists.debian.org/debian-lts-announce/2021/06/msg00020.html",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      }, {
        "url" : "https://seclists.org/oss-sec/2021/q1/268",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Mailing List", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31918",
      "sourceIdentifier" : "secalert@redhat.com",
      "published" : "2021-05-06T17:15:08.180",
      "lastModified" : "2024-11-21T06:06:30.537",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A flaw was found in tripleo-ansible version as shipped in Red Hat Openstack 16.1. The Ansible log file is readable to all users during stack update and creation. The highest threat from this vulnerability is to data confidentiality."
      }, {
        "lang" : "es",
        "value" : "Se encontró un fallo en la versión tripleo-ansible como es enviado en Red Hat Openstack versión 16.1.&#xa0;El archivo de registro de Ansible es legible para todos los usuarios durante la actualización y creación de la pila.&#xa0;La mayor amenaza de esta vulnerabilidad es la confidencialidad de los datos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "secalert@redhat.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-200"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:redhat:openstack:16.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9D3F4FF-AD3D-4D17-93E8-84CAFCED2F59"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1954250",
        "source" : "secalert@redhat.com",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      }, {
        "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=1954250",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Issue Tracking", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31828",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T19:15:07.630",
      "lastModified" : "2024-11-21T06:06:18.450",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "An SSRF issue in Open Distro for Elasticsearch (ODFE) before 1.13.1.0 allows an existing privileged user to enumerate listening services or interact with configured resources via HTTP requests exceeding the Alerting plugin's intended scope."
      }, {
        "lang" : "es",
        "value" : "Un problema de SSRF en Open Distro para Elasticsearch (ODFE) versiones anteriores a 1.13.1.0, permite a un usuario privilegiado existente enumerar los servicios de escucha o interactuar con los recursos configurados por medio de peticiones HTTP que exceden el alcance previsto del plugin Alerting"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N",
            "baseScore" : 7.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:N",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-918"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:amazon:open_distro:*:*:*:*:*:elasticsearch:*:*",
            "versionEndExcluding" : "1.13.1.0",
            "matchCriteriaId" : "9284C1A8-7EB9-4B7B-8718-06BC09EED4C4"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/opendistro-for-elasticsearch/alerting/pull/353",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://opendistro.github.io/for-elasticsearch-docs/version-history/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://rotem-bar.com/ssrf-in-open-distro-for-elasticsearch-cve-2021-31828",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/opendistro-for-elasticsearch/alerting/pull/353",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://opendistro.github.io/for-elasticsearch-docs/version-history/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Third Party Advisory" ]
      }, {
        "url" : "https://rotem-bar.com/ssrf-in-open-distro-for-elasticsearch-cve-2021-31828",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-28665",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T20:15:09.820",
      "lastModified" : "2024-11-21T06:00:03.900",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service."
      }, {
        "lang" : "es",
        "value" : "Stormshield SNS con versiones anteriores a 3.7.18, 3.11.6 y 4.1.6, presenta un fallo de administración de la memoria en el plugin SNMP que puede conllevar a un consumo excesivo de la memoria y recursos de CPU, y posiblemente a una denegación de servicio"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-401"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.0.0",
            "versionEndExcluding" : "3.7.18",
            "matchCriteriaId" : "47CF2A7C-1391-4A92-BEB7-8B33DF2FB693"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "3.8.0",
            "versionEndExcluding" : "3.11.5",
            "matchCriteriaId" : "EB1687AD-8D46-4CBC-8EE5-AEA384B7A1DE"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:stormshield:stormshield_network_security:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "4.0.0",
            "versionEndExcluding" : "4.1.5",
            "matchCriteriaId" : "268FCC1D-500C-4F39-B688-96130AA60D16"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://advisories-admin.stormshield.eu/2021-014",
        "source" : "cve@mitre.org",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://advisories.stormshield.eu/",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://advisories-admin.stormshield.eu/2021-014",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Broken Link" ]
      }, {
        "url" : "https://advisories.stormshield.eu/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29493",
      "sourceIdentifier" : "security-advisories@github.com",
      "published" : "2021-05-06T20:15:09.867",
      "lastModified" : "2024-11-21T06:01:15.033",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Kennnyshiwa-cogs contains cogs for Red Discordbot. An RCE exploit has been found in the Tickets module of kennnyshiwa-cogs. This exploit allows discord users to craft a message that can reveal sensitive and harmful information. Users can upgrade to version 5a84d60018468e5c0346f7ee74b2b4650a6dade7 to receive a patch or, as a workaround, unload tickets to render the exploit unusable."
      }, {
        "lang" : "es",
        "value" : "Kennnyshiwa-cogs, contiene cogs para Red Discordbot.&#xa0;Se ha encontrado una explotación de una RCE en el módulo Tickets de kennnyshiwa-cogs.&#xa0;Esta explotación permite a usuarios de Discord diseñar un mensaje que puede divulgar información confidencial y dañina.&#xa0;Los usuarios pueden actualizar a la versión 5a84d60018468e5c0346f7ee74b2b4650a6dade7 para recibir un parche o, como solución alternativa, descargar tickets para inutilizar la explotación"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "security-advisories@github.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "security-advisories@github.com",
        "type" : "Secondary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-94"
        } ]
      }, {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-noinfo"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:kennnyshiwa-cogs_project:kennnyshiwa-cogs:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "2021-05-05",
            "matchCriteriaId" : "C46EA168-03B7-4A55-BFA0-66BC892B1D48"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/kennnyshiwa/kennnyshiwa-cogs/commit/5a84d60018468e5c0346f7ee74b2b4650a6dade7",
        "source" : "security-advisories@github.com"
      }, {
        "url" : "https://github.com/kennnyshiwa/kennnyshiwa-cogs/security/advisories/GHSA-f4j2-2cwr-h473",
        "source" : "security-advisories@github.com",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/kennnyshiwa/kennnyshiwa-cogs/commit/5a84d60018468e5c0346f7ee74b2b4650a6dade7",
        "source" : "af854a3a-2127-422b-91ae-364da2661108"
      }, {
        "url" : "https://github.com/kennnyshiwa/kennnyshiwa-cogs/security/advisories/GHSA-f4j2-2cwr-h473",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-27941",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T21:15:07.597",
      "lastModified" : "2024-11-21T05:58:52.240",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Unconstrained Web access to the device's private encryption key in the QR code pairing mode in the eWeLink mobile application (through 4.9.2 on Android and through 4.9.1 on iOS) allows a physically proximate attacker to eavesdrop on Wi-Fi credentials and other sensitive information by monitoring the Wi-Fi spectrum during a device pairing process."
      }, {
        "lang" : "es",
        "value" : "El acceso web sin restricciones a la clave de cifrado privada del dispositivo en el modo de emparejamiento de código QR en la aplicación móvil eWeLink (versiones  hasta.9.2 en Android y versiones hasta.9.1 en iOS) permite a un atacante físicamente próximo espiar las credenciales de Wi-Fi y otras información mediante el seguimiento del espectro de Wi-Fi durante un proceso de emparejamiento de dispositivos"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 4.6,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 2.1,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 3.9,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-522"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:iphone_os:*:*",
            "versionEndIncluding" : "4.9.1",
            "matchCriteriaId" : "3C19C39C-9C55-4C57-8BF2-C32E843249E5"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:coolkit:ewelink:*:*:*:*:*:android:*:*",
            "versionEndIncluding" : "4.9.2",
            "matchCriteriaId" : "6198F9C4-23C8-46B3-9100-B96C60407F1C"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://apps.apple.com/us/app/ewelink-smart-home/id1035163158",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/salgio/eWeLink-QR-Code",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US",
        "source" : "cve@mitre.org",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://apps.apple.com/us/app/ewelink-smart-home/id1035163158",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/salgio/eWeLink-QR-Code",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://play.google.com/store/apps/details?id=com.coolkit&hl=en_US",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Product", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-29203",
      "sourceIdentifier" : "security-alert@hpe.com",
      "published" : "2021-05-06T21:15:07.647",
      "lastModified" : "2024-11-21T06:00:49.050",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote authentication leading to execution of arbitrary commands, gaining privileged access, causing denial of service, and changing the configuration. HPE has released a software update to resolve the vulnerability in the HPE Edgeline Infrastructure Manager."
      }, {
        "lang" : "es",
        "value" : "Se ha identificado una vulnerabilidad de seguridad en HPE Edgeline Infrastructure Manager, también se conoce como software de gestión de infraestructura HPE Edgeline, versiones anteriores a 1.22.&#xa0;La vulnerabilidad podría ser explotada remotamente para omitir  la autenticación remota que conlleva a una ejecución de comandos arbitrarios, consiguiendo acceso privilegiado, causando una denegación de servicio y cambiando la configuración.&#xa0;HPE ha lanzado una actualización de software para resolver la vulnerabilidad en HPE Edgeline Infrastructure Manager"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-306"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hp:edgeline_infrastructure_manager:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "1.22",
            "matchCriteriaId" : "814F61E6-CAFA-4029-9D95-6E5724523ED8"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04124en_us",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-15",
        "source" : "security-alert@hpe.com",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://support.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn04124en_us",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.tenable.com/security/research/tra-2021-15",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-31737",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T21:15:07.687",
      "lastModified" : "2024-11-21T06:06:09.910",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "emlog v5.3.1 and emlog v6.0.0 have a Remote Code Execution vulnerability due to upload of database backup file in admin/data.php."
      }, {
        "lang" : "es",
        "value" : "emlog versión v5.3.1 y emlog versión v6.0.0, presentan una vulnerabilidad de ejecución de código remota debido a una carga del archivo de respaldo de la base de datos en el archivo admin/data.php"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:5.3.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFAD61B2-B213-4344-A22A-D75CBD810FF1"
          }, {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:emlog:emlog:6.0.0:-:*:*:*:*:*:*",
            "matchCriteriaId" : "CAF9945F-F24D-4529-906F-E0BF560E4E3A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://github.com/emlog/emlog/issues/82",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/emlog/emlog/issues/82",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Issue Tracking", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32077",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-06T23:15:07.850",
      "lastModified" : "2024-11-21T06:06:48.803",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Primary Source Verification in VerityStream MSOW Solutions before 3.1.1 allows an anonymous internet user to discover Social Security Number (SSN) values via a brute-force attack on a (sometimes hidden) search field, because the last four SSN digits are part of the supported combination of search selectors. This discloses doctors' and nurses' social security numbers and PII."
      }, {
        "lang" : "es",
        "value" : "Primary Source Verification en VerityStream MSOW Solutions versiones anteriores a 3.1.1, permite a un usuario de Internet anónimo detectar los valores del Social Security Number (SSN) por medio de un ataque de fuerza bruta en un campo de búsqueda (a veces oculto), porque los últimos cuatro dígitos del SSN son parte del combinación compatible de selectores de búsqueda.&#xa0;Esto divulga los números de seguro social y la PII de los médicos y enfermeras"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:veritystream:msow_solutions:*:*:*:*:*:*:*:*",
            "versionEndExcluding" : "3.1.1",
            "matchCriteriaId" : "0512880A-2895-44AD-9080-D90DDD3E15D1"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.marbasec.com/blog/cve-2021-32077-fun-with-social-security-numbers",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.veritystream.com/legacy/msow-solutions",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://www.marbasec.com/blog/cve-2021-32077-fun-with-social-security-numbers",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://www.veritystream.com/legacy/msow-solutions",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32094",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.157",
      "lastModified" : "2024-11-21T06:06:49.830",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to upload arbitrary files."
      }, {
        "lang" : "es",
        "value" : "U.S. National Security Agency (NSA) Emissary versión 5.9.0, permite a un usuario autenticado cargar archivos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-434"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D1A1AF-D262-4257-9C0F-832E3B87F386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32095",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.200",
      "lastModified" : "2024-11-21T06:06:49.967",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to delete arbitrary files."
      }, {
        "lang" : "es",
        "value" : "U.S. National Security Agency (NSA) Emissary versión 5.9.0, permite a un usuario autenticado eliminar archivos arbitrarios"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
            "baseScore" : 8.1,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P",
            "baseScore" : 5.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D1A1AF-D262-4257-9C0F-832E3B87F386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32096",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.230",
      "lastModified" : "2024-11-21T06:06:50.113",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ConsoleAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows a CSRF attack that results in injecting arbitrary Ruby code (for an eval call) via the CONSOLE_COMMAND_STRING parameter."
      }, {
        "lang" : "es",
        "value" : "El componente ConsoleAction de U.S. National Security Agency (NSA) Emissary versión 5.9.0, permite un ataque de tipo CSRF que resulta en una inyección de código de Ruby arbitrario (para una llamada de eval) por medio del parámetro CONSOLE_COMMAND_STRING"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P",
            "baseScore" : 6.8,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-352"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D1A1AF-D262-4257-9C0F-832E3B87F386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32098",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.270",
      "lastModified" : "2024-11-21T06:06:50.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Artica Pandora FMS 742 allows unauthenticated attackers to perform Phar deserialization."
      }, {
        "lang" : "es",
        "value" : "Artica Pandora FMS 742, permite a atacantes no autenticados llevar a cabo una deserialización Phar"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-502"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:742:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DEF19B-A126-49DE-99FB-3B7B491CA9C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pandorafms.com/blog/whats-new-in-pandora-fms-743/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pandorafms.com/blog/whats-new-in-pandora-fms-743/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32099",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.310",
      "lastModified" : "2024-11-21T06:06:50.410",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability in the pandora_console component of Artica Pandora FMS 742 allows an unauthenticated attacker to upgrade his unprivileged session via the /include/chart_generator.php session_id parameter, leading to a login bypass."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de inyección SQL en el componente pandora_console de Artica Pandora FMS, permite a un atacante no autenticado actualizar su sesión sin privilegios por medio del parámetro session_id en el archivo /include/chart_generator.php, conllevando a un desvío de inicio de sesión"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 7.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:742:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DEF19B-A126-49DE-99FB-3B7B491CA9C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pandorafms.com/blog/whats-new-in-pandora-fms-743/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pandorafms.com/blog/whats-new-in-pandora-fms-743/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32100",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.350",
      "lastModified" : "2024-11-21T06:06:50.550",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A remote file inclusion vulnerability exists in Artica Pandora FMS 742, exploitable by the lowest privileged user."
      }, {
        "lang" : "es",
        "value" : "Se presenta vulnerabilidad de inclusión remota de archivos en Artica Pandora FMS 742, explotable por el usuario menos privilegiado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "NVD-CWE-Other"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:artica:pandora_fms:742:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53DEF19B-A126-49DE-99FB-3B7B491CA9C0"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pandorafms.com/blog/whats-new-in-pandora-fms-743/",
        "source" : "cve@mitre.org",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/pandora-fms-742-critical-code-vulnerabilities-explained",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://pandorafms.com/blog/whats-new-in-pandora-fms-743/",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Release Notes", "Vendor Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/multiple-vulnerabilities-in-pandora-fms-could-trigger-remote-execution-attack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32101",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.387",
      "lastModified" : "2024-11-21T06:06:50.690",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The Patient Portal of OpenEMR 5.0.2.1 is affected by a incorrect access control system in portal/patient/_machine_config.php. To exploit the vulnerability, an unauthenticated attacker can register an account, bypassing the permission check of this portal's API. Then, the attacker can then manipulate and read data of every registered patient."
      }, {
        "lang" : "es",
        "value" : "El Patient Portal of OpenEMR versión 5.0.2.1, está afectado por un sistema de control de acceso incorrecto en el archivo portal/patient/_machine_config.php.&#xa0;Para explotar la vulnerabilidad, un atacante no autenticado puede registrar una cuenta, sin pasar por la comprobación de permisos de la API de este portal.&#xa0;Luego, el atacante puede manipular y leer los datos de cada paciente registrado"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N",
            "baseScore" : 8.2,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 4.2
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N",
            "baseScore" : 6.4,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 4.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-732"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCFA8AD2-1361-43D5-9580-A7F43B3390D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32102",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.427",
      "lastModified" : "2024-11-21T06:06:50.840",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability exists (with user privileges) in library/custom_template/ajax_code.php in OpenEMR 5.0.2.1."
      }, {
        "lang" : "es",
        "value" : "Se presenta vulnerabilidad de inyección SQL (con privilegios de usuario) en la biblioteca library/custom_template/ajax_code.php en OpenEMR versión 5.0.2.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCFA8AD2-1361-43D5-9580-A7F43B3390D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/Old_Outdated_OpenEMR_Patches",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/Old_Outdated_OpenEMR_Patches",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32103",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.460",
      "lastModified" : "2024-11-21T06:06:50.990",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Stored XSS vulnerability in interface/usergroup/usergroup_admin.php in OpenEMR before 5.0.2.1 allows a admin authenticated user to inject arbitrary web script or HTML via the lname parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo XSS almacenado en el archivo interface/usergroup/usergroup_admin.php en OpenEMR versiones anteriores a 5.0.2.1, permite a un usuario autenticado por un administrador inyectar un script web o HTML arbitrario por medio del parámetro lname"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 4.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "HIGH",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 1.7,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N",
            "baseScore" : 3.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "LOW",
          "exploitabilityScore" : 6.8,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:*:*:*:*:*:*:*:*",
            "versionEndIncluding" : "5.0.2.1",
            "matchCriteriaId" : "FE0D52D8-A175-4381-B2DE-C6EC75F14B5D"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32104",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T04:15:07.497",
      "lastModified" : "2024-11-21T06:06:51.133",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A SQL injection vulnerability exists (with user privileges) in interface/forms/eye_mag/save.php in OpenEMR 5.0.2.1."
      }, {
        "lang" : "es",
        "value" : "Se presenta vulnerabilidad de inyección SQL (con privilegios de usuario) en el archivo interface/forms/eye_mag/save.php en OpenEMR versión 5.0.2.1"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P",
            "baseScore" : 6.5,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-89"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:open-emr:openemr:5.0.2.1:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BCFA8AD2-1361-43D5-9580-A7F43B3390D5"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/Old_Outdated_OpenEMR_Patches",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/openemr-5-0-2-1-command-injection-vulnerability",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://community.open-emr.org/t/openemr-5-0-2-patch-5-has-been-released/15431",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://community.sonarsource.com/t/openemr-5-0-2-1-command-injection-vulnerability-puts-health-records-at-risk/33592",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/healthcare-security-openemr-fixes-serious-flaws-that-lead-to-command-execution-in-patient-portal",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://www.open-emr.org/wiki/index.php/Old_Outdated_OpenEMR_Patches",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32074",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T05:15:08.153",
      "lastModified" : "2024-11-21T06:06:48.370",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "HashiCorp vault-action (aka Vault GitHub Action) before 2.2.0 allows attackers to obtain sensitive information from log files because a multi-line secret was not correctly registered with GitHub Actions for log masking."
      }, {
        "lang" : "es",
        "value" : "HashiCorp vault-action (también se conoce como Vault GitHub Action) versiones anteriores a 2.2.0, permite a atacantes conseguir información confidencial de archivos de registro porque un secreto de múltiples líneas no fue registrado correctamente con GitHub Actions para el enmascaramiento de registros"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 7.5,
            "baseSeverity" : "HIGH",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N",
            "baseScore" : 5.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 10.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-532"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:hashicorp:vault-action:*:*:*:*:*:*:*:*",
            "versionStartIncluding" : "0.1.0",
            "versionEndExcluding" : "2.2.0",
            "matchCriteriaId" : "9107885D-19DB-45B4-9FB8-0A010936EA6A"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-13-vault-github-action-did-not-correctly-mask-multi-line-secrets-in-output/24128",
        "source" : "cve@mitre.org",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vault-action/blob/master/CHANGELOG.md",
        "source" : "cve@mitre.org",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vault-action/issues/205",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vault-action/pull/208",
        "source" : "cve@mitre.org",
        "tags" : [ "Patch", "Third Party Advisory" ]
      }, {
        "url" : "https://discuss.hashicorp.com/t/hcsec-2021-13-vault-github-action-did-not-correctly-mask-multi-line-secrets-in-output/24128",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Vendor Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vault-action/blob/master/CHANGELOG.md",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vault-action/issues/205",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://github.com/hashicorp/vault-action/pull/208",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32090",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T05:15:08.210",
      "lastModified" : "2024-11-21T06:06:49.260",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The dashboard component of StackLift LocalStack 0.12.6 allows attackers to inject arbitrary shell commands via the functionName parameter."
      }, {
        "lang" : "es",
        "value" : "El componente dashboard de StackLift LocalStack versión 0.12.6, permite a atacantes inyectar comandos de shell arbitrarios por medio del parámetro functionName"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 9.8,
            "baseSeverity" : "CRITICAL",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 3.9,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 10.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 10.0,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-78"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:localstack:localstack:0.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C598EB9-3CC7-43FF-A1F9-70E49EC9E418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/hack-the-stack-with-localstack",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/hack-the-stack-with-localstack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32091",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T05:15:08.247",
      "lastModified" : "2024-11-21T06:06:49.403",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site scripting (XSS) vulnerability exists in StackLift LocalStack 0.12.6."
      }, {
        "lang" : "es",
        "value" : "Se presenta vulnerabilidad de tipo Cross-site scripting (XSS) en StackLift LocalStack versión 0.12.6"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:localstack:localstack:0.12.6:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C598EB9-3CC7-43FF-A1F9-70E49EC9E418"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/hack-the-stack-with-localstack",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/hack-the-stack-with-localstack",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/localstack-zero-day-vulnerabilities-chained-to-achieve-remote-takeover-of-local-instances",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32092",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T05:15:08.280",
      "lastModified" : "2024-11-21T06:06:49.540",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A Cross-site scripting (XSS) vulnerability in the DocumentAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows remote attackers to inject arbitrary web script or HTML via the uuid parameter."
      }, {
        "lang" : "es",
        "value" : "Una vulnerabilidad de tipo cross-site scripting (XSS) en el componente DocumentAction de U.S. National Security Agency (NSA) Emissary versión 5.9.0, permite a atacantes remotos inyectar script web o HTML arbitrarios por medio del parámetro uuid"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
            "baseScore" : 6.1,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "REQUIRED",
            "scope" : "CHANGED",
            "confidentialityImpact" : "LOW",
            "integrityImpact" : "LOW",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 2.7
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N",
            "baseScore" : 4.3,
            "accessVector" : "NETWORK",
            "accessComplexity" : "MEDIUM",
            "authentication" : "NONE",
            "confidentialityImpact" : "NONE",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.6,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : true
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-79"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D1A1AF-D262-4257-9C0F-832E3B87F386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-32093",
      "sourceIdentifier" : "cve@mitre.org",
      "published" : "2021-05-07T05:15:08.317",
      "lastModified" : "2024-11-21T06:06:49.687",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "The ConfigFileAction component of U.S. National Security Agency (NSA) Emissary 5.9.0 allows an authenticated user to read arbitrary files via the ConfigName parameter."
      }, {
        "lang" : "es",
        "value" : "El componente ConfigFileAction de U.S. National Security Agency (NSA) Emissary versión 5.9.0, permite a un usuario autenticado leer archivos arbitrarios por medio del parámetro ConfigName"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
            "baseScore" : 6.5,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "NETWORK",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "exploitabilityScore" : 2.8,
          "impactScore" : 3.6
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N",
            "baseScore" : 4.0,
            "accessVector" : "NETWORK",
            "accessComplexity" : "LOW",
            "authentication" : "SINGLE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "NONE",
            "availabilityImpact" : "NONE"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 8.0,
          "impactScore" : 2.9,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-862"
        } ]
      } ],
      "configurations" : [ {
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:a:nsa:emissary:5.9.0:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3D1A1AF-D262-4257-9C0F-832E3B87F386"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "cve@mitre.org",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://blog.sonarsource.com/code-vulnerabilities-in-nsa-application-revealed",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      }, {
        "url" : "https://portswigger.net/daily-swig/nsa-workflow-application-emissary-vulnerable-to-malicious-takeover",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Exploit", "Third Party Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1891",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-05-07T09:15:08.177",
      "lastModified" : "2024-11-21T05:45:19.760",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "A possible use-after-free occurrence in audio driver can happen when pointers are not properly handled in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking"
      }, {
        "lang" : "es",
        "value" : "Una posible ocurrencia de uso de la memoria previamente liberada en el controlador de audio puede ocurrir cuando los punteros no son manejados apropiadamente en los productos Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice &amp; Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 8.4,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 2.5,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P",
            "baseScore" : 4.6,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "PARTIAL",
            "integrityImpact" : "PARTIAL",
            "availabilityImpact" : "PARTIAL"
          },
          "baseSeverity" : "MEDIUM",
          "exploitabilityScore" : 3.9,
          "impactScore" : 6.4,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-416"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8009w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFEE117-AC33-474D-B19C-F4738D68F72A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1549F2DF-1B57-4091-9052-9A5E082E9C63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA6CA-A0FD-4A72-B856-C8E65AC86902"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D29295A-7183-46BE-B4EE-F891D1C17ED9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B052615D-857A-46D4-9098-1CBFA14687C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B59B60-A298-4A56-A45A-E34B7AAB43D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FCE91-BF38-49ED-8FFB-429BAFEE7832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715A9F94-5F9E-45E5-B07B-699410C01478"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE1ADA9-8042-4CDE-A2B9-E96665CB41BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1DE046-DD70-4ACA-9DF4-59939DAC1889"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88B9C86-2E8E-4DCE-A30C-02977CC00F00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE473A5A-5CFC-4F08-A173-30717F8BD0D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B032F871-3EC2-427D-A06F-681A58075925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73286FFB-C267-46B7-8FEF-C96534656AF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CAA848-413D-4C63-823B-BFCE95C7740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA32CC0-DE30-4B15-8EC6-1FAF14C5C4E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA42F2EA-5D00-42B8-B020-C27675B72915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCF207D-B8C8-4860-89C7-673C821F0237"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A35ECF-B12E-42DE-A74B-2C3BE03639A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B283D6-B2D2-49B6-98A8-08EDB54C1F15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBF42F8-50BA-4172-A3A0-7FD1BA4B3ED3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770F3924-BE27-4BDE-B922-680B3C9753EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4018_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D65E62B-95CA-4229-A61B-F4FB70466B6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1339CEEF-34C9-426E-864B-6C7B68E72CAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4028_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3525CD2A-CE43-4B42-B8C2-9B19B2551214"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4028:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010DBDB1-F1A3-4805-BDD2-84CBFA0A0BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4029_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D21F293-B9C7-46CB-8D83-BEE27E899BC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4029:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4BA4D00-D7B2-4152-BD82-E6F572655AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7A5C46-48BF-42A9-A477-A660C6D7B437"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB79382-19D6-4A67-9013-7099A9C58829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CF970F-17AE-4C59-89A5-5B41A41E1DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C54A70-AAA8-4B5E-AC1B-471A5C7E79B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04589FF-F299-4EF6-A57B-1AD145372DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC1ADAD-DA77-47EF-8DB9-C36961C560C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06126F30-D081-4A11-92FB-4074A451FAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6028:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2550040-CCC7-4B52-8D3E-7948B3E3C62B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1CC1C1-F2CA-4C43-B9E9-1288C3496C7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC82552A-9E7C-4A13-B7A5-43CEA218675C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8065_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F37542D-35FD-4B15-8882-DD7543FF4E3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8065:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7A9919-4B34-4960-ADC7-04A176579B80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8068_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CB8796-7976-4077-BFF3-04DAEF5C8DDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8068:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E848E5C5-F6C6-4FA1-93A6-C7737D69BB15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8070_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C670A4C5-1F17-4F1E-91DC-A33A9BA8878A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC9F136-90A7-486F-AF2A-EC60125E5AF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711FC14F-4DED-4F90-9BA5-0036537E6DCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302F06C0-4835-4CD6-B745-BF7B704C3C86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8071_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6FF982-7B4C-40F8-8A79-49CD234930DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8071:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77052755-6A86-4ED7-B45C-32F884D27C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623ED6A2-EE37-458E-BEFA-8BAD08256AE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53449B68-4C58-4AEB-82B7-72726ADE0E2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8072_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83357A1C-633B-4814-ABB5-A8AC2AC12990"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8072:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4A7555-7224-403A-9B7D-23D1622623B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E5DB9B-F388-49F3-ABD5-CE773FC4B045"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8072a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0137E60A-1869-479C-9B4B-378E5FCCBA1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914BF98-E69C-4C8D-8B10-759642ADD7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2118C404-402F-463C-8160-3CC3B703DF30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7691C2-C4F8-4F23-9B5F-5E8FE0E2293E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BF2E50-E2A4-44FF-9748-ED96C0C1AB5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966392A8-DD8E-4AA1-B407-5BF2D937139E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8076:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A211C022-8EDF-4B76-89D6-599812900446"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF245F8E-C056-4BEF-982E-9616F8C65CD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8076a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE302EF9-165F-47F9-B0D6-BE1E3D8C6C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF609C6C-CD50-423A-A75E-83C730296089"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8078a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B35C18-9A01-41E1-8CE9-D8FA7E4A25ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8890C528-C2A3-4148-A397-85B63FB920C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8173:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81494D75-1D4D-4DC5-AF67-F83FD562DBB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB84228-3083-4048-8E83-E1F30B537223"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8174:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB58F259-62BA-40B9-BD71-960F25D20BED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD0305A-E31C-4888-B97E-CE571D40560A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369295A2-8236-44B6-A09F-7CB0BD20527F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E0E39-0081-4261-8350-149E763AB462"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F76229-1A4A-4306-A4CC-C823A99F041A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm215_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA91813E-A10D-433F-A03A-A8D430628288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm215:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B243231F-2266-4876-A612-1245BE208249"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm3003a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985D429B-49DD-4542-B70A-60D311DFF8DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF03FD6-E0DF-4216-8639-BCD58F56E646"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm4125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A8098B-B05E-446B-98BB-3EC3806863D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57C9D36-323E-4982-BFEF-32734A46FB28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm4250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0395BC-C0F9-476B-ADCD-3AC8F17BCC40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm4250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B95D6C-7445-4738-A52B-B4685BEA12A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC9978B-DFAB-4D88-B155-325294F90722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC75E299-94BB-4014-B14D-9ED08B0A8129"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm456_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043F28E-D20B-49C5-A550-47CCDFE22A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm456:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8037863-7AB6-41A4-AA33-54A7B05AF0CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45806F13-0E30-414E-A1AC-835F1ADA3049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "988554E5-F881-4DA5-BF68-7FEB1E41EB1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7696C6C-5BD1-4DE4-AFB3-B5F9776BE1C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D757D8-2A81-4161-ABA8-54D61E71568A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6150a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BA0CEC-8A40-407C-B78A-CDC4F6DDB00F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAEEB4E-8C21-4DE3-8230-0E64DA8BCF31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6150l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8911F779-A279-4632-B67E-3CE74F5ECDE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD92FEFB-EFAF-4622-BEEB-16D828E87C2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34069CA0-4B0C-4791-8C5A-6F8DC2319AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3FDAA9-4C1D-43C7-B4A5-61778F62DDC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73116417-B944-46FB-BB1A-3728914755E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629AC2EB-637D-493A-913A-66989EE2BB91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm640a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EAE740-30A4-44B4-945C-A6927220BAB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm640a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E4F34A-9C0D-4966-B38A-7E708AE72C5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm640l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C267AA9-675B-4C3F-87E2-FDCC1BADD308"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm640l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C52F30-2B28-4A02-BA24-04A137E0B5B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm640p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F846AA9-A282-412F-AEBF-89952E55F21F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm640p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD43CDF8-11E5-42DD-A8F3-229BEC82C692"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE6F7B-80F0-48E1-84CC-68AC37640D04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA4BC14-3A93-42C9-A51F-54C229FB2617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm660a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1193E4-5E7E-4822-A1C4-C7A545A35A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm660a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE38E9BD-E0A7-4B34-AE3B-41363F90487A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm660l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0591D3C8-521C-41A2-9B23-B7C82F96F296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E2BC76-B6BB-44A0-9023-116EAA66B388"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5A1516-2DE0-46D2-8B17-72BBE495A926"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875C0C0A-5B10-4A63-9441-4B9279ADDE63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm670a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B9205B-EBB5-43AB-8AF9-4EF6277263E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm670a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF5777D-28C5-4CF9-8CA0-BAE86468F613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm670l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFEF40-42B4-450E-8526-CA5000128A99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm670l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6418B48-0A81-4425-8011-7405F901F024"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7150a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDED2AD-D8C3-41E3-B408-CAC738D6531E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66F085D-874B-43D3-A965-FCAC14657A69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7150l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CF0FCB-6283-479A-955D-DA8D546FC6AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7150l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E3064A-C411-4097-8E4D-4984C5769126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD87AE7-1B4D-4137-B1BE-BF55FB8540E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B20B944-46FA-4D10-8B50-E31D1E08EC4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7250b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8D1353-79BD-4545-9A34-8D705E4D81BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AD9E23-148B-4AF7-BE79-A1324CC6F546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7350c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C17AC22-EC93-455A-A3B4-7646C76D19E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7350c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E65C30-DEE4-4E34-BBD1-824AFCD06FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8004_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB803219-ECD1-4E70-BECD-09561B09FAB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAA0E9B-33D8-414B-86CB-DF6D04746144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8005_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1B2E04-63A3-4249-A2D2-F8533B12AEA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD6E76-BDF4-4AAD-A63B-C4AD2971C065"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8008_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D360B82-E63E-41FF-91B4-82A1ECEB65CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A128D0-9E32-4B88-B92B-E15D56CE30E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8009_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04485E4B-B805-4492-BECB-6C5CF14D91E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2D27C4-B364-4991-AE9E-4F3DC486D581"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4EC2ED-5DB9-469E-92B3-CBBC88DD1308"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C716BC34-C366-4389-8AD9-8806065A7403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDCC452-6477-4509-90E9-F4FB666190CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6151FB45-F8F7-4F92-ACB7-57272CCAD255"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83D8D28-71E9-481D-A290-78258ED39E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5EE00-7002-4190-BCCF-8B63ACA70CEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58175194-DB51-4A9C-B770-4D251D0062FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660ADC5A-799B-42C4-B7E1-52539AD994D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB52BD0A-F38C-4A13-8F94-5B490F7B2B1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5ABEF07-694B-47E8-A3A9-8164EF6E45BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BFA526-5E52-4C5D-9230-03D6AA2E6053"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6FFB29-7370-43CD-8410-2A17D9A3BD64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D61290-37D3-4AEB-9F35-D2C9AAEF18EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FEDC09-E1DE-49A5-8EDF-E895467CD8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD021F-6DEA-4C02-9048-34C4313D3F5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AFEEAC-A37D-497F-B9D0-BE7CB673F92F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350bh_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AC16CB-970E-4225-A06B-8775A476DAE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350bh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F5A7-FD3E-499F-863D-A1BEADB0D06E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350bhs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0EFBC9-EE78-4DE1-89D0-D5C8469CA3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350bhs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97CA505-D827-48C1-A46B-7B82DE719C95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9459CF12-1ABF-4F04-93BE-0BACD5AEFAE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D137B13B-24D1-41C4-BC8C-2F6F51CEBCFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B591057-5D1B-44B0-A9C8-847447E31F45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179E3B9E-0EE6-436B-AC5B-49FB3F375BD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E6EC77-323A-4362-A281-833F7856CCBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED8C7A7-884F-412B-BF47-D122810A67E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55A3937-0061-43A2-B829-17BC37A1F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A320056A-818F-4BEB-9DB0-14F8F26A309B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C6EA8-FCF3-45C4-BB1A-9D025C5AA8E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AEC500-88F5-432D-9DA3-FBB4438150A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8909_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498F048F-669D-46E0-AA60-ED2B3E11B67A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2950D103-C664-44CE-86FC-49A03861441F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8916_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBCAE84-6089-4F0A-B2F0-1B9C9186F43F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDA1620-8FFC-4DF4-9CBC-188D21581CF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8937_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4558B01C-171D-47F7-8831-E9C53BC953BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8937:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8E31E7-9ED7-4F8E-ADC8-60C087F4E340"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8953_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65963E1-6467-44ED-9DB4-122C9BB22001"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8953:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316C919A-BD79-4859-9F85-AEDBA5E6137A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DF0B28-8E69-4197-B47E-D3A585245BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B87120F-592A-4D3C-801D-8C8980731FA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmc1000h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D96167A-9646-4A08-BF18-B5C8B0AAB7CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmc1000h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068DFD9E-75AA-4556-B16E-0AA699A96A11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmd9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDA009C-E617-4581-A47C-FD9BD77861D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmd9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714DDC1D-116D-41F4-9E97-55DD97D54DE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pme605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C49097-28A8-4DBF-8549-26D714A3C6DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pme605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1645FF89-01C1-4ADF-9BC9-C369E061713C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845BA6B5-5EC6-4B54-BD02-E924A91D3D54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5F089-6FBC-4B6B-8980-6BFEB6670BDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8937_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64ACAA9-9C2A-4DB5-9A41-557A2DABB791"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8937:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A176D9B-816F-47CA-B8BC-E4E7C1E96325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8952_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7534BA2-545B-40CA-8335-72955A96CBAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F914570-082A-4276-85DB-ADA944BA771F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123FCE72-8379-48EF-BD48-8D77E54C4243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAAE437-C4CA-4789-92BD-9AAF67621407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk7350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A6842D-F95B-4CB5-9E8C-1C1B767398C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk7350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7918E9-FFD6-4041-88FB-975A708D8EA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk8002_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B4B0F-13D0-4097-BCFD-A8E5FA4890D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk8002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E43ED5B2-BE32-4650-9726-970135570455"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk8003_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C33C9B-1A12-4FE4-89F5-597DD3477951"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk8003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7350FB-760C-41D1-A72F-A1FD65F7CE60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk8350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6968D9-C147-400C-9BD3-45525BDF58F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9E197C-4C9E-4B76-A9DC-78BF0325C764"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm6155au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9028F3-403E-440F-9043-ABF049E10D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm6155au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A07D34-F150-42DE-A5A0-BE41A678AA0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm8155au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0E1178-1C03-43DD-8548-7254CDD3D2BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm8155au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732B2221-EA5D-408F-A1C5-0193D452C8DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm8195au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35277E0-14F0-4CB7-B180-966408859B96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm8195au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F18ED67-902E-4DFC-8239-B8188DBD7FEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm855au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906AAAAC-E349-4FCE-8666-AEEBEDDC35A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm855au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F67FB3-5725-4A19-904E-B1FC95D4402E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmr525_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C579A2E1-2056-4D10-BE6A-906C59991060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmr525:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA1D854-AD1B-4732-AEF3-321936B5DF7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmr735a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6717466F-6EC4-42D3-90B2-6BE07E122A9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmr735a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A6173-6582-4153-A040-70FF40516A8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmr735b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63677BB1-A2AF-41E3-BE46-4C07AECAB186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmr735b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E4545F-B38C-4535-BF0E-6A9FC0579265"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmw3100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF17FF59-E525-4854-8AE3-821BC0F0B688"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmw3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC0BEF8-B829-485A-928B-A88317A75848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18EAB2-4ABE-4437-ADB7-89F0F78A51B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECD72E2-14D0-499B-908E-21126B8BCDBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmx50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA587ED9-5DB1-4F6A-A501-4DF1C7D4027D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmx50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F125BECB-FBCE-4B1E-AA23-CE839F91B0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmx55_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A226D4-514B-47D1-A156-48BDA3A73DC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmx55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E63676-6E36-4B26-88C6-36CF73B5FBA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3514_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC85F2F-01EE-43CB-851A-BB0FE741975B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3514:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A0FCE5-32EE-4999-8D63-B438862B49A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3516_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFA5E10-39CE-46C3-9EE1-03AF2ACAF3D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D80915F-096A-4B69-B6B8-6C6609B463DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3518_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE8EF67-FEEC-4E3E-A03D-DF94B4D7E66C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49400DEF-EB72-419F-AD00-37BF7C30F2BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3519_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5EE197-894D-4EA8-ABB0-379421615A91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3519:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04842F87-AA4D-43BF-8148-FE7BD521C975"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3522_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D336F63D-624D-4A38-A30C-5BDBD9893582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298034D1-85C6-42AF-BC06-7B19A8C84FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE75DB7-F359-4483-9283-0816B5360EE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF6F7AF-9839-46A1-8552-ED6F9F246E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3555_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1ACBBB-606C-454B-9DB5-1EDB157A4BC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3555:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDC5240-C134-44E6-8E90-63C09BA01970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5515_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F9ECFE-F2FF-4BC8-AC90-60CA518387E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D209F276-3539-4231-9735-B31C22AE8E5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5516_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E820C8EC-60E6-4564-824E-717476CBD049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6919C289-456D-4A2F-A508-4C1E41E9ACC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5522_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A75E2E-2123-4F70-BD09-D63618C0CCA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5098C94E-4146-4D68-BCE6-D860B9A62BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5533_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6574604A-9AE1-452D-A7F0-EDC74E9CF580"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5533:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A58C3D-B9C1-4155-9FF1-C5312D699164"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5568_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940ECE62-B410-4113-97AA-3D5157D89998"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5568:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A345E2B6-0DD7-454C-B9ED-33469866A217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qbt1500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3401DE59-3246-402E-9624-C10CD11A7156"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qbt1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B8C5E9-3F03-4A5E-95FC-B9318BA85268"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qbt2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984A57B0-3E1E-4021-A2AB-43D4B640C5E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qbt2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA626EC-59F1-43CC-835C-1E4F3FE579BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C359D1E7-6E0A-41B5-ABE5-B55598960700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca4024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DC3CE7-0C4A-458B-A42E-8F80C062DD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DC4FBB-D9CB-43EB-829E-0A892306D0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0F8ED6-EAE7-44EA-A8C6-F5AD408261F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966CDA56-809F-4FF4-909D-0DD92F44CF67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90747B4-2CC0-4816-A994-58E00F5ADA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FBD6DF-F174-4690-AA3D-1E8974E3627F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BF86E1-3FAC-4A42-8C01-5944C6C30AE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E16994A-6DBA-426C-ADD2-B1E8B49FEDBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E674DE-55AB-44E5-8E00-C804FC9D4DC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503CEDEF-99D0-4432-88A0-295340743606"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9115A0-0D87-49BE-9A9B-091DBF8D9E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A344E78F-D15A-460E-8EF8-7C6FC39F2D5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF5EC23-4884-4C2B-8E77-50B1E8E28A3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6428_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9382B5-AEB1-41E6-9F25-B0EDC95363C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6428:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFC0DFF-F13A-4804-890C-99AFA0C56D62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AFC483-1468-43FC-96FA-A56165C290E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A963FDF-6FF4-4F48-834E-2A14D241716D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FD6A24-B6F4-4C65-968F-AFF90A1A60B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34661A30-92C3-4F0D-ABD1-8DA8E928DFF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F574BC-9AB2-4B83-A466-556ECEBBD3DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34D021D-C043-4EFD-9AB3-B2174528CBA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6438_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D7658D-692D-4873-8D41-7682E9ECAEB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6438:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8993C2-1E06-4ACF-B1E8-A62D89EBF4A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FE294D-4BE0-4436-9273-507E760884EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424CB795-58E5-43A4-A2EC-C563D93C5E72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886124F6-B397-4EB6-8E01-6012E468ABE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93ED74CE-6BF2-4983-8780-07D5336745B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59672A0-2FA6-46CC-B75A-C599B842AFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3847F4A5-90A5-4C84-B43F-0DDD81BD79CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828CFB37-76A6-4927-9D00-AF9A1C432DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11405993-5903-4716-B452-370281034B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DDA896-576C-44B8-85B6-F71F473F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643EC76D-2836-48E6-81DA-78C4883C33CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca7500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4F8296-D8D0-42C6-AAD2-24DA0DB403D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14EC7373-E5F3-4D2B-B727-CAEE772B74BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8A5A87-7D62-4EB7-962A-0F160DE3E889"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8075:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B68D126-7F49-4FFA-8AF8-78120973D78E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1C53DC-D2F3-4C92-9725-9A85340AF026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0585FF-E390-46E8-8701-70964A4057BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA8F9DA-1386-4961-B9B2-484E4347852A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117289C8-7484-4EAE-8F35-A25768F00EED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9880_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F81D132-B2DD-4D09-8561-21A2CFBCC9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F099A893-232B-48FB-81B3-F01AF2A19426"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9886_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311229F9-4A32-462D-AE8D-E5E2B2C416CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9886:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A523C3F-FB62-4728-8173-4C117C28AC5A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9888_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF227702-EEFC-43CC-AC80-81EA6E4927E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9888:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE5DFEA5-EA29-40B6-83DB-883B276E8245"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9889_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728CCD27-ED06-49FD-AECD-9B0856813EDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9889:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D181868-AE93-4116-B45F-81D94F537227"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9898_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49882EDE-598D-40B2-8A65-D258241E669F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9898:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1572D87-4EC2-4B95-826A-B03FDD4985AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DCBC53AC-E040-40E0-B09B-4117E641C9D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE49086-E95B-4852-8A09-16A83DD63EC9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9984_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93BA2DC9-5B4F-4F8F-8B3D-8DA01043B9BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9984:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FA8880F-E513-4390-B839-C5D86E7A89EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9985_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED6C33CE-635A-415F-9F4E-70E2D86A06D3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9985:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "124FF4F3-0490-4CB8-8689-5F0FA6D9230F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9990_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "991D9592-D61E-4777-8B59-EB004F09998E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37A829C8-5BA3-4B13-9033-30FCD5B78B70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9992_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5D8FB66C-5616-4C3A-9CAE-7610519ACA1A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9992:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "408C8494-E7D8-4F99-9B04-7E84A31C799B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9994_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD5B18AA-0699-4F21-9D3E-C45B071B4903"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9994:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DDC4C800-C9E3-4DB0-AE99-3F75D3660DEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcc1110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D298D09-E1D6-4432-8AB6-72B1ABF73A75"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcc1110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFB18947-BA92-4118-A3AF-A72F2FE40788"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AB1F0FA-25F3-4304-A3BC-5264E55CC092"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "214A053F-D80C-4AD9-B4F1-83384095A3F3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3C7FFB96-53E7-41A2-BC99-7ACD853214A8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74EBA77E-69A5-4145-9BEC-CD39BA132309"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB226552-52D9-44F5-A170-35C44761A72B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBB16DC4-CDC9-4936-9C6A-0ED8E1F6D056"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn5122_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "290BFC8A-0D76-4BCD-B059-2DAFD368A10C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn5122:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "936A308A-92B9-468C-9BC6-8FD71C7C2315"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn5152_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EAE1EBF-AD14-4C07-99B5-2547A5196B20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn5152:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4829FF9-C0BA-4E40-A01A-3EF179462029"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcn5550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A436BB-212C-4419-A0C7-03C0E04BD582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcn5550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3AF4B33B-223D-45F5-8168-3D2232E11663"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs2290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93CDB7BC-89F2-4482-B8E3-9DDBD918C851"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs2290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76E03AE9-2485-449B-BCFD-3E452BB01FC6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36F5A18B-8C9E-4A38-B994-E3E2696BB83D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs405:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B703667D-DE09-40AF-BA44-E0E56252A790"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC43BB27-0516-4750-A4C2-C45298441398"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs410:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "969585DE-93D6-4406-A632-D838ECD4D5AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs4290_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06789CB9-E6FA-400D-90B6-C2DB6C8EF153"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs4290:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFCB9F22-57F2-4327-95B9-B2342A02E45E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs603_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EEFADBF-D751-499B-80E5-C1069E129F18"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs603:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D327FBA1-69B5-467B-9B1B-A0380994D21B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B05FD66D-13A6-40E9-A64B-E428378F237E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0D665C1-3EBA-42F2-BF56-55E6C365F7DF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E634F59C-6817-4898-A141-082044E66836"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29762819-EC90-499C-A8C6-1423DE3FE6B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qcs6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4468EA5D-87B0-4FEC-A3DB-617651B0D169"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qcs6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DA2C3E1-E285-4CAD-9FA3-813C8EC436F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm2301_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38EE8B90-59AF-45E2-A0F2-82ADCFDF6411"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm2301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2430E3C4-89EA-41F2-9A19-DBCB69A4F91D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm2302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE88669B-0AA3-4390-9857-EE3FEC7AD19C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm2302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9ECD486B-C685-48F9-B00B-E3F6B497B823"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm2305_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98B17549-A430-4A43-8479-4B2BEF0DF5D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm2305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "30F2396C-5527-4E03-B005-029F020A095F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm2307_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6F085672-5EA5-46CA-84D7-AC0EDA1BA33C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm2307:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B485D6-7BA1-4B48-9F35-02CC03F0F1BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm2308_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58F6DBE9-2208-497C-A83D-4CD1F14BF857"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm2308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DE93D494-6DF3-41AC-BF66-BD6C2822DA19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm2310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5EB48C-A80F-49D6-8303-3BDD35B0AB76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm2310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "907EC235-3B08-4F42-9B5E-676D4CAD4A11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm3301_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3718B46A-BFBB-4C41-B274-4E7F7986F8A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm3301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8CA76C6A-0988-436A-B93A-273AB8E0226A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm3302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7807B66E-8675-4664-BB8F-AF3052D65B31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm3302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C396A7DA-25F1-417D-96F2-E3500EF42498"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm4643_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ADB622F6-E60B-4273-8012-064152980ADD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm4643:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45CE8949-77E4-4D3C-8C88-8A2BE892ADA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm4650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F97C33E3-ECD9-4E98-8B67-71056F95B52C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F822A512-FEC8-49AB-A763-0684BB304252"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5579_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "771CADED-5AF3-41F3-BB38-FAFA46807C68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5579:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E6AD633-267E-48A4-ACF5-6307E427CD74"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D600C951-BEEF-47B8-A83D-123BAFCC5378"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF4ED992-0B17-433A-82FD-B94DE482DB65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5621_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B22915F6-2B89-4CE3-B1A9-D66BF787946D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45EE0BDE-155D-4F1D-B4A5-DFD21C5502FF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "090D62AA-A033-44D8-A61E-01FE4C63F7BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A850430E-BA5F-4A79-BCC0-346014064A9D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5652_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A557F6FB-FC25-400F-AEDE-6D3C5D0E3BA9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5652:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F1AEEB3-DE39-429B-A373-8BFB51BD21FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC4EB710-7964-43CF-9780-01189C973B8E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF219397-DA5D-4758-BE04-35B56C3891F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5671_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B7A9D95E-5AE2-496B-8A8E-097CF4A7D9AD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5671:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6AF9895A-1A99-49B6-B89A-C6C2170CB9CF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5677_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF34DAA7-83B3-458C-88E6-632865F637A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5677:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "151E59EF-A5F1-4378-8A34-4AAFB074E879"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qdm5679_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "323937A6-463F-4825-9B62-2C37A3CD2958"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qdm5679:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D2DFD77-3D15-4156-BADC-F48F73AF7C68"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet4100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AFD6C60A-DE9D-4B95-B5B3-9DAF0F3EF34E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet4100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "546B6CD2-AED0-41D4-B641-03CCAE9FEF50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet4101_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D344776A-A75C-49B2-9FFC-6403EEDB218C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet4101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7872ACFC-C2BF-43EC-B061-A100EF25A70D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet5100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AD47F5E2-8893-4EEF-874C-021C8F27C35E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet5100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42AF43F3-26C1-4CB0-98D4-F98AA6B4A5FE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet5100m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34838617-4C1E-4B7E-A4A1-2BF92C94581A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet5100m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "661B3675-83F6-439E-A256-06D7E45ED8B8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet6100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA17E4A-9122-4BB5-9B6D-5AB56D4A4562"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet6100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6A9CE9A-1323-480C-BFE6-BEA5B176D748"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet6105_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF45FCFE-2FE9-4059-B250-216A0AF49919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet6105:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "12C3C863-49D5-40E0-937A-2F5F2527EA4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qet6110_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E17DF56C-223D-4BC6-8AD5-B64FDB63F995"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qet6110:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC427584-98A2-4842-9EE8-72AF8AD2B912"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe2101_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B3981F7-5AA6-4AEE-BABB-5FB2D30E1D61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe2101:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0862428-695F-4445-AD89-536376E57E09"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe2520_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E529D58-94B6-42F9-8EF3-63A96454FF5A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe2520:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F58DA0F-88A4-4C88-A1A4-0455584D8BC7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe2550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9039330-5DE2-48B0-88E9-A40BB9EF8C45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe2550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC33174B-9D45-4C82-BDC1-A60B085A4513"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe3340_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1A7D496-636B-49DD-A102-6449271AFB6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe3340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7255B9DD-58B2-4211-B999-558EAE484B39"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4301_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16161A14-6B99-4837-ACDB-EBFABC58E3FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4301:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F6BEAB2B-8272-49DD-B0D5-25A2DA8CDBF1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4302_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9239F6F5-445A-448B-A4AF-1D5CEFEBC862"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4302:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5A2D83B-93BB-45B3-B905-6974CF7EF361"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4303_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2A671C3-DB71-44AD-ABF9-FCC1412DE8A5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4303:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "84D82CAB-56F9-4B4B-854F-F92D4076A097"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4305_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DCDCDD4-E4BD-4968-93DE-99B5738F8CFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4305:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76BA7E25-6384-4D1E-912E-E0D89E8883C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4308_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE20355E-D3C3-45C3-B462-C93BD56542FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4308:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0528FA86-1360-432E-8193-8AF43B95F028"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4309_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CB025A99-43FF-4362-A521-FDBB8B6649B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4309:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "457B3C15-F6E1-40B5-B273-5B7D9216159D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4320_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97D6BDC8-31BB-441E-87E5-EAB883B9E3B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4320:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D026A491-D75E-4798-B046-07D5701A7779"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfe4373fc_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FC17D09-2031-4779-AD73-283894E0E222"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfe4373fc:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49B62857-F0CF-4E81-BC52-1E2208175D58"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfs2530_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ACA5E7F-6C97-4AD5-B4B0-FE1702436B47"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfs2530:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E5B822-FCBC-48F4-AB60-B9AF73A8D58C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfs2580_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4BDAE90A-6ADF-483A-BBF6-4248619B3432"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfs2580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55BEA113-FA98-4BB3-B92C-71FF6C2F6310"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfs2608_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21C154ED-8631-4D78-8578-E20B6A7DCF6D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfs2608:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2AC694AC-EF51-40BA-9EB7-10A3889BB4F8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qfs2630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0339BD91-A5D2-4C53-8C69-2520A5C10810"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qfs2630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E9AD07C-1CCA-4E36-9AB7-772E4F2C4192"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1020_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DED4A480-01B3-41AF-A0E5-F1CC60A84D9A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C6066C1C-7132-49D6-A1CC-40FDB979BC24"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1021aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0094030-93DF-480E-B3C5-4EAA138116AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1021aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54445C4C-3451-4340-B394-6871672C0CCE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1030_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D36CD344-1FCD-4674-BBA4-28C15BE0C1A7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "573508F1-F522-4134-BCDB-ADB5A944D24A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1031_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A06E793-BB8F-47F0-BC7E-C274C0B37497"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1031:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C2B8150-D0E4-455D-B5BF-900D7F176407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln1036aq_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FBEB541-8F2A-40EB-A190-59A0229C71C3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln1036aq:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7C3BF73-D2CC-4659-B65F-C90C9D023926"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln4640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A83B1159-CD95-47AD-BD8C-6D36CC25A4AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln4640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "132D8E87-D906-4594-9ADB-535560E38328"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln4642_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "422EFD74-B31E-4593-ADBD-CE00DD645E3A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln4642:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45F730FA-3E02-47A5-BDB3-9E132183DB95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln4650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BEA1970-3A3A-422B-B4DE-DAF79C46D943"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F83D75FB-822D-420A-9069-28E55091C05C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln5020_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34CED34F-88B1-4D8E-A58C-C1E45D3654FE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln5020:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2E8D7085-36BE-4E13-B34B-9D5E9AEC7673"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln5030_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70340960-835C-4655-89FE-847982EA4534"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln5030:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE158C6-5444-4B17-9848-7F9876F8F2DD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qln5040_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D65CB55-E23C-49AE-A39F-BCB1D2BF39CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qln5040:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8EB46FAF-E84E-4007-9B47-EE13E8E31B4C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa2625_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80804DEE-B0FB-4B04-BD28-802F72CEEC6C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa2625:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65A30903-7531-42C4-B0CD-2B0D45EA6481"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa4340_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB05A154-8162-4F8C-BF06-1B941F320699"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa4340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A798933-E2CA-439F-B4C7-D99327C5E598"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa4360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89133F59-A952-4C2D-B1AE-6A5A0BE581D5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa4360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0724FE57-87D4-45FB-B189-D45A80C679D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa4361_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE1F473E-C17C-486B-86E2-BFF6EF1BC4EA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa4361:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8030F98D-5105-4A8E-8C33-27CD9A9C1FAD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa5373_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1E469E1B-BBA0-47D1-B7DF-CA528E2C0800"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa5373:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3215DA42-E059-4490-A562-1423164F54B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa5461_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D979406-BE9C-4F56-AA0D-A28EE980B75A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa5461:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "440234CE-FF87-476D-9E4A-128850D967B6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa5580_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AADB49E-4EAB-47F6-8870-F2EF211CD2FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa5580:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8C1E390-8B11-4DC7-ACF7-87B7F7C21EE6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa5581_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF89F96C-93B9-4A53-825E-3D73751D8355"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa5581:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "36BE6C57-84D7-4CA7-BDC6-0407D6AFC365"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa6560_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "75FCE754-EFDD-41E6-AD2F-DB9055540A0C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa6560:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF7AC75C-65EC-48E8-AECD-77F41EA60D06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8673_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA78BDC2-7508-4CCB-A065-E585542A7B16"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8673:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8E9669EE-515D-40E1-A260-118B9F0D1DD3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "03703ED1-5D10-4ADA-8747-1DBB6461B52D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC1C0C1E-549C-4274-A8D4-92CA606E75E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8686_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54078C2E-74A2-4133-BBB5-E5727FC695AA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8686:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC94A215-4CF9-4F95-B25B-3DCDF2F4FCA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8801_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83F9F420-7B1A-4EEF-A5AD-CAC71A1A9D2A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8801:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B0047E7B-50CD-492A-B7A2-FD3863ECF499"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8802_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "16C93B16-D8F0-4231-B76B-A41F357C8894"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8802:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89E1CDD6-480A-4027-B74D-CD987FD38DAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8803_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "758F6984-F4AE-42DB-A37C-32B88022B5DC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8803:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13F89782-9105-4437-A33E-BBA59FFF7B86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8821_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "900FCB4B-1CC5-4CD2-938B-12ADC854533C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8821:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D72FE2FC-4AC6-4F9A-8868-0977B4713513"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpa8842_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9A0993B5-4CC4-45C2-9CB8-601A31666A60"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpa8842:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "027FD323-DD57-49D6-AD5B-18B84EC5B086"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm2630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74122683-358B-4714-902D-87A22CEBDA1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm2630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEEEF5DA-C4C4-42D1-AD63-0CFAB2713C40"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm4621_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CA1319F-4F23-439A-97EF-BF32601DD342"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm4621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50C9F941-5551-4CB5-B819-5E0905A171E5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm4630_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE6E4817-1E8A-4D75-B00D-AF7DBF4713E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm4630:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94BF4B4A-F8ED-4E86-A43A-5BA83CFFC3D5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm4640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "43A8E0F7-DFAD-48F4-8788-B21229831A7A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm4640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F141854-187F-4869-B9B3-1FAEE7E0DE7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm4641_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AF2E1B19-39B9-47EF-AE5B-ED025F493DD7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm4641:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7BF3B9D-B96C-4528-B680-7ED8022D5EEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm4650_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5D647DC-1513-4EBC-AD08-12A716DFA48C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm4650:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB823470-EA4C-499C-856D-4B514CC7510F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5541_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1772A23-C933-4F36-9E4C-3A9E63027E48"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5541:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC35ED75-0E2F-4422-92E6-C64534049051"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5577_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6450BAD9-6686-49D3-A900-8426714025E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5577:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D067B04-6937-41A4-AE6B-ACD1A8722A3F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5579_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13C514A7-23E0-4AAE-9942-5E3D54F21ED7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5579:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "143CC250-C352-4C57-925F-B8C5BF8EB235"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEE3EEC8-935C-4DCA-8B96-125DD5590410"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AAC5C6C4-6FFF-47A1-879C-DBE714BC1910"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5621_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7205BC1B-E860-4592-9B53-ED3C0FD0BD3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72DA9B6E-B01F-4A91-BF54-74E6C2C900C9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5641_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A31401B4-997C-4699-939E-B7B39B685039"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5641:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20720A3D-9199-4110-BC97-83B350F69F3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5657_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89591F9D-9ECF-40DB-B44D-09BF97A46DD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5657:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51821A0A-0B45-4B68-9624-6BB6ECB28935"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5658_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D143B170-8DA6-49CD-9B58-DEC341B0DBD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5658:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "89EC822B-3F9E-46F3-A792-CD4BE73EC0E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC04D1C1-EAD2-4D06-B3D7-7CD4BF288482"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25DDF73E-92A7-4E53-9550-EBAAC1B3B8F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5677_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A30872A0-C922-4C6B-9258-ACDC2B8B7E2F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5677:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5827067-95F2-4615-897C-92A3749F98AD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5679_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "949A80B8-7DE8-4AE6-AEB3-0115A28D6F0B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5679:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47DFF710-2581-4E83-A60B-DC61FF534453"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5870_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65F9B68F-31F7-400B-A7A3-CC5DB6316C68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F026D09-A91B-4CDF-8A01-119DD10DBC4D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm5875_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4906F9F4-22B1-4B23-8FF5-ACA747D8507F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm5875:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA8815F8-0703-4CCE-8BD8-0E78E7544321"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm6325_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C1DEEEC4-76EA-42AA-BD10-136062489BB1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm6325:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54355132-8BD5-4EF8-9954-380989D76A72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm6375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "633F580F-0EC5-4183-91A8-A874ACA2763E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm6375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C0400711-9079-4943-A425-1774FBAC4B79"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm6582_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "24B8ADDB-13EA-4648-85CD-E5446D60AA7D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm6582:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C51B88E1-BD42-416E-BF9F-FA8AF3C8C312"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm6585_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4F3D88DB-527D-4229-BF40-0940AA5550C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm6585:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9C92D88-FF1E-4ADE-8370-F99FCDE00665"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm6621_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73E2788E-E54B-4E80-95EB-49C0BDEE8DE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm6621:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AE62E62A-3927-4916-BCE4-8189263E06C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm6670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AA76EE9-B03F-4BE2-8719-3B1C0544BFEB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm6670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED2C326-000C-4FAC-BEAD-EFF945245801"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm8820_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8C53855-1C98-45B4-BD9A-A269AD9F3333"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm8820:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC546B18-D916-4168-89A6-0CB332D83264"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm8830_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1071E6F9-3238-4D91-9EAB-DD86C1C7C205"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm8830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B9D356E-5CFB-4E72-8F08-F38C0AAD0B4F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm8870_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0EDB0FD5-E64B-4512-9E1D-3F5D9C73B22A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm8870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3091C44D-D258-4C87-89E0-EBA8E21FD305"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qpm8895_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C719712C-6C9F-4198-A865-86AEE7CEE0BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qpm8895:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "32636F9D-1A2D-4B87-AB95-518AC2787DAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qsm7250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875AA85F-8F7D-4444-ABD3-0C95753DD765"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qsm7250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D13CB7F4-B30D-4DB9-AAB3-797A79F888E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qsw6310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7614461C-7F8F-4FED-BA3E-F463C5F96489"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qsw6310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6178ADF9-FE75-4FC4-A0E2-2509E8F2F572"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qsw8573_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A3A1C47-E5F6-4211-A165-D4735FCEE9CB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qsw8573:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BC1FD31-5D16-4901-8C83-F8882A6476E0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qsw8574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9005C77-724D-4DB4-8698-2FF5C5B97BB5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qsw8574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27BF5F35-303E-4D41-A4BA-77549713ACFF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qtc410s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "20203D0B-7C99-4183-832D-2C6FBF4316EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qtc410s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "237B4A43-C864-4EF5-9ED6-E6B6B49D4C56"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qtc800h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "898FBD38-F444-4CFA-877C-93DD8CDC58FF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qtc800h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "462C175D-5C9B-4CC1-8329-B21656DB99CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qtc800s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "651F2DAD-C8BB-4F6C-A9FE-A1A6597997FC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qtc800s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31B59D37-17C1-452C-89FA-6A2A05AAC444"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qtc801s_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "596DD923-ED88-470C-B2BE-8AAA7268CB56"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qtc801s:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62013476-1792-4BCC-B7AB-FB6D1D111C4B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qtm525_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9C47867-7B48-4646-AC7F-D4C01CA5E456"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qtm525:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B1EBF0B4-1305-4E97-BA42-5E98DA3EE290"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qtm527_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2D471940-4ECB-4541-A522-D506036F4A31"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qtm527:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33B85157-71FF-40E3-AF09-50E683DB636C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qualcomm215_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED28C2CB-818D-47FF-B9CC-746243DC1E61"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qualcomm215:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4ADFD2AF-C62F-4684-A238-E9080A3FEE01"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:rsw8577_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9F12E72-13F4-4D60-9167-D3641ADC7E12"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:rsw8577:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "930596BD-6024-4BAB-9BC3-4391F254DB7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa2150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "23586F55-C82A-4B4C-892A-EDAEE9ECE93D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa2150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "29A1C366-6B1F-43AA-92CF-623F91F29A06"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa415m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4387DBE-67F7-4E95-A2B0-828211EBDC22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa415m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC798E06-0A2E-4DAD-81D1-9B2FAE6327C0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa515m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02A2DB6A-7137-4D3D-9D6E-B9B0D0376758"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa515m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5BE4F498-4C58-4DCC-B7D8-1B461177D083"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6145p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C66671C1-AE1A-44BE-9DB2-0B09FF4417DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6145p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74AA3929-3F80-4D54-B13A-9B070D5C03BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "054F77D6-FC66-4151-9005-DC7ECDB5C722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8ED3F589-16D9-46A7-A539-C9862473EE0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4C40544E-B040-491C-8DF3-50225E70B50C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A2DAC85C-CDC9-4784-A69A-147A2CE8A8B2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa6155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8DC40C14-3B2D-4E00-9E0F-86E6BDBF2D81"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa6155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0514D433-162C-4680-8912-721D19BE6201"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8150p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "69C1B02F-8D2D-42E7-B70D-41F4D9844FD1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8150p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEACAA9-C061-4713-9A54-37D8BFC0B00B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F33EB594-B0D3-42F2-B1CA-B0E6C9D82C6B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "50EF47E5-2875-412F-815D-44804BB3A739"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C8648B38-2597-401A-8F53-D582FA911569"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8155p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A01CD59B-8F21-4CD6-8A1A-7B37547A8715"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sa8195p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51BC0A66-493B-43BE-B51F-640BDF2FF32E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sa8195p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8DA4D12-7ABF-4A04-B44E-E1D68C8E58AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1497D052-884E-496B-BEF8-6904A25125ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589F4888-28F6-4ECA-860E-8054C2A8C419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd8c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FB74E1A-BD64-4E87-9C1E-7EFC11B0460C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd8c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B6D575BE-B591-4E46-A090-0BCA0A6038CD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd8cx_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F3965FC-CBD9-42F7-8D94-50B9941F84FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd8cx:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70997DCA-7BEB-4691-B2EE-C9DB38409C07"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd205_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47AB5135-6391-45C1-81DE-803E3834F196"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd205:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCEF246C-6B39-4DC2-81B0-040DCAAD5177"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd210_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D6D6965-B5B2-46D2-8718-43B7B22441C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd210:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E75C7497-A7DC-436B-BACD-71F69D99517D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd429_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D32539EB-9822-4864-8ECA-E9F9FB86CD25"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd429:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3945686E-666C-4A47-A062-608AD8C6F112"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA59D839-40A1-4520-83E7-94BB90E07C82"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589BF3A7-70F0-4C52-B4FE-36CE6192A0C3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd450_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF6EA9F3-ED14-4DAC-93D1-2DF63C7C3EAC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd450:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4EF0B75-2431-4E44-B515-11C9BD4BC982"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52036768-810C-40C2-9213-8397A4073703"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd460:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE8AB22C-54EA-4D61-B6F9-7BC45820D29E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd480_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770F9905-E0A9-43BD-819F-DCF577D02C4F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd480:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FFA522F2-6A5D-4B8D-8CA3-3394AEDC2E3A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E375CE2-3FF6-4D0B-9979-676FEACBC852"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "26C32652-9BE2-4A85-9A7F-3B7896922D1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3991C516-4FBE-43D8-835F-413FE45BF73E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D9CF5EBB-B25A-4A76-B522-951F108263CC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7BE7001-5539-4C5E-A064-6E62023803AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd662:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06661DAC-5D22-433E-B5EC-486931E265B4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd665_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0A472AF-D0EE-4D75-9EFD-9F77FE30C8B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd665:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E6AE7466-2094-4E1E-BF4C-D3C6A5F6223A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B8DA94C-23A0-4C99-9F05-144B9B5224B3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "39E10E22-E7CC-41D6-80F3-030083F45645"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1497D052-884E-496B-BEF8-6904A25125ED"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "589F4888-28F6-4ECA-860E-8054C2A8C419"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd678_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "37279B9A-6074-455A-80E2-80EFC0DD535B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd678:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DC637743-D088-48A2-A0F8-829776DD3065"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd6905g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CFCE8E2B-10CB-4399-A502-7D9EC02612AE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd6905g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9F14F6E-8962-4709-B5E3-4F89496D4AAE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd710_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E47636D0-81A4-4079-A2E6-42C707B5FF69"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd710:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68596AB6-BE63-4945-BEA0-9E6CA07B8F96"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd720g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "21237024-F9FE-4CE4-A536-B6D4D5EF5404"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd720g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2900D4DA-9DEA-4FDE-9C66-DD7F7AB88B94"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd730_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC4DA7EA-DB81-4C71-A875-2612D8D7D726"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd730:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "48F26F64-98D4-420A-8918-E5E56ABA1D47"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd750g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D74F875-F042-4F2A-8556-1FA875E7BA55"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd750g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "38A29739-DC41-4DEB-8613-26DECA4B4013"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd765_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C27A1EE0-EACE-4516-8423-A404E007DEC6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd765:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF1560D8-14F6-4FD8-B83A-2023BB792065"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd765g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "40CAEB7F-1E1A-43CC-8663-171108DA27D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd765g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CDE196A0-AB55-4A5B-A1D6-630706310163"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd768g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E170AD8-2723-42AA-9350-344874C4AC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd768g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "13D505D9-E00B-4934-AD85-E5EA2921FD50"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB222869-9CDB-43B1-8947-954C8C8520B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "306DAB18-F737-47DE-A47D-C39F1B25D515"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42B30014-95AB-4F24-A7A5-60A907502609"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F562ED3D-CBE3-4DCC-BFBB-DE0AD2425A9C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd8655g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D16E1548-576C-45F1-A50F-20ADA6689FFD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd8655g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51104EA4-B075-488C-A717-9CE785016C88"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd870_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "577B18AC-9892-4373-AC0F-9FD477D64388"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd870:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAF0EC2E-185F-40D4-AAE7-5F7ED76EC26F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd888_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79219DA5-0D09-4CEF-AEFD-917F269AE7DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd888:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D30BACF-71C1-4A6D-8811-9AD708A98307"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sd8885g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8A0C0E0-633A-45C6-A25D-BC1887D6BED5"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sd8885g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EAFE2A68-4EB1-4C36-8807-184940B9DBF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sda429w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "913796B0-E3FB-4654-89A8-ED72D45A8D4E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sda429w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6616E0B9-B10F-483C-9B28-0A0557DC3372"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdm429w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C7E52771-4FB7-45DB-A349-4DD911F53752"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdm429w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "72F6CE39-9299-4FC3-BC48-11F79034F2E4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr051_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D7D37215-4D7F-4A8C-B34C-2485A1D4E1D9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr051:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C78E4FB-9075-417A-A2D0-C5E712CD9A29"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr052_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "10478088-2908-4B26-98AB-626C96C4C554"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr052:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6877FE43-90EF-4F90-B23A-DC24E1A1359D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr425_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65C84E0B-B934-4A11-A757-F3861369580D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr425:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7541209B-94D2-4BC9-9164-C8D3485B7DF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "280931FD-FB86-48CE-88DF-E683469BB5E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C543239C-018C-42C1-AC4F-5359810395BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr660g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5FD511A0-1FA7-4C23-A0EC-25A4A9E98E7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr660g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02ADAA31-F79A-49F7-9F7C-433D548EA8BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr675_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F58635D-4E72-497C-AD72-B5B2541B110C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr675:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7629A8E-B736-4ED4-B8C8-31396C17893A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr735_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2CFB2C6E-FEEB-4273-91F5-2A5384973B15"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr735:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B28EC8E-1263-4ECD-8C90-9943468BA9B9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr735g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "201543AA-2A57-49A6-83C0-C503C446E6C2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr735g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACAF8DE-5D82-4386-BE26-3C84283B97C6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr8150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F37C9732-0894-4609-A09B-5FEA52DAA4E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr8150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BC61A16B-BA73-4F42-B9B9-35BFADECA814"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BBD74D21-8FFC-43F4-8C02-2C9F6436D1C0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F6D8E67-38BE-45E1-80A7-9A5776E9BFD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr845_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "130E7AA0-6B2F-444E-A8DC-15E321B92D24"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr845:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB0AF65D-6633-4A29-A0FD-0C6955E5C238"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdr865_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8EFAD53-0EA4-460A-9636-963D8A8AF3FD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdr865:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7C221A7A-2F73-4060-A147-9712D43D02BF"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdw3100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D84CE8A-237C-42D5-85F2-40A28431F503"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdw3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A0D6A7E3-9860-4CF5-B421-37A73C6EAA84"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F9BE864E-7B1E-44D5-A10A-60078095DE33"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96DD6B48-2554-464D-A061-DBB4B8E00758"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx50m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77FE5DEF-CB0F-459D-B5AA-9F45FE24AFD2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx50m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "657515D9-D609-4F76-9154-5ACC773A1C70"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E93FB34B-3674-404D-9687-E092E9A246AB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F3FF5A9A-A34A-499C-B6E0-D67B496C5454"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B726BE34-E18B-4A88-B8E6-778215FD419E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdx55m:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "585B794A-0674-418B-B45B-42EA97C40B9F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdxr1_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E8622BB-289F-4A61-A839-F42912A90449"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdxr1:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "17B2E7D7-A8C3-4EC9-9148-F048AFD03D98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sdxr25g_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C6DA2D4-F912-40A9-BFE9-D2A756DCEB80"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sdxr25g:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "099751A2-A158-4A58-BDA0-D74DF0E8658B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm4125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2B93301-AFE8-409B-A8C8-6754BE5A0C14"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B185412C-177F-48E2-87F9-1269E0FB8E31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FACA2BF1-85D3-447F-A08D-B90330A22550"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C2ABA18D-82C1-4366-B1D7-DED42DD3D5C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm6250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3FB2972-94B6-4716-BA96-4B452BA3990F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm6250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "57F4F872-094E-4E27-BB89-D8251FAFB713"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76DB5472-DF51-4144-8A69-9B231CF782DA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7250p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D395018-251C-45AA-9EE8-A638CAB0B508"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:sm7350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3234824E-829B-496A-AAE7-0C3958C35F89"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:sm7350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60E77EAC-C832-4AD3-A307-B485F081A7CA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1351_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1DC8B97-0175-40F6-AF9C-915C7A20D09C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54720F88-446D-47BD-9F0B-DD45C968C50D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1354_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5485C0E6-22EF-439E-9E07-70979BA785FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1354:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "494C65EB-2415-4AF8-9788-028DD29D3025"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1355_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B670CCC1-627B-40C4-8C34-0E53F9C88BB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1355:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AABDE55-DCDE-4E7D-8752-704B5EE745C5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1358_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3395EEC-7A15-4224-8F32-E363BE2651C8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1358:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "726EF442-9D09-4C76-8EAE-8BCA61A127A4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "55DE88BF-7535-4187-BE8D-7B0EFB578C17"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB1D7205-33E9-452B-BECD-F551801071DE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "164EA5CF-04EA-4109-B162-CF8D48D6F03A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8DDD62E-7BCD-4214-ACD8-9FB082E5B9C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1381_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D572CCD-0CCD-404F-AC29-3C76CDF86997"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1381:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6D8BD2B3-EC60-41F8-ABF3-0DFCC4DA9F72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "139869F5-B55F-4F0B-B29A-BF3196A8FED6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "961BB1ED-BD12-4EDF-94D3-122F8AA6D064"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1394_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3819C3D9-D3B2-4F50-A5EE-5FEF0B0F994E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1394:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E66C76A2-978C-4496-8CE8-F9485F8BFB53"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1395_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "609225BA-7630-4AC8-8D91-EB4E8E95C919"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1395:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C854E653-E387-455B-805B-44DBFB9843B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1396_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D7DF749-41C3-40E1-8FE1-2B2891DF0716"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1396:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9E683B05-8631-4CCF-A39A-DB9A532C1926"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb1398_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3687AA14-958D-4F75-A1F1-486387345EB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb1398:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE647A70-A87E-42B9-ACE3-9654A1BBE709"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smb2351_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D12CC2ED-34B8-42A6-B570-30D0E129E95E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smb2351:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2BCA9AC7-D62A-4C5C-9C67-7FD9CEB5E7BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smr525_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34F0865E-8940-4447-8A45-F6AB9A482677"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smr525:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0B616C2E-B3A5-44D2-8AC9-EC7A51094C17"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smr526_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB4DD4D6-D0BA-4603-954B-93E77CAA309F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smr526:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F1E0E633-BC19-4805-962D-C06E3A193DE2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smr545_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3CCD39E7-6055-4B89-92E9-F67B51DDAA3B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smr545:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A19C416B-F270-4B5F-949F-CA16D89F6854"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:smr546_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19456520-09F1-43FF-B3B2-D08A74E0C690"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:smr546:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "52D4CAD6-452C-4694-8F2B-3B488CE37246"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9326_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3A2FAD34-B7C5-400A-8575-A12CDE65ACBE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9326:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5A39A2E5-6D8D-4F6E-98CB-96DB1975A4BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28717583-463A-468A-8073-ECF0F90585F6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D1A7188-7D5D-4D46-AEAB-08BA84FFF539"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8BA28CC6-C8BB-4F50-BFE3-A59F664A4F54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9340:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94D2BDF1-764C-48BA-8944-3275E8768078"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE852339-1CAE-4983-9757-8F00EDEF1141"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9341:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4D9E96B3-F1BB-46F8-B715-7DF90180F1E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9360_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D6C6B2-36DC-4D0D-AFF8-2108A090A78D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9360:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "28FEB3B1-F641-436D-AC4F-3304C37167C4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1295D869-F4DD-4766-B4AA-3513752F43B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9370:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B98784DC-3143-4D38-AD28-DBBDCCAB4272"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9371_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2503805B-B2A6-4AEE-8AB1-2B8A040702BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9371:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D3AD370C-2ED0-43CF-83D9-50DC92A01CA5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34143ABA-7D09-429F-A65C-3A33438BF62C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9375:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D56DFE3-5EF1-4B23-BBD5-0203FBF9CCEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "70292B01-617F-44AD-AF77-1AFC1450523D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA94C6D6-85DB-4031-AAF4-C399019AE16D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B17201-8185-47F1-9720-5AB4ECD11B22"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcd9385:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E1FA2EB9-416F-4D69-8786-386CC73978AE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DAFD64E7-3F13-4DCA-8C46-6E8FE0C6F798"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3610:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "044A14FB-64F6-4200-AC85-8DC91C31BD16"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3615_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9590EF1F-E821-4525-943B-4A315ACAEFFC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3615:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A7D32B3-325E-4B1F-8649-3D0071396BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D99CA230-0694-4898-A06E-9C522CCB86CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62B00662-139A-4E36-98FA-D4F7D101D4AB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B2669D0-81C0-4F3C-B9AF-1453815C68B1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34D7240B-DCB4-4BF4-94C7-13EBECA62D6C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB37B5DB-2493-4082-B2BF-60385B7E027C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BCD2FE2-11F2-4B2A-9BD7-EB26718139DA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3680_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0F66A898-3C7A-4D44-86BD-89129F04E654"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3680:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B612B044-C7D1-4662-AB2A-5400E34A3CA7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3680b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0755F669-6D7E-454A-95DA-D60FA0696FD9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3680b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE861CE7-B530-4698-A9BC-43A159647BF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3910_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F0D7B24-D567-479A-B4F1-595FAA053418"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3910:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "33A8FAA1-F824-4561-9CCC-7F0DF12F740F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3FEF2DB6-00F5-4B07-953B-EF58B31267F1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3950:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "120E8F0F-EBEB-4565-9927-2D473F783EF7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9C6E9038-9B18-4958-BE1E-215901C9B4B2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3980:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B36D3274-F8D0-49C5-A6D5-95F5DC6D1950"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E4BFB25F-013B-48E3-99FF-3E8687F94423"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3988:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF676C5B-838B-446C-A689-6A25AB8A87E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3990_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2744A053-5BD9-45A9-A2FC-791BCA0CCD4C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3990:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D5F28E29-520F-469E-B048-62DE2EF07ADD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19013619-9B73-4A4F-B5B2-2A7D9A41D81E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3991:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9523ACC9-9D2F-4A40-9CEF-9A9676176867"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34AB9074-97A3-43F0-B829-CDB4E3066AC4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "362252ED-1DB3-4CF6-86DD-14919826D75E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF49BC31-A332-4B9A-A826-F63116D7029F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn3999:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6DD3C245-D5F8-4145-8CDF-F635D2C8F088"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6740_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB5DB2B8-25E1-4C0F-8AFB-7627FF9A04E1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6740:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BB21B3F-6D07-4B45-8A71-DC5490176296"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6750_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8EE21BA-7178-4D69-852D-2322844FC6B9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6750:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E9BACB28-F6EA-445A-B74F-0C3881FE59CB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3293739B-53D5-48C1-BC3A-FAA74D6C7954"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6850:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E650C510-037F-47DB-A486-EBF871C73278"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DD031A8D-A48A-4363-8C00-C1FF5458D0FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6851:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "64F5D7CA-6F31-4842-AC66-EB975C19C83D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wcn6856_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "54C616C5-6480-4FE0-9A1C-08026CCB08D8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wcn6856:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7D8E02BA-3A7E-4B13-A8D7-20FD0FAE3187"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wgr7640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "636E783E-9A29-45A6-AA40-7696C5932F0F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wgr7640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "31DA4BC4-C634-4F62-A49E-5AD8F4FD4672"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "15307882-7039-43E9-9BA3-035045988B99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8810:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA85B322-E593-4499-829A-CC6D70BAE884"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E839A0B9-64C3-4C7A-82B7-D2AAF65928F8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8815:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E870D82-DE3B-4199-A730-C8FB545BAA98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11B69595-E488-4590-A150-CE5BE08B5E13"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8830:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BF680174-5FA6-47D9-8EAB-CC2A37A7BD42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F80BC68E-7476-4A40-9F48-53722FE9A5BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wsa8835:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B36F4B2-BAA3-45AD-9967-0EB482C99708"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr2955_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "42BEB0BC-E953-4ABD-81E1-B30FEA8C5B3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr2955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5516E6E3-D8DA-4172-A059-503B369E2034"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr2965_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CAB78DF4-0A4D-44F3-BA4A-8BAAE40398DB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr2965:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1267A5A-D6C7-405B-AD58-6A80A30E6813"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr3925_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BB38EAA-4BAB-422D-AB61-AA2B28BDD5B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr3925:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27666130-DB04-457F-A968-3919FD5314BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr4905_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E211CA40-8867-4F89-B14D-5ABBDE5ADA10"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr4905:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A503AA01-CFD9-42D5-81D6-2F13E5DDA9A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr5975_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7FD8099D-05BB-4B02-9B41-9DB1B2145AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr5975:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5E6A369D-F473-4FBE-BDFA-ECA2D8578F19"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:wtr6955_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9566FE3-617B-401F-BD35-C1424A57DFC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:wtr6955:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "487BEEF3-FDC8-4315-A08E-5DC7C418E06B"
          } ]
        } ]
      } ],
      "references" : [ {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin",
        "source" : "product-security@qualcomm.com",
        "tags" : [ "Patch", "Vendor Advisory" ]
      }, {
        "url" : "https://www.qualcomm.com/company/product-security/bulletins/may-2021-bulletin",
        "source" : "af854a3a-2127-422b-91ae-364da2661108",
        "tags" : [ "Patch", "Vendor Advisory" ]
      } ]
    }
  }, {
    "cve" : {
      "id" : "CVE-2021-1895",
      "sourceIdentifier" : "product-security@qualcomm.com",
      "published" : "2021-05-07T09:15:08.207",
      "lastModified" : "2024-11-21T05:45:20.880",
      "vulnStatus" : "Modified",
      "cveTags" : [ ],
      "descriptions" : [ {
        "lang" : "en",
        "value" : "Possible integer overflow due to improper length check while flashing an image in Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music"
      }, {
        "lang" : "es",
        "value" : "Un posible desbordamiento de enteros debido a una comprobación de longitud inapropiada mientras se muestra una imagen en los productos Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice &amp; Music"
      } ],
      "metrics" : {
        "cvssMetricV31" : [ {
          "source" : "product-security@qualcomm.com",
          "type" : "Secondary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 6.8,
            "baseSeverity" : "MEDIUM",
            "attackVector" : "PHYSICAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "NONE",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 0.9,
          "impactScore" : 5.9
        }, {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "3.1",
            "vectorString" : "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "baseScore" : 7.8,
            "baseSeverity" : "HIGH",
            "attackVector" : "LOCAL",
            "attackComplexity" : "LOW",
            "privilegesRequired" : "LOW",
            "userInteraction" : "NONE",
            "scope" : "UNCHANGED",
            "confidentialityImpact" : "HIGH",
            "integrityImpact" : "HIGH",
            "availabilityImpact" : "HIGH"
          },
          "exploitabilityScore" : 1.8,
          "impactScore" : 5.9
        } ],
        "cvssMetricV2" : [ {
          "source" : "nvd@nist.gov",
          "type" : "Primary",
          "cvssData" : {
            "version" : "2.0",
            "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C",
            "baseScore" : 7.2,
            "accessVector" : "LOCAL",
            "accessComplexity" : "LOW",
            "authentication" : "NONE",
            "confidentialityImpact" : "COMPLETE",
            "integrityImpact" : "COMPLETE",
            "availabilityImpact" : "COMPLETE"
          },
          "baseSeverity" : "HIGH",
          "exploitabilityScore" : 3.9,
          "impactScore" : 10.0,
          "acInsufInfo" : false,
          "obtainAllPrivilege" : false,
          "obtainUserPrivilege" : false,
          "obtainOtherPrivilege" : false,
          "userInteractionRequired" : false
        } ]
      },
      "weaknesses" : [ {
        "source" : "nvd@nist.gov",
        "type" : "Primary",
        "description" : [ {
          "lang" : "en",
          "value" : "CWE-190"
        } ]
      } ],
      "configurations" : [ {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8009w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9FFEE117-AC33-474D-B19C-F4738D68F72A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8009w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1549F2DF-1B57-4091-9052-9A5E082E9C63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8017_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEDA6CA-A0FD-4A72-B856-C8E65AC86902"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8017:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8D29295A-7183-46BE-B4EE-F891D1C17ED9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:apq8053_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B052615D-857A-46D4-9098-1CBFA14687C6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:apq8053:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "19B59B60-A298-4A56-A45A-E34B7AAB43D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:aqt1000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EC6FCE91-BF38-49ED-8FFB-429BAFEE7832"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:aqt1000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "715A9F94-5F9E-45E5-B07B-699410C01478"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FCE1ADA9-8042-4CDE-A2B9-E96665CB41BE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8031:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BB1DE046-DD70-4ACA-9DF4-59939DAC1889"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C88B9C86-2E8E-4DCE-A30C-02977CC00F00"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar8035:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EE473A5A-5CFC-4F08-A173-30717F8BD0D7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ar9380_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B032F871-3EC2-427D-A06F-681A58075925"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ar9380:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73286FFB-C267-46B7-8FEF-C96534656AF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csr8811_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4CAA848-413D-4C63-823B-BFCE95C7740C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csr8811:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA32CC0-DE30-4B15-8EC6-1FAF14C5C4E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA42F2EA-5D00-42B8-B020-C27675B72915"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6620:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BFCF207D-B8C8-4860-89C7-673C821F0237"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A8A35ECF-B12E-42DE-A74B-2C3BE03639A4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csra6640:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "65B283D6-B2D2-49B6-98A8-08EDB54C1F15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:csrb31024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1EBF42F8-50BA-4172-A3A0-7FD1BA4B3ED3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:csrb31024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "770F3924-BE27-4BDE-B922-680B3C9753EB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4018_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D65E62B-95CA-4229-A61B-F4FB70466B6E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1339CEEF-34C9-426E-864B-6C7B68E72CAA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4028_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3525CD2A-CE43-4B42-B8C2-9B19B2551214"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4028:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "010DBDB1-F1A3-4805-BDD2-84CBFA0A0BE1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq4029_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D21F293-B9C7-46CB-8D83-BEE27E899BC3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq4029:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4BA4D00-D7B2-4152-BD82-E6F572655AF3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA7A5C46-48BF-42A9-A477-A660C6D7B437"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDB79382-19D6-4A67-9013-7099A9C58829"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6010_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5CF970F-17AE-4C59-89A5-5B41A41E1DE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6010:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "71C54A70-AAA8-4B5E-AC1B-471A5C7E79B0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6018_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B04589FF-F299-4EF6-A57B-1AD145372DBB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6018:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FDC1ADAD-DA77-47EF-8DB9-C36961C560C2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq6028_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "06126F30-D081-4A11-92FB-4074A451FAF9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq6028:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E2550040-CCC7-4B52-8D3E-7948B3E3C62B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8064_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7A1CC1C1-F2CA-4C43-B9E9-1288C3496C7B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8064:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC82552A-9E7C-4A13-B7A5-43CEA218675C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8065_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F37542D-35FD-4B15-8882-DD7543FF4E3D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8065:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1A7A9919-4B34-4960-ADC7-04A176579B80"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8068_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3CB8796-7976-4077-BFF3-04DAEF5C8DDF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8068:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E848E5C5-F6C6-4FA1-93A6-C7737D69BB15"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8070_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C670A4C5-1F17-4F1E-91DC-A33A9BA8878A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8070:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ACC9F136-90A7-486F-AF2A-EC60125E5AF8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8070a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "711FC14F-4DED-4F90-9BA5-0036537E6DCF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8070a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "302F06C0-4835-4CD6-B745-BF7B704C3C86"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8071_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AA6FF982-7B4C-40F8-8A79-49CD234930DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8071:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "77052755-6A86-4ED7-B45C-32F884D27C64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8071a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "623ED6A2-EE37-458E-BEFA-8BAD08256AE8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8071a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53449B68-4C58-4AEB-82B7-72726ADE0E2C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8072_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83357A1C-633B-4814-ABB5-A8AC2AC12990"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8072:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C4A7555-7224-403A-9B7D-23D1622623B7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93E5DB9B-F388-49F3-ABD5-CE773FC4B045"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8072a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0137E60A-1869-479C-9B4B-378E5FCCBA1D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2914BF98-E69C-4C8D-8B10-759642ADD7B4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2118C404-402F-463C-8160-3CC3B703DF30"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C7691C2-C4F8-4F23-9B5F-5E8FE0E2293E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8074a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "02BF2E50-E2A4-44FF-9748-ED96C0C1AB5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8076_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966392A8-DD8E-4AA1-B407-5BF2D937139E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8076:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A211C022-8EDF-4B76-89D6-599812900446"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EF245F8E-C056-4BEF-982E-9616F8C65CD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8076a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE302EF9-165F-47F9-B0D6-BE1E3D8C6C65"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8078a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF609C6C-CD50-423A-A75E-83C730296089"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8078a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B35C18-9A01-41E1-8CE9-D8FA7E4A25ED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8173_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8890C528-C2A3-4148-A397-85B63FB920C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8173:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "81494D75-1D4D-4DC5-AF67-F83FD562DBB9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:ipq8174_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BB84228-3083-4048-8E83-E1F30B537223"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:ipq8174:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB58F259-62BA-40B9-BD71-960F25D20BED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8909w_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE28A59C-7AA6-4B85-84E8-07852B96108E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8909w:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5DEE828B-09A7-4AC1-8134-491A7C87C118"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8917_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9BD0305A-E31C-4888-B97E-CE571D40560A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8917:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "369295A2-8236-44B6-A09F-7CB0BD20527F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:msm8953_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE4E0E39-0081-4261-8350-149E763AB462"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:msm8953:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "94F76229-1A4A-4306-A4CC-C823A99F041A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm215_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA91813E-A10D-433F-A03A-A8D430628288"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm215:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B243231F-2266-4876-A612-1245BE208249"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm3003a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "985D429B-49DD-4542-B70A-60D311DFF8DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm3003a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BEF03FD6-E0DF-4216-8639-BCD58F56E646"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm4125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "68A8098B-B05E-446B-98BB-3EC3806863D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm4125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B57C9D36-323E-4982-BFEF-32734A46FB28"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm4250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6C0395BC-C0F9-476B-ADCD-3AC8F17BCC40"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm4250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92B95D6C-7445-4738-A52B-B4685BEA12A9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm439_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7EC9978B-DFAB-4D88-B155-325294F90722"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm439:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FC75E299-94BB-4014-B14D-9ED08B0A8129"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm456_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C043F28E-D20B-49C5-A550-47CCDFE22A76"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm456:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D8037863-7AB6-41A4-AA33-54A7B05AF0CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6125_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "45806F13-0E30-414E-A1AC-835F1ADA3049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6125:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "988554E5-F881-4DA5-BF68-7FEB1E41EB1F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7696C6C-5BD1-4DE4-AFB3-B5F9776BE1C1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F0D757D8-2A81-4161-ABA8-54D61E71568A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6150a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "92BA0CEC-8A40-407C-B78A-CDC4F6DDB00F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7BAEEB4E-8C21-4DE3-8230-0E64DA8BCF31"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6150l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8911F779-A279-4632-B67E-3CE74F5ECDE7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6150l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BD92FEFB-EFAF-4622-BEEB-16D828E87C2B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34069CA0-4B0C-4791-8C5A-6F8DC2319AEC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F3FDAA9-4C1D-43C7-B4A5-61778F62DDC8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm6350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73116417-B944-46FB-BB1A-3728914755E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm6350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "629AC2EB-637D-493A-913A-66989EE2BB91"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm640a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "60EAE740-30A4-44B4-945C-A6927220BAB8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm640a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A9E4F34A-9C0D-4966-B38A-7E708AE72C5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm640l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C267AA9-675B-4C3F-87E2-FDCC1BADD308"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm640l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D1C52F30-2B28-4A02-BA24-04A137E0B5B1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm640p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F846AA9-A282-412F-AEBF-89952E55F21F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm640p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CD43CDF8-11E5-42DD-A8F3-229BEC82C692"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm660_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "73FE6F7B-80F0-48E1-84CC-68AC37640D04"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm660:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2EA4BC14-3A93-42C9-A51F-54C229FB2617"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm660a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B1193E4-5E7E-4822-A1C4-C7A545A35A68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm660a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BE38E9BD-E0A7-4B34-AE3B-41363F90487A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm660l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0591D3C8-521C-41A2-9B23-B7C82F96F296"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm660l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E5E2BC76-B6BB-44A0-9023-116EAA66B388"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm670_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE5A1516-2DE0-46D2-8B17-72BBE495A926"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm670:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "875C0C0A-5B10-4A63-9441-4B9279ADDE63"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm670a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A5B9205B-EBB5-43AB-8AF9-4EF6277263E8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm670a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FBF5777D-28C5-4CF9-8CA0-BAE86468F613"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm670l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3BCFEF40-42B4-450E-8526-CA5000128A99"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm670l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D6418B48-0A81-4425-8011-7405F901F024"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7150a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6BDED2AD-D8C3-41E3-B408-CAC738D6531E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B66F085D-874B-43D3-A965-FCAC14657A69"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7150l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76CF0FCB-6283-479A-955D-DA8D546FC6AF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7150l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C9E3064A-C411-4097-8E4D-4984C5769126"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AD87AE7-1B4D-4137-B1BE-BF55FB8540E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1B20B944-46FA-4D10-8B50-E31D1E08EC4E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7250b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FA8D1353-79BD-4545-9A34-8D705E4D81BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7250b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AD9E23-148B-4AF7-BE79-A1324CC6F546"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm7350c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5C17AC22-EC93-455A-A3B4-7646C76D19E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm7350c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96E65C30-DEE4-4E34-BBD1-824AFCD06FBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8004_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB803219-ECD1-4E70-BECD-09561B09FAB2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8004:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6CAA0E9B-33D8-414B-86CB-DF6D04746144"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8005_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8C1B2E04-63A3-4249-A2D2-F8533B12AEA1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8005:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "79BD6E76-BDF4-4AAD-A63B-C4AD2971C065"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8008_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D360B82-E63E-41FF-91B4-82A1ECEB65CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8008:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97A128D0-9E32-4B88-B92B-E15D56CE30E2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8009_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04485E4B-B805-4492-BECB-6C5CF14D91E7"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8009:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FE2D27C4-B364-4991-AE9E-4F3DC486D581"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CF4EC2ED-5DB9-469E-92B3-CBBC88DD1308"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C716BC34-C366-4389-8AD9-8806065A7403"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CCDCC452-6477-4509-90E9-F4FB666190CF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6151FB45-F8F7-4F92-ACB7-57272CCAD255"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C83D8D28-71E9-481D-A290-78258ED39E20"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5AF5EE00-7002-4190-BCCF-8B63ACA70CEE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "58175194-DB51-4A9C-B770-4D251D0062FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "660ADC5A-799B-42C4-B7E1-52539AD994D8"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8150l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EB52BD0A-F38C-4A13-8F94-5B490F7B2B1B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8150l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C5ABEF07-694B-47E8-A3A9-8164EF6E45BA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8250_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D2BFA526-5E52-4C5D-9230-03D6AA2E6053"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8250:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FB6FFB29-7370-43CD-8410-2A17D9A3BD64"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "74D61290-37D3-4AEB-9F35-D2C9AAEF18EF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87FEDC09-E1DE-49A5-8EDF-E895467CD8C1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7CAD021F-6DEA-4C02-9048-34C4313D3F5C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E7AFEEAC-A37D-497F-B9D0-BE7CB673F92F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350bh_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00AC16CB-970E-4225-A06B-8775A476DAE0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350bh:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3F13F5A7-FD3E-499F-863D-A1BEADB0D06E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350bhs_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B0EFBC9-EE78-4DE1-89D0-D5C8469CA3F2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350bhs:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A97CA505-D827-48C1-A46B-7B82DE719C95"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8350c_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9459CF12-1ABF-4F04-93BE-0BACD5AEFAE4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8350c:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D137B13B-24D1-41C4-BC8C-2F6F51CEBCFC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4B591057-5D1B-44B0-A9C8-847447E31F45"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "179E3B9E-0EE6-436B-AC5B-49FB3F375BD1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "67E6EC77-323A-4362-A281-833F7856CCBA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FED8C7A7-884F-412B-BF47-D122810A67E1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855l_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C55A3937-0061-43A2-B829-17BC37A1F273"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855l:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A320056A-818F-4BEB-9DB0-14F8F26A309B"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm855p_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AC0C6EA8-FCF3-45C4-BB1A-9D025C5AA8E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm855p:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3AEC500-88F5-432D-9DA3-FBB4438150A7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8909_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "498F048F-669D-46E0-AA60-ED2B3E11B67A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8909:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2950D103-C664-44CE-86FC-49A03861441F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8916_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FBCAE84-6089-4F0A-B2F0-1B9C9186F43F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8916:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FEDA1620-8FFC-4DF4-9CBC-188D21581CF2"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8937_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4558B01C-171D-47F7-8831-E9C53BC953BF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8937:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6B8E31E7-9ED7-4F8E-ADC8-60C087F4E340"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8953_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F65963E1-6467-44ED-9DB4-122C9BB22001"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8953:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "316C919A-BD79-4859-9F85-AEDBA5E6137A"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pm8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DF0B28-8E69-4197-B47E-D3A585245BE3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pm8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B87120F-592A-4D3C-801D-8C8980731FA4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmc1000h_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3D96167A-9646-4A08-BF18-B5C8B0AAB7CC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmc1000h:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "068DFD9E-75AA-4556-B16E-0AA699A96A11"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmd9655_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FDA009C-E617-4581-A47C-FD9BD77861D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmd9655:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "714DDC1D-116D-41F4-9E97-55DD97D54DE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pme605_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E3C49097-28A8-4DBF-8549-26D714A3C6DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pme605:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1645FF89-01C1-4ADF-9BC9-C369E061713C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi632_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "845BA6B5-5EC6-4B54-BD02-E924A91D3D54"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi632:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AA5F089-6FBC-4B6B-8980-6BFEB6670BDA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8937_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E64ACAA9-9C2A-4DB5-9A41-557A2DABB791"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8937:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8A176D9B-816F-47CA-B8BC-E4E7C1E96325"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8952_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F7534BA2-545B-40CA-8335-72955A96CBAE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8952:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9F914570-082A-4276-85DB-ADA944BA771F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmi8998_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "123FCE72-8379-48EF-BD48-8D77E54C4243"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmi8998:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAAAE437-C4CA-4789-92BD-9AAF67621407"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk7350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A7A6842D-F95B-4CB5-9E8C-1C1B767398C4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk7350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB7918E9-FFD6-4041-88FB-975A708D8EA6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk8002_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F5B4B0F-13D0-4097-BCFD-A8E5FA4890D0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk8002:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E43ED5B2-BE32-4650-9726-970135570455"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk8003_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "80C33C9B-1A12-4FE4-89F5-597DD3477951"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk8003:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CA7350FB-760C-41D1-A72F-A1FD65F7CE60"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmk8350_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4E6968D9-C147-400C-9BD3-45525BDF58F9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmk8350:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0C9E197C-4C9E-4B76-A9DC-78BF0325C764"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm6155au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "AB9028F3-403E-440F-9043-ABF049E10D3C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm6155au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D4A07D34-F150-42DE-A5A0-BE41A678AA0D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm8155au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E0E1178-1C03-43DD-8548-7254CDD3D2BB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm8155au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "732B2221-EA5D-408F-A1C5-0193D452C8DC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm8195au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F35277E0-14F0-4CB7-B180-966408859B96"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm8195au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8F18ED67-902E-4DFC-8239-B8188DBD7FEC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmm855au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "906AAAAC-E349-4FCE-8666-AEEBEDDC35A2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmm855au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "97F67FB3-5725-4A19-904E-B1FC95D4402E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmr525_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C579A2E1-2056-4D10-BE6A-906C59991060"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmr525:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1AA1D854-AD1B-4732-AEF3-321936B5DF7C"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmr735a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6717466F-6EC4-42D3-90B2-6BE07E122A9B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmr735a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "728A6173-6582-4153-A040-70FF40516A8E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmr735b_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "63677BB1-A2AF-41E3-BE46-4C07AECAB186"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmr735b:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A1E4545F-B38C-4535-BF0E-6A9FC0579265"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmw3100_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DF17FF59-E525-4854-8AE3-821BC0F0B688"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmw3100:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4AC0BEF8-B829-485A-928B-A88317A75848"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmx24_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5F18EAB2-4ABE-4437-ADB7-89F0F78A51B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmx24:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BECD72E2-14D0-499B-908E-21126B8BCDBE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmx50_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DA587ED9-5DB1-4F6A-A501-4DF1C7D4027D"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmx50:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F125BECB-FBCE-4B1E-AA23-CE839F91B0B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:pmx55_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "18A226D4-514B-47D1-A156-48BDA3A73DC0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:pmx55:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "01E63676-6E36-4B26-88C6-36CF73B5FBA1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3514_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "EDC85F2F-01EE-43CB-851A-BB0FE741975B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3514:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "53A0FCE5-32EE-4999-8D63-B438862B49A1"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3516_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0DFA5E10-39CE-46C3-9EE1-03AF2ACAF3D1"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0D80915F-096A-4B69-B6B8-6C6609B463DB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3518_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0FE8EF67-FEEC-4E3E-A03D-DF94B4D7E66C"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3518:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "49400DEF-EB72-419F-AD00-37BF7C30F2BD"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3519_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2F5EE197-894D-4EA8-ABB0-379421615A91"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3519:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04842F87-AA4D-43BF-8148-FE7BD521C975"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3522_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D336F63D-624D-4A38-A30C-5BDBD9893582"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "298034D1-85C6-42AF-BC06-7B19A8C84FBB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3550_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7AE75DB7-F359-4483-9283-0816B5360EE6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3550:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "FAF6F7AF-9839-46A1-8552-ED6F9F246E98"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat3555_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D1ACBBB-606C-454B-9DB5-1EDB157A4BC9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat3555:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FDC5240-C134-44E6-8E90-63C09BA01970"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5515_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "25F9ECFE-F2FF-4BC8-AC90-60CA518387E9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5515:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D209F276-3539-4231-9735-B31C22AE8E5D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5516_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "E820C8EC-60E6-4564-824E-717476CBD049"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5516:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6919C289-456D-4A2F-A508-4C1E41E9ACC4"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5522_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "27A75E2E-2123-4F70-BD09-D63618C0CCA0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5522:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5098C94E-4146-4D68-BCE6-D860B9A62BBA"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5533_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6574604A-9AE1-452D-A7F0-EDC74E9CF580"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5533:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "87A58C3D-B9C1-4155-9FF1-C5312D699164"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qat5568_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "940ECE62-B410-4113-97AA-3D5157D89998"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qat5568:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A345E2B6-0DD7-454C-B9ED-33469866A217"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qbt1500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3401DE59-3246-402E-9624-C10CD11A7156"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qbt1500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B8B8C5E9-3F03-4A5E-95FC-B9318BA85268"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qbt2000_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "984A57B0-3E1E-4021-A2AB-43D4B640C5E6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qbt2000:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DEA626EC-59F1-43CC-835C-1E4F3FE579BC"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca4024_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C359D1E7-6E0A-41B5-ABE5-B55598960700"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca4024:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B4DC3CE7-0C4A-458B-A42E-8F80C062DD5F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6174a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "4FF653D0-15CF-4A10-8D8E-BE56F4DAB890"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6174a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C31FA74C-6659-4457-BC32-257624F43C66"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6310_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "62DC4FBB-D9CB-43EB-829E-0A892306D0E2"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6310:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "5B0F8ED6-EAE7-44EA-A8C6-F5AD408261F0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6335_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "966CDA56-809F-4FF4-909D-0DD92F44CF67"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6335:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C90747B4-2CC0-4816-A994-58E00F5ADA05"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "96FBD6DF-F174-4690-AA3D-1E8974E3627F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6390:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A3BF86E1-3FAC-4A42-8C01-5944C6C30AE5"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "83B53119-1B2F-4978-B7F5-33B84BE73B68"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6391:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "6FEBC0C5-CAA1-475C-96C2-B8D24B2E4536"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6420_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7E16994A-6DBA-426C-ADD2-B1E8B49FEDBF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6420:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "47E674DE-55AB-44E5-8E00-C804FC9D4DC0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6421_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "503CEDEF-99D0-4432-88A0-295340743606"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6421:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CE9115A0-0D87-49BE-9A9B-091DBF8D9E6E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6426_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A344E78F-D15A-460E-8EF8-7C6FC39F2D5E"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6426:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8FF5EC23-4884-4C2B-8E77-50B1E8E28A3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6428_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8B9382B5-AEB1-41E6-9F25-B0EDC95363C9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6428:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "BDFC0DFF-F13A-4804-890C-99AFA0C56D62"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6430_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "95AFC483-1468-43FC-96FA-A56165C290E0"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6430:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0A963FDF-6FF4-4F48-834E-2A14D241716D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6431_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "76FD6A24-B6F4-4C65-968F-AFF90A1A60B8"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6431:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "34661A30-92C3-4F0D-ABD1-8DA8E928DFF9"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6436_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "04F574BC-9AB2-4B83-A466-556ECEBBD3DF"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6436:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "A34D021D-C043-4EFD-9AB3-B2174528CBA3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6438_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F8D7658D-692D-4873-8D41-7682E9ECAEB3"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6438:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "DB8993C2-1E06-4ACF-B1E8-A62D89EBF4A0"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "00FE294D-4BE0-4436-9273-507E760884EC"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "424CB795-58E5-43A4-A2EC-C563D93C5E72"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "886124F6-B397-4EB6-8E01-6012E468ABE9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "93ED74CE-6BF2-4983-8780-07D5336745B3"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6564au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "B59672A0-2FA6-46CC-B75A-C599B842AFB9"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6564au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "3847F4A5-90A5-4C84-B43F-0DDD81BD79CE"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9B828AC8-4A01-4537-B2BD-8180C99F5C32"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "66C16E1E-9D4A-4F20-B697-833FDCCA86FB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574a_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "828CFB37-76A6-4927-9D00-AF9A1C432DD6"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574a:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "11405993-5903-4716-B452-370281034B42"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D527E2B1-2A46-4FBA-9F7A-F5543677C8FB"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6574au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "8374DDB3-D484-4141-AE0C-42333D2721F6"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6584au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C3DDA896-576C-44B8-85B6-F71F473F776B"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6584au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "51A87BDA-5B24-4212-BAB3-D2BBB2F4162E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "643EC76D-2836-48E6-81DA-78C4883C33CA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "477F6529-4CE1-44FC-B6EE-D24D44C71AE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "288F637F-22F8-47CF-B67F-C798A730A1BD"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6595au:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "D0996EA3-1C92-4933-BE34-9CF625E59FE7"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0AE207DB-9770-40ED-961D-FDA75965826F"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca6696:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "0E23922D-C37F-476F-A623-4C1458A9156F"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca7500_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "9D4F8296-D8D0-42C6-AAD2-24DA0DB403D4"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca7500:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "14EC7373-E5F3-4D2B-B727-CAEE772B74BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8075_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "CC8A5A87-7D62-4EB7-962A-0F160DE3E889"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8075:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7B68D126-7F49-4FFA-8AF8-78120973D78E"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8081_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "1D1C53DC-D2F3-4C92-9725-9A85340AF026"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8081:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "ED0585FF-E390-46E8-8701-70964A4057BB"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "2FA8F9DA-1386-4961-B9B2-484E4347852A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca8337:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "117289C8-7484-4EAE-8F35-A25768F00EED"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9377_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "C4D2B46E-3996-42FD-B932-09E92C02EC8A"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9377:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "98E58C63-F253-4DCC-8A14-48FEB64B4C3D"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9880_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "7F81D132-B2DD-4D09-8561-21A2CFBCC9FA"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : false,
            "criteria" : "cpe:2.3:h:qualcomm:qca9880:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "F099A893-232B-48FB-81B3-F01AF2A19426"
          } ]
        } ]
      }, {
        "operator" : "AND",
        "nodes" : [ {
          "operator" : "OR",
          "negate" : false,
          "cpeMatch" : [ {
            "vulnerable" : true,
            "criteria" : "cpe:2.3:o:qualcomm:qca9886_firmware:-:*:*:*:*:*:*:*",
            "matchCriteriaId" : "311229F9-4A32-462D-AE8D-E5E2B2C416CE"
          } ]
        }, {
          "operator" : "OR",
          "negate" : false,
        